This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa File: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (raw, json) Hash identifier: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk= Subject key identifier: 2F:0F:E8:E3:B1:3D:A9:86:99:B4:93:D9:8E:9E:66:D4:CD:5E:D3:FA Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59AF3D92D7A934B51D861AB46A5463 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa Signing time: Thu 01 Jan 2026 16:17:36 +0000 ROA not before: Thu 01 Jan 2026 16:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 194.38.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:af:3d:92:d7:a9:34:b5:1d:86:1a:b4:6a:54:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f0fe8e3b13da98699b493d98e9e66d4cd5ed3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:6c:15:c3:9f:75:01:72:67:42:57:05:26: 4a:39:27:e8:56:28:9c:d0:b5:7a:25:b1:4c:23:a8: a6:a7:af:ba:64:21:5f:5b:e0:08:3e:79:9d:ce:0d: 93:b4:76:4c:26:88:64:f5:17:f3:b9:ec:a1:6b:02: bb:e8:01:a5:64:78:12:19:b7:65:6a:0b:38:2f:bb: 76:d3:2a:4a:25:55:ee:f6:91:82:53:94:a8:74:32: a5:bb:b5:bf:34:91:d9:a4:b9:e6:40:fc:44:48:18: 13:e3:45:dd:1a:aa:5f:6c:34:2d:be:ce:2d:6a:25: c2:59:6e:55:33:4b:01:a3:2c:34:2b:d5:26:51:20: 28:08:e0:df:5d:0f:b7:ac:46:53:6f:5c:03:41:d4: 27:40:73:a6:69:ea:2c:90:0c:e1:be:09:9d:35:6c: a8:a7:af:29:e5:99:14:9d:b3:20:61:74:d0:c5:b8: a9:2c:eb:5c:cd:21:bd:1d:46:d9:1c:12:c4:58:5e: 7b:6a:df:82:a7:62:31:15:87:8f:58:58:12:2c:38: 62:3e:39:54:b9:7e:8b:1a:e2:2c:22:69:f3:5e:ad: 59:ca:75:ec:e6:89:d9:6c:27:9a:54:7a:00:f2:2d: 79:db:b9:0f:55:0b:7c:f1:9e:b5:ab:67:ac:4d:69: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:E8:E3:B1:3D:A9:86:99:B4:93:D9:8E:9E:66:D4:CD:5E:D3:FA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.24.0/22 Signature Algorithm: sha256WithRSAEncryption 75:72:5f:1c:14:b8:9a:55:e0:ae:2e:f2:7d:e8:8b:3a:b1:64: 06:cf:d0:27:de:24:5c:4d:27:4c:c9:73:b5:06:2b:a0:a4:93: de:1f:49:93:bb:b3:a1:9c:fb:9b:23:e6:3b:b5:fb:cd:0a:09: d8:0f:f8:cd:44:37:8e:f2:51:89:f6:6a:c8:51:e3:ec:3d:c0: 0e:7e:42:79:30:71:fd:24:98:47:cc:cc:68:61:9e:d9:8b:8b: bb:31:79:0c:90:f3:55:7b:f7:94:fe:78:d9:47:42:2d:68:10: d0:f2:8c:ba:d1:95:57:a1:b7:7b:1f:1a:da:76:ab:a1:d7:fb: e8:3e:84:d2:38:d0:7f:d7:0c:df:ca:a7:01:e6:6e:08:40:22: 2f:05:33:8f:d7:47:d8:5d:4e:0a:d5:c8:51:4f:8e:be:52:f8: c5:a7:74:eb:4b:00:6a:10:78:56:6d:47:a6:3b:99:2a:e3:b0: 5a:cf:1b:68:a4:d9:f0:ac:25:67:48:c8:18:94:85:0e:df:bb: 66:f1:2e:34:33:df:2f:59:37:44:a5:db:ee:f9:32:1b:2e:28: d1:34:67:84:eb:bb:bf:74:f7:ce:96:9e:c4:14:4c:52:5d:f3: 05:46:dd:ed:6e:57:c0:86:47:7b:f4:dc:c7:4a:6d:f7:9b:5f: e0:f0:8f:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wa89ktepNLUdhhq0alRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjBmZThlM2IxM2RhOTg2OTliNDkzZDk4ZTllNjZkNGNkNWVkM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvNsFcOfdQFyZ0JXBSZKOSfoViic 0LV6JbFMI6imp6+6ZCFfW+AIPnmdzg2TtHZMJohk9RfzueyhawK76AGlZHgSGbdl ags4L7t20ypKJVXu9pGCU5SodDKlu7W/NJHZpLnmQPxESBgT40XdGqpfbDQtvs4t aiXCWW5VM0sBoyw0K9UmUSAoCODfXQ+3rEZTb1wDQdQnQHOmaeoskAzhvgmdNWyo p68p5ZkUnbMgYXTQxbipLOtczSG9HUbZHBLEWF57at+Cp2IxFYePWFgSLDhiPjlU uX6LGuIsImnzXq1ZynXs5onZbCeaVHoA8i1527kPVQt88Z61q2esTWkjsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC8P6OOxPamGmbST2Y6eZtTNXtP6MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvTHdfbzQ3RTlxWWFadEpQWmpwNW0xTTFlMF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiYYMA0G CSqGSIb3DQEBCwUAA4IBAQB1cl8cFLiaVeCuLvJ96Is6sWQGz9An3iRcTSdMyXO1 BiugpJPeH0mTu7OhnPubI+Y7tfvNCgnYD/jNRDeO8lGJ9mrIUePsPcAOfkJ5MHH9 JJhHzMxoYZ7Zi4u7MXkMkPNVe/eU/njZR0ItaBDQ8oy60ZVXobd7Hxradquh1/vo PoTSONB/1wzfyqcB5m4IQCIvBTOP10fYXU4K1chRT46+UvjFp3TrSwBqEHhWbUem O5kq47BazxtopNnwrCVnSMgYlIUO37tm8S40M98vWTdEpdvu+TIbLijRNGeE67u/ dPfOlp7EFExSXfMFRt3tblfAhkd79NzHSm33m1/g8I/a -----END CERTIFICATE-----Generated at Mon Jan 5 03:57:57 2026 by rpki-client