This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa File: lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa (raw, json) Hash identifier: CREAI2bwdzAy9LxcYU7uoPR2XEXd4CUfcjb+D4ZYEk4= Subject key identifier: 95:76:53:F2:93:2D:B8:70:2A:E9:F2:AC:8A:14:07:5A:EF:2A:CF:94 Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Certificate serial: 019B797E88EA1B0940539129A3FD71791312 Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34134 IP address blocks: 185.25.144.0/23 maxlen: 23 185.25.146.0/23 maxlen: 23 195.160.212.0/23 maxlen: 23 195.160.214.0/23 maxlen: 23 2a04:15c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:88:ea:1b:09:40:53:91:29:a3:fd:71:79:13:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=957653f2932db8702ae9f2ac8a14075aef2acf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:de:bf:53:e5:ed:31:29:fa:0b:97:0c:cf: 67:01:b6:bf:86:67:5c:84:c1:08:ab:fa:cf:2f:52: b4:a7:86:08:b8:6a:0e:3f:d9:55:a2:ec:6c:c7:37: 3a:4d:14:39:f8:64:5b:32:85:54:ba:b4:73:60:8e: cf:ea:ef:b3:bb:b5:ef:71:ea:09:1b:8c:44:45:af: 91:cc:c0:a1:44:3e:3c:bf:eb:68:3a:90:b6:bb:ae: c4:f2:c4:94:b7:15:0c:84:6b:bb:12:a4:aa:6e:87: e3:9b:b7:8b:05:2c:12:80:5b:e7:39:db:29:aa:e0: 2a:41:37:99:f5:bf:91:be:63:b7:cc:79:66:8f:fc: 92:87:8a:2b:93:bd:09:26:5f:f1:8a:7f:a5:c8:cc: 15:42:79:68:41:e0:a9:86:34:19:89:7b:b2:54:1c: 48:27:36:7c:ec:37:d8:05:64:a7:f8:25:fd:7f:24: 44:07:e2:d4:20:6f:14:50:80:84:29:be:53:dd:67: 77:e4:05:ff:63:ee:13:fb:50:2f:a7:00:80:be:4a: 4f:98:6c:a5:16:c0:94:8c:e9:c6:45:df:0a:cb:da: 0a:e5:ed:e4:2d:e1:cf:c0:83:4d:62:c4:95:a1:1e: 68:48:dd:01:37:6d:0a:21:f2:64:5a:13:61:b5:67: cb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:53:F2:93:2D:B8:70:2A:E9:F2:AC:8A:14:07:5A:EF:2A:CF:94 X509v3 Authority Key Identifier: keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.144.0/22 195.160.212.0/22 IPv6: 2a04:15c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:ab:31:5e:98:6a:d6:53:05:4f:bb:55:4f:b6:eb:d9:9d:ea: 8d:22:ac:c7:e9:34:e1:60:09:25:4e:9c:59:a3:38:74:2a:47: 53:c0:87:2a:08:36:a8:c2:30:6f:36:4e:46:ff:52:7b:1c:56: b6:33:a5:fa:13:9e:39:b3:5e:4d:53:4e:f6:31:12:90:b8:27: 95:e9:0e:5a:17:61:68:f9:e2:9d:04:5d:d8:08:7e:1f:79:55: a7:7d:7b:35:77:b8:4d:7b:b0:26:14:ce:3a:22:53:76:33:c6: a3:ad:d9:8f:89:01:32:04:ce:8e:52:72:0c:d0:46:ad:f0:7b: 21:3b:be:59:c1:3f:e3:75:f2:8b:16:92:af:8f:2c:29:23:1d: ca:00:9f:3e:86:62:c8:39:a1:f5:67:99:3c:27:e4:2b:9b:f0: 75:59:68:2e:14:b2:5c:0e:5e:9a:5d:25:da:ef:c7:5a:a7:be: 88:92:91:0f:a5:7f:f2:a5:f9:43:46:ac:d3:99:f1:be:71:84: c1:49:43:1b:7e:58:34:bb:39:3e:ea:59:ce:e8:2d:7d:a4:46: 0a:92:f3:96:7f:6f:4e:71:b3:ee:86:13:f8:b3:fa:2f:1b:de: 2c:28:58:18:1a:ec:f1:ba:23:59:69:dd:88:b4:a2:3a:2e:ca: 8d:0b:b7:6c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fojqGwlAU5Epo/1xeRMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi NjgxOWIwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTc2NTNmMjkzMmRiODcwMmFlOWYyYWM4YTE0MDc1YWVmMmFjZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbPev1Pl7TEp+guXDM9nAba/hmdc hMEIq/rPL1K0p4YIuGoOP9lVouxsxzc6TRQ5+GRbMoVUurRzYI7P6u+zu7XvceoJ G4xERa+RzMChRD48v+toOpC2u67E8sSUtxUMhGu7EqSqbofjm7eLBSwSgFvnOdsp quAqQTeZ9b+RvmO3zHlmj/ySh4ork70JJl/xin+lyMwVQnloQeCphjQZiXuyVBxI JzZ87DfYBWSn+CX9fyREB+LUIG8UUICEKb5T3Wd35AX/Y+4T+1AvpwCAvkpPmGyl FsCUjOnGRd8Ky9oK5e3kLeHPwINNYsSVoR5oSN0BN20KIfJkWhNhtWfLNwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJV2U/KTLbhwKunyrIoUB1rvKs+UMB8GA1UdIwQY MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt MjRhZmNlZjRmM2Y1LzEvbFhaVDhwTXR1SEFxNmZLc2loUUhXdThxejVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1 LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRmQAwQC w6DUMA0EAgACMAcDBQMqBBXAMA0GCSqGSIb3DQEBCwUAA4IBAQCGqzFemGrWUwVP u1VPtuvZneqNIqzH6TThYAklTpxZozh0KkdTwIcqCDaowjBvNk5G/1J7HFa2M6X6 E545s15NU072MRKQuCeV6Q5aF2Fo+eKdBF3YCH4feVWnfXs1d7hNe7AmFM46IlN2 M8ajrdmPiQEyBM6OUnIM0Eat8HshO75ZwT/jdfKLFpKvjywpIx3KAJ8+hmLIOaH1 Z5k8J+Qrm/B1WWguFLJcDl6aXSXa78dap76IkpEPpX/ypflDRqzTmfG+cYTBSUMb flg0uzk+6lnO6C19pEYKkvOWf29OcbPuhhP4s/ovG94sKFgYGuzxuiNZad2ItKI6 LsqNC7ds -----END CERTIFICATE-----Generated at Mon Jan 12 16:07:29 2026 by rpki-client