This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/0lpbV27AN-RWXlo8EoDNHkn_WFo.roa File: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (raw, json) Hash identifier: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44= Subject key identifier: D2:5A:5B:57:6E:C0:37:E4:56:5E:5A:3C:12:80:CD:1E:49:FF:58:5A Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11F57DB4F9919FC8BCCE1D17D52867 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/0lpbV27AN-RWXlo8EoDNHkn_WFo.roa Signing time: Fri 02 Jan 2026 00:18:30 +0000 ROA not before: Fri 02 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15613 IP address blocks: 213.173.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f5:7d:b4:f9:91:9f:c8:bc:ce:1d:17:d5:28:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25a5b576ec037e4565e5a3c1280cd1e49ff585a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:0e:19:21:f1:78:81:d3:f3:c6:d9:66:12: fe:d5:d5:e5:1a:82:f9:01:2a:7d:fa:3e:d9:d9:ac: 41:c7:16:71:a3:26:40:85:c3:37:57:2a:c6:d1:f0: 63:8b:06:a3:ac:dc:8f:c3:5e:6a:ee:32:4d:25:a5: e7:16:1b:c0:58:25:da:d3:8f:a7:8c:78:46:54:e4: 61:26:06:6f:d3:b2:07:8a:3e:4d:eb:a9:10:73:ed: 18:69:87:eb:4d:34:32:6a:5b:f0:5f:ab:a5:5b:31: bf:65:85:c2:5a:13:34:8c:10:d4:83:69:ff:36:cd: d8:18:39:25:53:7a:1d:2c:e2:7d:d3:04:e5:c2:0f: 60:5e:05:d1:14:e0:fb:9e:9d:60:7d:ba:c1:8f:e2: 31:cc:f8:6d:07:4e:63:25:27:08:d4:cd:ca:a4:3a: 39:63:4e:ea:73:29:99:ff:22:7e:6f:e3:1d:22:b3: 31:ce:02:4c:bd:9f:62:3e:8b:68:d8:8f:c2:97:65: f4:e1:b5:7a:f7:fd:7f:ef:c0:09:45:90:43:d4:ff: 78:44:d9:a4:89:75:20:88:ec:bd:dd:5c:e1:06:d6: 89:99:35:42:a8:60:0e:3b:f0:2c:5e:5b:e7:63:e6: 27:0d:ab:02:ea:d2:df:a3:cf:ef:bc:ce:a4:b3:87: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5A:5B:57:6E:C0:37:E4:56:5E:5A:3C:12:80:CD:1E:49:FF:58:5A X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/0lpbV27AN-RWXlo8EoDNHkn_WFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.173.171.0/24 Signature Algorithm: sha256WithRSAEncryption 40:99:be:43:26:b2:ba:e3:93:fb:75:41:ba:64:47:2a:b2:1b: b8:9e:ac:1b:d1:ce:7a:7f:e3:ab:9a:46:76:2b:35:1b:de:27: e6:4f:e0:06:63:f1:d4:06:12:b7:2d:ea:35:1e:e1:e7:b5:89: 07:10:81:36:84:e9:d6:71:35:87:a4:78:51:4c:de:b8:6a:48: 42:43:7a:86:19:1f:42:ed:39:8b:b6:d9:4b:d2:29:a6:c9:b6: e3:4f:f4:2b:3d:98:e6:50:d0:88:ec:a3:ff:f9:7e:ae:c3:33: fe:ab:1a:96:11:81:49:5a:58:d2:1a:11:d6:5e:84:3d:f0:60: 92:e9:45:af:aa:ec:0e:c4:9b:48:44:bf:1a:53:42:6a:51:af: e0:50:b9:fe:56:a5:90:8e:0e:a7:dd:74:88:f2:26:7d:36:83: a7:45:f6:18:9f:31:8b:c3:0d:43:77:da:95:4a:a2:77:97:20: ef:98:16:5c:92:d9:f4:f6:7c:5f:26:ae:1c:6c:ce:fb:2e:92: f7:a5:03:33:10:11:f9:da:a7:ca:9f:37:3c:db:7c:18:e3:cf: ec:d1:ee:e7:cb:82:a8:0f:b1:75:9a:f4:a8:62:46:51:35:9b: 30:05:45:5f:73:4c:6b:0b:d3:9b:ef:f4:b5:e0:b2:07:66:9d: a7:23:c8:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfV9tPmRn8i8zh0X1ShnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjVhNWI1NzZlYzAzN2U0NTY1ZTVhM2MxMjgwY2QxZTQ5ZmY1ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH4OGSHxeIHT88bZZhL+1dXlGoL5 ASp9+j7Z2axBxxZxoyZAhcM3VyrG0fBjiwajrNyPw15q7jJNJaXnFhvAWCXa04+n jHhGVORhJgZv07IHij5N66kQc+0YaYfrTTQyalvwX6ulWzG/ZYXCWhM0jBDUg2n/ Ns3YGDklU3odLOJ90wTlwg9gXgXRFOD7np1gfbrBj+IxzPhtB05jJScI1M3KpDo5 Y07qcymZ/yJ+b+MdIrMxzgJMvZ9iPoto2I/Cl2X04bV69/1/78AJRZBD1P94RNmk iXUgiOy93VzhBtaJmTVCqGAOO/AsXlvnY+YnDasC6tLfo8/vvM6ks4cG9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJaW1duwDfkVl5aPBKAzR5J/1haMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvMGxwYlYyN0FOLVJXWGxvOEVvRE5Ia25fV0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a2rMA0G CSqGSIb3DQEBCwUAA4IBAQBAmb5DJrK645P7dUG6ZEcqshu4nqwb0c56f+OrmkZ2 KzUb3ifmT+AGY/HUBhK3Leo1HuHntYkHEIE2hOnWcTWHpHhRTN64akhCQ3qGGR9C 7TmLttlL0immybbjT/QrPZjmUNCI7KP/+X6uwzP+qxqWEYFJWljSGhHWXoQ98GCS 6UWvquwOxJtIRL8aU0JqUa/gULn+VqWQjg6n3XSI8iZ9NoOnRfYYnzGLww1Dd9qV SqJ3lyDvmBZcktn09nxfJq4cbM77LpL3pQMzEBH52qfKnzc823wY48/s0e7ny4Ko D7F1mvSoYkZRNZswBUVfc0xrC9Ob7/S14LIHZp2nI8hb -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:47 2026 by rpki-client