This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/lz_Kv4MR34b9ioxSq1KvvLYMw1A.roa File: lz_Kv4MR34b9ioxSq1KvvLYMw1A.roa (raw, json) Hash identifier: FDzknBM2sXHUXv1se1LKSwxzsmUPaNJockfbXOLs63s= Subject key identifier: 97:3F:CA:BF:83:11:DF:86:FD:8A:8C:52:AB:52:AF:BC:B6:0C:C3:50 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E9A804233CBADC90105DAA744B57 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/lz_Kv4MR34b9ioxSq1KvvLYMw1A.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47185 IP address blocks: 31.145.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e9:a8:04:23:3c:ba:dc:90:10:5d:aa:74:4b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=973fcabf8311df86fd8a8c52ab52afbcb60cc350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:10:60:e5:8b:e8:da:6a:46:c7:40:8d:fe: d3:4a:a1:3f:de:79:7c:5c:6a:5a:ef:6c:ef:b5:af: 02:29:16:00:80:b8:be:69:42:46:ae:06:6e:ea:4e: aa:86:5a:6f:7d:5e:8e:d1:b0:68:59:dd:c1:d7:42: ed:e5:8d:9d:da:e2:51:da:c3:25:0f:cd:0b:fa:bc: 75:81:67:c3:a3:40:71:44:c5:33:9f:2c:9f:78:0f: 7d:62:4f:b4:87:2a:b1:34:70:bd:03:b2:8a:ee:f2: 5e:de:e4:09:42:5e:b0:84:ba:75:76:89:f8:cb:06: 7e:42:57:83:ec:94:9f:e8:20:da:1e:47:fd:52:7b: a0:12:45:ec:4d:49:fe:24:a0:7b:b8:2a:39:8b:d7: 79:ce:28:ab:20:94:91:3d:72:42:36:64:6e:fd:d3: 5b:d5:a2:5b:3f:f8:49:0c:b6:19:63:4f:d3:d0:a4: 76:6a:a7:5c:9a:05:d0:2a:47:77:bd:6d:d0:e9:cd: c5:21:81:3e:02:0c:cb:6a:12:ca:71:6c:7e:b4:26: 42:94:25:12:ce:69:67:f7:cb:ac:c4:a4:00:a0:8d: f2:3c:95:6a:12:6e:01:47:72:b3:11:f4:69:72:9b: 87:12:93:cf:5a:e8:f3:5a:b9:04:d8:cc:cb:94:8f: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:CA:BF:83:11:DF:86:FD:8A:8C:52:AB:52:AF:BC:B6:0C:C3:50 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/lz_Kv4MR34b9ioxSq1KvvLYMw1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.145.88.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:af:47:bb:14:e5:5e:50:80:90:1b:27:c6:de:9d:cf:7a:68: 19:38:a4:a7:81:01:85:a0:57:71:e3:b5:14:22:1c:75:6f:12: 27:eb:da:2d:f5:6e:3f:0b:36:bd:fe:ad:6b:83:c8:21:25:96: 23:78:83:67:cc:c5:58:d9:6d:78:a4:ff:2e:dd:fd:50:2e:32: 91:c4:8e:fd:40:13:d1:f7:0e:0e:68:bb:72:df:d0:43:2c:72: de:86:10:2d:5d:8f:b9:92:dd:94:09:fa:03:7d:af:00:a3:83: da:31:e1:15:5f:25:f3:c0:5f:bc:9d:59:5e:c8:69:52:fa:96: f5:51:6e:3b:c6:a6:83:6b:58:ca:1a:04:9a:84:7b:38:b9:0a: de:13:44:ec:a3:c2:11:8d:37:cc:ee:87:60:53:d6:73:86:2b: f9:f4:bd:44:ce:65:ec:2b:9e:c3:1d:e2:b5:be:31:1d:90:cf: 75:51:fc:ae:88:e5:fa:dd:9f:38:ab:bb:05:c9:8e:05:9b:96: 79:32:78:9a:27:79:65:9e:59:ae:95:52:d2:0a:02:b8:3d:5b: d6:c8:f2:24:11:64:45:c4:7e:71:ab:00:8f:dc:62:b8:7c:fa: 7c:ce:6b:92:81:ed:2c:79:c1:71:71:6f:61:b1:12:24:75:5e: ed:03:07:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+moBCM8utyQEF2qdEtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzNmY2FiZjgzMTFkZjg2ZmQ4YThjNTJhYjUyYWZiY2I2MGNjMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4YQYOWL6NpqRsdAjf7TSqE/3nl8 XGpa72zvta8CKRYAgLi+aUJGrgZu6k6qhlpvfV6O0bBoWd3B10Lt5Y2d2uJR2sMl D80L+rx1gWfDo0BxRMUznyyfeA99Yk+0hyqxNHC9A7KK7vJe3uQJQl6whLp1don4 ywZ+QleD7JSf6CDaHkf9UnugEkXsTUn+JKB7uCo5i9d5ziirIJSRPXJCNmRu/dNb 1aJbP/hJDLYZY0/T0KR2aqdcmgXQKkd3vW3Q6c3FIYE+AgzLahLKcWx+tCZClCUS zmln98usxKQAoI3yPJVqEm4BR3KzEfRpcpuHEpPPWujzWrkE2MzLlI8GJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJc/yr+DEd+G/YqMUqtSr7y2DMNQMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvbHpfS3Y0TVIzNGI5aW94U3ExS3Z2TFlNdzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5FYMA0G CSqGSIb3DQEBCwUAA4IBAQCar0e7FOVeUICQGyfG3p3PemgZOKSngQGFoFdx47UU Ihx1bxIn69ot9W4/Cza9/q1rg8ghJZYjeINnzMVY2W14pP8u3f1QLjKRxI79QBPR 9w4OaLty39BDLHLehhAtXY+5kt2UCfoDfa8Ao4PaMeEVXyXzwF+8nVleyGlS+pb1 UW47xqaDa1jKGgSahHs4uQreE0Tso8IRjTfM7odgU9Zzhiv59L1EzmXsK57DHeK1 vjEdkM91UfyuiOX63Z84q7sFyY4Fm5Z5MniaJ3llnlmulVLSCgK4PVvWyPIkEWRF xH5xqwCP3GK4fPp8zmuSge0secFxcW9hsRIkdV7tAwdd -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:51 2026 by rpki-client