This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa File: LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa (raw, json) Hash identifier: V2v+4vi1fkAuP3HFSTiQqZk5Ych9yvJZ2q3KENPbMwg= Subject key identifier: 2C:EB:0A:28:F0:74:1E:13:34:B4:C0:E3:E5:7C:B6:2E:29:2B:F8:C8 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F839007496626BA44020F93CE16C8E4 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214639 IP address blocks: 188.209.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:90:07:49:66:26:ba:44:02:0f:93:ce:16:c8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ceb0a28f0741e1334b4c0e3e57cb62e292bf8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:95:1c:0a:1e:0a:67:8f:3f:4c:ee:4f:ff: 91:ae:a0:6f:5a:0c:db:c6:cb:2c:cd:3c:82:e7:17: 98:11:6d:d1:45:cf:08:29:18:5c:50:ad:57:00:8c: 82:92:7a:67:11:f6:82:06:74:77:21:71:1c:1e:f0: ab:2e:0d:43:6b:2f:b2:60:16:9a:2e:27:38:92:ba: 59:aa:11:a4:bd:51:35:03:ef:c3:67:a3:fc:05:e7: 3d:36:92:40:a4:e2:c1:e8:da:3f:9f:58:03:ed:fe: 33:b0:48:3c:64:e5:68:75:c6:16:67:81:06:2a:6d: d8:d9:d2:71:e3:ef:81:0d:47:51:46:59:e5:d9:b7: 27:cf:62:a5:97:cc:b9:46:ac:da:ee:e3:a3:44:69: 16:08:62:f9:15:6a:02:b6:53:7f:d7:e0:60:58:b5: 31:fd:74:46:69:3d:a2:12:da:05:32:a9:e0:93:41: df:aa:cb:61:13:df:45:8e:76:26:34:7b:31:2e:d3: db:48:6b:c2:11:1c:4b:15:76:b5:87:2d:03:4e:ae: 09:28:76:54:a0:ef:59:ef:c9:20:aa:79:4c:ab:bb: 93:2f:58:77:91:8b:05:f4:b8:22:c5:41:2a:21:6e: b1:9f:be:d0:f5:c3:8f:c8:59:fe:74:37:5e:12:5c: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EB:0A:28:F0:74:1E:13:34:B4:C0:E3:E5:7C:B6:2E:29:2B:F8:C8 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.129.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:26:cf:d0:af:b4:82:eb:4e:59:bb:7a:a4:15:1c:9b:6f:1c: e5:c5:e3:c1:42:e5:dc:a3:08:f1:fd:2d:32:17:f1:35:78:1e: a4:47:e9:d2:03:85:3d:37:05:9f:66:1a:c4:da:d9:5d:19:2a: 1d:0d:db:4b:8d:56:6c:1a:05:7e:dc:35:8c:e3:6b:d6:1d:51: c6:fb:b5:3e:86:37:3b:85:de:23:f5:ba:b8:6c:98:f0:32:c7: 2b:5e:f1:7e:46:a9:2c:19:dc:6b:e0:59:ee:96:96:c7:30:71: 23:97:70:75:88:be:3e:34:73:c1:9b:47:be:c7:25:ef:83:e6: 82:05:02:60:c6:b6:34:3b:d4:8f:87:8c:5b:38:55:73:3e:bc: 6e:8a:13:85:a7:e1:11:c8:10:7f:bd:cc:30:38:18:3e:63:04: af:c9:ad:2d:a1:90:f6:01:3e:7e:68:aa:27:f8:a8:fa:b6:68: b4:35:63:9a:fa:6b:3d:c9:4d:42:b9:61:d5:ed:63:4e:b7:b8: ff:65:82:46:8f:66:e1:ef:c6:67:07:4c:d6:88:b9:c4:9d:92: eb:d8:a3:ae:a5:d1:fc:1c:70:ee:46:69:89:fd:8b:a4:37:a0: cd:1a:4a:4c:18:9e:02:fb:2f:50:7b:f7:05:bd:0c:88:e5:a6: 33:44:ac:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5AHSWYmukQCD5POFsjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2ViMGEyOGYwNzQxZTEzMzRiNGMwZTNlNTdjYjYyZTI5MmJmOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpuVHAoeCmePP0zuT/+RrqBvWgzb xssszTyC5xeYEW3RRc8IKRhcUK1XAIyCknpnEfaCBnR3IXEcHvCrLg1Day+yYBaa Lic4krpZqhGkvVE1A+/DZ6P8Bec9NpJApOLB6No/n1gD7f4zsEg8ZOVodcYWZ4EG Km3Y2dJx4++BDUdRRlnl2bcnz2Kll8y5Rqza7uOjRGkWCGL5FWoCtlN/1+BgWLUx /XRGaT2iEtoFMqngk0HfqsthE99FjnYmNHsxLtPbSGvCERxLFXa1hy0DTq4JKHZU oO9Z78kgqnlMq7uTL1h3kYsF9LgixUEqIW6xn77Q9cOPyFn+dDdeElztiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzrCijwdB4TNLTA4+V8ti4pK/jIMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvTE9zS0tQQjBIaE0wdE1EajVYeTJMaWtyLU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGBMA0G CSqGSIb3DQEBCwUAA4IBAQBtJs/Qr7SC605Zu3qkFRybbxzlxePBQuXcowjx/S0y F/E1eB6kR+nSA4U9NwWfZhrE2tldGSodDdtLjVZsGgV+3DWM42vWHVHG+7U+hjc7 hd4j9bq4bJjwMscrXvF+RqksGdxr4FnulpbHMHEjl3B1iL4+NHPBm0e+xyXvg+aC BQJgxrY0O9SPh4xbOFVzPrxuihOFp+ERyBB/vcwwOBg+YwSvya0toZD2AT5+aKon +Kj6tmi0NWOa+ms9yU1CuWHV7WNOt7j/ZYJGj2bh78ZnB0zWiLnEnZLr2KOupdH8 HHDuRmmJ/YukN6DNGkpMGJ4C+y9Qe/cFvQyI5aYzRKz8 -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:00 2026 by rpki-client