This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/L0jSxadFSRxDbeEIJkMjsXuRrsw.roa
File: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (raw, json)
Hash identifier: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=
Subject key identifier: 2F:48:D2:C5:A7:45:49:1C:43:6D:E1:08:26:43:23:B1:7B:91:AE:CC
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 019B7D5AC5792FD7C916CEDDE64237446929
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/L0jSxadFSRxDbeEIJkMjsXuRrsw.roa
Signing time: Fri 02 Jan 2026 06:17:39 +0000
ROA not before: Fri 02 Jan 2026 06:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 194.11.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:c5:79:2f:d7:c9:16:ce:dd:e6:42:37:44:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Jan 2 06:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f48d2c5a745491c436de108264323b17b91aecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:d4:41:f2:41:2a:21:d0:81:dd:14:b6:33:
59:0e:0b:79:f3:06:4a:52:61:9c:bd:60:cd:a2:7c:
63:e5:1e:50:52:c5:5c:f9:e8:4e:81:f8:1b:d0:d1:
ef:d2:47:6d:20:ac:6d:04:bb:1d:a6:f1:56:cf:90:
ad:f9:9e:32:a9:bd:62:14:14:c4:c7:88:d9:d8:2e:
b1:8a:99:fd:5a:c7:03:bf:c6:7d:31:db:1f:82:bf:
79:59:03:a6:76:69:95:e9:a3:eb:2e:90:22:11:5e:
7c:65:73:bb:cb:5b:25:6c:18:23:2f:a7:51:4a:ee:
17:41:d1:8f:af:4c:ec:c1:e6:94:e9:4b:10:9d:2c:
d5:50:10:9e:13:8a:68:aa:79:f3:5b:ad:5f:7d:e6:
d8:07:79:45:79:e5:fb:35:b8:56:4c:bc:ae:6b:a8:
28:02:bb:0d:bd:e6:8f:61:e0:a6:0f:01:50:fc:e8:
7b:07:21:97:ee:bd:a2:8e:e0:e3:bb:19:32:b7:2d:
95:8d:d7:09:a3:cf:18:b9:90:ae:3b:63:70:da:0a:
e8:eb:bd:26:dd:7d:81:8e:ae:ba:39:3c:e4:89:31:
83:da:ac:4e:63:18:67:a7:45:37:58:b0:29:e2:ef:
47:4b:70:e0:1c:6b:88:01:dd:20:a6:1a:c1:d7:9a:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:48:D2:C5:A7:45:49:1C:43:6D:E1:08:26:43:23:B1:7B:91:AE:CC
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/L0jSxadFSRxDbeEIJkMjsXuRrsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4e:a2:82:98:f1:6b:db:84:4c:27:7d:b2:ae:75:7e:45:a7:
e0:42:f9:fb:fb:54:a7:7e:e7:9f:62:8e:42:4b:b5:cc:08:4f:
70:0d:42:be:fc:b8:e3:45:d4:53:f6:73:7c:0b:52:77:58:d6:
2d:61:3e:62:ea:9c:f9:38:2b:7c:bb:97:03:aa:83:bc:67:2c:
6f:67:55:97:45:fe:82:84:18:90:c8:89:82:3e:4f:e5:4d:29:
4e:50:a7:8f:c4:23:b2:9c:b7:38:57:c3:bc:bc:a0:ae:b4:f9:
48:f7:4a:4b:59:f8:18:3a:4c:4f:c5:fb:fd:4d:98:e8:16:af:
6c:1c:33:fe:5f:6a:7f:8a:07:0d:bd:6e:b0:ba:6f:79:8e:d7:
e1:ef:7d:f0:29:5e:f3:41:58:84:43:15:1b:a5:10:27:c9:c0:
1c:2e:0a:bb:45:a8:00:63:12:3e:ab:3d:25:ec:bb:48:1b:a4:
8d:20:bc:29:47:1f:20:90:f7:d3:b3:27:d9:82:50:bd:b6:86:
b3:24:4b:ac:ba:39:51:74:4b:35:7e:f5:06:02:b8:97:6f:de:
c0:31:d3:2e:ca:5a:a2:b7:c3:a4:e2:df:bf:f3:cc:21:b5:cf:
aa:ef:4b:56:8f:80:05:41:cc:4c:1b:a9:fb:df:06:d8:af:0f:
11:ad:fa:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9WsV5L9fJFs7d5kI3RGkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjI3NjEzNjI1NDgzMGJiNDkwN2U5OGMyNThlNDkzYjQy
YWFhM2EwHhcNMjYwMTAyMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjQ4ZDJjNWE3NDU0OTFjNDM2ZGUxMDgyNjQzMjNiMTdiOTFhZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo07UQfJBKiHQgd0UtjNZDgt58wZK
UmGcvWDNonxj5R5QUsVc+ehOgfgb0NHv0kdtIKxtBLsdpvFWz5Ct+Z4yqb1iFBTE
x4jZ2C6xipn9WscDv8Z9Mdsfgr95WQOmdmmV6aPrLpAiEV58ZXO7y1slbBgjL6dR
Su4XQdGPr0zsweaU6UsQnSzVUBCeE4poqnnzW61ffebYB3lFeeX7NbhWTLyua6go
ArsNveaPYeCmDwFQ/Oh7ByGX7r2ijuDjuxkyty2VjdcJo88YuZCuO2Nw2gro670m
3X2Bjq66OTzkiTGD2qxOYxhnp0U3WLAp4u9HS3DgHGuIAd0gphrB15oH5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9I0sWnRUkcQ23hCCZDI7F7ka7MMB8GA1UdIwQY
MBaAFC5idhNiVIMLtJB+mMJY5JO0Kqo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMt
OTNiOTE0NzAxNDcwLzEvTDBqU3hhZEZTUnhEYmVFSUprTWpzWHVScnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMtOTNiOTE0NzAxNDcw
LzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgugMA0G
CSqGSIb3DQEBCwUAA4IBAQC0TqKCmPFr24RMJ32yrnV+RafgQvn7+1SnfuefYo5C
S7XMCE9wDUK+/LjjRdRT9nN8C1J3WNYtYT5i6pz5OCt8u5cDqoO8ZyxvZ1WXRf6C
hBiQyImCPk/lTSlOUKePxCOynLc4V8O8vKCutPlI90pLWfgYOkxPxfv9TZjoFq9s
HDP+X2p/igcNvW6wum95jtfh733wKV7zQViEQxUbpRAnycAcLgq7RagAYxI+qz0l
7LtIG6SNILwpRx8gkPfTsyfZglC9toazJEusujlRdEs1fvUGAriXb97AMdMuylqi
t8Ok4t+/88whtc+q70tWj4AFQcxMG6n73wbYrw8RrfrV
-----END CERTIFICATE-----
Generated at Mon Jan 26 19:20:02 2026 by rpki-client