This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa File: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (raw, json) Hash identifier: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM= Subject key identifier: 2D:34:CC:D0:3C:C7:AF:35:86:96:A9:18:FB:9C:C4:79:04:A0:A1:4A Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87 Certificate serial: 019B7DCADD2B06E4183B969332A10A5459CE Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16171 IP address blocks: 185.144.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:dd:2b:06:e4:18:3b:96:93:32:a1:0a:54:59:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d34ccd03cc7af358696a918fb9cc47904a0a14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:13:74:32:f4:13:f3:03:8f:10:3b:b8:a8: 47:0f:5d:5d:b9:11:81:eb:2c:1e:a4:31:57:9e:96: b6:3e:c8:18:ad:e6:e1:98:35:59:50:a6:ef:b6:65: d0:82:e5:19:b7:3f:3c:37:ff:bf:ae:98:f0:8e:af: 08:fb:b4:bd:1f:3a:73:55:f8:c9:e3:4e:2f:c7:db: fe:7c:23:80:69:d9:a8:f0:51:4c:7c:e3:3f:19:79: 99:29:ed:af:bd:4b:59:a2:d0:86:b1:83:37:b0:12: 54:eb:ee:0d:67:e5:57:fa:a6:03:e2:a4:55:82:19: 3a:9c:7b:15:62:13:48:40:a1:92:73:0c:7d:75:f2: ee:67:61:8c:17:2f:85:54:b7:2f:98:70:a0:af:05: 5e:8e:fa:a8:6c:1d:f6:8d:f7:58:fa:d8:c0:14:16: 41:97:45:61:b5:be:27:35:7b:8c:fe:26:1d:8f:44: f6:6a:04:ce:cb:52:f7:7e:82:bd:67:75:09:00:e0: b8:27:a1:97:ba:e6:11:79:2a:b1:2d:1b:dc:cc:6f: 63:3d:8a:4a:26:af:a5:a7:6c:8f:46:e8:f7:99:e2: 13:b1:da:3f:40:fe:d2:32:dc:b3:62:8e:9c:31:82: 94:d2:82:13:4f:a2:ce:72:34:15:95:4f:df:c0:e7: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:34:CC:D0:3C:C7:AF:35:86:96:A9:18:FB:9C:C4:79:04:A0:A1:4A X509v3 Authority Key Identifier: keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.124.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:1a:28:3c:7f:9c:44:79:6b:3e:53:68:f3:51:26:91:63:96: cd:c3:69:ff:99:4f:6d:50:6a:01:3c:5a:f5:be:ed:8a:7a:0e: a4:d9:ff:6e:d9:76:4e:05:42:e9:ed:d0:2e:9b:44:82:74:de: 62:61:eb:65:11:51:2b:3e:68:7c:de:10:7e:93:85:41:db:b1: 9e:f3:24:27:44:6d:32:86:2b:d0:82:e7:3f:a8:b0:49:53:4f: 46:5d:c9:0f:2f:9d:6b:be:a1:86:3f:7b:67:2a:9e:0f:e7:8b: 8e:ae:90:1f:f2:0c:25:42:58:e8:32:52:27:97:a4:b5:f1:e4: 67:bb:4d:e9:d6:5e:b5:b5:15:a3:8e:7b:67:75:94:4c:6f:3c: df:1c:96:4c:ae:c5:d7:48:e5:9a:0d:33:cf:3a:b4:05:dc:ba: 74:c9:14:bf:cb:09:27:87:ff:6d:54:fe:0c:cc:e9:17:cc:43: 9f:07:c3:61:9b:46:be:5d:f6:36:73:7b:7f:e7:cb:43:6b:4b: 17:5a:bf:a9:37:53:4e:ac:ae:2f:ed:ec:43:39:d5:a4:2b:0e: 74:0b:36:3f:ab:f9:9a:74:72:38:7e:26:e1:73:9d:6f:b3:5a: ff:29:dd:41:3a:75:72:5f:ce:69:6d:5a:6e:ed:5f:f0:cf:a7: ba:41:95:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yt0rBuQYO5aTMqEKVFnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTE5NjMxMGE3ZjdkZDk5OTllYzQzZTkzOGZkOTA2OTg1 YTNmODcwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDM0Y2NkMDNjYzdhZjM1ODY5NmE5MThmYjljYzQ3OTA0YTBhMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KYTdDL0E/MDjxA7uKhHD11duRGB 6ywepDFXnpa2PsgYrebhmDVZUKbvtmXQguUZtz88N/+/rpjwjq8I+7S9HzpzVfjJ 404vx9v+fCOAadmo8FFMfOM/GXmZKe2vvUtZotCGsYM3sBJU6+4NZ+VX+qYD4qRV ghk6nHsVYhNIQKGScwx9dfLuZ2GMFy+FVLcvmHCgrwVejvqobB32jfdY+tjAFBZB l0Vhtb4nNXuM/iYdj0T2agTOy1L3foK9Z3UJAOC4J6GXuuYReSqxLRvczG9jPYpK Jq+lp2yPRuj3meITsdo/QP7SMtyzYo6cMYKU0oITT6LOcjQVlU/fwOetcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC00zNA8x681hpapGPucxHkEoKFKMB8GA1UdIwQY MBaAFEKRljEKf33ZmZ7EPpOP2QaYWj+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQt MGFhOWQ5N2M4Yzk4LzEvTFRUTTBEekhyeldHbHFrWS01ekVlUVNnb1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQtMGFhOWQ5N2M4Yzk4 LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZB8MA0G CSqGSIb3DQEBCwUAA4IBAQCNGig8f5xEeWs+U2jzUSaRY5bNw2n/mU9tUGoBPFr1 vu2Keg6k2f9u2XZOBULp7dAum0SCdN5iYetlEVErPmh83hB+k4VB27Ge8yQnRG0y hivQguc/qLBJU09GXckPL51rvqGGP3tnKp4P54uOrpAf8gwlQljoMlInl6S18eRn u03p1l61tRWjjntndZRMbzzfHJZMrsXXSOWaDTPPOrQF3Lp0yRS/ywknh/9tVP4M zOkXzEOfB8Nhm0a+XfY2c3t/58tDa0sXWr+pN1NOrK4v7exDOdWkKw50CzY/q/ma dHI4fibhc51vs1r/Kd1BOnVyX85pbVpu7V/wz6e6QZUK -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:22 2026 by rpki-client