This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/rla9nfquRDNkBA9a7aTOXInR3kY.roa
File: rla9nfquRDNkBA9a7aTOXInR3kY.roa (raw, json)
Hash identifier: h1nZyOG+2GkCNjljv4pIretBeB05AhrlFnBuYz+Q++o=
Subject key identifier: AE:56:BD:9D:FA:AE:44:33:64:04:0F:5A:ED:A4:CE:5C:89:D1:DE:46
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 019B7B36E18B989D7EEA237185AC58408B72
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/rla9nfquRDNkBA9a7aTOXInR3kY.roa
Signing time: Thu 01 Jan 2026 20:19:12 +0000
ROA not before: Thu 01 Jan 2026 20:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209898
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:e1:8b:98:9d:7e:ea:23:71:85:ac:58:40:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 20:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae56bd9dfaae443364040f5aeda4ce5c89d1de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:8d:2a:fc:7c:59:74:e6:fe:de:3c:06:f1:
fa:62:c3:65:a1:06:90:86:20:8c:40:e5:43:26:21:
46:cd:9e:82:ec:85:50:d7:cb:1a:55:be:57:00:a2:
48:f2:47:25:72:6d:1a:2d:03:60:78:a1:87:41:9d:
c3:ae:4c:47:af:dc:9a:3c:e8:64:63:0a:f5:25:91:
27:05:22:7a:94:07:7c:67:6e:6c:46:9a:6b:ee:ae:
67:6e:ed:a0:b7:04:4b:e6:8c:62:de:82:c3:9e:52:
a2:fa:b3:3b:55:85:82:02:cf:06:b4:66:de:a7:c9:
a2:df:37:0f:50:93:eb:fa:a5:96:a7:c6:bf:b5:a5:
b8:ca:43:01:0b:1c:35:56:8e:e8:48:85:32:4b:6b:
d9:e3:e3:d4:dd:eb:02:75:74:f7:03:0e:41:c4:3d:
7a:7b:e8:27:39:9f:e2:b3:1f:6e:7a:17:1c:15:85:
99:b7:9d:cd:64:32:9c:ed:46:9e:a0:97:6f:79:ae:
c7:7f:1f:c1:f4:d7:ff:2c:8b:78:93:fb:98:03:25:
5c:af:69:63:ba:43:9e:ea:97:48:a4:c4:15:ca:bb:
b4:2d:99:d5:bc:df:7d:94:42:f1:80:a9:c8:fb:a1:
09:f6:83:8b:c4:d0:59:5d:62:56:ab:ad:ef:85:7b:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:BD:9D:FA:AE:44:33:64:04:0F:5A:ED:A4:CE:5C:89:D1:DE:46
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/rla9nfquRDNkBA9a7aTOXInR3kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1e:7c:89:a0:a0:08:c1:c0:68:c6:c6:09:12:46:01:5b:84:
88:0d:19:e2:27:aa:84:f2:72:34:3b:9e:da:ff:4b:c9:f2:62:
83:db:bb:d7:52:19:3a:59:44:78:6b:6a:26:5e:ff:11:e0:7e:
90:65:d8:cf:fa:36:b9:b3:a2:81:5c:82:fb:6e:fa:2b:10:b7:
7c:c7:6f:c2:5c:88:59:67:1d:84:0c:47:3c:d0:1b:e4:cd:be:
40:4c:29:71:84:a9:ec:bd:b0:67:e6:18:a0:b3:c6:bf:bb:65:
b0:64:b5:86:ac:a4:a7:c9:75:69:8e:ba:d3:d6:b4:36:5b:dc:
26:87:ad:2c:d8:d9:08:89:c1:5f:a1:2d:95:74:27:f0:ad:e0:
b8:e4:7e:51:d5:b1:12:87:57:41:6b:b1:78:60:b0:7b:6c:b3:
12:59:b3:8f:c8:55:0f:77:d7:7e:ed:1d:38:5f:c1:4e:6b:6a:
ea:61:a7:14:63:e0:04:f8:b5:c6:77:f3:56:10:42:91:9d:f7:
dc:8e:96:8d:84:16:59:71:ab:c3:93:b7:5b:36:b0:4a:b0:d7:
e3:15:58:9f:e2:a3:72:7c:9a:36:71:00:35:10:99:87:13:4f:
29:37:ac:63:db:76:d7:bc:b2:cb:26:00:92:3f:a9:58:d8:e3:
e0:42:37:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NuGLmJ1+6iNxhaxYQItyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTg5OGJmNDIwOTI0Zjk3NmI1YWU0NTExMDhiOWU2YTAx
ZmM3ZGMwHhcNMjYwMTAxMjAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTU2YmQ5ZGZhYWU0NDMzNjQwNDBmNWFlZGE0Y2U1Yzg5ZDFkZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSqNKvx8WXTm/t48BvH6YsNloQaQ
hiCMQOVDJiFGzZ6C7IVQ18saVb5XAKJI8kclcm0aLQNgeKGHQZ3DrkxHr9yaPOhk
Ywr1JZEnBSJ6lAd8Z25sRppr7q5nbu2gtwRL5oxi3oLDnlKi+rM7VYWCAs8GtGbe
p8mi3zcPUJPr+qWWp8a/taW4ykMBCxw1Vo7oSIUyS2vZ4+PU3esCdXT3Aw5BxD16
e+gnOZ/isx9uehccFYWZt53NZDKc7UaeoJdvea7Hfx/B9Nf/LIt4k/uYAyVcr2lj
ukOe6pdIpMQVyru0LZnVvN99lELxgKnI+6EJ9oOLxNBZXWJWq63vhXsPrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5WvZ36rkQzZAQPWu2kzlyJ0d5GMB8GA1UdIwQY
MBaAFFfomL9CCST5drWuRREIueagH8fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2Yt
NzEzYjQxNjg4NzA2LzEvcmxhOW5mcXVSRE5rQkE5YTdhVE9YSW5SM2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2YtNzEzYjQxNjg4NzA2
LzEvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZsdMA0G
CSqGSIb3DQEBCwUAA4IBAQCNHnyJoKAIwcBoxsYJEkYBW4SIDRniJ6qE8nI0O57a
/0vJ8mKD27vXUhk6WUR4a2omXv8R4H6QZdjP+ja5s6KBXIL7bvorELd8x2/CXIhZ
Zx2EDEc80Bvkzb5ATClxhKnsvbBn5higs8a/u2WwZLWGrKSnyXVpjrrT1rQ2W9wm
h60s2NkIicFfoS2VdCfwreC45H5R1bESh1dBa7F4YLB7bLMSWbOPyFUPd9d+7R04
X8FOa2rqYacUY+AE+LXGd/NWEEKRnffcjpaNhBZZcavDk7dbNrBKsNfjFVif4qNy
fJo2cQA1EJmHE08pN6xj23bXvLLLJgCSP6lY2OPgQjco
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:35 2026 by rpki-client