This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/lSsfA8xbGr2_Wr3ZKWbsMAbUwms.roa File: lSsfA8xbGr2_Wr3ZKWbsMAbUwms.roa (raw, json) Hash identifier: dbTKQeB1xWP9h6iuxV4UGtySYAnDXJC4CM/slXGgNRo= Subject key identifier: 95:2B:1F:03:CC:5B:1A:BD:BF:5A:BD:D9:29:66:EC:30:06:D4:C2:6B Certificate issuer: /CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b Certificate serial: 019B77C75F5C476B3D4EB613195F2DEDB7C0 Authority key identifier: 58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/lSsfA8xbGr2_Wr3ZKWbsMAbUwms.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29331 IP address blocks: 195.149.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:5c:47:6b:3d:4e:b6:13:19:5f:2d:ed:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=952b1f03cc5b1abdbf5abdd92966ec3006d4c26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:02:5f:60:64:3f:c7:e7:71:50:6b:55:e0: 7b:45:96:17:9c:ad:e9:7e:c8:3c:78:ef:20:6b:fd: 0e:3e:ce:eb:39:ce:80:63:74:b3:de:7e:b8:30:e9: f6:cc:65:72:5a:ec:e8:55:7a:88:fd:45:b3:91:99: 91:b3:44:ed:18:3e:e0:69:b2:68:c6:d5:87:d2:92: 93:b0:30:47:85:3d:19:1c:f2:34:8a:c7:ce:48:f2: a7:2f:e0:f4:c2:60:f2:90:d9:a4:4b:f5:3b:40:74: b0:b6:6d:70:d2:09:e6:80:6c:7b:6a:6f:6b:14:77: 26:00:81:f3:b1:2c:f9:13:6e:07:38:56:c3:9d:49: fb:3f:44:0f:14:18:95:b6:52:9e:9b:11:38:62:ca: f7:17:52:c5:f0:6d:5e:0e:9e:bd:0d:88:20:1a:d2: 90:a7:f9:3c:09:2d:21:46:21:a8:97:d2:e7:3a:5e: 86:07:17:da:e4:e9:7a:26:e4:5d:bb:cb:cc:c0:63: 11:67:fd:9c:3c:26:c9:8a:37:a0:a8:a6:6c:61:e6: 7e:f1:0b:be:e2:e0:1a:2d:d2:e4:38:74:02:3a:e9: 17:53:94:f9:ac:ea:84:f2:fc:22:52:b8:df:56:f7: 0c:15:db:6c:a2:fc:b0:b0:8c:bc:fe:68:40:16:94: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:1F:03:CC:5B:1A:BD:BF:5A:BD:D9:29:66:EC:30:06:D4:C2:6B X509v3 Authority Key Identifier: keyid:58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/lSsfA8xbGr2_Wr3ZKWbsMAbUwms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.78.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:cb:0d:84:24:75:26:05:43:27:20:ee:e5:74:c1:f0:89:dd: ce:10:66:2b:8d:e3:b0:d3:54:ef:c0:b3:15:29:60:d5:43:7b: b1:c4:76:48:1c:42:f2:73:47:15:90:c0:3d:1a:76:65:fb:83: 25:26:a2:69:98:84:4f:f8:21:a2:23:71:a3:3c:b4:ee:b1:94: 9b:f4:2d:60:5a:16:02:4f:b8:43:05:ea:1f:3f:63:98:0a:9b: cd:cf:b4:b8:ed:40:9b:ea:9e:22:52:ce:20:76:e4:06:aa:03: 04:3e:e0:cc:36:bf:ba:f9:c9:2b:be:dd:fd:49:15:f3:16:0f: 9d:07:88:74:2b:a5:cc:44:23:2e:d4:1d:5d:93:82:86:46:2b: 84:9f:08:f0:f8:3d:3c:fc:57:57:fe:41:06:2d:94:5a:50:e0: 4f:29:f2:c4:f5:81:02:1e:ab:f7:81:5e:17:18:70:0b:6a:10: 63:2c:17:57:8d:10:eb:cd:82:e7:75:6f:bf:34:8b:f5:84:74: aa:bd:2b:50:92:79:76:24:f6:78:ef:90:d2:4f:dd:2d:25:01: ed:e0:a3:93:65:96:43:2d:6d:65:92:55:0c:13:e4:bc:b1:e3: 02:86:dc:72:9a:39:54:cc:ea:5e:99:33:25:0e:0f:46:50:6f: f9:33:5b:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x19cR2s9TrYTGV8t7bfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YzNjNDNiNDQ0Y2E4MzVjYzc2ZjRjNGMzYzYzOTc1MmVk MWFhN2IwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTJiMWYwM2NjNWIxYWJkYmY1YWJkZDkyOTY2ZWMzMDA2ZDRjMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+MCX2BkP8fncVBrVeB7RZYXnK3p fsg8eO8ga/0OPs7rOc6AY3Sz3n64MOn2zGVyWuzoVXqI/UWzkZmRs0TtGD7gabJo xtWH0pKTsDBHhT0ZHPI0isfOSPKnL+D0wmDykNmkS/U7QHSwtm1w0gnmgGx7am9r FHcmAIHzsSz5E24HOFbDnUn7P0QPFBiVtlKemxE4Ysr3F1LF8G1eDp69DYggGtKQ p/k8CS0hRiGol9LnOl6GBxfa5Ol6JuRdu8vMwGMRZ/2cPCbJijegqKZsYeZ+8Qu+ 4uAaLdLkOHQCOukXU5T5rOqE8vwiUrjfVvcMFdtsovywsIy8/mhAFpSlVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUrHwPMWxq9v1q92Slm7DAG1MJrMB8GA1UdIwQY MBaAFFjDxDtETKg1zHb0xMPGOXUu0ap7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV01QRU8wUk1xRFhNZHZURXc4WTVkUzdScW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mOWYxMzEtMmRlZC00NzU0LTg4NGMt YzlhODBmNTNmYzBlLzEvbFNzZkE4eGJHcjJfV3IzWktXYnNNQWJVd21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mOWYxMzEtMmRlZC00NzU0LTg4NGMtYzlhODBmNTNmYzBl LzEvV01QRU8wUk1xRFhNZHZURXc4WTVkUzdScW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VOMA0G CSqGSIb3DQEBCwUAA4IBAQALyw2EJHUmBUMnIO7ldMHwid3OEGYrjeOw01TvwLMV KWDVQ3uxxHZIHELyc0cVkMA9GnZl+4MlJqJpmIRP+CGiI3GjPLTusZSb9C1gWhYC T7hDBeofP2OYCpvNz7S47UCb6p4iUs4gduQGqgMEPuDMNr+6+ckrvt39SRXzFg+d B4h0K6XMRCMu1B1dk4KGRiuEnwjw+D08/FdX/kEGLZRaUOBPKfLE9YECHqv3gV4X GHALahBjLBdXjRDrzYLndW+/NIv1hHSqvStQknl2JPZ475DST90tJQHt4KOTZZZD LW1lklUME+S8seMChtxymjlUzOpemTMlDg9GUG/5M1ui -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:13 2026 by rpki-client