This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/loKf1ScMnHbQThW7MODNStRz-Ls.roa File: loKf1ScMnHbQThW7MODNStRz-Ls.roa (raw, json) Hash identifier: HoafUQdwx8VXcjVeVg4yCft3f+0dDCgZMr+g7seOgDI= Subject key identifier: 96:82:9F:D5:27:0C:9C:76:D0:4E:15:BB:30:E0:CD:4A:D4:73:F8:BB Certificate issuer: /CN=7678742468cb01f0a526b4e92226fe3b74c67c41 Certificate serial: 019B366E90AE1C4FCF696E41DE38F994013D Authority key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/loKf1ScMnHbQThW7MODNStRz-Ls.roa Signing time: Fri 19 Dec 2025 11:46:14 +0000 ROA not before: Fri 19 Dec 2025 11:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43406 IP address blocks: 193.200.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:6e:90:ae:1c:4f:cf:69:6e:41:de:38:f9:94:01:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678742468cb01f0a526b4e92226fe3b74c67c41 Validity Not Before: Dec 19 11:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96829fd5270c9c76d04e15bb30e0cd4ad473f8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:f4:46:86:35:e1:d5:6a:6e:72:4e:b0:55: dc:52:1d:0f:45:33:fc:25:7d:a0:f1:a4:86:0c:35: f6:cd:15:9c:fc:32:b5:c8:75:a4:d8:b0:58:ab:50: 47:ae:a8:7b:84:d5:54:c8:72:12:69:60:95:f6:e3: b8:96:c3:ed:e6:ae:37:ed:52:ce:c1:33:59:01:bb: ec:d1:fb:63:61:d2:2c:c0:d8:3d:63:e1:c1:b0:e1: 91:51:72:5c:0a:8e:c8:57:e3:5b:8c:91:49:64:3a: e9:22:a9:c0:7e:93:eb:78:14:04:04:d9:bf:2f:50: 6e:9b:5c:d0:d5:ce:5e:4c:81:90:34:2c:5f:16:0f: 32:c0:45:ef:f4:cb:cc:69:63:33:f9:f0:b9:2b:ea: 3e:b1:14:43:0f:bb:e0:37:cf:f2:cb:df:43:e7:9d: df:a5:72:ec:05:ed:30:d0:91:a6:75:3d:c8:5d:de: 1c:0a:8d:6f:21:18:69:3e:1e:e8:44:fe:47:1d:ee: f7:d1:e5:74:2b:8d:a1:f7:26:37:c6:fe:94:11:1e: b9:f4:13:8b:53:5a:2e:17:63:65:52:38:c4:83:ba: c5:8c:5f:a8:71:fa:a7:4a:dc:c8:8f:6d:78:c4:19: 79:0e:66:46:67:56:7f:65:4e:49:de:ea:26:1b:81: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:9F:D5:27:0C:9C:76:D0:4E:15:BB:30:E0:CD:4A:D4:73:F8:BB X509v3 Authority Key Identifier: keyid:76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/loKf1ScMnHbQThW7MODNStRz-Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.155.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:44:32:0c:3a:d8:57:0e:2e:f7:58:64:47:57:4e:e1:c8:15: 83:1d:2a:87:ce:79:de:95:dc:3c:9d:7c:9f:e2:d2:19:70:4b: 6f:61:ef:8f:58:bf:5d:9c:97:84:3b:81:e9:34:d8:4b:25:7e: 0e:92:97:0d:74:3a:6b:76:d2:46:d1:4b:a9:e7:ad:61:61:d7: 1d:93:26:b9:d4:24:69:22:4f:63:34:20:04:ec:9a:a2:a1:c6: 44:b7:ce:c0:1d:31:b0:1e:ec:9d:b8:c8:d6:db:db:08:5f:9d: 6b:e6:bc:a2:25:0b:c5:08:5e:ab:5d:72:93:8d:7b:f9:9f:11: 0f:c6:70:19:eb:bd:40:77:ce:af:a5:6e:d2:8a:81:97:dd:0e: ab:be:68:22:27:69:7a:4a:d2:e7:6d:7d:62:4d:b0:30:f8:86: 9c:28:4b:d0:8a:48:b9:68:2b:47:dc:f5:1d:54:ec:95:3e:22: 70:7e:e3:11:d9:a4:75:36:ba:32:0d:71:57:60:62:73:33:0f: ca:02:b2:17:e2:9a:d1:e0:ca:2f:15:66:e4:6d:dc:b4:0e:56: 2a:da:38:a5:f9:76:b6:07:03:07:6c:fc:e8:01:d4:ad:9a:47: 3e:85:ed:e6:53:0e:1e:03:ef:3d:e4:49:89:b1:0b:27:58:94: 99:43:d2:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2bpCuHE/PaW5B3jj5lAE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2Nzg3NDI0NjhjYjAxZjBhNTI2YjRlOTIyMjZmZTNiNzRj NjdjNDEwHhcNMjUxMjE5MTE0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjgyOWZkNTI3MGM5Yzc2ZDA0ZTE1YmIzMGUwY2Q0YWQ0NzNmOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5/0RoY14dVqbnJOsFXcUh0PRTP8 JX2g8aSGDDX2zRWc/DK1yHWk2LBYq1BHrqh7hNVUyHISaWCV9uO4lsPt5q437VLO wTNZAbvs0ftjYdIswNg9Y+HBsOGRUXJcCo7IV+NbjJFJZDrpIqnAfpPreBQEBNm/ L1Bum1zQ1c5eTIGQNCxfFg8ywEXv9MvMaWMz+fC5K+o+sRRDD7vgN8/yy99D553f pXLsBe0w0JGmdT3IXd4cCo1vIRhpPh7oRP5HHe730eV0K42h9yY3xv6UER659BOL U1ouF2NlUjjEg7rFjF+ocfqnStzIj214xBl5DmZGZ1Z/ZU5J3uomG4FiAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaCn9UnDJx20E4VuzDgzUrUc/i7MB8GA1UdIwQY MBaAFHZ4dCRoywHwpSa06SIm/jt0xnxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUt ZmE0NGM3YTA3ZDI3LzEvbG9LZjFTY01uSGJRVGhXN01PRE5TdFJ6LUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUtZmE0NGM3YTA3ZDI3 LzEvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcibMA0G CSqGSIb3DQEBCwUAA4IBAQBcRDIMOthXDi73WGRHV07hyBWDHSqHznneldw8nXyf 4tIZcEtvYe+PWL9dnJeEO4HpNNhLJX4OkpcNdDprdtJG0Uup561hYdcdkya51CRp Ik9jNCAE7JqiocZEt87AHTGwHuyduMjW29sIX51r5ryiJQvFCF6rXXKTjXv5nxEP xnAZ671Ad86vpW7SioGX3Q6rvmgiJ2l6StLnbX1iTbAw+IacKEvQiki5aCtH3PUd VOyVPiJwfuMR2aR1NroyDXFXYGJzMw/KArIX4prR4MovFWbkbdy0DlYq2jil+Xa2 BwMHbPzoAdStmkc+he3mUw4eA+895EmJsQsnWJSZQ9Kv -----END CERTIFICATE-----Generated at Fri Dec 26 17:16:27 2025 by rpki-client