This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/LsIWFE1WY-UxqASGrSUMgyZDVDs.roa File: LsIWFE1WY-UxqASGrSUMgyZDVDs.roa (raw, json) Hash identifier: mzXmMn4yziiO7Y3E85RHU8JdfGWptISXy009jQ3jLGE= Subject key identifier: 2E:C2:16:14:4D:56:63:E5:31:A8:04:86:AD:25:0C:83:26:43:54:3B Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846D88BD4AB45C6BD1AB0E7FF4FACB Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/LsIWFE1WY-UxqASGrSUMgyZDVDs.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200967 IP address blocks: 213.14.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6d:88:bd:4a:b4:5c:6b:d1:ab:0e:7f:f4:fa:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ec216144d5663e531a80486ad250c832643543b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:7f:6f:49:36:fa:6e:70:2e:f4:6e:22:0d: 95:08:97:cb:2d:25:7f:55:27:05:fa:1f:b7:68:23: 50:52:d0:76:7d:bd:79:e2:3e:db:bc:7f:6e:70:b4: 47:d9:6a:6e:c3:83:ab:57:ac:d9:91:ca:52:00:bb: b0:db:cd:1e:5d:c2:88:f2:82:d6:87:ae:09:d4:bc: 7e:ae:1d:b2:70:09:41:a4:c2:b0:f8:37:c6:09:75: 96:0a:3d:ab:3f:02:f3:3d:77:74:f4:f8:85:5d:91: d2:77:01:33:2d:78:1f:63:c7:ef:4a:3b:ad:30:ca: 18:51:dc:fc:c4:b2:6a:07:c3:5e:98:00:7b:49:18: 1e:13:9c:24:0d:74:e0:a4:7c:cd:79:47:c3:70:2e: e9:dc:a6:51:c7:b4:02:90:8b:30:d8:aa:2c:50:9b: 28:8e:57:3c:37:07:ec:9e:91:92:38:32:11:52:46: 95:95:5d:49:0d:ad:88:c6:47:3c:08:b1:0a:29:7b: bb:8a:2b:e0:d4:25:02:d5:03:cb:94:3b:b3:e0:2c: 4c:ab:4a:b6:99:1e:78:88:d5:60:ec:34:e4:94:a3: 2d:3a:67:51:0c:88:73:4a:dd:7a:46:4b:7d:3c:6c: 58:9b:44:f5:f3:22:16:f8:78:73:fb:fa:39:a6:7b: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C2:16:14:4D:56:63:E5:31:A8:04:86:AD:25:0C:83:26:43:54:3B X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/LsIWFE1WY-UxqASGrSUMgyZDVDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.14.227.0/24 Signature Algorithm: sha256WithRSAEncryption 74:e9:f9:8d:97:da:40:bc:8b:00:86:40:eb:ef:2a:14:3e:08: d4:48:d2:6c:6b:e4:b7:36:44:5f:91:a5:98:77:da:5b:ea:e9: b1:94:f6:f6:91:d4:00:cb:7d:79:73:4a:23:9d:6a:a0:7e:f9: 58:07:83:42:58:82:af:4e:ce:34:04:bd:c4:a1:d7:ba:12:a1: 16:24:5c:98:0b:30:65:f3:9a:de:bd:3b:55:66:e8:f8:04:63: 4b:60:da:ef:ae:e1:63:3b:9a:7f:af:89:de:fe:f6:54:79:93: bc:bd:13:2d:9d:d9:0e:e4:fb:d7:a6:86:06:ce:3c:52:96:1d: 70:39:0a:32:85:c0:a7:17:67:e5:f0:6c:83:de:d4:b4:5a:d1: 74:ba:5f:1a:e0:d2:6c:21:50:d3:55:ae:88:a9:54:c6:10:24: 1d:9b:7b:21:4f:a6:7f:e1:cd:48:74:74:60:1a:27:ef:74:f9: 9d:74:70:8a:e3:44:50:d7:9b:35:e3:f0:f4:98:bf:0f:35:17: a1:42:c9:21:b6:a6:24:d9:f1:ef:4b:92:98:4d:8c:7e:8b:e0: d3:33:06:40:c7:c8:0a:ed:d2:7f:df:ca:14:98:e6:8f:a9:82: 93:3c:2b:a4:21:c4:93:13:45:c5:42:24:00:72:fb:bb:7d:68: bf:da:ff:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hG2IvUq0XGvRqw5/9PrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWMyMTYxNDRkNTY2M2U1MzFhODA0ODZhZDI1MGM4MzI2NDM1NDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiR/b0k2+m5wLvRuIg2VCJfLLSV/ VScF+h+3aCNQUtB2fb154j7bvH9ucLRH2Wpuw4OrV6zZkcpSALuw280eXcKI8oLW h64J1Lx+rh2ycAlBpMKw+DfGCXWWCj2rPwLzPXd09PiFXZHSdwEzLXgfY8fvSjut MMoYUdz8xLJqB8NemAB7SRgeE5wkDXTgpHzNeUfDcC7p3KZRx7QCkIsw2KosUJso jlc8NwfsnpGSODIRUkaVlV1JDa2Ixkc8CLEKKXu7iivg1CUC1QPLlDuz4CxMq0q2 mR54iNVg7DTklKMtOmdRDIhzSt16Rkt9PGxYm0T18yIW+Hhz+/o5pnvwBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7CFhRNVmPlMagEhq0lDIMmQ1Q7MB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvTHNJV0ZFMVdZLVV4cUFTR3JTVU1neVpEVkRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7jMA0G CSqGSIb3DQEBCwUAA4IBAQB06fmNl9pAvIsAhkDr7yoUPgjUSNJsa+S3NkRfkaWY d9pb6umxlPb2kdQAy315c0ojnWqgfvlYB4NCWIKvTs40BL3Eode6EqEWJFyYCzBl 85revTtVZuj4BGNLYNrvruFjO5p/r4ne/vZUeZO8vRMtndkO5PvXpoYGzjxSlh1w OQoyhcCnF2fl8GyD3tS0WtF0ul8a4NJsIVDTVa6IqVTGECQdm3shT6Z/4c1IdHRg GifvdPmddHCK40RQ15s14/D0mL8PNRehQskhtqYk2fHvS5KYTYx+i+DTMwZAx8gK 7dJ/38oUmOaPqYKTPCukIcSTE0XFQiQAcvu7fWi/2v/B -----END CERTIFICATE-----Generated at Mon Jan 26 11:34:31 2026 by rpki-client