This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/LRtgsdrMZCWO8Ukau3X5r3di8uY.roa File: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (raw, json) Hash identifier: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA= Subject key identifier: 2D:1B:60:B1:DA:CC:64:25:8E:F1:49:1A:BB:75:F9:AF:77:62:F2:E6 Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Certificate serial: 019B7EA74E30C69C9D35A75375ACBE57FC40 Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/LRtgsdrMZCWO8Ukau3X5r3di8uY.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 165.220.128.0/17 maxlen: 24 185.136.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4e:30:c6:9c:9d:35:a7:53:75:ac:be:57:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d1b60b1dacc64258ef1491abb75f9af7762f2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:57:ba:f2:e3:d9:65:c6:1c:d1:f4:72:14: 05:46:35:a0:62:c7:2f:4e:8b:a6:72:6c:41:cf:0d: e5:16:7d:51:3e:c9:09:04:08:15:89:4e:eb:6d:a7: 5d:ad:61:cc:1d:f7:fd:78:67:3b:43:b2:c7:21:f1: ae:13:58:b3:c7:10:23:82:19:1f:79:bb:55:b5:46: 21:74:b5:57:7b:96:6f:90:b8:ad:1f:d6:f7:d5:a7: 6d:19:28:38:74:48:51:e7:2a:3a:f1:ea:35:d0:12: 67:2f:c9:bf:60:a6:4f:d6:1f:c7:d3:b7:42:ab:6c: 1f:52:64:4b:29:70:3b:4d:bf:26:35:35:fa:21:9c: 6b:76:ad:77:99:0f:4b:0a:36:13:83:e7:8d:84:fd: 51:23:b7:47:88:95:2b:83:87:a9:d6:31:bb:8a:40: 98:62:4e:94:c5:17:d3:fc:07:00:e8:23:75:db:ac: 24:2b:52:7b:73:28:c5:2f:d7:d9:d8:6b:4e:dc:64: f2:28:e5:8c:87:3c:67:4d:b8:41:5a:a1:27:a1:c7: 01:b8:55:02:2b:ed:9e:ed:6f:46:05:5c:e2:e2:aa: 66:c1:f5:a0:de:f7:45:8e:86:6b:aa:84:49:db:ef: d3:2a:73:a2:92:09:a5:a7:4c:c7:f0:57:24:a5:83: 06:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:60:B1:DA:CC:64:25:8E:F1:49:1A:BB:75:F9:AF:77:62:F2:E6 X509v3 Authority Key Identifier: keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/LRtgsdrMZCWO8Ukau3X5r3di8uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.220.128.0/17 185.136.44.0/22 Signature Algorithm: sha256WithRSAEncryption 91:d1:8a:5a:20:ee:49:70:c8:64:07:de:80:31:47:c2:af:a5: 77:6d:a3:d9:d1:56:ab:19:ee:9b:2e:44:56:89:18:4e:d0:bc: 24:91:7f:24:37:55:fb:8e:16:86:5b:fb:29:bd:71:e0:46:d4: 7d:66:74:06:7f:da:9d:9d:e2:1a:87:65:bf:57:da:9f:76:f5: d0:5d:6f:32:5e:f4:dc:d8:04:8f:66:97:92:4a:32:44:0b:58: 18:68:8c:83:f6:74:8d:8e:88:07:c3:8f:58:90:f5:03:c1:6d: ed:ba:fe:09:53:f4:8d:fa:48:8b:b1:33:ad:d8:b1:39:fa:6c: 9f:f4:d7:20:c0:53:9d:0d:4b:b9:43:d7:91:9d:2e:88:b3:eb: 14:a2:3e:93:64:ca:f7:fc:89:87:97:da:5a:ec:fe:20:1b:ca: b2:6c:33:3e:64:90:e5:7a:64:38:ca:f9:15:eb:df:2e:f2:4e: 03:3a:c8:de:f9:27:e4:5f:2b:a6:e2:6e:d3:84:ea:37:08:b8: 22:b4:54:39:c5:d4:1f:e4:fd:d6:3f:b3:48:a9:e6:bc:57:4a: e9:0c:8c:2a:c2:85:72:0b:5a:54:09:36:a3:ee:91:0d:a5:34: 57:46:71:0a:f3:55:42:1f:8d:4e:6b:45:25:8c:d7:70:e0:0a: c9:8c:82:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p04wxpydNadTday+V/xAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0 NTNmNzEwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDFiNjBiMWRhY2M2NDI1OGVmMTQ5MWFiYjc1ZjlhZjc3NjJmMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBFXuvLj2WXGHNH0chQFRjWgYscv ToumcmxBzw3lFn1RPskJBAgViU7rbaddrWHMHff9eGc7Q7LHIfGuE1izxxAjghkf ebtVtUYhdLVXe5ZvkLitH9b31adtGSg4dEhR5yo68eo10BJnL8m/YKZP1h/H07dC q2wfUmRLKXA7Tb8mNTX6IZxrdq13mQ9LCjYTg+eNhP1RI7dHiJUrg4ep1jG7ikCY Yk6UxRfT/AcA6CN126wkK1J7cyjFL9fZ2GtO3GTyKOWMhzxnTbhBWqEnoccBuFUC K+2e7W9GBVzi4qpmwfWg3vdFjoZrqoRJ2+/TKnOikgmlp0zH8FckpYMGCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC0bYLHazGQljvFJGrt1+a93YvLmMB8GA1UdIwQY MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct NmM2NjU4YmQ5NTJlLzEvTFJ0Z3Nkck1aQ1dPOFVrYXUzWDVyM2RpOHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHpdyAAwQC uYgsMA0GCSqGSIb3DQEBCwUAA4IBAQCR0YpaIO5JcMhkB96AMUfCr6V3baPZ0Var Ge6bLkRWiRhO0LwkkX8kN1X7jhaGW/spvXHgRtR9ZnQGf9qdneIah2W/V9qfdvXQ XW8yXvTc2ASPZpeSSjJEC1gYaIyD9nSNjogHw49YkPUDwW3tuv4JU/SN+kiLsTOt 2LE5+myf9NcgwFOdDUu5Q9eRnS6Is+sUoj6TZMr3/ImHl9pa7P4gG8qybDM+ZJDl emQ4yvkV698u8k4DOsje+SfkXyum4m7ThOo3CLgitFQ5xdQf5P3WP7NIqea8V0rp DIwqwoVyC1pUCTaj7pENpTRXRnEK81VCH41Oa0UljNdw4ArJjILM -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:30 2026 by rpki-client