This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/LtVC3TgKMTL2qiz-p2bpf2mV-OQ.roa File: LtVC3TgKMTL2qiz-p2bpf2mV-OQ.roa (raw, json) Hash identifier: D1BWkiKHNAe+1NVZc8ApQWcByLOn8OI2nnEYleWaubw= Subject key identifier: 2E:D5:42:DD:38:0A:31:32:F6:AA:2C:FE:A7:66:E9:7F:69:95:F8:E4 Certificate issuer: /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c Certificate serial: 019B78A352C49F733D30CE1F3E0D37469350 Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/LtVC3TgKMTL2qiz-p2bpf2mV-OQ.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 188.95.140.0/24 maxlen: 24 188.95.141.0/24 maxlen: 24 188.95.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:52:c4:9f:73:3d:30:ce:1f:3e:0d:37:46:93:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ed542dd380a3132f6aa2cfea766e97f6995f8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:3e:cb:29:33:46:97:9d:03:ef:78:46:ae: c9:3f:f2:4a:95:f2:aa:7a:9d:df:4d:5c:70:6f:7a: e5:10:3b:66:57:ee:4d:60:f4:92:1e:10:27:ea:ba: 62:60:05:27:40:5a:8c:75:ee:c2:a2:4e:2c:44:00: df:87:58:5a:cb:67:ae:8f:c8:01:ac:a4:f3:d0:a6: d1:0f:a6:4a:6c:33:81:c2:11:8e:36:e7:6b:ee:d3: 6a:a9:ca:c4:f8:22:4f:95:29:c3:e8:1e:c6:4a:9f: b5:14:15:fd:77:95:18:2c:40:55:fc:0c:17:34:3b: e5:1a:8b:5b:f1:eb:22:ab:64:1d:79:55:81:3b:c2: d9:be:1c:ca:39:a4:2b:8d:76:a2:fd:cb:7c:f6:93: eb:39:27:ad:f3:14:84:90:ca:da:60:95:06:5f:2d: 62:74:b8:38:57:d2:af:4e:96:5b:b8:bc:a3:92:d2: 5c:43:4f:3b:cb:ff:7b:85:90:c0:85:2b:f9:aa:3c: d1:db:c3:b3:fc:23:14:b5:a4:67:91:c2:ff:4b:83: ca:82:02:33:da:95:e7:fc:c4:cf:b2:4f:3a:5b:44: 58:f7:e1:52:82:2e:9c:75:71:6e:bf:32:54:60:d0: 1c:6e:da:72:fa:60:4c:8e:b9:a9:66:21:87:e8:09: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D5:42:DD:38:0A:31:32:F6:AA:2C:FE:A7:66:E9:7F:69:95:F8:E4 X509v3 Authority Key Identifier: keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/LtVC3TgKMTL2qiz-p2bpf2mV-OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.140.0-188.95.142.255 Signature Algorithm: sha256WithRSAEncryption be:83:49:d5:2d:a2:c6:0c:94:20:e4:04:3b:b5:43:84:0b:fb: 51:b5:ec:a4:f2:44:bc:e8:c0:2e:b2:c2:08:e7:a1:13:a8:6b: a0:fc:e9:2c:a6:f9:7d:28:92:55:f4:c7:a5:b1:d0:e7:8b:6f: 50:90:ea:95:fb:1c:28:fe:e0:f4:e7:6e:61:e7:f9:97:7e:dd: b5:09:09:08:15:b0:e5:bd:7e:5f:27:eb:9a:9b:b2:46:71:ed: 26:03:cc:53:f5:62:ad:c1:8f:a4:1a:46:f2:a3:fb:bb:c1:70: ee:3c:11:d7:0f:e9:f2:88:ca:0d:9e:29:d7:e2:7a:7f:d3:92: a1:5f:5e:cb:5b:c5:16:1f:82:7e:19:31:68:aa:e6:44:af:d4: 07:28:e3:0d:c2:62:7f:55:b0:49:73:61:44:71:46:de:e2:b5: 38:10:32:6c:43:f4:88:a2:ca:b8:6e:04:28:c9:ef:04:51:de: d6:07:2d:1a:90:09:08:92:9f:27:e8:dd:e8:c8:38:66:b5:ac: 4f:51:98:19:a5:53:ef:dd:55:74:24:6a:9b:7b:71:54:91:92: 39:0c:1a:37:60:99:88:af:cf:7c:e5:1c:9c:a6:e9:e4:c5:9a: d9:8f:f9:a4:23:c5:5a:4a:7d:37:b8:34:51:82:ff:c2:99:df: c8:f6:e6:80 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4o1LEn3M9MM4fPg03RpNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTU5ODlkNTc5YzRiNWVhZGU4NTJmOTdmNjJlOWJmMmNm YmRlM2MwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWQ1NDJkZDM4MGEzMTMyZjZhYTJjZmVhNzY2ZTk3ZjY5OTVmOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fA+yykzRpedA+94Rq7JP/JKlfKq ep3fTVxwb3rlEDtmV+5NYPSSHhAn6rpiYAUnQFqMde7Cok4sRADfh1hay2euj8gB rKTz0KbRD6ZKbDOBwhGONudr7tNqqcrE+CJPlSnD6B7GSp+1FBX9d5UYLEBV/AwX NDvlGotb8esiq2QdeVWBO8LZvhzKOaQrjXai/ct89pPrOSet8xSEkMraYJUGXy1i dLg4V9KvTpZbuLyjktJcQ087y/97hZDAhSv5qjzR28Oz/CMUtaRnkcL/S4PKggIz 2pXn/MTPsk86W0RY9+FSgi6cdXFuvzJUYNAcbtpy+mBMjrmpZiGH6AmeEwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC7VQt04CjEy9qos/qdm6X9plfjkMB8GA1UdIwQY MBaAFMJVmJ1XnEterehS+X9i6b8s+948MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83MjAzOTQtY2Y3MS00MGEzLWE1Mzgt ZWQwMWVkN2MxMjliLzEvTHRWQzNUZ0tNVEwycWl6LXAyYnBmMm1WLU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83MjAzOTQtY2Y3MS00MGEzLWE1MzgtZWQwMWVkN2MxMjli LzEvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK8X4wD BAC8X44wDQYJKoZIhvcNAQELBQADggEBAL6DSdUtosYMlCDkBDu1Q4QL+1G17KTy RLzowC6ywgjnoROoa6D86Sym+X0oklX0x6Wx0OeLb1CQ6pX7HCj+4PTnbmHn+Zd+ 3bUJCQgVsOW9fl8n65qbskZx7SYDzFP1Yq3Bj6QaRvKj+7vBcO48EdcP6fKIyg2e Kdfien/TkqFfXstbxRYfgn4ZMWiq5kSv1Aco4w3CYn9VsElzYURxRt7itTgQMmxD 9IiiyrhuBCjJ7wRR3tYHLRqQCQiSnyfo3ejIOGa1rE9RmBmlU+/dVXQkapt7cVSR kjkMGjdgmYivz3zlHJym6eTFmtmP+aQjxVpKfTe4NFGC/8KZ38j25oA= -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:38 2026 by rpki-client