This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa File: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (raw, json) Hash identifier: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4= Subject key identifier: 2E:8E:14:E6:EC:C8:A9:0C:A6:26:71:E3:EB:03:74:01:B2:F2:65:B3 Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Certificate serial: 019BDB1F57F703B751DD091DD0B9432D266F Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa Signing time: Tue 20 Jan 2026 11:17:03 +0000 ROA not before: Tue 20 Jan 2026 11:17:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203235 IP address blocks: 185.136.244.0/22 maxlen: 24 185.141.140.0/22 maxlen: 24 2a07:24c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:1f:57:f7:03:b7:51:dd:09:1d:d0:b9:43:2d:26:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Validity Not Before: Jan 20 11:17:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e8e14e6ecc8a90ca62671e3eb037401b2f265b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:ce:66:fe:ea:de:64:73:fa:75:12:35:7b: 1d:48:d3:f0:c6:4f:ed:5b:24:97:11:20:1d:9a:cb: f2:cd:66:bc:ad:05:69:49:d3:f0:48:f2:cb:0d:58: 40:d1:c6:de:df:9c:5c:61:a1:65:5b:ab:01:1d:a4: 91:f4:10:34:27:76:29:b5:79:36:86:20:3b:0d:a0: e8:8a:9d:e0:26:bd:57:35:4d:04:5d:e3:f7:d8:45: b5:4f:e3:2d:78:38:76:21:0d:12:6a:75:61:5e:9b: f6:91:48:e3:fd:64:65:79:c2:0a:fa:17:02:80:a5: 12:3e:dd:e7:f6:a9:ec:5f:4e:2d:48:65:f1:b3:32: 8b:27:ce:be:dd:fb:aa:2b:8a:f1:a9:78:a7:33:ed: d4:31:de:d2:39:39:8c:16:46:b0:70:4f:01:df:27: 89:8f:41:86:6c:70:99:00:74:ba:b8:58:18:21:4a: 8a:ff:6c:1b:7c:2b:dc:c1:89:02:e5:cc:fc:bc:ed: ed:60:c0:4c:18:e7:02:19:8f:73:e8:3b:c8:d6:2e: ed:bf:8f:06:63:28:30:62:a2:22:35:86:b0:65:fb: 44:47:d0:48:d5:51:c0:fb:c2:4e:9f:4a:90:01:b5: a1:8f:3f:69:d0:82:db:2a:cd:c5:72:0d:99:f9:ef: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8E:14:E6:EC:C8:A9:0C:A6:26:71:E3:EB:03:74:01:B2:F2:65:B3 X509v3 Authority Key Identifier: keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.244.0/22 185.141.140.0/22 IPv6: 2a07:24c0::/29 Signature Algorithm: sha256WithRSAEncryption 23:45:e9:b2:2c:cb:9d:f1:5c:fe:4a:6e:99:96:c8:1d:1e:9c: 9f:1f:ee:b8:42:2a:6f:5c:03:cb:7a:c7:c3:46:bc:7f:76:77: f7:2a:cd:47:ad:86:e0:a9:dd:84:d6:cc:25:c6:98:16:6d:e3: 8d:72:66:ed:e8:e5:f4:e3:69:af:42:54:30:24:df:7a:e4:65: 8a:ed:ff:4a:91:0a:47:49:31:46:27:42:17:bd:54:af:4d:dc: ec:3d:07:b8:7c:fd:68:a5:d6:70:27:99:7a:3b:a2:23:56:da: e6:01:45:1f:fd:8c:d9:88:90:00:7a:78:be:dc:99:3b:9e:47: 31:c9:de:05:c1:ba:12:f6:7f:bc:8a:5d:cd:5a:f6:6b:c8:e2: 30:cc:16:46:5c:b1:4c:ea:ac:3d:33:1e:ce:ab:39:53:5f:5d: d9:12:1d:49:a6:52:7b:a3:35:dc:17:6c:5e:82:14:0c:fd:a5: f1:eb:18:b0:db:ad:c3:52:7e:9c:7d:a1:12:76:86:fd:43:4d: 17:7a:20:d0:73:79:0b:86:95:dd:5f:50:1b:d9:2d:9f:e6:d1: 52:db:d0:6d:23:29:79:5d:6c:e1:70:38:74:f5:76:b4:90:22: 6f:8b:a9:07:ec:ff:c4:ef:bf:ee:ac:8c:7a:34:91:4e:05:e6: 62:14:59:bd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvbH1f3A7dR3Qkd0LlDLSZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh MTA0NTkwHhcNMjYwMTIwMTExNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZThlMTRlNmVjYzhhOTBjYTYyNjcxZTNlYjAzNzQwMWIyZjI2NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPzOZv7q3mRz+nUSNXsdSNPwxk/t WySXESAdmsvyzWa8rQVpSdPwSPLLDVhA0cbe35xcYaFlW6sBHaSR9BA0J3YptXk2 hiA7DaDoip3gJr1XNU0EXeP32EW1T+MteDh2IQ0SanVhXpv2kUjj/WRlecIK+hcC gKUSPt3n9qnsX04tSGXxszKLJ86+3fuqK4rxqXinM+3UMd7SOTmMFkawcE8B3yeJ j0GGbHCZAHS6uFgYIUqK/2wbfCvcwYkC5cz8vO3tYMBMGOcCGY9z6DvI1i7tv48G YygwYqIiNYawZftER9BI1VHA+8JOn0qQAbWhjz9p0ILbKs3Fcg2Z+e8UuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC6OFObsyKkMpiZx4+sDdAGy8mWzMB8GA1UdIwQY MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt M2Q3NWM0ZjQ4OWU3LzEvTG80VTV1eklxUXltSm5IajZ3TjBBYkx5WmJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3 LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYj0AwQC uY2MMA0EAgACMAcDBQMqByTAMA0GCSqGSIb3DQEBCwUAA4IBAQAjRemyLMud8Vz+ Sm6ZlsgdHpyfH+64QipvXAPLesfDRrx/dnf3Ks1HrYbgqd2E1swlxpgWbeONcmbt 6OX042mvQlQwJN965GWK7f9KkQpHSTFGJ0IXvVSvTdzsPQe4fP1opdZwJ5l6O6Ij VtrmAUUf/YzZiJAAeni+3Jk7nkcxyd4FwboS9n+8il3NWvZryOIwzBZGXLFM6qw9 Mx7OqzlTX13ZEh1JplJ7ozXcF2xeghQM/aXx6xiw263DUn6cfaESdob9Q00XeiDQ c3kLhpXdX1Ab2S2f5tFS29BtIyl5XWzhcDh09Xa0kCJvi6kH7P/E77/urIx6NJFO BeZiFFm9 -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:23 2026 by rpki-client