This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lopMCb2dEn5OAfiNdJ-f_MCIUk4.roa File: lopMCb2dEn5OAfiNdJ-f_MCIUk4.roa (raw, json) Hash identifier: 4GZNoY//G3syFeHEmLyXysNIPlav0mCA2SZZB9ss9DE= Subject key identifier: 96:8A:4C:09:BD:9D:12:7E:4E:01:F8:8D:74:9F:9F:FC:C0:88:52:4E Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3603E7E13564C80C4FF29F5E403054 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lopMCb2dEn5OAfiNdJ-f_MCIUk4.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 91.212.229.0/24 maxlen: 24 146.19.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:03:e7:e1:35:64:c8:0c:4f:f2:9f:5e:40:30:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=968a4c09bd9d127e4e01f88d749f9ffcc088524e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:6f:57:76:16:49:a8:12:74:9a:75:a7:f6: d2:35:b1:04:e1:e6:9e:9d:e4:14:ab:72:a6:d9:96: ba:2e:7e:a8:8b:de:fa:78:f9:0e:40:ed:e5:a5:fe: 32:3d:cf:3f:c7:ca:45:4a:72:59:6e:a3:fb:5f:5f: 52:df:dd:b8:e1:7a:5e:58:9d:ad:66:e3:8d:f5:c5: 4d:b1:7b:5b:ac:82:00:6c:0e:41:8d:2e:50:c8:45: a4:a3:60:08:91:fa:a4:fd:62:8f:c6:91:e4:c3:ef: e0:d3:05:de:9b:cf:3e:82:aa:ac:ad:2a:3e:4d:60: 95:3b:af:c1:38:5a:42:a6:7f:c3:ae:cd:98:04:0d: b4:81:42:06:e8:6b:37:48:f3:2c:54:54:7c:ff:b5: 07:2a:c3:a6:e7:14:85:47:07:1f:bb:3e:96:ca:df: ff:32:7e:bf:8d:6f:25:6a:cc:90:88:a6:71:94:41: 88:4a:91:13:f5:2e:2b:c5:c9:23:26:aa:f3:63:b5: 72:5f:76:ff:c3:51:b7:2e:08:97:a8:80:d5:56:89: 27:a0:02:97:1c:a4:b0:c2:28:50:02:b5:28:a5:b0: a7:c5:bd:02:bd:0e:ac:91:c5:bc:9b:02:7b:5d:e9: d7:42:e3:5d:af:f1:19:5a:18:ac:e3:5e:77:81:37: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8A:4C:09:BD:9D:12:7E:4E:01:F8:8D:74:9F:9F:FC:C0:88:52:4E X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lopMCb2dEn5OAfiNdJ-f_MCIUk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.229.0/24 146.19.188.0/24 Signature Algorithm: sha256WithRSAEncryption 38:89:fe:80:02:74:f3:16:71:83:67:5c:ab:c7:a7:ea:bc:a3: 52:f5:95:a2:bd:ed:bd:ce:b3:61:65:91:a7:d7:ed:90:e9:7d: 93:0c:d3:dd:37:7b:e8:fd:76:7e:27:0c:22:fe:59:a3:e7:b8: e6:3d:61:53:35:05:93:33:b3:06:a3:fd:46:33:ef:20:15:5e: 71:2f:da:f1:ae:e5:4b:ce:d1:1e:3a:f0:38:25:01:66:e0:59: ff:85:bd:3d:9f:24:9f:b3:9e:43:a2:53:b2:88:3b:b2:3c:03: 41:77:06:8f:c2:78:2f:17:c6:db:7b:1f:f9:f9:df:09:0b:01: 2c:15:39:3c:76:2d:98:f1:3e:09:e2:6a:12:6c:85:f6:3e:94: d5:1b:c0:e3:45:c7:d5:32:a5:75:63:6a:4e:16:c0:46:88:56: 19:ef:f7:0e:56:05:35:37:31:d2:55:f4:5e:d8:37:78:79:9c: 30:0d:c5:01:66:a8:01:9e:c1:5d:a3:d7:a9:85:b2:48:81:53: 59:ca:26:63:6c:4c:73:2f:93:82:a4:79:a0:42:2a:dc:f0:24: b9:51:65:25:be:92:5f:f8:2d:c1:5b:24:b9:46:15:f3:dd:29: 92:38:79:3d:a8:df:66:ef:d9:fb:1b:0e:82:84:59:f6:5b:4c: f2:60:80:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NgPn4TVkyAxP8p9eQDBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjhhNGMwOWJkOWQxMjdlNGUwMWY4OGQ3NDlmOWZmY2MwODg1MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTdvV3YWSagSdJp1p/bSNbEE4eae neQUq3Km2Za6Ln6oi976ePkOQO3lpf4yPc8/x8pFSnJZbqP7X19S39244XpeWJ2t ZuON9cVNsXtbrIIAbA5BjS5QyEWko2AIkfqk/WKPxpHkw+/g0wXem88+gqqsrSo+ TWCVO6/BOFpCpn/Drs2YBA20gUIG6Gs3SPMsVFR8/7UHKsOm5xSFRwcfuz6Wyt// Mn6/jW8lasyQiKZxlEGISpET9S4rxckjJqrzY7VyX3b/w1G3LgiXqIDVVoknoAKX HKSwwihQArUopbCnxb0CvQ6skcW8mwJ7XenXQuNdr/EZWhis4153gTdhFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJaKTAm9nRJ+TgH4jXSfn/zAiFJOMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvbG9wTUNiMmRFbjVPQWZpTmRKLWZfTUNJVWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9TlAwQA khO8MA0GCSqGSIb3DQEBCwUAA4IBAQA4if6AAnTzFnGDZ1yrx6fqvKNS9ZWive29 zrNhZZGn1+2Q6X2TDNPdN3vo/XZ+Jwwi/lmj57jmPWFTNQWTM7MGo/1GM+8gFV5x L9rxruVLztEeOvA4JQFm4Fn/hb09nySfs55DolOyiDuyPANBdwaPwngvF8bbex/5 +d8JCwEsFTk8di2Y8T4J4moSbIX2PpTVG8DjRcfVMqV1Y2pOFsBGiFYZ7/cOVgU1 NzHSVfRe2Dd4eZwwDcUBZqgBnsFdo9ephbJIgVNZyiZjbExzL5OCpHmgQirc8CS5 UWUlvpJf+C3BWyS5RhXz3SmSOHk9qN9m79n7Gw6ChFn2W0zyYIAm -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:56 2026 by rpki-client