This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/LWo5SwQvtARyJWncO-TRzt7E95c.roa File: LWo5SwQvtARyJWncO-TRzt7E95c.roa (raw, json) Hash identifier: 9wNniYqROde6rynnX9MuzaL+IyWSUXFFKAJlRzpQMXA= Subject key identifier: 2D:6A:39:4B:04:2F:B4:04:72:25:69:DC:3B:E4:D1:CE:DE:C4:F7:97 Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed Certificate serial: 019B7F153B6D91DF35445DBCBF874B575CC8 Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/LWo5SwQvtARyJWncO-TRzt7E95c.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42318 IP address blocks: 2.57.244.0/22 maxlen: 22 83.223.0.0/19 maxlen: 19 2a05:5580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3b:6d:91:df:35:44:5d:bc:bf:87:4b:57:5c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d6a394b042fb404722569dc3be4d1cedec4f797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:46:df:4d:53:72:ff:89:45:65:b5:28:7e: 30:a3:14:f0:8f:25:81:9f:51:56:73:68:82:fc:12: a5:b0:c7:c8:36:65:c0:fe:9e:82:02:f7:d6:0e:06: e7:84:65:3a:e4:91:7f:14:a4:2d:9a:c7:9a:31:a2: 15:04:98:ce:af:1b:1f:c1:0f:a2:4b:12:05:26:7d: 0a:09:82:47:60:1a:7c:57:f2:ba:67:e6:7e:18:94: 8d:6f:a7:c4:b9:e5:05:1f:1a:54:2e:fe:59:3d:70: b9:a2:5b:c9:2b:1c:05:cb:0d:27:82:2a:98:07:b3: 38:4c:63:26:fb:be:77:f9:4f:9d:c5:3a:af:11:df: f1:cd:e8:c6:d0:57:d0:52:dd:f2:02:f7:9f:bc:1b: bf:45:0c:95:55:7e:ba:16:44:06:fc:14:ef:94:41: e0:df:c3:0c:70:7d:e5:fa:d3:92:d9:a3:90:d4:13: 24:bf:76:7e:3e:89:79:a6:55:45:b9:aa:87:be:80: fa:b5:a1:77:1d:0b:cd:96:4e:47:e4:e5:de:b7:2a: c9:99:c3:34:e1:2e:02:bc:81:c7:80:df:4f:c0:fa: 35:16:cd:5c:d2:16:4e:4d:d4:3f:60:4a:2d:f3:6d: 65:37:b3:d8:45:69:f7:29:b0:c7:e4:d5:f0:48:83: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:39:4B:04:2F:B4:04:72:25:69:DC:3B:E4:D1:CE:DE:C4:F7:97 X509v3 Authority Key Identifier: keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/LWo5SwQvtARyJWncO-TRzt7E95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.244.0/22 83.223.0.0/19 IPv6: 2a05:5580::/29 Signature Algorithm: sha256WithRSAEncryption 71:c1:29:ea:0f:eb:a8:f0:5e:61:20:b9:2e:56:ce:47:67:ef: fa:41:b4:97:e9:4f:40:77:ac:92:eb:ce:f3:7b:71:8a:41:25: 3b:72:29:03:7b:ba:49:3d:62:65:3e:3d:4e:4d:a6:21:74:44: 66:a4:1c:b7:6d:23:ca:59:b3:c8:c6:44:d9:01:90:c4:38:2a: 56:e6:d9:a1:29:01:18:61:fa:4a:fd:0d:71:9e:25:2e:dc:67: 4e:0e:9e:89:50:c4:d6:87:9a:06:fe:9a:e2:f8:f7:2b:e5:74: 42:ca:39:f6:e6:a3:3d:6e:96:57:48:4e:55:68:67:89:24:7c: af:67:1e:de:09:df:22:24:a2:45:cf:ba:c3:2e:e4:61:6c:ad: e7:c5:46:ab:71:d3:1e:f0:a2:45:e1:80:65:a9:31:f5:53:0d: 82:df:73:49:95:94:94:37:2e:8a:46:2c:ac:f8:40:2d:d0:ac: af:9b:c9:05:29:a7:b1:4f:21:43:36:e1:9b:49:4f:ef:35:d2: 35:b4:a9:63:ab:9d:4f:b5:fc:e2:bf:06:82:1b:06:df:df:b8: f4:dc:c5:f6:cf:4c:1f:7c:c5:de:f8:cc:8b:8b:72:93:3f:48: 8c:6e:06:dc:42:50:fe:68:ec:ae:e5:e6:19:04:ab:c8:70:6c: c1:8e:5e:63 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FTttkd81RF28v4dLV1zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZDUxZmQ5MTc5NGFlMGNhMDdmMzkzMDczMGQwNjlhYWMx YjkyZWQwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDZhMzk0YjA0MmZiNDA0NzIyNTY5ZGMzYmU0ZDFjZWRlYzRmNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDdG301Tcv+JRWW1KH4woxTwjyWB n1FWc2iC/BKlsMfINmXA/p6CAvfWDgbnhGU65JF/FKQtmseaMaIVBJjOrxsfwQ+i SxIFJn0KCYJHYBp8V/K6Z+Z+GJSNb6fEueUFHxpULv5ZPXC5olvJKxwFyw0ngiqY B7M4TGMm+753+U+dxTqvEd/xzejG0FfQUt3yAvefvBu/RQyVVX66FkQG/BTvlEHg 38MMcH3l+tOS2aOQ1BMkv3Z+Pol5plVFuaqHvoD6taF3HQvNlk5H5OXetyrJmcM0 4S4CvIHHgN9PwPo1Fs1c0hZOTdQ/YEot821lN7PYRWn3KbDH5NXwSINEHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC1qOUsEL7QEciVp3Dvk0c7exPeXMB8GA1UdIwQY MBaAFHXVH9kXlK4MoH85MHMNBpqsG5LtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85MTEwMWMtMzQzNy00ZjNjLWIxMjAt NzUyYzkzMzYzOWU1LzEvTFdvNVN3UXZ0QVJ5SlduY08tVFJ6dDdFOTVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85MTEwMWMtMzQzNy00ZjNjLWIxMjAtNzUyYzkzMzYzOWU1 LzEvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjn0AwQF U98AMA0EAgACMAcDBQMqBVWAMA0GCSqGSIb3DQEBCwUAA4IBAQBxwSnqD+uo8F5h ILkuVs5HZ+/6QbSX6U9Ad6yS687ze3GKQSU7cikDe7pJPWJlPj1OTaYhdERmpBy3 bSPKWbPIxkTZAZDEOCpW5tmhKQEYYfpK/Q1xniUu3GdODp6JUMTWh5oG/pri+Pcr 5XRCyjn25qM9bpZXSE5VaGeJJHyvZx7eCd8iJKJFz7rDLuRhbK3nxUarcdMe8KJF 4YBlqTH1Uw2C33NJlZSUNy6KRiys+EAt0Kyvm8kFKaexTyFDNuGbSU/vNdI1tKlj q51PtfzivwaCGwbf37j03MX2z0wffMXe+MyLi3KTP0iMbgbcQlD+aOyu5eYZBKvI cGzBjl5j -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:52 2026 by rpki-client