This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa File: laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa (raw, json) Hash identifier: DnEkXC+hsSS//DzJYtB8xpxphGulUc/FEkbBxzWWEJs= Subject key identifier: 95:AA:2A:E5:6E:C7:62:46:31:FC:EC:53:43:49:80:69:4F:A7:2E:E5 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019BB171A897347298B129017C6CB5994D51 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa Signing time: Mon 12 Jan 2026 09:02:54 +0000 ROA not before: Mon 12 Jan 2026 09:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 45.157.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:71:a8:97:34:72:98:b1:29:01:7c:6c:b5:99:4d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 12 09:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95aa2ae56ec7624631fcec53434980694fa72ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:96:2f:7d:60:c3:ff:ac:75:09:78:9b:d9: df:47:68:a1:a7:7e:43:2b:1f:49:90:3c:95:35:a1: 30:aa:4a:e8:3f:f1:11:17:02:e4:68:ba:d1:c7:bf: f1:2b:29:e0:1c:99:c9:8c:35:50:51:19:02:ee:7e: 42:52:b0:89:67:da:df:e9:88:a8:9b:8b:f0:9a:15: 78:0a:49:35:d6:19:51:1d:63:8f:eb:04:32:9c:a9: 79:36:53:d7:71:c3:c2:25:e0:c5:ae:2c:0a:a9:c0: fd:49:d1:c9:6c:cd:41:4b:a4:57:5a:50:02:66:de: b4:39:be:c2:fd:0e:0d:aa:30:cd:99:1f:42:13:03: 35:6d:7e:98:88:d2:22:92:7b:2d:29:46:8b:cc:30: f7:ba:d7:cc:2b:17:37:84:76:9f:19:0e:df:3b:75: 7f:8f:29:2a:7f:10:e0:dc:b2:c0:14:25:58:62:02: 97:eb:aa:ca:ad:a3:88:79:5f:f5:ca:7d:ef:58:3b: 9b:03:9e:ea:b4:7f:be:de:1d:d3:3c:59:ff:91:56: f0:40:b7:51:72:68:34:2d:46:ad:73:c2:9e:74:53: d8:4b:57:39:b6:de:a7:2d:fd:e9:e7:13:77:9b:6c: 96:70:34:ad:2a:d7:41:44:65:e0:59:8c:72:5e:21: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AA:2A:E5:6E:C7:62:46:31:FC:EC:53:43:49:80:69:4F:A7:2E:E5 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.209.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e5:e0:08:8d:09:49:09:eb:1b:65:da:c3:d6:16:c0:51:a6: 34:c0:4f:af:ae:08:71:7c:9c:aa:4f:b4:e4:99:fc:35:b7:fd: 26:ae:14:c8:f3:db:98:14:9c:64:53:d4:9b:4e:1c:36:12:14: 0c:51:1c:ca:bd:89:41:84:c5:4f:04:2f:5c:9a:11:50:0d:4c: d1:19:eb:af:68:db:3f:d6:52:97:3a:4e:9d:b1:7f:3c:40:13: e6:16:f3:73:d8:d5:e7:0f:a6:99:51:66:5b:80:62:59:9a:38: 87:0f:2f:4e:7c:b8:52:c8:f8:c1:ca:4d:6e:a2:6c:dc:c7:da: cf:69:ff:e6:48:4c:56:24:a8:b2:71:0c:f0:c6:d5:b8:de:6c: 36:15:6e:0e:0c:28:ce:3b:80:6a:a0:04:4a:98:ac:1a:d2:a8: eb:5b:64:2f:d6:de:81:29:21:0a:33:d3:49:48:d3:ab:a2:ab: 90:57:8f:12:a5:08:21:13:7a:85:9b:6e:90:f5:08:90:95:d2: 91:be:18:fb:a9:0f:5c:83:00:98:33:6d:c8:e8:1f:96:f8:0f: 2d:08:4c:0b:55:49:74:f3:60:73:b7:85:56:ae:50:9a:32:67: 15:79:67:4d:95:41:16:54:41:12:eb:ee:7b:24:11:73:d8:6c: 55:11:91:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuxcaiXNHKYsSkBfGy1mU1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTEyMDkwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWFhMmFlNTZlYzc2MjQ2MzFmY2VjNTM0MzQ5ODA2OTRmYTcyZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX+WL31gw/+sdQl4m9nfR2ihp35D Kx9JkDyVNaEwqkroP/ERFwLkaLrRx7/xKyngHJnJjDVQURkC7n5CUrCJZ9rf6Yio m4vwmhV4Ckk11hlRHWOP6wQynKl5NlPXccPCJeDFriwKqcD9SdHJbM1BS6RXWlAC Zt60Ob7C/Q4NqjDNmR9CEwM1bX6YiNIiknstKUaLzDD3utfMKxc3hHafGQ7fO3V/ jykqfxDg3LLAFCVYYgKX66rKraOIeV/1yn3vWDubA57qtH++3h3TPFn/kVbwQLdR cmg0LUatc8KedFPYS1c5tt6nLf3p5xN3m2yWcDStKtdBRGXgWYxyXiFyYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWqKuVux2JGMfzsU0NJgGlPpy7lMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvbGFvcTVXN0hZa1l4X094VFEwbUFhVS1uTHVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3RMA0G CSqGSIb3DQEBCwUAA4IBAQCL5eAIjQlJCesbZdrD1hbAUaY0wE+vrghxfJyqT7Tk mfw1t/0mrhTI89uYFJxkU9SbThw2EhQMURzKvYlBhMVPBC9cmhFQDUzRGeuvaNs/ 1lKXOk6dsX88QBPmFvNz2NXnD6aZUWZbgGJZmjiHDy9OfLhSyPjByk1uomzcx9rP af/mSExWJKiycQzwxtW43mw2FW4ODCjOO4BqoARKmKwa0qjrW2Qv1t6BKSEKM9NJ SNOroquQV48SpQghE3qFm26Q9QiQldKRvhj7qQ9cgwCYM23I6B+W+A8tCEwLVUl0 82Bzt4VWrlCaMmcVeWdNlUEWVEES6+57JBFz2GxVEZHE -----END CERTIFICATE-----Generated at Mon Jan 19 02:43:35 2026 by rpki-client