This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa File: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (raw, json) Hash identifier: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI= Subject key identifier: 2E:4E:2B:2A:57:57:F6:C5:CE:8C:28:18:7F:A4:C7:EB:B1:AE:DB:E3 Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Certificate serial: 019B7D5B75EC4307DD3020ED30284FBC8E42 Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa Signing time: Fri 02 Jan 2026 06:18:24 +0000 ROA not before: Fri 02 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 195.60.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:75:ec:43:07:dd:30:20:ed:30:28:4f:bc:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Validity Not Before: Jan 2 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e4e2b2a5757f6c5ce8c28187fa4c7ebb1aedbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:d9:02:61:b9:4f:0f:28:ae:bc:c0:c1:2c: f9:02:f9:5a:71:d1:9b:9f:a3:7c:6a:68:82:49:f2: 68:52:bd:11:7b:05:b2:b9:88:64:5f:56:61:9d:fc: e5:2a:0a:8a:ab:ef:3a:c4:a2:e5:d6:f8:72:9e:ff: 3a:68:49:8e:e8:82:42:2f:ac:f3:d0:96:6f:18:64: 90:53:0e:55:20:bb:f5:16:6d:ee:cd:69:fc:9d:a1: 65:29:a3:02:93:3d:13:3d:77:9c:ec:be:04:a3:14: c8:30:4c:50:b7:7b:c0:ef:5c:12:e3:1e:df:e6:12: 45:10:5b:13:6d:50:65:e0:17:c7:27:09:9f:b9:0b: d1:f7:6b:7d:88:40:9c:9c:b5:2e:c6:b4:ef:b6:11: 86:46:82:5d:af:c4:13:6d:b1:c5:ff:89:a0:71:37: f1:4c:b4:29:82:3c:4e:87:ed:04:1a:6f:be:28:17: 8b:7a:d7:f5:ad:23:28:73:6f:3a:11:26:a9:4f:6a: 8e:5a:d1:33:47:4b:4f:8b:5f:72:86:5c:22:7c:5b: ed:2a:b4:99:0a:73:6a:a0:90:ec:f8:73:d7:85:46: 17:d9:b4:f5:5b:8b:0e:6b:92:15:51:1f:0d:ad:d6: 0f:95:f3:c9:e0:6e:89:ed:cc:69:a8:7c:5b:01:92: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4E:2B:2A:57:57:F6:C5:CE:8C:28:18:7F:A4:C7:EB:B1:AE:DB:E3 X509v3 Authority Key Identifier: keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.226.0/24 Signature Algorithm: sha256WithRSAEncryption b4:d0:f5:25:2c:24:95:43:de:d9:b9:ad:d9:8d:df:60:c2:1c: 5a:e4:af:ed:7b:ba:d3:f7:d8:eb:40:42:45:1d:b7:85:c8:81: e3:c6:69:ae:3a:ce:6d:16:e1:14:7c:c2:a1:0f:f1:6a:d3:14: 92:89:33:1e:d9:90:61:3b:d4:8d:02:ac:ed:f1:77:cd:63:5b: 51:60:43:8e:c5:ad:ee:fb:ab:ad:e8:bc:22:81:9d:53:83:8a: 8f:1e:ed:d6:e3:5a:51:6f:19:5d:57:83:8a:dd:f2:6a:58:31: d3:85:ae:22:bc:8e:e7:a1:d5:1d:57:79:86:d5:9d:a5:36:f5: 75:2a:18:c0:a6:30:cf:23:0c:0d:42:f7:b5:51:5e:f5:90:fb: 28:c9:c2:34:54:0b:38:a4:86:a9:3d:09:d2:8e:e2:19:63:e5: 15:37:e1:69:28:5c:a5:92:c5:f8:20:f1:7f:53:33:8f:8f:86: 84:ce:1a:79:e4:f9:d0:eb:c6:d1:5f:fb:2f:79:f5:a3:45:fc: b6:7e:f0:17:be:f5:58:3c:e0:26:2b:4f:60:6c:af:d3:6a:11: 49:60:32:58:18:39:a6:b7:f3:ca:cd:69:b5:ef:39:19:b7:24: d4:c1:e0:80:4e:1b:d9:0b:8e:71:46:09:b9:8e:45:97:2a:55: d4:95:d7:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3XsQwfdMCDtMChPvI5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl OTFhNGQwHhcNMjYwMTAyMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTRlMmIyYTU3NTdmNmM1Y2U4YzI4MTg3ZmE0YzdlYmIxYWVkYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt3ZAmG5Tw8orrzAwSz5AvlacdGb n6N8amiCSfJoUr0RewWyuYhkX1ZhnfzlKgqKq+86xKLl1vhynv86aEmO6IJCL6zz 0JZvGGSQUw5VILv1Fm3uzWn8naFlKaMCkz0TPXec7L4EoxTIMExQt3vA71wS4x7f 5hJFEFsTbVBl4BfHJwmfuQvR92t9iECcnLUuxrTvthGGRoJdr8QTbbHF/4mgcTfx TLQpgjxOh+0EGm++KBeLetf1rSMoc286ESapT2qOWtEzR0tPi19yhlwifFvtKrSZ CnNqoJDs+HPXhUYX2bT1W4sOa5IVUR8NrdYPlfPJ4G6J7cxpqHxbAZKsowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5OKypXV/bFzowoGH+kx+uxrtvjMB8GA1UdIwQY MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt M2FjM2I2NzM3MDQyLzEvTGs0cktsZFg5c1hPakNnWWY2VEg2N0d1Mi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzziMA0G CSqGSIb3DQEBCwUAA4IBAQC00PUlLCSVQ97Zua3Zjd9gwhxa5K/te7rT99jrQEJF HbeFyIHjxmmuOs5tFuEUfMKhD/Fq0xSSiTMe2ZBhO9SNAqzt8XfNY1tRYEOOxa3u +6ut6LwigZ1Tg4qPHu3W41pRbxldV4OK3fJqWDHTha4ivI7nodUdV3mG1Z2lNvV1 KhjApjDPIwwNQve1UV71kPsoycI0VAs4pIapPQnSjuIZY+UVN+FpKFylksX4IPF/ UzOPj4aEzhp55PnQ68bRX/svefWjRfy2fvAXvvVYPOAmK09gbK/TahFJYDJYGDmm t/PKzWm17zkZtyTUweCAThvZC45xRgm5jkWXKlXUldcD -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:26 2026 by rpki-client