This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/25aFLsrtr-3cg85dYuCtUtJ12DI.roa File: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (raw, json) Hash identifier: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY= Subject key identifier: DB:96:85:2E:CA:ED:AF:ED:DC:83:CE:5D:62:E0:AD:52:D2:75:D8:32 Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5 Certificate serial: 019BF9D2EF5D7BF8E6D35B41239D40D1332E Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/25aFLsrtr-3cg85dYuCtUtJ12DI.roa Signing time: Mon 26 Jan 2026 10:21:49 +0000 ROA not before: Mon 26 Jan 2026 10:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.141.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:d2:ef:5d:7b:f8:e6:d3:5b:41:23:9d:40:d1:33:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5 Validity Not Before: Jan 26 10:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db96852ecaedafeddc83ce5d62e0ad52d275d832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:9e:78:13:c1:a1:34:ab:8a:8c:e9:a2:49: d8:85:8c:eb:da:10:98:4b:05:7a:ec:f3:1a:13:74: ed:a1:22:41:99:b7:f6:c5:92:3f:25:77:a7:eb:b2: 73:9a:b8:17:5d:4c:a0:cb:9a:64:4a:81:57:18:06: d0:83:c6:9d:df:8e:d6:e3:cb:a4:74:19:de:21:f2: e1:be:18:88:ca:92:a3:76:6f:34:6d:65:b1:3d:d2: 16:46:12:5d:0f:e6:a3:36:3a:33:fc:39:eb:72:5e: 8a:ee:35:00:cf:40:2b:c2:27:2a:20:c1:0a:7a:d2: 62:f8:26:64:cb:f9:de:2c:84:83:df:ff:ce:60:02: 68:5c:f0:75:69:dc:0c:75:1a:5b:94:50:fd:33:68: a7:48:71:6b:9e:1e:14:fd:57:20:60:de:a8:87:67: 24:fd:d3:80:54:92:8c:d6:06:58:9b:5b:bc:44:f9: 7d:1a:a1:70:e9:cd:3b:3d:bb:50:fd:75:8f:ab:8b: 29:64:ad:bc:80:3d:9b:f4:2c:c2:f7:28:41:be:8d: d1:18:90:05:ef:90:59:cc:59:8c:b7:1f:82:c8:1b: 2a:cf:8b:18:fd:43:6f:af:70:ab:1a:d9:49:e4:8e: 04:03:9b:23:bd:03:38:54:79:eb:cd:f5:94:b3:31: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:96:85:2E:CA:ED:AF:ED:DC:83:CE:5D:62:E0:AD:52:D2:75:D8:32 X509v3 Authority Key Identifier: keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/25aFLsrtr-3cg85dYuCtUtJ12DI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.61.0/24 Signature Algorithm: sha256WithRSAEncryption 87:7b:af:07:a6:b7:f3:0c:c5:d3:b3:a9:05:3b:2d:39:fb:aa: a7:3b:3b:43:94:92:35:b9:cd:61:51:0f:b9:2b:5c:93:38:cb: e0:5e:ec:ad:cd:c9:dd:38:25:97:f6:f1:83:32:99:29:26:7b: 7d:3b:dd:e3:3c:32:7b:83:e7:c3:60:f0:8d:53:2f:06:8a:88: 6f:a7:b0:4c:bf:4a:13:eb:d5:60:49:84:cb:1f:43:74:d3:e7: 28:40:f3:41:d1:8f:85:ff:c1:81:16:35:d2:fa:5c:09:5b:7a: e8:17:0e:e0:11:13:35:d1:b8:40:88:10:a4:3d:99:6b:54:cd: e1:10:17:61:ce:d9:a0:f0:9a:21:4f:20:79:3f:fa:3e:00:83: af:b8:fa:0d:15:52:c1:24:fe:22:3e:14:e2:23:79:7c:4b:e4: 23:7f:31:3d:77:b5:8f:f2:ef:b6:54:c0:32:a7:37:99:e9:de: 2e:d1:b6:c7:5a:d6:3d:51:96:eb:18:fa:a1:c1:c4:bc:29:60: 25:f7:a2:8e:a7:e5:3d:26:36:b9:32:75:f4:e6:39:f0:71:02: 61:59:31:44:ba:9f:6c:b1:70:66:8e:7c:6a:ae:ef:3e:c1:f5: 4e:c3:03:2e:15:fc:fb:4b:2f:69:96:5c:91:99:4c:39:2f:d4: 6a:55:c8:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv50u9de/jm01tBI51A0TMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTc3ZDQ2YWU1MTRiZGQ5MTllMjQ0YzdhZjc0YWRmN2Vk YmE4ZDUwHhcNMjYwMTI2MTAyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjk2ODUyZWNhZWRhZmVkZGM4M2NlNWQ2MmUwYWQ1MmQyNzVkODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IKeeBPBoTSriozpoknYhYzr2hCY SwV67PMaE3TtoSJBmbf2xZI/JXen67JzmrgXXUygy5pkSoFXGAbQg8ad347W48uk dBneIfLhvhiIypKjdm80bWWxPdIWRhJdD+ajNjoz/Dnrcl6K7jUAz0ArwicqIMEK etJi+CZky/neLISD3//OYAJoXPB1adwMdRpblFD9M2inSHFrnh4U/VcgYN6oh2ck /dOAVJKM1gZYm1u8RPl9GqFw6c07PbtQ/XWPq4spZK28gD2b9CzC9yhBvo3RGJAF 75BZzFmMtx+CyBsqz4sY/UNvr3CrGtlJ5I4EA5sjvQM4VHnrzfWUszFV5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNuWhS7K7a/t3IPOXWLgrVLSddgyMB8GA1UdIwQY MBaAFA8XfUauUUvdkZ4kTHr3St9+26jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84OGYxZmMtMjA0ZC00M2JlLWE3YjQt Yjc2ZTgyYzIzMmI3LzEvMjVhRkxzcnRyLTNjZzg1ZFl1Q3RVdEoxMkRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84OGYxZmMtMjA0ZC00M2JlLWE3YjQtYjc2ZTgyYzIzMmI3 LzEvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY09MA0G CSqGSIb3DQEBCwUAA4IBAQCHe68HprfzDMXTs6kFOy05+6qnOztDlJI1uc1hUQ+5 K1yTOMvgXuytzcndOCWX9vGDMpkpJnt9O93jPDJ7g+fDYPCNUy8Giohvp7BMv0oT 69VgSYTLH0N00+coQPNB0Y+F/8GBFjXS+lwJW3roFw7gERM10bhAiBCkPZlrVM3h EBdhztmg8JohTyB5P/o+AIOvuPoNFVLBJP4iPhTiI3l8S+QjfzE9d7WP8u+2VMAy pzeZ6d4u0bbHWtY9UZbrGPqhwcS8KWAl96KOp+U9Jja5MnX05jnwcQJhWTFEup9s sXBmjnxqru8+wfVOwwMuFfz7Sy9pllyRmUw5L9RqVcge -----END CERTIFICATE-----Generated at Mon Jan 26 21:31:33 2026 by rpki-client