This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LXfffFGPNJsojaH0LT2X2o7HWcs.roa File: LXfffFGPNJsojaH0LT2X2o7HWcs.roa (raw, json) Hash identifier: RMyMgQIdYGAoz6FL877GwLfE/bNrX4aBGW7F1wW3n1c= Subject key identifier: 2D:77:DF:7C:51:8F:34:9B:28:8D:A1:F4:2D:3D:97:DA:8E:C7:59:CB Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806892637190EBDB4015A2689D509C Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LXfffFGPNJsojaH0LT2X2o7HWcs.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201786 IP address blocks: 91.239.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:68:92:63:71:90:eb:db:40:15:a2:68:9d:50:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d77df7c518f349b288da1f42d3d97da8ec759cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:52:a0:39:4f:17:6f:ea:41:4c:02:9d:04:02: c1:05:5d:2b:9c:59:8b:86:9a:12:09:0e:4a:6d:7e: c2:06:71:3a:64:be:c8:6f:ec:05:d4:96:b4:4c:08: 49:10:0b:f4:13:b1:f3:16:56:31:bc:09:4a:c1:50: 96:0f:b6:25:88:20:ae:49:19:35:d7:b2:bb:6a:aa: da:a3:3b:bc:6d:f1:11:39:20:04:9e:6e:e5:19:17: db:cf:fa:b2:7f:22:fb:29:7a:40:90:f8:3a:da:46: 8f:5d:7d:5d:89:a2:1a:ce:2e:16:da:98:17:bd:70: a5:92:6c:79:76:75:22:09:7e:15:b8:cd:a1:7f:e6: d6:f7:03:c1:72:cb:0e:2f:02:38:88:06:3e:f3:da: e3:10:e6:e1:14:7a:c7:a6:e8:e4:5a:bc:b6:31:b1: ae:06:24:85:43:cd:ce:9d:2f:9d:fd:9b:89:24:c2: ac:49:5c:fa:e6:36:53:70:3a:54:99:90:c5:42:34: 8d:16:8d:cf:99:c9:8b:8b:8b:41:b2:33:60:be:b2: 33:31:ea:d0:ae:be:03:d0:d6:9f:68:64:fa:5f:21: dc:d4:d6:4f:47:a4:87:2c:8d:6b:f1:f7:41:0f:1c: 8f:07:fc:e2:61:6a:ad:f3:8c:1d:cf:71:06:69:33: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:DF:7C:51:8F:34:9B:28:8D:A1:F4:2D:3D:97:DA:8E:C7:59:CB X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LXfffFGPNJsojaH0LT2X2o7HWcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.227.0/24 Signature Algorithm: sha256WithRSAEncryption 36:31:ac:e6:50:49:4c:cf:d1:2e:64:d2:47:a8:82:4c:19:5f: 3a:3f:27:45:32:0c:12:7c:53:aa:cb:73:81:67:80:06:3a:85: c0:3d:ce:3e:ed:a4:4e:a3:4d:16:d2:b9:77:39:16:53:86:76: b3:fe:b0:77:bb:6d:0f:92:a1:08:1f:d2:97:96:7f:bd:b3:e5: 29:1e:25:c8:63:7f:aa:f3:50:19:bf:23:51:20:f8:15:b8:61: b4:b8:89:2b:1f:a2:82:c1:c8:44:0d:1f:e0:ed:83:de:e1:12: 23:ce:97:94:f6:81:9c:a4:72:55:9b:a9:db:ec:d2:e4:45:14: d3:a7:bf:6f:b9:d0:99:36:3a:1e:0d:49:fb:74:80:82:f5:5b: b9:a1:82:81:29:83:88:ac:e5:0f:89:00:d9:5b:ce:6c:7e:40: 74:1d:4b:92:7b:2a:8b:7a:a0:d2:d0:9b:e6:49:2a:42:fc:09: 89:e7:7f:08:57:61:82:85:e0:39:54:06:48:dc:9e:31:c5:e7: 60:aa:5e:4a:aa:11:bb:d7:58:3c:25:af:f0:b1:a3:88:ec:45: 5f:79:c0:da:7a:34:fb:b0:27:9d:e0:5f:d0:bf:00:5d:36:ad: a6:5d:f9:bd:db:2a:11:cf:42:1e:c9:bf:54:ba:f9:8d:d1:8a: 96:2d:44:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGiSY3GQ69tAFaJonVCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc3ZGY3YzUxOGYzNDliMjg4ZGExZjQyZDNkOTdkYThlYzc1OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFKgOU8Xb+pBTAKdBALBBV0rnFmL hpoSCQ5KbX7CBnE6ZL7Ib+wF1Ja0TAhJEAv0E7HzFlYxvAlKwVCWD7YliCCuSRk1 17K7aqraozu8bfEROSAEnm7lGRfbz/qyfyL7KXpAkPg62kaPXX1diaIazi4W2pgX vXClkmx5dnUiCX4VuM2hf+bW9wPBcssOLwI4iAY+89rjEObhFHrHpujkWry2MbGu BiSFQ83OnS+d/ZuJJMKsSVz65jZTcDpUmZDFQjSNFo3PmcmLi4tBsjNgvrIzMerQ rr4D0NafaGT6XyHc1NZPR6SHLI1r8fdBDxyPB/ziYWqt84wdz3EGaTOmNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC1333xRjzSbKI2h9C09l9qOx1nLMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvTFhmZmZGR1BOSnNvamFIMExUMlgybzdIV2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/jMA0G CSqGSIb3DQEBCwUAA4IBAQA2MazmUElMz9EuZNJHqIJMGV86PydFMgwSfFOqy3OB Z4AGOoXAPc4+7aROo00W0rl3ORZThnaz/rB3u20PkqEIH9KXln+9s+UpHiXIY3+q 81AZvyNRIPgVuGG0uIkrH6KCwchEDR/g7YPe4RIjzpeU9oGcpHJVm6nb7NLkRRTT p79vudCZNjoeDUn7dICC9Vu5oYKBKYOIrOUPiQDZW85sfkB0HUuSeyqLeqDS0Jvm SSpC/AmJ538IV2GCheA5VAZI3J4xxedgql5KqhG711g8Ja/wsaOI7EVfecDaejT7 sCed4F/QvwBdNq2mXfm92yoRz0Ieyb9UuvmN0YqWLUQA -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:23 2026 by rpki-client