This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/lspkwJT88HzimvAJv3qctC-BJ3Q.roa File: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (raw, json) Hash identifier: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE= Subject key identifier: 96:CA:64:C0:94:FC:F0:7C:E2:9A:F0:09:BF:7A:9C:B4:2F:81:27:74 Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Certificate serial: 019B7835174F2EEF76047F6475BB2ED9578C Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/lspkwJT88HzimvAJv3qctC-BJ3Q.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41061 IP address blocks: 185.222.180.0/22 maxlen: 22 185.222.180.0/23 maxlen: 23 185.222.180.0/24 maxlen: 24 185.222.181.0/24 maxlen: 24 185.222.182.0/23 maxlen: 23 185.222.182.0/24 maxlen: 24 185.222.183.0/24 maxlen: 24 2a0c:9800::/29 maxlen: 29 2a0c:9800:9800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:17:4f:2e:ef:76:04:7f:64:75:bb:2e:d9:57:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96ca64c094fcf07ce29af009bf7a9cb42f812774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:fc:5c:1a:a3:67:4a:33:b8:25:ad:81:85: a8:79:26:8f:87:8a:ba:4c:bb:8e:2d:3c:2b:0f:6f: ec:56:30:fc:ef:a7:d3:cf:58:2c:a5:4e:9b:4d:c6: a6:a4:12:96:c6:58:6b:5e:d5:b3:ca:3a:29:4f:43: 8d:54:85:36:93:83:23:16:7c:f0:04:40:40:57:a3: aa:f1:b3:39:56:71:6e:00:56:e0:7a:81:5f:81:5d: 2d:5e:54:81:4c:32:ff:69:83:61:10:db:18:f2:a8: 82:6e:ad:9f:db:fc:f5:fb:49:db:95:ed:06:26:d9: 98:25:96:89:62:82:b1:52:b4:6e:75:16:ad:b2:a3: 9c:a6:7d:3e:1e:4d:ca:aa:11:02:d0:86:06:8f:c3: 65:80:f6:54:66:51:4c:24:74:b3:ec:71:ed:b9:17: e0:f7:7d:19:d4:1b:af:40:a6:06:26:70:8e:34:44: 37:f4:f8:ce:52:c3:11:20:9e:d4:64:fc:1c:98:c9: 12:e1:29:7b:28:13:ff:62:2f:4d:ff:19:99:ce:21: 05:4c:55:b4:05:ba:ca:a5:13:26:1f:2e:cb:2f:35: 2f:0a:bc:44:1c:c6:8d:1d:ba:41:ea:d3:99:93:1c: d8:94:08:16:6b:05:1d:ab:eb:95:d6:f1:56:19:bf: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:64:C0:94:FC:F0:7C:E2:9A:F0:09:BF:7A:9C:B4:2F:81:27:74 X509v3 Authority Key Identifier: keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/lspkwJT88HzimvAJv3qctC-BJ3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.180.0/22 IPv6: 2a0c:9800::/29 Signature Algorithm: sha256WithRSAEncryption 65:0b:d7:01:b4:cf:94:63:89:ba:5e:b0:13:4f:01:ca:83:38: fe:a2:4e:f1:5a:86:e2:f8:f4:c0:4f:1d:e2:85:e9:c8:3f:d8: 65:1a:b0:fe:08:99:50:af:03:0d:a5:01:b3:92:f7:bc:7d:e6: ec:2c:35:7c:0e:b0:e7:61:40:e0:4d:fa:1a:bf:06:7d:ae:fb: d5:cd:fc:46:4b:af:fe:1c:66:44:e0:8d:36:c5:6c:1f:29:95: 95:04:2b:56:49:5c:c1:4b:a0:a3:aa:48:e6:9a:84:46:5f:4c: 3a:95:89:10:9a:60:ed:bb:5d:46:78:fb:cf:a2:1c:af:a6:55: 5e:12:95:08:4c:df:92:e9:56:d5:b6:62:d0:a1:6d:81:4e:05: 43:c6:a6:d4:e2:51:93:0c:c3:71:ef:ce:7c:ea:21:06:0f:24: 57:7e:d3:ca:c5:29:41:9a:f4:ea:27:08:54:6d:30:9f:9f:75: 6e:9a:9a:81:4a:f1:95:b7:f4:47:77:23:1b:56:8d:ab:3b:80: a4:5d:71:f7:5f:bf:b8:89:70:bb:71:c8:74:8f:d6:3f:2d:29: 81:07:ec:ae:39:d3:bc:69:28:f9:09:62:d1:bb:e7:d1:f0:90: d2:7f:11:ae:5b:ab:0c:3d:34:92:0e:a6:4f:7c:ed:9f:d3:19: e1:bf:71:42 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRdPLu92BH9kdbsu2VeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWZmZjllYjBjZjRjMGJhNzgxNGUzMjJlYzhlMDNkNGYx ZjA3MTgwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmNhNjRjMDk0ZmNmMDdjZTI5YWYwMDliZjdhOWNiNDJmODEyNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpX8XBqjZ0ozuCWtgYWoeSaPh4q6 TLuOLTwrD2/sVjD876fTz1gspU6bTcampBKWxlhrXtWzyjopT0ONVIU2k4MjFnzw BEBAV6Oq8bM5VnFuAFbgeoFfgV0tXlSBTDL/aYNhENsY8qiCbq2f2/z1+0nble0G JtmYJZaJYoKxUrRudRatsqOcpn0+Hk3KqhEC0IYGj8NlgPZUZlFMJHSz7HHtuRfg 930Z1BuvQKYGJnCONEQ39PjOUsMRIJ7UZPwcmMkS4Sl7KBP/Yi9N/xmZziEFTFW0 BbrKpRMmHy7LLzUvCrxEHMaNHbpB6tOZkxzYlAgWawUdq+uV1vFWGb+ZowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJbKZMCU/PB84prwCb96nLQvgSd0MB8GA1UdIwQY MBaAFK4f/56wz0wLp4FOMi7I4D1PHwcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEt OWUxMDI5NGExOGVhLzEvbHNwa3dKVDg4SHppbXZBSnYzcWN0Qy1CSjNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEtOWUxMDI5NGExOGVh LzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud60MA0E AgACMAcDBQMqDJgAMA0GCSqGSIb3DQEBCwUAA4IBAQBlC9cBtM+UY4m6XrATTwHK gzj+ok7xWobi+PTATx3ihenIP9hlGrD+CJlQrwMNpQGzkve8febsLDV8DrDnYUDg TfoavwZ9rvvVzfxGS6/+HGZE4I02xWwfKZWVBCtWSVzBS6CjqkjmmoRGX0w6lYkQ mmDtu11GePvPohyvplVeEpUITN+S6VbVtmLQoW2BTgVDxqbU4lGTDMNx78586iEG DyRXftPKxSlBmvTqJwhUbTCfn3VumpqBSvGVt/RHdyMbVo2rO4CkXXH3X7+4iXC7 cch0j9Y/LSmBB+yuOdO8aSj5CWLRu+fR8JDSfxGuW6sMPTSSDqZPfO2f0xnhv3FC -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:15 2026 by rpki-client