This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa File: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (raw, json) Hash identifier: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo= Subject key identifier: 2C:37:D3:1D:9B:60:83:D4:A9:38:B0:1C:50:20:64:46:44:7D:69:EF Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261 Certificate serial: 019B7F1386B74BE5611C2AD62BC70DB2B271 Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa Signing time: Fri 02 Jan 2026 14:19:04 +0000 ROA not before: Fri 02 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25206 IP address blocks: 185.230.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:86:b7:4b:e5:61:1c:2a:d6:2b:c7:0d:b2:b2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261 Validity Not Before: Jan 2 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c37d31d9b6083d4a938b01c50206446447d69ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:7b:57:89:50:86:d6:fb:76:2e:e3:65:88: ce:96:a6:97:b3:ff:29:54:9d:0a:de:63:a0:4b:04: a3:de:0e:f7:18:05:d0:35:b0:1e:b4:37:82:44:4e: ad:cb:aa:9a:4d:5a:75:1c:01:de:19:3a:c4:8b:06: 02:ba:ce:1d:66:19:3f:c6:cd:92:dc:fe:5d:c0:bc: d9:82:0d:67:98:ad:6d:28:9b:71:02:06:e4:12:0e: b4:e9:8d:c7:7c:3f:98:c6:76:a6:cb:9d:f1:d7:4b: 1a:40:24:b6:4d:37:39:21:1e:ee:e4:0c:8d:f2:81: 45:04:4d:30:5a:d2:f0:fc:3b:dc:46:f3:d5:0f:04: 24:34:eb:cf:62:d5:ee:47:b2:f6:61:c9:e6:98:8b: ee:0b:a8:0f:28:4d:51:a1:23:31:17:b3:87:37:25: 86:f5:b5:61:30:69:30:06:50:68:6c:ef:4a:ef:7a: 76:b6:b4:b9:bb:37:e1:52:eb:30:a8:29:60:e4:ca: 5a:8b:23:84:d6:53:26:79:9a:24:f4:4d:0f:0f:c0: b4:d9:2a:b4:64:21:fa:bb:4f:2a:12:2c:1e:73:cd: 8a:69:fe:39:23:c8:2c:45:1f:40:d9:31:dc:86:b6: a5:08:f3:56:0c:44:73:9c:57:b8:a3:c6:4d:4f:21: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:37:D3:1D:9B:60:83:D4:A9:38:B0:1C:50:20:64:46:44:7D:69:EF X509v3 Authority Key Identifier: keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.244.0/24 Signature Algorithm: sha256WithRSAEncryption 30:40:d5:c3:8b:3b:45:77:c3:e9:e9:5d:85:4d:4f:19:c5:b8: f3:d6:07:01:b5:8c:40:97:a7:a3:14:ae:ed:03:01:7a:2d:2d: d8:d1:33:3e:70:8e:5e:ac:be:23:85:eb:b5:92:b0:fb:51:82: 0f:5f:08:8b:3c:50:79:15:66:7a:1c:5d:54:84:36:19:e4:77: 8b:f1:ef:fa:c6:e7:0a:73:94:01:0a:f7:3f:de:94:b8:1a:5b: 43:ea:2f:d0:16:05:67:36:c4:31:c8:14:4e:8b:df:58:53:58: 09:e5:6f:87:eb:83:55:fa:83:c2:84:51:03:4d:3d:b1:db:d1: 09:6e:40:74:e4:5c:eb:0f:05:89:a3:ff:c5:ea:a1:06:f6:56: 83:df:6f:e3:54:cf:52:c2:7b:51:99:e4:75:49:af:8b:c9:6b: 64:72:5f:89:8f:c5:1e:6b:8b:7b:02:31:1a:28:8a:6f:58:66: f6:ec:85:50:eb:fe:cc:4a:c0:69:89:02:47:c2:c6:68:55:95: 3f:58:1f:20:d4:59:68:30:53:ce:d6:58:f4:4b:46:97:d9:c4: 18:90:42:a2:4f:e1:f7:9e:6a:7e:6f:c2:6a:bf:00:49:fc:2b: 8c:1f:05:d7:da:80:7d:6d:6e:78:0d:a1:d8:7a:17:1e:1a:7f: 7a:b7:89:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4a3S+VhHCrWK8cNsrJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYmYyMzAwNDQ2NDljMDZkNzVlMzAyYzUxNzUwMDRkYmZj NjcyNjEwHhcNMjYwMTAyMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzM3ZDMxZDliNjA4M2Q0YTkzOGIwMWM1MDIwNjQ0NjQ0N2Q2OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQl7V4lQhtb7di7jZYjOlqaXs/8p VJ0K3mOgSwSj3g73GAXQNbAetDeCRE6ty6qaTVp1HAHeGTrEiwYCus4dZhk/xs2S 3P5dwLzZgg1nmK1tKJtxAgbkEg606Y3HfD+Yxnamy53x10saQCS2TTc5IR7u5AyN 8oFFBE0wWtLw/DvcRvPVDwQkNOvPYtXuR7L2YcnmmIvuC6gPKE1RoSMxF7OHNyWG 9bVhMGkwBlBobO9K73p2trS5uzfhUuswqClg5MpaiyOE1lMmeZok9E0PD8C02Sq0 ZCH6u08qEiwec82Kaf45I8gsRR9A2THchralCPNWDERznFe4o8ZNTyHxtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCw30x2bYIPUqTiwHFAgZEZEfWnvMB8GA1UdIwQY MBaAFAC/IwBEZJwG114wLFF1AE2/xnJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kODgxMjItZGVkYS00ZmQwLTlhNjct NmVmMWQ5NjgxM2EyLzEvTERmVEhadGdnOVNwT0xBY1VDQmtSa1I5YWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kODgxMjItZGVkYS00ZmQwLTlhNjctNmVmMWQ5NjgxM2Ey LzEvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueb0MA0G CSqGSIb3DQEBCwUAA4IBAQAwQNXDiztFd8Pp6V2FTU8Zxbjz1gcBtYxAl6ejFK7t AwF6LS3Y0TM+cI5erL4jheu1krD7UYIPXwiLPFB5FWZ6HF1UhDYZ5HeL8e/6xucK c5QBCvc/3pS4GltD6i/QFgVnNsQxyBROi99YU1gJ5W+H64NV+oPChFEDTT2x29EJ bkB05FzrDwWJo//F6qEG9laD32/jVM9SwntRmeR1Sa+LyWtkcl+Jj8Uea4t7AjEa KIpvWGb27IVQ6/7MSsBpiQJHwsZoVZU/WB8g1FloMFPO1lj0S0aX2cQYkEKiT+H3 nmp+b8JqvwBJ/CuMHwXX2oB9bW54DaHYehceGn96t4lZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:18:49 2026 by rpki-client