This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa File: lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa (raw, json) Hash identifier: HoHhq099O+Q5npgf30dRiAWZ2csPL4g8k9fpkhuGo9w= Subject key identifier: 94:6A:EC:43:C2:74:71:88:69:8B:F3:B5:37:5B:07:5B:2A:C0:D8:5B Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Certificate serial: 019B783517F3594545417F9792DDACC83AC8 Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60602 IP address blocks: 185.181.228.0/23 maxlen: 23 185.181.228.0/24 maxlen: 24 185.181.229.0/24 maxlen: 24 185.181.230.0/24 maxlen: 24 185.181.231.0/24 maxlen: 24 194.33.40.0/22 maxlen: 24 2a0a:d580::/32 maxlen: 32 2a0a:d580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:17:f3:59:45:45:41:7f:97:92:dd:ac:c8:3a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=946aec43c2747188698bf3b5375b075b2ac0d85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:8f:4c:c4:94:de:6f:2f:c8:04:fa:e1:72: 07:d0:5a:1c:76:2a:6b:ee:19:1a:df:1e:d8:39:83: b6:fe:e4:17:c6:eb:91:7f:f3:55:8c:8b:ce:32:f3: df:e4:29:0c:c8:58:33:2b:d8:b7:b3:b6:1a:a6:5b: 31:5d:98:19:75:28:81:15:c6:de:21:93:72:f5:08: 63:81:ba:d3:ed:50:17:57:51:32:f3:f1:81:d2:01: 78:92:90:1b:a4:9b:12:ab:46:d7:cb:cc:bd:42:c5: 2e:d3:c7:c3:f0:55:89:8a:e5:51:a8:d7:c4:03:4e: 26:1a:05:22:fb:ea:3e:70:b1:7d:73:5a:e5:cb:b2: 70:d8:a1:ae:c9:b8:92:16:94:58:6e:15:29:dc:39: 68:c4:64:5d:9d:31:4d:eb:e5:16:00:bb:91:fb:72: 85:33:0b:c4:30:2c:3c:43:93:22:7c:5f:02:59:5d: 99:4a:c1:9f:72:e3:28:f2:7c:ff:ec:bb:29:42:2b: 3d:7b:95:07:3b:9f:2c:c9:68:a1:bc:91:20:b6:d8: 89:5f:1d:a9:94:a6:38:2f:62:a1:36:93:db:2c:4e: e5:2c:1c:1a:9d:ad:3b:94:b0:20:10:4c:d7:49:6d: 9c:f6:91:be:b1:ef:d9:0c:90:66:c2:7c:c2:60:7b: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6A:EC:43:C2:74:71:88:69:8B:F3:B5:37:5B:07:5B:2A:C0:D8:5B X509v3 Authority Key Identifier: keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.228.0/22 194.33.40.0/22 IPv6: 2a0a:d580::/32 Signature Algorithm: sha256WithRSAEncryption 59:4c:6c:86:c6:50:ba:1f:32:e5:96:20:44:f2:b8:1b:be:40: 29:53:8e:d1:9c:23:b2:c5:11:56:49:d0:e9:b2:be:24:06:36: 63:06:8e:a9:ce:a0:df:2d:a7:07:08:1b:a3:b1:af:2a:d0:e8: 83:e6:bb:2b:6c:58:e1:72:17:a2:1f:0c:ff:a8:b3:e7:2f:44: 04:3f:a7:c6:32:7b:6e:a2:c3:ba:7d:0d:53:cd:77:fd:96:47: ce:d7:10:59:f5:e9:16:5c:63:58:7a:c1:bb:3e:ff:f8:1d:79: ad:b8:bb:a6:c7:59:45:85:19:7b:16:92:07:dd:7d:c1:7b:2d: 85:0e:b7:f9:c1:f5:36:bd:6b:47:62:28:b3:10:aa:25:24:8b: 41:a8:4f:d9:c4:7a:33:4b:53:43:ba:f3:f9:8b:fc:2d:fb:8b: 28:15:61:4c:5c:cc:92:09:16:b7:1a:dd:21:d1:df:97:c2:c3: ed:e1:4f:b7:2e:a2:4f:48:e7:ae:c6:6a:0c:69:11:ea:49:d3: 3f:73:65:04:54:01:58:57:85:d2:4d:b9:53:5d:6a:b5:19:43: bd:aa:7c:ae:2d:2c:b8:6a:7f:e3:a7:73:98:76:c8:18:2d:54: df:0a:67:b8:4b:9b:5e:c0:44:1a:28:d6:74:d1:db:19:e9:8e: d6:9c:17:cb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NRfzWUVFQX+Xkt2syDrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliM2YyOWZmOWVhNzFiM2MzZGMxZjVhZjA1NGI0MTY0N2M5 MWFmOTgwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDZhZWM0M2MyNzQ3MTg4Njk4YmYzYjUzNzViMDc1YjJhYzBkODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1qPTMSU3m8vyAT64XIH0Focdipr 7hka3x7YOYO2/uQXxuuRf/NVjIvOMvPf5CkMyFgzK9i3s7YaplsxXZgZdSiBFcbe IZNy9QhjgbrT7VAXV1Ey8/GB0gF4kpAbpJsSq0bXy8y9QsUu08fD8FWJiuVRqNfE A04mGgUi++o+cLF9c1rly7Jw2KGuybiSFpRYbhUp3DloxGRdnTFN6+UWALuR+3KF MwvEMCw8Q5MifF8CWV2ZSsGfcuMo8nz/7LspQis9e5UHO58syWihvJEgttiJXx2p lKY4L2KhNpPbLE7lLBwana07lLAgEEzXSW2c9pG+se/ZDJBmwnzCYHvgtwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJRq7EPCdHGIaYvztTdbB1sqwNhbMB8GA1UdIwQY MBaAFJs/Kf+epxs8PcH1rwVLQWR8ka+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTct ZjQ2MjI0YjBkMTYxLzEvbEdyc1E4SjBjWWhwaV9PMU4xc0hXeXJBMkZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTctZjQ2MjI0YjBkMTYx LzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubXkAwQC wiEoMA0EAgACMAcDBQAqCtWAMA0GCSqGSIb3DQEBCwUAA4IBAQBZTGyGxlC6HzLl liBE8rgbvkApU47RnCOyxRFWSdDpsr4kBjZjBo6pzqDfLacHCBujsa8q0OiD5rsr bFjhcheiHwz/qLPnL0QEP6fGMntuosO6fQ1TzXf9lkfO1xBZ9ekWXGNYesG7Pv/4 HXmtuLumx1lFhRl7FpIH3X3Bey2FDrf5wfU2vWtHYiizEKolJItBqE/ZxHozS1ND uvP5i/wt+4soFWFMXMySCRa3Gt0h0d+XwsPt4U+3LqJPSOeuxmoMaRHqSdM/c2UE VAFYV4XSTblTXWq1GUO9qnyuLSy4an/jp3OYdsgYLVTfCme4S5tewEQaKNZ00dsZ 6Y7WnBfL -----END CERTIFICATE-----Generated at Sun Jan 25 09:26:00 2026 by rpki-client