This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa File: L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa (raw, json) Hash identifier: upS3aOnw/wQ7yjWNv575VRnG3gYRLnA5O/bTU3MDbbk= Subject key identifier: 2F:65:B9:A0:98:F6:B0:86:5E:38:20:03:03:FC:45:B9:07:C0:9F:B4 Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541 Certificate serial: 019B7D5AAA74AA7379CFB98331B331D1868E Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa Signing time: Fri 02 Jan 2026 06:17:32 +0000 ROA not before: Fri 02 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206610 IP address blocks: 195.178.124.0/22 maxlen: 24 195.178.124.0/24 maxlen: 24 2a07:fe80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:aa:74:aa:73:79:cf:b9:83:31:b3:31:d1:86:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541 Validity Not Before: Jan 2 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f65b9a098f6b0865e38200303fc45b907c09fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:38:44:1d:b3:71:ae:58:1c:ab:10:ac:a5: 90:aa:23:45:41:82:ed:82:d0:eb:00:43:80:20:9a: 9d:65:6f:39:4c:4d:e2:0d:e5:51:d7:d0:61:e4:74: a8:f7:01:4d:74:7e:57:e7:cc:c9:a6:63:2d:b6:42: 28:0e:7f:5a:15:85:4f:dc:2e:b2:eb:06:70:a3:22: 5d:83:79:38:fe:38:8f:50:75:04:0c:51:c7:58:b0: de:31:4a:b0:a8:af:ec:80:dd:91:18:ee:96:6b:8d: 8a:28:33:89:4e:0d:2f:6b:b4:3c:ac:55:db:54:11: 16:e2:b3:77:ef:2c:63:19:82:e6:92:1a:f2:6a:c4: ed:b5:34:fa:8f:bc:ae:52:cf:1f:66:cb:ac:c9:8c: cf:0d:60:ca:ac:44:93:ba:8c:a1:4b:bb:03:18:2c: 23:3a:65:93:f7:e3:8d:b4:5e:85:60:fb:4a:0c:76: 61:7b:e9:ca:01:30:52:7c:33:12:59:e1:29:2f:f6: 57:df:78:cd:2d:3b:29:38:49:77:c8:58:c1:c2:88: 15:b2:3b:f6:a0:f3:d6:c0:84:76:17:72:4f:4c:32: 58:33:61:1b:7f:53:e4:f5:de:7d:ac:bc:91:ea:38: 67:3c:cd:6a:7e:b0:35:4d:46:90:5b:95:7c:c6:bf: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:B9:A0:98:F6:B0:86:5E:38:20:03:03:FC:45:B9:07:C0:9F:B4 X509v3 Authority Key Identifier: keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.124.0/22 IPv6: 2a07:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 33:16:bd:2b:ed:3c:75:27:be:66:73:12:eb:da:cd:24:8b:c3: c8:93:66:5c:23:ec:74:c7:79:c8:b3:ce:1e:17:00:62:49:d3: 2e:d0:34:7e:7e:50:1b:a3:bf:d7:d1:2a:df:bc:94:55:1a:bf: 8b:69:8e:a2:4f:8d:38:33:c7:9b:bf:96:3b:3d:69:81:2d:71: 29:c5:b5:c7:fc:14:8b:db:70:98:75:b6:52:fb:29:f4:e7:58: 01:44:3b:04:43:85:ec:bf:cc:b9:28:e2:f6:a4:7a:6b:0e:0e: 5a:4b:29:e9:7c:55:da:6c:00:18:cc:d1:ca:19:eb:ea:92:6e: 1e:f3:e7:4e:9d:9b:7c:d0:dc:f1:dd:56:fb:e5:08:73:55:8f: bd:73:1a:08:f2:d8:ad:e4:db:a2:91:4c:3b:c7:35:3c:42:ae: 77:a5:31:70:db:1c:3c:25:77:e9:4a:e0:87:e0:f3:15:39:d6: c2:9c:18:42:7e:dd:7c:60:69:af:4c:7c:9e:16:b0:0b:de:77: 85:d5:4e:54:97:7e:86:ee:ff:eb:37:72:60:c7:20:4c:f4:be: b8:48:41:ac:31:97:03:ec:aa:0b:a8:5e:67:58:34:61:80:24: d3:e7:0e:ce:66:fa:41:96:a0:4d:17:06:c1:75:e2:47:38:97: 5c:51:a4:7f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9Wqp0qnN5z7mDMbMx0YaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmNmOTM3NDM4MGViZDE4NWQyMTE4ZjU1MWM4NTU5YWUy MzM1NDEwHhcNMjYwMTAyMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjY1YjlhMDk4ZjZiMDg2NWUzODIwMDMwM2ZjNDViOTA3YzA5ZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9o4RB2zca5YHKsQrKWQqiNFQYLt gtDrAEOAIJqdZW85TE3iDeVR19Bh5HSo9wFNdH5X58zJpmMttkIoDn9aFYVP3C6y 6wZwoyJdg3k4/jiPUHUEDFHHWLDeMUqwqK/sgN2RGO6Wa42KKDOJTg0va7Q8rFXb VBEW4rN37yxjGYLmkhryasTttTT6j7yuUs8fZsusyYzPDWDKrESTuoyhS7sDGCwj OmWT9+ONtF6FYPtKDHZhe+nKATBSfDMSWeEpL/ZX33jNLTspOEl3yFjBwogVsjv2 oPPWwIR2F3JPTDJYM2Ebf1Pk9d59rLyR6jhnPM1qfrA1TUaQW5V8xr8uqQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC9luaCY9rCGXjggAwP8RbkHwJ+0MB8GA1UdIwQY MBaAFIy8+TdDgOvRhdIRj1UchVmuIzVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2It MzUyMDNkNmIwZDU3LzEvTDJXNW9KajJzSVplT0NBREFfeEZ1UWZBbjdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2ItMzUyMDNkNmIwZDU3 LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCw7J8MA0E AgACMAcDBQMqB/6AMA0GCSqGSIb3DQEBCwUAA4IBAQAzFr0r7Tx1J75mcxLr2s0k i8PIk2ZcI+x0x3nIs84eFwBiSdMu0DR+flAbo7/X0SrfvJRVGr+LaY6iT404M8eb v5Y7PWmBLXEpxbXH/BSL23CYdbZS+yn051gBRDsEQ4Xsv8y5KOL2pHprDg5aSynp fFXabAAYzNHKGevqkm4e8+dOnZt80Nzx3Vb75QhzVY+9cxoI8tit5NuikUw7xzU8 Qq53pTFw2xw8JXfpSuCH4PMVOdbCnBhCft18YGmvTHyeFrAL3neF1U5Ul36G7v/r N3JgxyBM9L64SEGsMZcD7KoLqF5nWDRhgCTT5w7OZvpBlqBNFwbBdeJHOJdcUaR/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:44 2026 by rpki-client