This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/LRk25r9LuPknCpeQnQqi40l9kvk.roa File: LRk25r9LuPknCpeQnQqi40l9kvk.roa (raw, json) Hash identifier: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q= Subject key identifier: 2D:19:36:E6:BF:4B:B8:F9:27:0A:97:90:9D:0A:A2:E3:49:7D:92:F9 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D5B2D072FA923602A20D69A8C4AA8E5 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/LRk25r9LuPknCpeQnQqi40l9kvk.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214567 IP address blocks: 109.122.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2d:07:2f:a9:23:60:2a:20:d6:9a:8c:4a:a8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d1936e6bf4bb8f9270a97909d0aa2e3497d92f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:52:8e:5f:47:5b:40:23:75:3a:9f:1a:89: c8:91:1c:05:42:8a:f1:30:2b:2c:97:e3:0f:20:2a: 76:df:0a:0f:4c:21:fd:70:78:6c:56:d0:fa:27:b9: c4:7c:cf:ea:b1:16:36:fb:c1:a9:70:d8:86:8e:64: 19:ed:06:33:30:13:2f:82:88:ee:00:e4:b5:ab:10: 1c:be:ea:2a:68:8c:7b:c0:d6:2a:f7:ed:fd:e6:5a: dc:7f:d9:fa:db:b4:13:9b:f4:69:ad:57:55:f9:99: a0:9f:4c:45:ec:46:85:e0:55:75:4d:ab:68:8f:c9: a0:85:d1:04:ea:6c:ab:09:0a:40:7d:87:bd:71:92: 7e:63:3c:eb:c4:8d:fe:46:7e:d7:52:d4:90:d3:45: 18:51:93:be:4e:f9:12:94:e0:d4:fc:18:bd:69:3f: 77:69:36:6a:40:39:48:ca:6c:1c:d8:cf:74:ac:59: 6f:b5:c4:b8:a6:d5:03:6a:f5:28:ec:54:03:b1:0c: 5d:0f:ac:2b:07:4e:1b:33:d6:4c:cf:a7:70:ff:3c: f9:b7:af:87:68:cf:b1:be:0d:b6:63:33:d1:77:2f: be:a6:66:1b:58:e7:65:58:4e:c7:f6:22:77:1b:31: cb:50:fb:2d:d3:06:45:ff:1e:b6:c3:3d:b1:38:5f: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:36:E6:BF:4B:B8:F9:27:0A:97:90:9D:0A:A2:E3:49:7D:92:F9 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/LRk25r9LuPknCpeQnQqi40l9kvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.251.0/24 Signature Algorithm: sha256WithRSAEncryption 58:22:59:5f:39:86:6b:99:86:4a:1d:8e:8d:f1:c9:b3:be:b2: f4:1c:30:4d:b1:b9:30:12:d3:5a:fe:a8:df:ca:69:1e:0f:10: ec:21:0a:67:6e:52:e7:63:04:ea:d5:f8:48:0a:ae:29:b9:cf: 99:45:e9:6a:79:a4:22:88:64:fa:ac:c3:b7:e4:46:45:42:e7: ea:19:84:d2:3a:3b:01:36:63:ab:7c:60:54:a9:73:75:d1:d6: 57:51:39:29:11:95:e3:29:87:59:57:9a:92:c1:da:3b:1d:d5: 72:1c:3e:6b:b7:b3:25:e1:d6:d3:3e:bf:32:ca:42:be:a2:2a: 01:9e:81:6e:13:41:d5:7a:bf:e3:8d:2b:04:a8:69:62:f9:6c: 37:47:52:7f:ec:d4:6c:ef:ca:59:fd:c3:34:d4:fa:18:c1:e1: 4e:b1:78:5d:bd:e1:0f:59:8d:d0:d4:1b:1d:72:31:89:bb:8b: 0d:b0:13:fa:bc:1d:29:d1:54:fa:a6:c1:d2:97:b6:77:b5:7c: ef:05:3f:c6:b0:a2:e4:89:49:25:9b:41:b9:ef:7f:14:17:7c: bf:59:64:55:4b:ee:fa:88:4c:70:55:6f:e8:1e:e8:34:45:5f: c7:6e:55:fb:55:a3:c9:c0:28:5f:55:9e:47:4d:e9:4d:18:dc: 78:8a:6a:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wy0HL6kjYCog1pqMSqjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDE5MzZlNmJmNGJiOGY5MjcwYTk3OTA5ZDBhYTJlMzQ5N2Q5MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEFSjl9HW0AjdTqfGonIkRwFQorx MCssl+MPICp23woPTCH9cHhsVtD6J7nEfM/qsRY2+8GpcNiGjmQZ7QYzMBMvgoju AOS1qxAcvuoqaIx7wNYq9+395lrcf9n627QTm/RprVdV+Zmgn0xF7EaF4FV1Tato j8mghdEE6myrCQpAfYe9cZJ+YzzrxI3+Rn7XUtSQ00UYUZO+TvkSlODU/Bi9aT93 aTZqQDlIymwc2M90rFlvtcS4ptUDavUo7FQDsQxdD6wrB04bM9ZMz6dw/zz5t6+H aM+xvg22YzPRdy++pmYbWOdlWE7H9iJ3GzHLUPst0wZF/x62wz2xOF+6FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0ZNua/S7j5JwqXkJ0KouNJfZL5MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvTFJrMjVyOUx1UGtuQ3BlUW5RcWk0MGw5a3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXr7MA0G CSqGSIb3DQEBCwUAA4IBAQBYIllfOYZrmYZKHY6N8cmzvrL0HDBNsbkwEtNa/qjf ymkeDxDsIQpnblLnYwTq1fhICq4puc+ZRelqeaQiiGT6rMO35EZFQufqGYTSOjsB NmOrfGBUqXN10dZXUTkpEZXjKYdZV5qSwdo7HdVyHD5rt7Ml4dbTPr8yykK+oioB noFuE0HVer/jjSsEqGli+Ww3R1J/7NRs78pZ/cM01PoYweFOsXhdveEPWY3Q1Bsd cjGJu4sNsBP6vB0p0VT6psHSl7Z3tXzvBT/GsKLkiUklm0G5738UF3y/WWRVS+76 iExwVW/oHug0RV/HblX7VaPJwChfVZ5HTelNGNx4imoI -----END CERTIFICATE-----Generated at Mon Jan 26 20:25:38 2026 by rpki-client