This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lkOKxgcpueMerP3N0TSE1JR-3-E.roa File: lkOKxgcpueMerP3N0TSE1JR-3-E.roa (raw, json) Hash identifier: p8Aw3sajOojWbWbduT12GoaxwV8onZRsDSSi/v27J4I= Subject key identifier: 96:43:8A:C6:07:29:B9:E3:1E:AC:FD:CD:D1:34:84:D4:94:7E:DF:E1 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12E11907B31C2ABC5D7564382341A7 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lkOKxgcpueMerP3N0TSE1JR-3-E.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395839 IP address blocks: 185.255.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e1:19:07:b3:1c:2a:bc:5d:75:64:38:23:41:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96438ac60729b9e31eacfdcdd13484d4947edfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:bf:21:25:0c:11:ee:2a:71:c6:4c:2e:af: 4a:5f:26:18:f7:36:8a:27:4b:37:c3:c7:fb:74:4d: fe:f3:6b:a1:42:68:e8:5b:c4:39:8c:79:41:74:d5: f3:f6:6e:96:92:92:56:fd:cd:c4:a9:fa:01:f1:1e: c0:90:1a:bf:ca:cd:c9:f2:23:58:4a:ff:05:9d:7b: 52:d8:c9:61:d6:8e:b4:03:38:e9:3b:f7:3d:25:01: f5:1a:e2:79:fb:90:ec:4f:06:d2:dc:71:cb:28:6f: de:b0:42:02:a6:1c:d3:2e:7e:8b:74:c5:c8:5e:57: 3b:aa:0f:b4:b5:2b:fc:5c:65:73:04:cf:29:ff:b8: 56:cd:f5:90:4d:0e:63:e8:85:c1:08:eb:2f:cb:19: b0:4e:a6:63:2a:26:bb:b3:28:34:fc:9b:a3:f5:3a: 61:35:4f:3e:13:52:d3:ec:09:82:69:97:72:45:81: 50:0a:e1:00:1d:34:9c:5a:26:35:ce:8b:b7:5c:d4: 7a:c2:e7:fc:56:78:30:46:5a:ba:0c:33:70:cd:9e: 70:68:70:10:88:bf:2e:cd:09:3a:b8:ba:0c:5f:11: 73:2d:1d:78:86:1c:cd:7d:75:6b:8c:d6:3c:b6:57: 69:20:d1:e1:5e:d3:fa:af:5c:df:d7:de:5d:72:80: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:8A:C6:07:29:B9:E3:1E:AC:FD:CD:D1:34:84:D4:94:7E:DF:E1 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lkOKxgcpueMerP3N0TSE1JR-3-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.7.0/24 Signature Algorithm: sha256WithRSAEncryption 14:56:39:90:b9:be:a4:ec:5a:cf:05:88:30:2a:1e:71:91:ad: 6e:57:c0:6b:2f:fe:f3:26:03:b7:1b:5d:a6:56:60:b6:17:a0: e1:c2:0e:05:32:d2:aa:2f:dd:d2:b2:60:66:12:83:24:3c:a3: 8f:27:c7:bb:3d:09:6f:cd:33:7b:fd:55:b7:8a:6e:02:98:45: 0e:d6:91:85:24:b4:89:68:c1:d4:39:a7:24:84:f6:82:02:d9: a5:e9:f6:43:1c:10:3e:bc:2c:db:40:c7:36:eb:be:a3:68:87: a9:c1:c6:bc:7d:f5:09:02:59:6b:df:45:ea:41:fe:00:88:89: ae:62:24:03:bc:af:20:2b:0c:82:8e:5c:b1:8a:65:b7:d5:21: e9:b7:7c:ef:69:db:8f:b5:42:0c:02:b8:1b:d9:2a:d3:9c:14: 0e:f2:ec:86:76:b4:19:cb:0d:a3:36:53:e6:d0:1e:09:74:76: c3:14:6a:30:04:ed:aa:ac:94:6d:95:00:7b:c7:f6:49:59:3e: 1a:ec:cc:ba:5b:8d:4c:b4:f3:5e:11:5b:d0:07:95:8f:dd:d1: 93:5f:08:dd:63:2b:b6:f2:b9:0a:30:94:2a:1b:1a:45:04:77: 1b:c1:8b:e8:31:17:1f:38:af:13:48:00:e6:be:05:83:ac:f5: e1:a3:02:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuEZB7McKrxddWQ4I0GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjQzOGFjNjA3MjliOWUzMWVhY2ZkY2RkMTM0ODRkNDk0N2VkZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZK/ISUMEe4qccZMLq9KXyYY9zaK J0s3w8f7dE3+82uhQmjoW8Q5jHlBdNXz9m6WkpJW/c3EqfoB8R7AkBq/ys3J8iNY Sv8FnXtS2Mlh1o60AzjpO/c9JQH1GuJ5+5DsTwbS3HHLKG/esEICphzTLn6LdMXI Xlc7qg+0tSv8XGVzBM8p/7hWzfWQTQ5j6IXBCOsvyxmwTqZjKia7syg0/Juj9Tph NU8+E1LT7AmCaZdyRYFQCuEAHTScWiY1zou3XNR6wuf8VngwRlq6DDNwzZ5waHAQ iL8uzQk6uLoMXxFzLR14hhzNfXVrjNY8tldpINHhXtP6r1zf195dcoCwMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJZDisYHKbnjHqz9zdE0hNSUft/hMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvbGtPS3hnY3B1ZU1lclAzTjBUU0UxSlItMy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8HMA0G CSqGSIb3DQEBCwUAA4IBAQAUVjmQub6k7FrPBYgwKh5xka1uV8BrL/7zJgO3G12m VmC2F6Dhwg4FMtKqL93SsmBmEoMkPKOPJ8e7PQlvzTN7/VW3im4CmEUO1pGFJLSJ aMHUOackhPaCAtml6fZDHBA+vCzbQMc2676jaIepwca8ffUJAllr30XqQf4AiImu YiQDvK8gKwyCjlyximW31SHpt3zvaduPtUIMArgb2SrTnBQO8uyGdrQZyw2jNlPm 0B4JdHbDFGowBO2qrJRtlQB7x/ZJWT4a7My6W41MtPNeEVvQB5WP3dGTXwjdYyu2 8rkKMJQqGxpFBHcbwYvoMRcfOK8TSADmvgWDrPXhowLL -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:52 2026 by rpki-client