This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/p_L2QpRj3ttW5zYJBodD2QWnHQk.roa File: p_L2QpRj3ttW5zYJBodD2QWnHQk.roa (raw, json) Hash identifier: jJxb3YNiA4DSQOly6eBKE2Fc+ul2//HbGqi6YUq+XKM= Subject key identifier: A7:F2:F6:42:94:63:DE:DB:56:E7:36:09:06:87:43:D9:05:A7:1D:09 Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Certificate serial: 019B7CEE6D60535667D376AAAF71B8CE257C Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/p_L2QpRj3ttW5zYJBodD2QWnHQk.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205697 IP address blocks: 185.161.96.0/22 maxlen: 24 185.161.96.0/24 maxlen: 24 185.161.97.0/24 maxlen: 24 185.161.98.0/24 maxlen: 24 185.161.99.0/24 maxlen: 24 195.216.234.0/24 maxlen: 24 195.216.238.0/24 maxlen: 24 195.216.245.0/24 maxlen: 24 195.216.247.0/24 maxlen: 24 2a0b:ef00::/29 maxlen: 32 2a0b:ef00::/32 maxlen: 32 2a0b:ef01::/32 maxlen: 32 2a0b:ef02::/32 maxlen: 32 2a0b:ef03::/32 maxlen: 32 2a0b:ef04::/32 maxlen: 32 2a0b:ef05::/32 maxlen: 32 2a0b:ef06::/32 maxlen: 32 2a0b:ef07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6d:60:53:56:67:d3:76:aa:af:71:b8:ce:25:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7f2f6429463dedb56e73609068743d905a71d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:d5:c3:0d:40:69:71:a3:a4:81:11:66:8f: 7b:3c:7d:5d:1a:cb:45:67:7e:37:76:e9:d7:f5:82: 9d:0d:c9:89:d2:2e:07:2d:35:1c:5c:7a:72:51:4a: 61:59:a0:69:78:7b:16:f2:06:9d:79:33:ad:3a:b4: 04:e8:20:e8:a8:78:23:a6:4b:c0:c8:e5:5e:06:fb: 62:d6:ea:7a:bb:68:d9:1b:c0:4e:85:67:a6:c3:b4: d1:ec:d3:d8:f7:58:e3:9e:0b:39:30:8a:42:9a:27: 06:3e:17:37:ad:4b:76:86:12:31:d9:eb:1b:73:38: 7a:37:d5:6b:56:e5:89:66:ee:c7:df:ed:e4:da:ba: c6:1d:a1:0c:05:77:96:7f:d9:db:0c:ee:4c:2c:59: 9a:d9:96:e0:d0:9c:2a:dd:a2:1f:1b:54:be:02:21: e5:4e:22:33:86:92:f5:a7:04:ae:29:bf:6d:fe:b3: c7:dd:99:1d:92:26:58:f3:b9:7e:f5:74:f2:0f:6b: e8:10:7b:42:36:63:0a:26:78:ef:8b:6e:30:80:cc: 14:a5:1c:0d:6c:5e:0a:bf:e0:ce:5d:ab:b1:87:f1: 1b:b8:65:16:46:b4:9b:e4:a1:94:c1:4e:7f:4f:44: 21:53:74:5e:dc:0f:46:81:da:3c:ed:95:c0:72:49: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F2:F6:42:94:63:DE:DB:56:E7:36:09:06:87:43:D9:05:A7:1D:09 X509v3 Authority Key Identifier: keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/p_L2QpRj3ttW5zYJBodD2QWnHQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.96.0/22 195.216.234.0/24 195.216.238.0/24 195.216.245.0/24 195.216.247.0/24 IPv6: 2a0b:ef00::/29 Signature Algorithm: sha256WithRSAEncryption 37:68:ed:e1:3b:28:1a:2d:41:a7:77:fc:11:f2:f9:af:4d:7b: 5f:1e:60:41:01:fd:a6:e0:b4:5c:f9:c1:e1:db:61:55:d9:44: e5:b6:6b:75:6f:32:d5:3c:d0:b6:1a:61:8b:a0:4f:79:84:d2: 4f:d3:75:59:e7:98:7b:ac:bf:29:19:57:53:ff:8c:31:49:c2: 5f:ae:04:24:e8:05:54:8a:75:00:82:ac:45:7c:84:79:29:ab: dd:81:52:ed:1f:f5:71:5e:6f:d7:40:b6:96:2e:7d:a2:95:71: 4d:8f:d2:0d:de:9b:0f:d2:ac:9b:9b:61:33:7b:e7:2c:8b:b7: 20:33:dc:62:bf:e4:45:7b:41:d2:77:0a:0a:60:8e:c3:c1:21: ef:17:78:3f:4f:00:68:3b:e7:55:e2:0b:5d:ed:79:15:86:b8: b1:8c:65:c6:c5:3b:41:67:00:ba:1c:1c:e1:0e:57:df:c8:c3: cc:f5:e1:e4:39:52:1a:d2:2d:06:e5:45:00:3d:bd:bc:cc:d1: d6:5a:76:dd:78:6c:a1:9b:67:fb:25:f8:94:c8:b7:fe:c6:1c: 52:96:f4:4d:d6:1d:87:ae:41:2e:4b:80:89:7d:93:cc:5f:95: 05:db:45:c9:63:b2:55:45:8c:1d:86:1c:9a:6d:14:e0:82:ae: 12:9e:b6:13 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt87m1gU1Zn03aqr3G4ziV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTJhMzk1NGUzMGU0NzUzZTJlMDBhMGVmODE2OTY2ZDZk NjBkYjYwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2YyZjY0Mjk0NjNkZWRiNTZlNzM2MDkwNjg3NDNkOTA1YTcxZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0LVww1AaXGjpIERZo97PH1dGstF Z343dunX9YKdDcmJ0i4HLTUcXHpyUUphWaBpeHsW8gadeTOtOrQE6CDoqHgjpkvA yOVeBvti1up6u2jZG8BOhWemw7TR7NPY91jjngs5MIpCmicGPhc3rUt2hhIx2esb czh6N9VrVuWJZu7H3+3k2rrGHaEMBXeWf9nbDO5MLFma2Zbg0Jwq3aIfG1S+AiHl TiIzhpL1pwSuKb9t/rPH3ZkdkiZY87l+9XTyD2voEHtCNmMKJnjvi24wgMwUpRwN bF4Kv+DOXauxh/EbuGUWRrSb5KGUwU5/T0QhU3Re3A9Ggdo87ZXAckkubwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFKfy9kKUY97bVuc2CQaHQ9kFpx0JMB8GA1UdIwQY MBaAFI5So5VOMOR1Pi4AoO+BaWbW1g22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEt Yjg1NmRiMzNjNmM2LzEvcF9MMlFwUmozdHRXNXpZSkJvZEQyUVduSFFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEtYjg1NmRiMzNjNmM2 LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuaFgAwQA w9jqAwQAw9juAwQAw9j1AwQAw9j3MA0EAgACMAcDBQMqC+8AMA0GCSqGSIb3DQEB CwUAA4IBAQA3aO3hOygaLUGnd/wR8vmvTXtfHmBBAf2m4LRc+cHh22FV2UTltmt1 bzLVPNC2GmGLoE95hNJP03VZ55h7rL8pGVdT/4wxScJfrgQk6AVUinUAgqxFfIR5 KavdgVLtH/VxXm/XQLaWLn2ilXFNj9IN3psP0qybm2Eze+csi7cgM9xiv+RFe0HS dwoKYI7DwSHvF3g/TwBoO+dV4gtd7XkVhrixjGXGxTtBZwC6HBzhDlffyMPM9eHk OVIa0i0G5UUAPb28zNHWWnbdeGyhm2f7JfiUyLf+xhxSlvRN1h2HrkEuS4CJfZPM X5UF20XJY7JVRYwdhhyabRTggq4SnrYT -----END CERTIFICATE-----Generated at Mon Jan 12 23:34:49 2026 by rpki-client