This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/las1jTgCdBQXu30_0E7g3OazRgY.roa File: las1jTgCdBQXu30_0E7g3OazRgY.roa (raw, json) Hash identifier: YN7zad0pCtCTyblVcmDBddjTHB1jUKx1PoSyHdUTtCw= Subject key identifier: 95:AB:35:8D:38:02:74:14:17:BB:7D:3F:D0:4E:E0:DC:E6:B3:46:06 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14BAB5E0831F4FD3D503F71F03A9E6 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/las1jTgCdBQXu30_0E7g3OazRgY.roa Signing time: Fri 02 Jan 2026 14:20:23 +0000 ROA not before: Fri 02 Jan 2026 14:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 194.231.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ba:b5:e0:83:1f:4f:d3:d5:03:f7:1f:03:a9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ab358d3802741417bb7d3fd04ee0dce6b34606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:fe:e6:9b:e6:b8:31:60:52:2b:d1:ec:23: 91:57:ba:00:09:75:82:31:0c:66:29:07:0d:b9:18: d4:87:ae:21:92:87:d6:83:25:c2:1c:d7:3f:55:a7: a2:19:a3:86:cd:f0:74:0e:2c:df:ff:ee:8e:83:25: ed:81:34:89:a3:af:62:a2:c6:75:66:89:ef:84:1c: f6:32:e2:0b:95:ad:ab:31:8f:c6:c1:fe:71:c2:72: af:32:80:cb:ba:95:49:6b:f5:33:9b:86:4a:38:4d: a7:62:c3:6e:cd:aa:fc:29:df:f1:c4:ff:31:e6:c2: 6e:11:63:33:2f:6e:34:ab:0a:7a:ff:f6:27:33:d5: 0b:12:36:dc:26:a6:d8:47:fd:5d:3f:df:c7:1c:ef: 81:85:39:51:e7:63:46:59:40:be:f9:fb:22:e7:80: 05:6e:d3:da:b5:8e:fc:32:28:92:8a:12:b3:5c:e5: 53:61:9e:d9:60:6f:4a:7d:97:51:ed:c6:f3:29:03: 2a:54:d2:19:72:21:4b:e1:8d:ea:d3:41:8f:a7:77: 2c:d0:58:4e:11:87:96:09:d8:f1:55:80:1f:74:87: d7:e4:d9:2c:e8:78:2f:75:54:16:7a:fb:36:3e:db: d7:41:62:be:d7:af:8d:e1:63:41:4e:ab:bd:bc:dd: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AB:35:8D:38:02:74:14:17:BB:7D:3F:D0:4E:E0:DC:E6:B3:46:06 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/las1jTgCdBQXu30_0E7g3OazRgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.155.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:4a:1f:bc:03:16:8b:af:75:0a:d1:96:dc:08:cb:db:b6:3a: 4c:3a:07:c1:59:f6:80:80:81:af:aa:0d:a7:8f:ad:79:5f:3a: a9:26:71:60:28:60:7f:d2:e4:d2:b5:56:35:c3:2e:3b:54:ae: 99:cc:ce:d7:bd:e9:4e:d5:ba:ec:f5:29:fa:ef:e1:8d:2f:6f: d4:f8:37:eb:e7:a5:51:54:09:53:38:e0:8c:ab:77:96:6f:af: 8a:60:71:ec:ba:d8:05:42:a5:65:1c:1d:26:b9:b1:ba:65:ce: a4:50:10:55:11:30:ba:f2:e9:66:df:29:12:2c:52:55:72:f8: a9:b2:3d:ff:fa:9f:4f:4e:48:40:d7:9a:50:2a:59:04:18:05: 0d:c6:69:5f:e8:01:b2:de:78:54:8f:1d:5e:ff:2b:7f:24:30: 00:6d:52:62:bc:30:a5:1e:0f:4c:98:1a:db:cb:50:12:05:d3: ee:a5:19:f4:2b:86:76:86:37:57:33:53:6d:dc:af:69:4e:6f: cd:18:9c:a4:71:97:f5:63:2b:10:8a:86:04:94:7d:38:93:ad: 3d:3b:56:66:90:84:4f:ba:0e:ea:d4:e4:96:78:91:09:5e:d4: 7c:ba:0c:04:d9:c9:da:2e:74:2f:35:1e:bd:08:53:60:31:af: fd:71:1b:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLq14IMfT9PVA/cfA6nmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWFiMzU4ZDM4MDI3NDE0MTdiYjdkM2ZkMDRlZTBkY2U2YjM0NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ3+5pvmuDFgUivR7CORV7oACXWC MQxmKQcNuRjUh64hkofWgyXCHNc/VaeiGaOGzfB0Dizf/+6OgyXtgTSJo69iosZ1 ZonvhBz2MuILla2rMY/Gwf5xwnKvMoDLupVJa/Uzm4ZKOE2nYsNuzar8Kd/xxP8x 5sJuEWMzL240qwp6//YnM9ULEjbcJqbYR/1dP9/HHO+BhTlR52NGWUC++fsi54AF btPatY78MiiSihKzXOVTYZ7ZYG9KfZdR7cbzKQMqVNIZciFL4Y3q00GPp3cs0FhO EYeWCdjxVYAfdIfX5Nks6HgvdVQWevs2PtvXQWK+16+N4WNBTqu9vN1bNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWrNY04AnQUF7t9P9BO4Nzms0YGMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvbGFzMWpUZ0NkQlFYdTMwXzBFN2czT2F6UmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuebMA0G CSqGSIb3DQEBCwUAA4IBAQBtSh+8AxaLr3UK0ZbcCMvbtjpMOgfBWfaAgIGvqg2n j615XzqpJnFgKGB/0uTStVY1wy47VK6ZzM7XvelO1brs9Sn67+GNL2/U+Dfr56VR VAlTOOCMq3eWb6+KYHHsutgFQqVlHB0mubG6Zc6kUBBVETC68ulm3ykSLFJVcvip sj3/+p9PTkhA15pQKlkEGAUNxmlf6AGy3nhUjx1e/yt/JDAAbVJivDClHg9MmBrb y1ASBdPupRn0K4Z2hjdXM1Nt3K9pTm/NGJykcZf1YysQioYElH04k609O1ZmkIRP ug7q1OSWeJEJXtR8ugwE2cnaLnQvNR69CFNgMa/9cRsa -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:58 2026 by rpki-client