This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LOzmb_iS6E21PHW3IWFOSzaHQqM.roa File: LOzmb_iS6E21PHW3IWFOSzaHQqM.roa (raw, json) Hash identifier: TM+fsYEzldQ98lvgcLHlLXDYDUjQ5AO1aqLdz64P7pg= Subject key identifier: 2C:EC:E6:6F:F8:92:E8:4D:B5:3C:75:B7:21:61:4E:4B:36:87:42:A3 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB774961129954B1EC7848A28AA2DD Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LOzmb_iS6E21PHW3IWFOSzaHQqM.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201211 IP address blocks: 95.130.224.0/24 maxlen: 24 185.19.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:77:49:61:12:99:54:b1:ec:78:48:a2:8a:a2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cece66ff892e84db53c75b721614e4b368742a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:0d:de:5f:b8:fe:a6:ae:03:cb:5e:13:2d: 6d:ec:59:54:f3:00:33:bc:c0:fd:73:99:ab:8e:37: 03:53:91:8b:73:f0:5f:6f:47:5b:36:e8:6c:d0:33: 26:33:4d:56:ac:c1:c2:86:5e:d5:45:02:49:e9:6d: 70:ce:af:ee:91:19:8e:10:30:35:9e:b5:ab:c1:a2: 6e:d2:91:be:7b:9b:97:64:f0:ad:2e:2e:91:8f:4e: bf:67:8c:21:db:4b:1d:05:76:8b:0b:b9:9b:ef:11: 1c:fb:07:ec:a8:dd:ac:82:9a:ad:39:50:5e:d8:df: 6c:19:04:00:e4:10:bf:24:59:d0:c2:63:e6:2c:78: b6:29:0a:5e:bd:7f:17:4c:78:b5:a1:fe:71:6c:53: f1:ee:9a:bb:91:a5:2b:ff:ca:d2:47:f2:69:4a:9a: f6:20:5a:9a:52:c4:cc:1e:eb:6d:2b:df:e6:94:32: 50:fd:c7:2f:e9:57:cb:09:14:6e:0c:61:2a:5b:a9: 07:b1:13:05:a8:5b:21:f4:4e:6c:f5:c7:e6:d8:b0: 7a:99:3e:4f:7c:37:b9:bc:d7:dc:d5:83:1f:d2:bb: 36:3d:b0:ee:e4:ef:a3:1a:20:c2:de:b6:83:fb:ab: 46:5c:82:ae:d0:ef:2b:82:25:d9:b7:0a:2c:21:14: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EC:E6:6F:F8:92:E8:4D:B5:3C:75:B7:21:61:4E:4B:36:87:42:A3 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LOzmb_iS6E21PHW3IWFOSzaHQqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.224.0/24 185.19.202.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b8:a6:02:f0:36:f0:ce:52:90:56:95:dd:47:09:8d:41:06: 1e:97:d2:97:3d:c0:5f:d9:cb:49:32:2a:a4:5b:ea:83:a0:a8: cb:92:b3:c4:b2:68:36:8a:5f:7b:a5:31:33:5c:98:b8:9b:c9: d9:ac:69:15:42:6f:8c:35:55:8a:66:80:53:d6:ba:ca:bb:00: d1:47:6c:5d:88:4c:e0:6f:27:f8:76:d9:3e:a4:13:63:0a:67: 8c:da:b3:10:f4:b4:bc:25:b9:a1:e0:38:17:96:da:f5:fb:cd: 49:63:bc:ef:71:a9:20:8c:2e:bb:38:a5:4b:f4:a3:54:fc:03: 03:5d:07:9f:4e:57:fa:83:27:dd:20:bf:81:f2:0e:ce:67:6e: f9:bd:04:3c:d4:1c:5c:8b:59:84:82:04:a4:b7:3c:db:43:6f: 83:78:4f:a3:4b:58:9b:ac:8e:95:25:cf:b1:1b:a6:d7:20:5b: 3a:17:1a:96:d5:5b:69:fc:f8:7b:75:b7:74:34:79:e8:fc:82: 8b:2e:c7:d5:33:32:cf:d4:b9:96:02:24:fc:00:75:70:d9:0c: 60:63:c8:6a:ee:52:cb:79:2c:f1:10:0a:54:ef:dd:bb:c2:bb: 40:0e:52:30:69:60:a1:1d:7a:8d:db:93:7d:3f:bf:02:59:56: 39:81:a4:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y3dJYRKZVLHseEiiiqLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2VjZTY2ZmY4OTJlODRkYjUzYzc1YjcyMTYxNGU0YjM2ODc0MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl0N3l+4/qauA8teEy1t7FlU8wAz vMD9c5mrjjcDU5GLc/Bfb0dbNuhs0DMmM01WrMHChl7VRQJJ6W1wzq/ukRmOEDA1 nrWrwaJu0pG+e5uXZPCtLi6Rj06/Z4wh20sdBXaLC7mb7xEc+wfsqN2sgpqtOVBe 2N9sGQQA5BC/JFnQwmPmLHi2KQpevX8XTHi1of5xbFPx7pq7kaUr/8rSR/JpSpr2 IFqaUsTMHuttK9/mlDJQ/ccv6VfLCRRuDGEqW6kHsRMFqFsh9E5s9cfm2LB6mT5P fDe5vNfc1YMf0rs2PbDu5O+jGiDC3raD+6tGXIKu0O8rgiXZtwosIRTAyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCzs5m/4kuhNtTx1tyFhTks2h0KjMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTE96bWJfaVM2RTIxUEhXM0lXRk9TemFIUXFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4LgAwQA uRPKMA0GCSqGSIb3DQEBCwUAA4IBAQBJuKYC8DbwzlKQVpXdRwmNQQYel9KXPcBf 2ctJMiqkW+qDoKjLkrPEsmg2il97pTEzXJi4m8nZrGkVQm+MNVWKZoBT1rrKuwDR R2xdiEzgbyf4dtk+pBNjCmeM2rMQ9LS8Jbmh4DgXltr1+81JY7zvcakgjC67OKVL 9KNU/AMDXQefTlf6gyfdIL+B8g7OZ275vQQ81Bxci1mEggSktzzbQ2+DeE+jS1ib rI6VJc+xG6bXIFs6FxqW1Vtp/Ph7dbd0NHno/IKLLsfVMzLP1LmWAiT8AHVw2Qxg Y8hq7lLLeSzxEApU7927wrtADlIwaWChHXqN25N9P78CWVY5gaQo -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:54 2026 by rpki-client