This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa File: J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa (raw, json) Hash identifier: PrA2PJs5TSn3H+asdA2g/RA7lWRRSyMMok+HJEOvi0U= Subject key identifier: 27:51:52:CC:0C:98:96:DA:DB:5D:64:69:D6:14:3A:69:EF:09:C3:3E Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019BAC4B4BDF87F99503E91B0E7DA7863DBA Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa Signing time: Sun 11 Jan 2026 09:02:54 +0000 ROA not before: Sun 11 Jan 2026 09:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 185.145.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:4b:4b:df:87:f9:95:03:e9:1b:0e:7d:a7:86:3d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 11 09:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=275152cc0c9896dadb5d6469d6143a69ef09c33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:8d:8c:2e:0f:94:6b:7e:d4:81:89:46:2a: a3:8c:29:fb:4b:dd:4d:33:f1:f6:d1:b3:f9:f5:a1: 80:b0:d2:a7:f1:d0:16:f5:e2:e9:1f:2e:27:84:b3: 30:a4:d1:ae:a9:41:a4:a1:1a:86:31:6a:9d:72:30: 7c:0a:aa:92:38:03:40:2f:2b:65:7d:2c:35:a1:6a: 3c:9f:92:57:1d:6f:17:52:16:a1:5e:0c:ba:f3:be: 09:74:41:cf:f0:35:07:fd:f3:79:2d:52:12:91:e4: da:08:d9:3c:5b:1e:59:8d:a0:87:9c:e0:cd:3a:c4: b3:88:da:66:e7:b8:28:53:76:b1:ae:12:57:9e:b3: 5b:78:00:3b:ef:13:49:d1:60:ac:b4:8e:2a:38:21: 21:5d:2c:08:46:5f:cf:48:fb:3f:8b:ca:52:f6:d1: de:db:d8:12:89:f6:54:a4:6a:2f:7a:aa:60:19:5e: 8a:2e:04:c4:c7:cf:c0:7b:82:26:48:f7:d5:15:71: e7:af:99:b4:52:2b:1c:78:cd:23:22:ca:45:5a:cd: 25:3c:ad:7f:99:9c:11:6a:23:4e:d6:f0:9a:66:b6: a4:58:05:69:e9:31:a9:ef:0e:fe:7a:7f:ee:4d:35: 3f:d0:ca:bd:84:6a:03:99:ae:95:44:4e:3b:66:8a: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:52:CC:0C:98:96:DA:DB:5D:64:69:D6:14:3A:69:EF:09:C3:3E X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.52.0/24 Signature Algorithm: sha256WithRSAEncryption d7:a0:de:dc:d6:d1:98:3c:2d:74:7d:6a:5e:6c:51:0f:68:a9: 53:c9:52:ce:f1:68:30:df:96:87:1d:76:a0:ed:e3:cb:9f:66: b3:2f:fd:06:83:99:ec:da:01:dc:20:ff:6c:49:60:6a:d2:98: 7b:e7:5f:56:9e:63:f5:0f:fc:5c:9a:a7:ef:97:34:1a:b8:ba: 3a:aa:93:ef:91:67:52:ef:5d:d8:08:02:bf:7d:58:bd:49:f1: cf:31:cd:da:24:89:e1:ed:90:76:b4:41:3b:78:e4:95:21:2c: 62:82:ed:95:1e:d7:98:c0:44:29:95:39:68:16:8c:a4:bd:91: 06:63:4d:8d:26:b5:c3:ec:59:0f:ac:09:52:0c:a2:3e:9a:91: ac:f7:1f:c7:81:30:fd:22:fb:7e:69:36:89:a4:c9:19:70:df: d6:d8:88:73:09:8d:12:e1:a7:79:fc:41:b5:bf:af:3f:79:59: e8:34:2a:cd:cb:cc:2a:5d:7a:56:25:da:42:d1:ac:41:ca:be: c8:7e:b2:e9:32:6a:a9:11:70:39:4f:8c:57:c3:56:d1:e4:f8: 03:81:43:8a:0e:eb:16:9c:6f:69:c0:f3:3f:e8:57:2d:c8:c1: c6:c3:6b:7d:cc:9f:4e:e6:57:f3:9b:2b:70:e5:38:42:91:02: a0:0d:a7:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZusS0vfh/mVA+kbDn2nhj26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTExMDkwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzUxNTJjYzBjOTg5NmRhZGI1ZDY0NjlkNjE0M2E2OWVmMDljMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dyNjC4PlGt+1IGJRiqjjCn7S91N M/H20bP59aGAsNKn8dAW9eLpHy4nhLMwpNGuqUGkoRqGMWqdcjB8CqqSOANALytl fSw1oWo8n5JXHW8XUhahXgy6874JdEHP8DUH/fN5LVISkeTaCNk8Wx5ZjaCHnODN OsSziNpm57goU3axrhJXnrNbeAA77xNJ0WCstI4qOCEhXSwIRl/PSPs/i8pS9tHe 29gSifZUpGoveqpgGV6KLgTEx8/Ae4ImSPfVFXHnr5m0UisceM0jIspFWs0lPK1/ mZwRaiNO1vCaZrakWAVp6TGp7w7+en/uTTU/0Mq9hGoDma6VRE47ZookaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdRUswMmJba211kadYUOmnvCcM+MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvSjFGU3pBeVlsdHJiWFdScDFoUTZhZThKd3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZE0MA0G CSqGSIb3DQEBCwUAA4IBAQDXoN7c1tGYPC10fWpebFEPaKlTyVLO8Wgw35aHHXag 7ePLn2azL/0Gg5ns2gHcIP9sSWBq0ph7519WnmP1D/xcmqfvlzQauLo6qpPvkWdS 713YCAK/fVi9SfHPMc3aJInh7ZB2tEE7eOSVISxigu2VHteYwEQplTloFoykvZEG Y02NJrXD7FkPrAlSDKI+mpGs9x/HgTD9Ivt+aTaJpMkZcN/W2IhzCY0S4ad5/EG1 v68/eVnoNCrNy8wqXXpWJdpC0axByr7IfrLpMmqpEXA5T4xXw1bR5PgDgUOKDusW nG9pwPM/6FctyMHGw2t9zJ9O5lfzmytw5ThCkQKgDadM -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:27 2026 by rpki-client