This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/L2E8kLfTz8qUteKmwoh31dFHaxE.roa File: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (raw, json) Hash identifier: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU= Subject key identifier: 2F:61:3C:90:B7:D3:CF:CA:94:B5:E2:A6:C2:88:77:D5:D1:47:6B:11 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B7EA59032228C5B202FD788DD7E4AAB3A Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/L2E8kLfTz8qUteKmwoh31dFHaxE.roa Signing time: Fri 02 Jan 2026 12:18:57 +0000 ROA not before: Fri 02 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34702 IP address blocks: 37.252.4.0/23 maxlen: 23 176.97.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:90:32:22:8c:5b:20:2f:d7:88:dd:7e:4a:ab:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 2 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f613c90b7d3cfca94b5e2a6c28877d5d1476b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:b2:5c:7e:bc:ab:e4:72:87:68:ae:4f:e6: 1b:5d:54:9e:60:d6:f6:a4:d1:09:54:67:43:63:80: d1:e1:a7:2a:07:6e:0a:f7:c4:39:d3:bb:9d:43:3a: cb:fc:4b:8e:e6:d0:3a:02:b4:24:97:30:57:a7:1b: c5:25:b8:13:ba:2d:75:ac:57:75:ae:cf:2a:ca:95: 32:53:90:3b:a9:70:2e:18:a6:be:f2:21:0b:e2:90: f5:10:a3:db:87:47:17:a9:7e:a2:7f:db:46:ce:62: 2c:3f:b2:0c:68:82:7b:35:1e:69:98:4f:b4:18:b1: 67:ab:86:f9:af:5e:16:92:b3:fc:a8:f8:be:10:66: 85:28:af:a7:ca:da:6a:c9:78:8c:96:2e:ec:3b:58: 39:cc:fb:b3:b9:a4:9e:92:ba:1a:ed:34:e3:b5:80: c6:13:29:b9:7f:21:e6:a5:33:01:0d:1c:6c:82:b8: a2:cb:1c:9f:5a:96:3d:af:db:2e:2d:44:f0:ab:4f: b8:89:f8:7a:9b:a5:f4:96:a3:65:1c:c0:72:db:bb: 4d:2f:e1:37:bc:bc:1b:e0:a9:f3:44:54:5a:b1:fa: 40:5f:68:ee:1d:28:a8:df:4e:9d:f8:03:63:61:27: 62:40:29:c7:e2:9c:85:dc:ba:56:af:45:44:00:ce: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:61:3C:90:B7:D3:CF:CA:94:B5:E2:A6:C2:88:77:D5:D1:47:6B:11 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/L2E8kLfTz8qUteKmwoh31dFHaxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.4.0/23 176.97.74.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0e:3f:f3:24:02:81:af:c6:33:6a:19:8b:51:5b:fb:b5:6f: b4:22:95:0b:97:ed:08:92:fa:76:22:66:e5:b9:3b:e0:58:ca: c5:96:8d:6c:32:28:5e:98:09:2a:d7:9b:44:ec:f6:14:59:49: d1:b5:26:8e:a9:67:6f:30:80:4c:78:e9:ba:bc:e8:02:43:36: 9d:30:a5:92:bd:a1:d7:81:d4:2b:71:09:3c:c2:ab:5d:07:4a: 81:90:41:3b:ae:3d:de:29:27:ca:82:02:1d:6a:6d:37:d5:32: 2a:37:24:67:e0:8d:54:c2:80:75:02:78:8d:a9:ad:1d:79:d4: a0:07:1e:1b:b1:c4:b1:d2:a1:1e:07:a4:0d:43:a1:5e:2e:44: c1:37:29:94:38:1d:fb:a7:36:8e:cb:a8:1a:af:ac:ce:4e:7f: 59:e9:54:38:22:30:d5:05:f3:77:66:72:ac:ec:7a:ef:f0:14: cb:c5:05:20:9a:d2:5f:95:d1:b0:a0:c8:aa:5f:26:3f:4b:ef: c2:83:e3:c6:a8:52:7e:7b:28:58:eb:f0:43:1d:1e:7d:fb:88: 78:58:bd:c0:57:fa:96:77:58:b8:79:59:8c:63:f5:70:59:a7: c1:7c:a6:33:7b:21:ab:19:b0:28:2d:35:3d:37:4b:77:72:80: f2:e3:0b:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pZAyIoxbIC/XiN1+Sqs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTAyMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjYxM2M5MGI3ZDNjZmNhOTRiNWUyYTZjMjg4NzdkNWQxNDc2YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos+yXH68q+Ryh2iuT+YbXVSeYNb2 pNEJVGdDY4DR4acqB24K98Q507udQzrL/EuO5tA6ArQklzBXpxvFJbgTui11rFd1 rs8qypUyU5A7qXAuGKa+8iEL4pD1EKPbh0cXqX6if9tGzmIsP7IMaIJ7NR5pmE+0 GLFnq4b5r14WkrP8qPi+EGaFKK+nytpqyXiMli7sO1g5zPuzuaSekroa7TTjtYDG Eym5fyHmpTMBDRxsgriiyxyfWpY9r9suLUTwq0+4ifh6m6X0lqNlHMBy27tNL+E3 vLwb4KnzRFRasfpAX2juHSio306d+ANjYSdiQCnH4pyF3LpWr0VEAM7EPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC9hPJC308/KlLXipsKId9XRR2sRMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvTDJFOGtMZlR6OHFVdGVLbXdvaDMxZEZIYXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJfwEAwQA sGFKMA0GCSqGSIb3DQEBCwUAA4IBAQBcDj/zJAKBr8YzahmLUVv7tW+0IpULl+0I kvp2ImbluTvgWMrFlo1sMihemAkq15tE7PYUWUnRtSaOqWdvMIBMeOm6vOgCQzad MKWSvaHXgdQrcQk8wqtdB0qBkEE7rj3eKSfKggIdam031TIqNyRn4I1UwoB1AniN qa0dedSgBx4bscSx0qEeB6QNQ6FeLkTBNymUOB37pzaOy6gar6zOTn9Z6VQ4IjDV BfN3ZnKs7Hrv8BTLxQUgmtJfldGwoMiqXyY/S+/Cg+PGqFJ+eyhY6/BDHR59+4h4 WL3AV/qWd1i4eVmMY/VwWafBfKYzeyGrGbAoLTU9N0t3coDy4wsR -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:08 2026 by rpki-client