This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa File: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (raw, json) Hash identifier: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI= Subject key identifier: 2F:13:AA:D6:FE:54:02:3D:C4:C6:07:51:F9:F2:20:AC:C5:4A:F8:16 Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Certificate serial: 019B7C808B3F60DA5956F4CE22BBFF195FE8 Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 185.46.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8b:3f:60:da:59:56:f4:ce:22:bb:ff:19:5f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f13aad6fe54023dc4c60751f9f220acc54af816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:48:cd:93:3b:69:8f:b9:eb:f6:ab:a9:5d: b6:1e:00:0f:08:b0:75:b5:99:14:21:ca:2e:d4:7c: 65:56:61:f4:c1:82:9c:5a:15:06:09:95:9f:75:f5: bc:0e:77:4f:54:0f:7d:1e:5a:8b:9d:87:4e:ea:4e: 4a:52:c3:0d:aa:90:ab:f4:3b:fb:4c:93:8f:11:e3: a7:8a:af:64:07:8c:89:6a:a5:f7:47:23:bf:fb:c3: 20:74:7d:69:2a:cc:e1:b1:81:03:18:b1:e8:71:41: 31:b0:62:cf:7f:df:17:d7:65:2f:04:a9:d3:65:e2: 82:67:4f:7b:cf:3e:1c:ad:56:d1:4e:56:71:0f:fa: cb:ee:77:34:6c:6d:28:2b:57:62:7a:42:7c:e0:5c: 14:aa:69:a8:a4:81:62:54:c9:f3:8a:d3:4d:8a:9d: 43:ce:b9:0b:e5:5e:05:19:f0:fc:f0:65:50:e9:35: 5a:0d:71:af:65:e2:76:90:94:35:a4:5e:02:0d:c3: fa:14:e5:35:a1:64:fc:ce:ef:c9:96:bb:6d:e7:56: c5:21:c9:73:d7:34:77:66:4f:5c:a0:ae:c7:c4:9f: 4a:3a:87:5f:f1:11:5a:01:ef:86:c0:5b:bb:85:01: 08:a8:e7:68:1c:42:05:c2:d2:04:2f:ca:9f:af:f0: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:13:AA:D6:FE:54:02:3D:C4:C6:07:51:F9:F2:20:AC:C5:4A:F8:16 X509v3 Authority Key Identifier: keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.113.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:d4:46:c5:65:cf:3d:e1:c5:79:ff:02:9f:2f:97:58:04:8b: bd:6e:08:68:8e:75:fb:82:6e:28:bb:9f:d6:81:8c:8a:ec:63: 02:af:39:29:2d:07:8b:b2:93:c7:45:5e:a1:ed:c2:f8:59:3b: bb:25:4e:f3:c5:7a:bf:49:24:5e:d9:a1:1c:7a:75:9a:f7:07: 2d:25:67:4f:28:2f:72:87:1a:57:dc:2a:ad:0d:2a:c1:37:96: 98:0f:a8:e2:3a:82:33:28:37:d2:17:b6:24:09:3e:ff:e7:fd: b2:55:4e:29:10:18:06:84:92:3a:ed:87:93:ea:7a:47:f6:a2: 3f:b1:ec:5f:dd:82:2b:c8:bb:d2:76:b7:ef:e4:ee:75:20:92: 7f:af:f3:63:1f:a4:4f:5b:15:5b:e7:b2:cf:07:41:e7:78:ac: 3c:9c:61:06:42:5c:ee:25:70:52:21:5b:19:8d:22:ed:7f:3d: d6:77:23:05:19:e2:01:12:8a:09:02:f5:95:79:c8:1e:fe:14: 7c:f8:30:21:1e:32:52:f9:0d:36:c6:73:f0:e2:46:c9:d0:de: 22:9a:fb:af:6b:80:df:47:69:ff:fb:36:41:2d:b4:80:29:0f: 26:a7:09:e3:38:3f:17:4c:92:8c:3d:1e:94:0c:d2:01:04:ab: 80:c8:38:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIs/YNpZVvTOIrv/GV/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl ZTRiYzEwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjEzYWFkNmZlNTQwMjNkYzRjNjA3NTFmOWYyMjBhY2M1NGFmODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x1IzZM7aY+56/arqV22HgAPCLB1 tZkUIcou1HxlVmH0wYKcWhUGCZWfdfW8DndPVA99HlqLnYdO6k5KUsMNqpCr9Dv7 TJOPEeOniq9kB4yJaqX3RyO/+8MgdH1pKszhsYEDGLHocUExsGLPf98X12UvBKnT ZeKCZ097zz4crVbRTlZxD/rL7nc0bG0oK1diekJ84FwUqmmopIFiVMnzitNNip1D zrkL5V4FGfD88GVQ6TVaDXGvZeJ2kJQ1pF4CDcP6FOU1oWT8zu/Jlrtt51bFIclz 1zR3Zk9coK7HxJ9KOodf8RFaAe+GwFu7hQEIqOdoHEIFwtIEL8qfr/BOKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC8Tqtb+VAI9xMYHUfnyIKzFSvgWMB8GA1UdIwQY MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt ZDdiOGViNDYwOGUyLzEvTHhPcTF2NVVBajNFeGdkUi1mSWdyTVZLLUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS5xMA0G CSqGSIb3DQEBCwUAA4IBAQBr1EbFZc894cV5/wKfL5dYBIu9bghojnX7gm4ou5/W gYyK7GMCrzkpLQeLspPHRV6h7cL4WTu7JU7zxXq/SSRe2aEcenWa9wctJWdPKC9y hxpX3CqtDSrBN5aYD6jiOoIzKDfSF7YkCT7/5/2yVU4pEBgGhJI67YeT6npH9qI/ sexf3YIryLvSdrfv5O51IJJ/r/NjH6RPWxVb57LPB0HneKw8nGEGQlzuJXBSIVsZ jSLtfz3WdyMFGeIBEooJAvWVecge/hR8+DAhHjJS+Q02xnPw4kbJ0N4imvuva4Df R2n/+zZBLbSAKQ8mpwnjOD8XTJKMPR6UDNIBBKuAyDgq -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:45 2026 by rpki-client