This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lKkHxVrHohLf7LevaiZj2QIvc0Q.roa File: lKkHxVrHohLf7LevaiZj2QIvc0Q.roa (raw, json) Hash identifier: IexCU1KKtNRcIdtzsztxjBEBHyxBTlsTv9j/xXJAlak= Subject key identifier: 94:A9:07:C5:5A:C7:A2:12:DF:EC:B7:AF:6A:26:63:D9:02:2F:73:44 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3924D6B2701785869A9F57AC6D6CFF Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lKkHxVrHohLf7LevaiZj2QIvc0Q.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35133 IP address blocks: 45.13.117.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:24:d6:b2:70:17:85:86:9a:9f:57:ac:6d:6c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94a907c55ac7a212dfecb7af6a2663d9022f7344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:b2:ae:6b:3b:81:e1:8c:78:46:72:58:a6: a3:70:8f:a3:86:f6:7e:fe:70:42:b4:e9:67:f3:2b: 48:a3:e8:fc:4b:48:3c:34:07:77:68:6f:37:5f:18: c1:f7:bc:f8:96:99:f3:2f:f8:2f:b3:21:48:cc:07: ef:dc:1c:e5:d7:c5:63:c6:a0:28:eb:e2:d3:06:1d: c5:8d:2a:bb:76:64:b8:86:05:bb:86:f4:be:b4:03: f1:f2:3b:37:a3:e6:59:9b:cb:ec:26:b6:b1:5c:0c: 0a:3b:00:f0:69:f0:40:ea:d0:3b:ce:d0:b3:c1:35: f8:94:cb:44:62:4d:f7:de:cc:98:1e:42:44:cd:d0: 2d:43:c3:53:1e:31:f4:d1:49:e5:21:e0:31:8b:5b: 3a:fc:f7:db:62:47:b2:cc:d7:c2:ab:3e:62:45:89: 62:d1:f9:9e:2e:eb:68:40:a2:c4:9f:85:19:a4:28: ca:bc:41:1a:8b:15:ba:09:23:05:75:ec:3b:a6:1c: a6:88:5c:43:0a:67:2d:dd:d4:38:d2:2c:10:82:26: bf:35:54:13:a4:29:85:c7:d9:24:b2:20:dc:db:51: 2f:a9:05:18:1d:d3:0a:a5:8e:c6:f7:11:95:9d:bc: 52:6f:ed:ae:05:0e:0d:0c:42:d1:ca:ae:6c:53:af: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A9:07:C5:5A:C7:A2:12:DF:EC:B7:AF:6A:26:63:D9:02:2F:73:44 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lKkHxVrHohLf7LevaiZj2QIvc0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:78:f5:d7:5d:93:80:1f:ca:30:47:57:87:7f:45:90:91:83: 6b:89:24:45:2e:51:9e:f4:02:aa:8e:f3:df:23:7c:c3:38:fa: 59:a9:c7:cd:9e:b1:0d:4e:b8:9d:19:01:1d:94:bf:15:76:3f: d3:56:cf:09:b4:50:06:75:32:a7:01:bd:8b:71:dc:0a:92:be: 2a:62:4b:e6:27:2a:ff:11:46:20:85:19:f8:58:a2:a3:61:ef: a5:49:a2:14:2a:68:20:e7:b7:c3:54:fe:b8:26:50:a0:68:3c: 4e:0e:d6:95:eb:9a:23:d7:5b:67:bd:79:ec:bd:09:5f:01:ce: 91:3f:6a:d1:7b:93:e6:41:17:76:60:c1:2d:b9:a5:12:a3:1b: 17:cf:ce:21:db:2e:bf:0e:4b:0c:d7:26:4f:de:4a:fd:b0:1d: 22:0a:fb:2c:ee:92:a5:31:5a:e1:82:90:78:fe:53:ce:98:f6: 59:52:0a:21:72:97:d2:8a:35:e7:83:7a:91:df:a2:50:d3:49: c1:b0:52:43:ac:a7:62:84:18:5f:4b:2f:40:dd:fe:ab:c9:23: 41:8b:2c:81:f0:77:2d:61:7a:4c:64:9d:82:af:38:d4:f5:06: b4:d2:a6:bd:b0:4d:cd:53:05:3d:5f:87:4a:47:4e:06:b3:43: 80:83:da:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSTWsnAXhYaan1esbWz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGE5MDdjNTVhYzdhMjEyZGZlY2I3YWY2YTI2NjNkOTAyMmY3MzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/iyrms7geGMeEZyWKajcI+jhvZ+ /nBCtOln8ytIo+j8S0g8NAd3aG83XxjB97z4lpnzL/gvsyFIzAfv3Bzl18VjxqAo 6+LTBh3FjSq7dmS4hgW7hvS+tAPx8js3o+ZZm8vsJraxXAwKOwDwafBA6tA7ztCz wTX4lMtEYk333syYHkJEzdAtQ8NTHjH00UnlIeAxi1s6/PfbYkeyzNfCqz5iRYli 0fmeLutoQKLEn4UZpCjKvEEaixW6CSMFdew7phymiFxDCmct3dQ40iwQgia/NVQT pCmFx9kksiDc21EvqQUYHdMKpY7G9xGVnbxSb+2uBQ4NDELRyq5sU6+WLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSpB8Vax6IS3+y3r2omY9kCL3NEMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbEtrSHhWckhvaExmN0xldmFpWmoyUUl2YzBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ11MA0G CSqGSIb3DQEBCwUAA4IBAQBcePXXXZOAH8owR1eHf0WQkYNriSRFLlGe9AKqjvPf I3zDOPpZqcfNnrENTridGQEdlL8Vdj/TVs8JtFAGdTKnAb2LcdwKkr4qYkvmJyr/ EUYghRn4WKKjYe+lSaIUKmgg57fDVP64JlCgaDxODtaV65oj11tnvXnsvQlfAc6R P2rRe5PmQRd2YMEtuaUSoxsXz84h2y6/DksM1yZP3kr9sB0iCvss7pKlMVrhgpB4 /lPOmPZZUgohcpfSijXng3qR36JQ00nBsFJDrKdihBhfSy9A3f6rySNBiyyB8Hct YXpMZJ2CrzjU9Qa00qa9sE3NUwU9X4dKR04Gs0OAg9pq -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:34 2026 by rpki-client