This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/l_v0toEM3yMRI49WDNWj-qHlYqk.roa File: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (raw, json) Hash identifier: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q= Subject key identifier: 97:FB:F4:B6:81:0C:DF:23:11:23:8F:56:0C:D5:A3:FA:A1:E5:62:A9 Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Certificate serial: 019B78A36E586D4A8FA8BD3F0749E311D940 Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/l_v0toEM3yMRI49WDNWj-qHlYqk.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.145.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6e:58:6d:4a:8f:a8:bd:3f:07:49:e3:11:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97fbf4b6810cdf2311238f560cd5a3faa1e562a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:dd:bc:ef:85:cd:49:f7:51:54:e8:a0:0d: 4b:28:b4:63:69:50:32:8f:e2:56:62:01:a8:c6:29: 9b:a1:c1:c7:3c:e5:b4:a9:0b:e4:67:57:d6:cc:bb: 4a:ec:7b:e3:be:7d:fc:99:13:2c:e2:14:56:2a:94: 16:33:bb:51:e6:b9:c4:39:d3:61:97:92:b6:f0:0f: 34:04:c1:38:68:86:bf:50:a8:e5:ef:de:a7:55:ca: 4d:98:9e:aa:82:46:d5:5b:ce:7c:38:da:f3:07:1c: 8f:4b:b1:26:a5:40:3c:ec:30:9c:ca:bf:c1:d2:e2: 04:a9:cd:60:09:c0:2c:67:88:e0:e3:c8:fc:36:81: 7a:7e:3b:e2:43:69:95:93:94:c8:7d:3c:fa:e8:c8: b4:d1:08:7d:72:a3:a4:93:72:28:a4:94:16:d7:e9: 5a:a9:e5:fb:56:af:95:5c:4c:22:74:af:dd:04:c1: 47:41:0d:ba:3d:7a:2b:85:03:8b:9e:33:36:ca:b1: 37:ae:f4:a1:6a:7b:d1:fb:47:3c:9a:53:ba:92:d9: 01:16:94:42:c2:b9:37:13:32:62:bf:66:cd:70:ef: dd:11:8c:59:f1:89:d9:27:c3:09:88:9e:a0:29:3d: 5a:46:cd:65:f7:48:21:3f:89:ad:15:14:20:fc:e9: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FB:F4:B6:81:0C:DF:23:11:23:8F:56:0C:D5:A3:FA:A1:E5:62:A9 X509v3 Authority Key Identifier: keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/l_v0toEM3yMRI49WDNWj-qHlYqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.247.0/24 Signature Algorithm: sha256WithRSAEncryption 54:e2:c6:35:58:1e:c8:af:d4:39:76:37:c9:bb:f5:9f:97:0b: 74:6c:14:a2:ed:be:cc:20:00:a0:28:71:1c:94:6a:e7:8c:1e: e1:5a:b5:33:cf:d5:6b:be:b1:52:89:3e:1e:75:c2:c5:c1:97: bb:49:93:ae:39:a1:11:d1:54:18:99:ea:2d:2f:3e:e3:c6:a3: bb:d7:b8:af:34:2e:1e:c3:b5:b6:e3:63:da:3a:ba:15:26:b7: 94:b2:f5:f5:eb:72:0a:e2:85:d8:3e:0f:75:80:bc:d6:61:1b: 97:59:d5:b1:f7:cd:16:8e:95:47:c1:b0:38:f2:61:d4:14:42: dc:4b:ca:8e:2d:25:f4:7d:81:eb:3a:4b:5c:6b:da:f1:18:23: 47:af:4b:39:7b:71:6a:08:f3:99:29:e9:96:14:bd:1d:ed:0f: 31:d0:94:23:7a:42:1d:0f:c3:f6:76:1b:31:11:f7:1c:84:41: 46:e6:54:f3:f6:11:0e:67:cb:b7:76:1c:85:db:11:71:b4:8b: 09:ea:ff:27:3f:9a:c0:50:ff:4a:b5:6c:0f:29:c5:bd:e1:ed: 87:c5:23:5d:d8:77:a5:d4:29:3e:e5:00:59:ae:e7:22:56:10: a3:22:54:4f:ea:2a:b5:0a:1a:0c:0b:14:72:47:f6:eb:08:b7: 34:31:75:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o25YbUqPqL0/B0njEdlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0 ZDZlZWQwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2ZiZjRiNjgxMGNkZjIzMTEyMzhmNTYwY2Q1YTNmYWExZTU2MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmzdvO+FzUn3UVTooA1LKLRjaVAy j+JWYgGoximbocHHPOW0qQvkZ1fWzLtK7Hvjvn38mRMs4hRWKpQWM7tR5rnEOdNh l5K28A80BME4aIa/UKjl796nVcpNmJ6qgkbVW858ONrzBxyPS7EmpUA87DCcyr/B 0uIEqc1gCcAsZ4jg48j8NoF6fjviQ2mVk5TIfTz66Mi00Qh9cqOkk3IopJQW1+la qeX7Vq+VXEwidK/dBMFHQQ26PXorhQOLnjM2yrE3rvShanvR+0c8mlO6ktkBFpRC wrk3EzJiv2bNcO/dEYxZ8YnZJ8MJiJ6gKT1aRs1l90ghP4mtFRQg/OkkbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJf79LaBDN8jESOPVgzVo/qh5WKpMB8GA1UdIwQY MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt NjhhZDNiZGJkMzliLzEvbF92MHRvRU0zeU1SSTQ5V0ROV2otcUhsWXFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZH3MA0G CSqGSIb3DQEBCwUAA4IBAQBU4sY1WB7Ir9Q5djfJu/Wflwt0bBSi7b7MIACgKHEc lGrnjB7hWrUzz9VrvrFSiT4edcLFwZe7SZOuOaER0VQYmeotLz7jxqO717ivNC4e w7W242PaOroVJreUsvX163IK4oXYPg91gLzWYRuXWdWx980WjpVHwbA48mHUFELc S8qOLSX0fYHrOktca9rxGCNHr0s5e3FqCPOZKemWFL0d7Q8x0JQjekIdD8P2dhsx EfcchEFG5lTz9hEOZ8u3dhyF2xFxtIsJ6v8nP5rAUP9KtWwPKcW94e2HxSNd2Hel 1Ck+5QBZruciVhCjIlRP6iq1ChoMCxRyR/brCLc0MXVN -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:48 2026 by rpki-client