This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ldPw-1oZJqYi2LzaosmyRsZVls4.roa File: ldPw-1oZJqYi2LzaosmyRsZVls4.roa (raw, json) Hash identifier: w02ONEL7MsaWnFXxd4fHnoX4ScQEU6GwDEDW4wQlCAk= Subject key identifier: 95:D3:F0:FB:5A:19:26:A6:22:D8:BC:DA:A2:C9:B2:46:C6:55:96:CE Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9B7EE1A2840A7DD88D900C68B2F7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ldPw-1oZJqYi2LzaosmyRsZVls4.roa Signing time: Fri 02 Jan 2026 08:20:54 +0000 ROA not before: Fri 02 Jan 2026 08:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215026 IP address blocks: 37.202.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9b:7e:e1:a2:84:0a:7d:d8:8d:90:0c:68:b2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d3f0fb5a1926a622d8bcdaa2c9b246c65596ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:8d:6a:ee:af:fe:5b:0c:83:4f:da:e6:63: 9a:15:3b:90:01:df:80:40:f6:49:b5:e3:47:b9:d5: 2c:5c:84:38:3c:ed:36:df:69:51:37:62:fc:dd:da: 6a:9b:85:36:c2:5b:75:73:2c:01:bd:3b:12:59:49: e7:ac:5d:a4:7a:55:82:13:0d:9e:34:53:3a:78:56: e8:3f:95:9a:c7:57:74:9d:c2:13:b5:a8:6a:d2:b7: 4d:e0:0a:0b:af:8f:fd:6f:02:8f:11:a5:90:97:0e: 60:4c:39:dd:89:c1:99:28:83:b9:c4:06:64:26:e8: c6:3a:f8:54:da:4e:cf:64:1b:a4:85:dd:0b:ba:e8: c4:ce:8d:e3:54:15:da:9a:1c:98:b5:2c:a1:ef:52: 3e:43:05:c7:c7:86:58:6e:60:0b:4f:b3:c1:7a:39: 15:bc:7b:89:9b:f7:d5:3a:23:14:f2:33:2f:8d:d8: 3f:1f:fb:78:19:7b:8d:d7:16:60:dd:73:41:56:12: 8c:fc:73:05:4e:f8:01:3a:27:db:54:e3:13:21:fd: 4f:b6:5c:eb:0b:23:4c:99:db:d1:8d:58:4b:c5:4f: c2:7d:51:01:de:55:35:6d:e0:9f:5c:f4:ff:8e:72: e5:2d:8a:65:66:29:8f:ba:8f:21:2d:55:61:01:0f: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:F0:FB:5A:19:26:A6:22:D8:BC:DA:A2:C9:B2:46:C6:55:96:CE X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ldPw-1oZJqYi2LzaosmyRsZVls4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.207.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a6:3a:b4:a0:5a:21:0e:cc:bc:f1:1b:7f:eb:a2:31:c6:df: 46:8f:56:ac:30:4c:0b:7b:9e:e3:2e:c8:47:15:be:60:c2:2d: ce:03:2a:5d:ec:85:46:86:2d:a5:39:b7:4d:7c:00:f4:e9:0f: 0d:0e:20:37:1d:21:e7:84:12:1f:af:5e:14:05:43:6e:23:fc: 4a:69:71:29:0b:37:67:0c:5c:91:61:4f:6e:73:9e:a8:86:0c: 9e:9b:fa:3c:4c:b3:eb:1b:8d:1c:dc:73:fb:68:48:d1:21:a5: 4d:94:f6:aa:5a:dc:20:9c:06:84:b3:5a:1d:00:fa:a1:75:1f: 19:e3:04:c8:d5:bd:5d:50:da:ee:51:70:11:20:a6:35:c3:f2: 3f:4e:8c:5e:69:a8:9a:ac:c2:e1:90:68:2a:b0:ce:73:3e:d0: 7e:bb:b9:5e:7b:70:7c:ec:c9:88:97:c6:ab:ad:7c:96:d8:4a: 9d:f6:93:a3:72:74:21:a7:5f:37:37:eb:ee:ce:51:9f:3c:4c: 9e:4e:2e:d1:29:bf:4d:5d:b9:74:bd:f2:99:46:18:a5:86:da: 20:b3:ae:0f:ad:19:8e:81:13:92:8c:8d:7e:9b:54:b0:52:21: 6f:07:86:9b:41:7f:d2:9d:6c:86:dd:d7:45:b5:f4:f1:f6:81: 3d:4c:0b:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5t+4aKECn3YjZAMaLL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQzZjBmYjVhMTkyNmE2MjJkOGJjZGFhMmM5YjI0NmM2NTU5NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxaNau6v/lsMg0/a5mOaFTuQAd+A QPZJteNHudUsXIQ4PO0232lRN2L83dpqm4U2wlt1cywBvTsSWUnnrF2kelWCEw2e NFM6eFboP5Wax1d0ncITtahq0rdN4AoLr4/9bwKPEaWQlw5gTDndicGZKIO5xAZk JujGOvhU2k7PZBukhd0LuujEzo3jVBXamhyYtSyh71I+QwXHx4ZYbmALT7PBejkV vHuJm/fVOiMU8jMvjdg/H/t4GXuN1xZg3XNBVhKM/HMFTvgBOifbVOMTIf1Ptlzr CyNMmdvRjVhLxU/CfVEB3lU1beCfXPT/jnLlLYplZimPuo8hLVVhAQ9dxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXT8PtaGSamIti82qLJskbGVZbOMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbGRQdy0xb1pKcVlpMkx6YW9zbXlSc1pWbHM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrPMA0G CSqGSIb3DQEBCwUAA4IBAQAFpjq0oFohDsy88Rt/66Ixxt9Gj1asMEwLe57jLshH Fb5gwi3OAypd7IVGhi2lObdNfAD06Q8NDiA3HSHnhBIfr14UBUNuI/xKaXEpCzdn DFyRYU9uc56ohgyem/o8TLPrG40c3HP7aEjRIaVNlPaqWtwgnAaEs1odAPqhdR8Z 4wTI1b1dUNruUXARIKY1w/I/ToxeaaiarMLhkGgqsM5zPtB+u7lee3B87MmIl8ar rXyW2Eqd9pOjcnQhp183N+vuzlGfPEyeTi7RKb9NXbl0vfKZRhilhtogs64PrRmO gROSjI1+m1SwUiFvB4abQX/SnWyG3ddFtfTx9oE9TAvm -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client