This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LX8jWhwY_w1VuDEBNfwmRZwe9t4.roa File: LX8jWhwY_w1VuDEBNfwmRZwe9t4.roa (raw, json) Hash identifier: iTO7dRlwjo3qAqr7MmxeM55t0AamCXuKn7BCuNY4sbo= Subject key identifier: 2D:7F:23:5A:1C:18:FF:0D:55:B8:31:01:35:FC:26:45:9C:1E:F6:DE Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B1287D293D42DB2A879503D24BE069A89 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LX8jWhwY_w1VuDEBNfwmRZwe9t4.roa Signing time: Fri 12 Dec 2025 12:27:29 +0000 ROA not before: Fri 12 Dec 2025 12:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59432 IP address blocks: 89.251.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:87:d2:93:d4:2d:b2:a8:79:50:3d:24:be:06:9a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Dec 12 12:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d7f235a1c18ff0d55b8310135fc26459c1ef6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:ff:36:68:e6:03:08:dd:5c:07:22:a4:82: 66:2b:7e:c2:34:80:23:1b:e3:d0:c0:82:9f:86:f9: 42:ac:cb:94:20:cc:0e:7b:5b:a6:aa:3d:80:5e:65: 45:ab:65:f1:6f:91:88:ff:2d:71:df:d1:3e:e0:d4: 1c:53:c4:f4:53:ea:8d:8b:51:2c:b7:41:30:c2:1e: 1b:af:2a:27:99:b8:94:ec:fc:33:96:b2:8a:4a:04: 09:9d:18:35:c2:dc:6c:4f:f2:f3:17:b2:47:e9:11: 61:d5:24:94:2c:28:0a:08:ef:00:6a:64:e0:2f:31: cf:72:c8:f9:ed:bd:f3:bc:1d:c1:05:66:d6:69:fc: df:c1:e6:44:2a:69:91:cf:48:e8:7e:dd:cf:29:de: ff:12:5f:de:1f:9a:80:b8:08:44:c7:35:11:c1:7f: 17:f7:16:d0:58:0e:4c:d9:7c:97:ef:78:7a:79:64: 67:21:e9:8b:fd:4a:c0:0e:f7:9e:f7:e7:f7:b3:6e: 05:0e:44:54:f5:a2:8c:e5:72:e6:b3:4f:20:df:bb: 49:9f:f9:5d:3d:fc:52:24:be:e7:dc:86:31:68:da: f8:7f:d5:73:9b:06:cc:59:26:62:cf:8c:d9:a5:0b: 2e:58:da:36:cb:80:0c:45:39:a7:84:9b:80:a3:e3: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7F:23:5A:1C:18:FF:0D:55:B8:31:01:35:FC:26:45:9C:1E:F6:DE X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LX8jWhwY_w1VuDEBNfwmRZwe9t4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.18.0/24 Signature Algorithm: sha256WithRSAEncryption 34:d7:d6:a2:d7:4e:9e:c6:6d:17:fe:de:38:99:4b:96:69:cd: 71:e7:3a:d1:9d:9e:0b:1c:7a:a1:f8:ab:1a:6d:f8:6c:ce:8c: 3b:5d:31:28:4a:e9:db:da:d7:23:fa:c1:0f:77:5c:62:7a:90: 37:a3:85:52:82:c3:e0:8d:bf:89:5a:83:29:60:90:08:f1:ec: 8e:c8:32:cd:b8:de:a8:cd:15:f5:fb:7d:f7:7d:3f:a8:85:03: 47:16:76:42:5d:1f:8c:1d:d7:70:a5:3d:c2:78:60:a1:0e:f5: 2a:74:c7:48:37:37:bd:72:d9:3f:72:d0:5a:08:cd:e7:c9:3a: 5b:8e:3e:a7:04:ea:b1:d6:d8:58:87:b5:2d:95:06:a8:b9:8b: 88:19:d6:4e:94:0b:c8:a1:8f:8a:4a:93:0a:32:9d:ea:f6:83: 1b:e7:de:db:b1:6e:1f:66:5d:c4:e1:a3:fd:54:78:46:70:44: 0e:20:1f:48:79:15:a9:ee:2d:fc:c7:f7:c0:47:11:f7:d9:71: 95:8f:32:0b:cb:c0:6d:87:b9:a4:d1:a3:b2:69:a7:0b:ee:f5: e3:91:05:08:71:4e:41:59:4d:05:79:01:e9:c6:3a:e2:17:e3: 88:9a:89:92:14:6c:bb:d3:e2:75:72:09:f6:da:d6:5b:51:4d: f1:02:08:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSh9KT1C2yqHlQPSS+BpqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjUxMjEyMTIyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDdmMjM1YTFjMThmZjBkNTViODMxMDEzNWZjMjY0NTljMWVmNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfn/NmjmAwjdXAcipIJmK37CNIAj G+PQwIKfhvlCrMuUIMwOe1umqj2AXmVFq2Xxb5GI/y1x39E+4NQcU8T0U+qNi1Es t0Ewwh4bryonmbiU7PwzlrKKSgQJnRg1wtxsT/LzF7JH6RFh1SSULCgKCO8AamTg LzHPcsj57b3zvB3BBWbWafzfweZEKmmRz0joft3PKd7/El/eH5qAuAhExzURwX8X 9xbQWA5M2XyX73h6eWRnIemL/UrADvee9+f3s24FDkRU9aKM5XLms08g37tJn/ld PfxSJL7n3IYxaNr4f9VzmwbMWSZiz4zZpQsuWNo2y4AMRTmnhJuAo+NsBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC1/I1ocGP8NVbgxATX8JkWcHvbeMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvTFg4aldod1lfdzFWdURFQk5md21SWndlOXQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsSMA0G CSqGSIb3DQEBCwUAA4IBAQA019ai106exm0X/t44mUuWac1x5zrRnZ4LHHqh+Ksa bfhszow7XTEoSunb2tcj+sEPd1xiepA3o4VSgsPgjb+JWoMpYJAI8eyOyDLNuN6o zRX1+333fT+ohQNHFnZCXR+MHddwpT3CeGChDvUqdMdINze9ctk/ctBaCM3nyTpb jj6nBOqx1thYh7UtlQaouYuIGdZOlAvIoY+KSpMKMp3q9oMb597bsW4fZl3E4aP9 VHhGcEQOIB9IeRWp7i38x/fARxH32XGVjzILy8Bth7mk0aOyaacL7vXjkQUIcU5B WU0FeQHpxjriF+OImomSFGy70+J1cgn22tZbUU3xAgjH -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:41 2025 by rpki-client