This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lSUGE_d_qT6-86LK03VWiCsMsbM.roa File: lSUGE_d_qT6-86LK03VWiCsMsbM.roa (raw, json) Hash identifier: 7WobUs7M0Xn7OFwQ+ogGC49nWaSQqiEzFFsE29+lB2c= Subject key identifier: 95:25:06:13:F7:7F:A9:3E:BE:F3:A2:CA:D3:75:56:88:2B:0C:B1:B3 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C76C688D17B9CB907B9C523B9C7C49 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lSUGE_d_qT6-86LK03VWiCsMsbM.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 212.116.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:68:8d:17:b9:cb:90:7b:9c:52:3b:9c:7c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95250613f77fa93ebef3a2cad37556882b0cb1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:8a:08:86:db:52:fc:0e:9f:74:54:e5:4a: df:ce:71:78:fb:e4:53:1c:64:68:2c:11:ab:f0:2d: b5:c6:2f:58:75:b5:3c:5e:c6:95:99:d4:57:05:64: 75:c0:56:ba:52:2d:4a:ee:1e:d0:37:d5:60:b3:69: c4:71:e8:b2:55:6c:38:0b:35:e1:1c:29:9f:5c:17: a9:17:18:e1:67:d9:e1:27:3e:b3:0b:80:52:e7:25: fd:d6:8b:f6:ab:92:78:e6:89:a3:e2:43:82:a9:e8: 97:83:06:d5:77:33:70:22:af:09:f1:46:8a:e9:d6: e5:61:8c:89:cd:33:90:33:04:b7:e7:69:68:f0:7b: 26:12:ff:a9:aa:83:87:3d:89:70:98:68:a3:6a:d9: 67:1e:1e:cf:14:49:da:bb:bf:ab:b5:2c:44:92:1f: 15:83:73:97:93:09:43:04:b8:09:46:b8:c6:b8:b7: 7f:e2:27:1f:60:0b:3c:02:82:ee:d8:0d:25:24:1a: f5:7d:b4:2c:1b:2b:83:a3:d7:a7:a3:1f:8c:af:c5: d5:37:3d:31:73:00:89:57:db:dd:1a:8a:55:5e:2f: 8f:75:31:6c:36:f2:c4:f8:39:36:0c:51:7f:51:5a: a4:7f:ed:c2:aa:2f:9f:dd:43:06:b5:f9:bb:93:e5: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:06:13:F7:7F:A9:3E:BE:F3:A2:CA:D3:75:56:88:2B:0C:B1:B3 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lSUGE_d_qT6-86LK03VWiCsMsbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.248.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:f7:b1:0b:90:62:8a:ee:42:03:9d:0a:49:35:00:fe:4e:b2: f2:cb:00:b6:c0:38:05:31:9f:fc:6a:64:8d:f5:62:f8:c4:3b: 48:78:b2:9d:1e:76:0c:b9:42:8c:35:3c:c2:56:1b:dc:3c:a8: d8:fc:47:11:b3:7c:dd:86:4e:38:51:7d:8d:49:51:6a:56:64: e0:db:38:6b:8b:fb:14:c4:9e:69:27:3f:5d:29:08:9d:93:6b: ce:f1:ca:c4:cc:dc:1a:af:b3:36:d8:1d:b9:27:22:c1:06:df: f6:85:1f:26:e2:58:44:34:a4:d3:a3:e4:12:cc:22:72:71:0a: a3:a4:c7:5b:44:3c:39:95:e7:a4:cc:8d:06:5e:87:27:dd:ad: 34:e9:d8:db:02:24:56:75:c6:c7:88:4c:3d:2c:5e:1d:62:95: 2a:b5:1c:19:b9:3a:7e:fd:7e:dd:c9:c4:41:92:1b:12:f4:61: 2e:05:70:a6:eb:1c:07:5b:da:85:79:5b:9e:27:cf:28:4f:c7: 74:a4:07:84:e9:cd:e6:d0:25:2c:b0:45:cf:05:d1:60:dd:c4: 89:1b:2b:b8:20:b8:d1:c5:4a:e6:af:c2:d3:6b:78:85:02:d9: 5c:c3:19:64:92:db:d1:ff:88:41:1d:57:38:35:17:b6:e6:9b: 21:89:eb:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2xojRe5y5B7nFI7nHxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI1MDYxM2Y3N2ZhOTNlYmVmM2EyY2FkMzc1NTY4ODJiMGNiMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixqKCIbbUvwOn3RU5UrfznF4++RT HGRoLBGr8C21xi9YdbU8XsaVmdRXBWR1wFa6Ui1K7h7QN9Vgs2nEceiyVWw4CzXh HCmfXBepFxjhZ9nhJz6zC4BS5yX91ov2q5J45omj4kOCqeiXgwbVdzNwIq8J8UaK 6dblYYyJzTOQMwS352lo8HsmEv+pqoOHPYlwmGijatlnHh7PFEnau7+rtSxEkh8V g3OXkwlDBLgJRrjGuLd/4icfYAs8AoLu2A0lJBr1fbQsGyuDo9enox+Mr8XVNz0x cwCJV9vdGopVXi+PdTFsNvLE+Dk2DFF/UVqkf+3Cqi+f3UMGtfm7k+UVUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUlBhP3f6k+vvOiytN1VogrDLGzMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvbFNVR0VfZF9xVDYtODZMSzAzVldpQ3NNc2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HT4MA0G CSqGSIb3DQEBCwUAA4IBAQAN97ELkGKK7kIDnQpJNQD+TrLyywC2wDgFMZ/8amSN 9WL4xDtIeLKdHnYMuUKMNTzCVhvcPKjY/EcRs3zdhk44UX2NSVFqVmTg2zhri/sU xJ5pJz9dKQidk2vO8crEzNwar7M22B25JyLBBt/2hR8m4lhENKTTo+QSzCJycQqj pMdbRDw5leekzI0GXocn3a006djbAiRWdcbHiEw9LF4dYpUqtRwZuTp+/X7dycRB khsS9GEuBXCm6xwHW9qFeVueJ88oT8d0pAeE6c3m0CUssEXPBdFg3cSJGyu4ILjR xUrmr8LTa3iFAtlcwxlkktvR/4hBHVc4NRe25pshiet4 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:34 2026 by rpki-client