This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/aBl8vfjICL0NrDJYqAhh9VNHRVs.roa File: aBl8vfjICL0NrDJYqAhh9VNHRVs.roa (raw, json) Hash identifier: 6x9RC7a+EY6SMoJ4fU/q2X/Lvl2ICfRNMeABTYkKxHM= Subject key identifier: 68:19:7C:BD:F8:C8:08:BD:0D:AC:32:58:A8:08:61:F5:53:47:45:5B Certificate issuer: /CN=2e94ff0301be79d81260ac66ac7362efad968a41 Certificate serial: 019B7CED83D15561572F648E6EF6781C5A40 Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/aBl8vfjICL0NrDJYqAhh9VNHRVs.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42134 IP address blocks: 194.0.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:83:d1:55:61:57:2f:64:8e:6e:f6:78:1c:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41 Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68197cbdf8c808bd0dac3258a80861f55347455b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:fa:63:89:35:f2:7f:86:56:f5:1e:09:0d: b7:ee:8b:a3:62:da:4f:2b:b6:14:6d:bd:38:fe:ca: 91:da:0e:1f:a5:54:4d:fd:08:22:3f:17:ee:14:89: 2f:a8:50:08:df:ff:1b:6c:48:c3:bd:d4:b2:47:67: ab:27:6f:d9:87:6b:a3:b8:df:4e:72:58:4f:57:66: 70:43:1f:e9:9f:d6:5e:2b:63:32:37:03:2c:7d:2f: 03:18:4d:f0:4f:29:27:81:eb:3c:01:21:dc:08:14: 2f:ea:ed:1f:58:3b:1a:93:75:29:8f:cb:95:13:18: 33:ea:0c:2e:a6:b4:ac:56:4d:75:c5:95:b6:d5:a1: 46:4b:72:ad:cf:e7:3f:67:e0:93:bc:0a:30:a9:10: 10:3b:f5:84:c2:1a:ad:c2:a1:24:e0:08:5d:7a:bd: 88:f1:f7:78:cc:84:00:e2:b3:aa:69:42:66:38:9e: 68:4f:66:92:67:5a:ec:78:11:2e:4b:9c:74:64:6e: 75:57:81:09:1d:f0:44:8a:21:7b:16:fe:cb:af:be: 3b:71:34:aa:3c:98:08:9a:15:94:6f:60:d5:db:50: 51:89:73:4e:0a:54:ce:de:5f:27:17:8d:e5:35:3f: 96:73:c4:53:92:44:25:17:bc:c2:3c:d8:04:7b:95: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:19:7C:BD:F8:C8:08:BD:0D:AC:32:58:A8:08:61:F5:53:47:45:5B X509v3 Authority Key Identifier: keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/aBl8vfjICL0NrDJYqAhh9VNHRVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.138.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:31:53:04:85:cb:d9:9d:1c:a9:c0:4a:82:7b:e8:79:80:fd: 1e:0f:de:ca:c0:e9:da:b6:e5:01:a7:5d:6b:0c:38:64:26:c4: 26:1e:ca:1c:ab:5c:85:fc:e9:d9:86:45:38:c0:e7:0e:a9:86: 04:d9:70:e6:bb:b9:a2:22:21:c2:20:b5:90:2f:8c:67:66:8c: 67:7d:83:5b:d2:e0:29:2f:4b:79:6c:eb:5d:ae:b7:25:83:19: 65:d5:8f:1c:d8:a7:f9:2a:cf:9c:a2:10:db:71:6f:32:1d:1b: da:9c:e7:8f:c5:37:54:de:80:51:4b:35:45:1e:a0:b3:6e:e7: f1:a1:65:3d:eb:e6:ab:a6:74:66:d9:3e:f3:e7:0d:83:e8:b8: 06:1a:83:5b:ec:10:c5:1d:ff:ba:8c:34:73:67:85:73:f1:15: db:b3:d8:e8:03:a1:a0:0a:a5:33:1a:85:e3:fa:09:54:dd:b5: 5e:1a:a8:fd:55:7e:d7:7d:b3:1d:87:ae:54:36:4f:85:8f:2e: e4:cd:1e:03:f6:cb:b2:d9:53:31:53:b0:cc:dc:a1:dc:c4:6b: 3c:f3:ad:fe:43:86:74:04:9d:95:d2:8e:03:09:0e:14:a9:52: c2:26:87:5b:08:51:53:2f:21:49:1e:7c:20:67:d3:2b:e9:3e: 7c:66:0a:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YPRVWFXL2SObvZ4HFpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOTRmZjAzMDFiZTc5ZDgxMjYwYWM2NmFjNzM2MmVmYWQ5 NjhhNDEwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODE5N2NiZGY4YzgwOGJkMGRhYzMyNThhODA4NjFmNTUzNDc0NTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8f6Y4k18n+GVvUeCQ237oujYtpP K7YUbb04/sqR2g4fpVRN/QgiPxfuFIkvqFAI3/8bbEjDvdSyR2erJ2/Zh2ujuN9O clhPV2ZwQx/pn9ZeK2MyNwMsfS8DGE3wTyknges8ASHcCBQv6u0fWDsak3Upj8uV Exgz6gwuprSsVk11xZW21aFGS3Ktz+c/Z+CTvAowqRAQO/WEwhqtwqEk4Ahder2I 8fd4zIQA4rOqaUJmOJ5oT2aSZ1rseBEuS5x0ZG51V4EJHfBEiiF7Fv7Lr747cTSq PJgImhWUb2DV21BRiXNOClTO3l8nF43lNT+Wc8RTkkQlF7zCPNgEe5XBKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgZfL34yAi9DawyWKgIYfVTR0VbMB8GA1UdIwQY MBaAFC6U/wMBvnnYEmCsZqxzYu+tlopBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGIt NjhlN2ZiMTdhNDRiLzEvYUJsOHZmaklDTDBOckRKWXFBaGg5Vk5IUlZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGItNjhlN2ZiMTdhNDRi LzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCKMA0G CSqGSIb3DQEBCwUAA4IBAQAaMVMEhcvZnRypwEqCe+h5gP0eD97KwOnatuUBp11r DDhkJsQmHsocq1yF/OnZhkU4wOcOqYYE2XDmu7miIiHCILWQL4xnZoxnfYNb0uAp L0t5bOtdrrclgxll1Y8c2Kf5Ks+cohDbcW8yHRvanOePxTdU3oBRSzVFHqCzbufx oWU96+arpnRm2T7z5w2D6LgGGoNb7BDFHf+6jDRzZ4Vz8RXbs9joA6GgCqUzGoXj +glU3bVeGqj9VX7XfbMdh65UNk+Fjy7kzR4D9suy2VMxU7DM3KHcxGs8863+Q4Z0 BJ2V0o4DCQ4UqVLCJodbCFFTLyFJHnwgZ9Mr6T58Zgqf -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:13 2026 by rpki-client