This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-LXE1skU-YYI6OipB-6HGMZyJzQ.roa File: 1-LXE1skU-YYI6OipB-6HGMZyJzQ.roa (raw, json) Hash identifier: 5lOVQZCay1Pb+eF7uf8Trrg9WsQYNz5j6Y76BGdkaoE= Subject key identifier: F8:B5:C4:D6:C9:14:F9:86:08:E8:E8:A9:07:EE:87:18:C6:72:27:34 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ADF61560D1B067D6FB1C179280580 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-LXE1skU-YYI6OipB-6HGMZyJzQ.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215238 IP address blocks: 212.38.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:df:61:56:0d:1b:06:7d:6f:b1:c1:79:28:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b5c4d6c914f98608e8e8a907ee8718c6722734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:69:4b:61:82:ba:76:c3:d1:93:d4:f8:8c: 60:25:87:1d:d0:dd:c9:f3:a3:cc:2c:25:38:1f:af: ec:8c:b2:8e:39:4e:1f:1c:2d:a4:7c:e7:9b:f5:dd: 37:fb:15:0a:3b:e2:ad:d4:43:b1:f0:a4:67:f5:dc: 8f:30:0a:6d:d9:25:f9:a5:9b:c2:57:74:88:b9:40: a5:ec:04:07:01:4f:c8:42:a9:62:90:19:fd:23:c5: 2f:70:86:65:69:1f:41:8b:14:29:56:b5:b2:45:1b: cd:c1:c7:2e:9e:cb:1e:58:4e:ea:d2:51:c8:5d:d5: 3b:04:18:fe:56:72:88:98:00:99:4d:9b:8f:c6:8b: 18:7b:27:72:d1:1b:68:73:a6:21:8c:fa:7f:5c:4c: 74:9e:1c:e6:16:c5:7b:a5:54:1f:4d:73:2d:8c:c7: ad:ef:68:b6:5b:17:47:12:d8:2c:77:27:22:d3:89: e9:c3:e8:2b:17:8c:b0:16:1b:6c:6b:69:49:7a:d4: 3e:e1:2b:50:f7:be:a5:bf:15:72:0f:19:37:eb:4a: 9a:0c:2f:16:24:e2:ff:2d:91:62:68:26:ba:34:db: c2:08:ec:57:a2:80:7b:30:bd:24:fb:59:15:15:cb: 8d:56:01:d5:82:fc:00:a2:e8:26:99:8b:8d:23:ad: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:C4:D6:C9:14:F9:86:08:E8:E8:A9:07:EE:87:18:C6:72:27:34 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-LXE1skU-YYI6OipB-6HGMZyJzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.38.88.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b3:10:5d:15:3b:bf:38:b4:a2:54:0e:08:a1:26:b0:4b:94: 8d:a1:ac:58:a4:48:e3:25:28:8d:80:a9:63:61:ac:7c:b6:1f: b6:ec:e2:62:10:a6:79:72:8c:f6:ad:15:b3:e1:3b:74:f1:7d: 62:0e:36:26:64:65:52:53:24:ea:50:41:b5:1b:92:d1:3b:4f: 89:44:94:dc:c5:c9:c0:73:f4:72:d1:cb:87:4c:84:ef:ed:1e: 22:a1:17:55:43:f8:b2:0f:43:47:1c:3c:56:93:bd:47:7b:f4: f3:5c:fc:2c:67:91:b9:20:e9:b0:a4:cc:a5:9d:7a:b7:fc:97: 7d:7e:92:99:7a:0b:2d:61:1c:02:46:b3:16:cf:88:81:68:dd: af:e7:98:2b:05:08:c5:f2:0e:bb:4a:64:6e:c1:8e:45:a4:5a: 1d:15:89:d8:9a:6c:3a:a3:4b:fd:89:81:62:cd:6d:a3:32:b2: 2f:ff:01:b1:f9:7e:1e:38:d5:ea:37:54:ef:58:6d:df:27:a5: f0:f7:91:56:d0:c5:22:f3:8b:dc:c0:58:3c:6b:f7:73:93:46: 64:de:da:ba:a7:4b:d2:aa:b1:75:f2:3e:e9:92:4d:00:1c:b2: 3a:4c:4f:83:07:61:fa:0d:2f:f6:00:db:b8:1f:ec:46:c9:8a: a9:fe:a8:ff -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wt9hVg0bBn1vscF5KAWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI1YzRkNmM5MTRmOTg2MDhlOGU4YTkwN2VlODcxOGM2NzIyNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3xpS2GCunbD0ZPU+IxgJYcd0N3J 86PMLCU4H6/sjLKOOU4fHC2kfOeb9d03+xUKO+Kt1EOx8KRn9dyPMApt2SX5pZvC V3SIuUCl7AQHAU/IQqlikBn9I8UvcIZlaR9BixQpVrWyRRvNwccunsseWE7q0lHI XdU7BBj+VnKImACZTZuPxosYeydy0Rtoc6YhjPp/XEx0nhzmFsV7pVQfTXMtjMet 72i2WxdHEtgsdyci04npw+grF4ywFhtsa2lJetQ+4StQ976lvxVyDxk360qaDC8W JOL/LZFiaCa6NNvCCOxXooB7ML0k+1kVFcuNVgHVgvwAougmmYuNI62WmwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPi1xNbJFPmGCOjoqQfuhxjGcic0MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMS1MWEUxc2tVLVlZSTZPaXBCLTZIR01aeUp6US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3 Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQmWDAN BgkqhkiG9w0BAQsFAAOCAQEAfLMQXRU7vzi0olQOCKEmsEuUjaGsWKRI4yUojYCp Y2GsfLYftuziYhCmeXKM9q0Vs+E7dPF9Yg42JmRlUlMk6lBBtRuS0TtPiUSU3MXJ wHP0ctHLh0yE7+0eIqEXVUP4sg9DRxw8VpO9R3v081z8LGeRuSDpsKTMpZ16t/yX fX6SmXoLLWEcAkazFs+IgWjdr+eYKwUIxfIOu0pkbsGORaRaHRWJ2JpsOqNL/YmB Ys1tozKyL/8Bsfl+HjjV6jdU71ht3yel8PeRVtDFIvOL3MBYPGv3c5NGZN7auqdL 0qqxdfI+6ZJNAByyOkxPgwdh+g0v9gDbuB/sRsmKqf6o/w== -----END CERTIFICATE-----Generated at Wed Jan 21 17:18:38 2026 by rpki-client