This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/LpI3PyYDEsil-gJ9EybHYHEQzSw.roa File: LpI3PyYDEsil-gJ9EybHYHEQzSw.roa (raw, json) Hash identifier: Bj0/Slyl4mS0qWkcQjxpCqfI9YGYFKmWx9MPsOE7/Uk= Subject key identifier: 2E:92:37:3F:26:03:12:C8:A5:FA:02:7D:13:26:C7:60:71:10:CD:2C Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Certificate serial: 019B7BA502EA57DC586390241C2F11116091 Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/LpI3PyYDEsil-gJ9EybHYHEQzSw.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 91.200.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:02:ea:57:dc:58:63:90:24:1c:2f:11:11:60:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e92373f260312c8a5fa027d1326c7607110cd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:da:03:bc:3f:13:6b:de:47:ac:e5:ed:9c: f6:0a:e2:2d:75:46:66:87:53:82:94:c8:88:02:58: b6:72:e4:2f:1e:ef:1a:6e:d2:0c:d0:20:d3:ba:33: 6f:eb:57:60:e0:91:f4:9c:a2:18:23:cb:09:91:1a: 7f:ce:2f:96:c8:08:d9:29:ce:80:d8:0d:e5:56:51: ca:3f:97:ef:3c:ac:c2:26:cb:6e:34:46:2f:cf:23: f8:9c:2e:ee:49:75:26:c4:b4:96:95:1a:55:fc:ff: d7:e5:69:7a:26:5e:7f:ea:b7:fd:d8:a8:b1:a0:87: 2b:0e:49:7a:13:f9:21:0a:7e:c0:97:b5:e9:d8:df: 0b:48:10:91:3a:c1:b6:0d:ee:37:50:d1:ef:97:b2: 9a:3b:eb:93:97:c5:4d:b5:7f:f8:d0:b5:bb:94:48: b6:d1:02:14:49:5a:63:e8:5d:96:3f:a4:b7:7d:cd: db:e1:fe:35:df:4d:45:a4:92:db:b1:e5:aa:48:b5: 1f:cf:05:6a:3d:d5:ca:f9:32:27:a7:b9:01:d7:c6: fa:b3:c3:48:19:ae:78:dc:45:66:98:d9:3d:06:ac: 71:15:32:e4:c8:32:41:fd:19:94:46:7d:b1:ff:fc: 02:6c:66:6b:95:44:0b:b8:da:3a:f3:1a:88:f7:14: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:37:3F:26:03:12:C8:A5:FA:02:7D:13:26:C7:60:71:10:CD:2C X509v3 Authority Key Identifier: keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/LpI3PyYDEsil-gJ9EybHYHEQzSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.56.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e1:c5:32:63:ea:39:6c:48:00:d6:6e:22:36:fd:e2:83:88: 63:8e:9d:0a:38:7f:58:55:10:f8:f7:db:00:43:ec:99:1e:9b: ac:1d:71:1f:67:ed:db:00:91:0e:52:64:db:c6:79:12:bc:db: 74:57:e2:2a:ee:ae:35:9e:40:2a:c9:f6:e8:ae:a6:0f:d4:df: 50:6d:3e:6f:0c:d3:9c:e8:ce:ff:9a:9d:f0:f1:14:f2:38:77: 91:65:7e:7f:06:0b:2f:6f:1d:3b:86:4f:2a:43:52:93:ae:9d: 4b:59:ed:c4:ef:24:db:84:df:8b:bf:2b:42:4e:e7:94:f6:3d: af:79:4f:33:f1:2c:d8:69:12:f5:95:81:b9:fd:1b:ca:f5:70: f7:9b:0a:d4:f3:95:b4:ec:58:ae:4b:31:54:f6:9c:7c:76:94: 4c:77:70:12:c7:80:b7:62:95:4e:b0:30:fd:fd:b7:4e:2b:13: f4:4b:f3:e1:e9:e3:f1:4f:f4:b2:f8:a4:fb:89:70:9e:99:17: 94:9d:af:7e:35:b3:88:d8:a4:f3:e2:fc:74:b6:22:f7:00:96: f7:74:e3:05:16:d8:31:3b:00:62:0f:58:43:c5:c4:9c:a8:99: f7:91:8f:df:1b:f0:d6:8a:d8:cc:98:1f:de:1b:c9:9a:5d:c3: de:a1:f3:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQLqV9xYY5AkHC8REWCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy MjI2MjUwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTkyMzczZjI2MDMxMmM4YTVmYTAyN2QxMzI2Yzc2MDcxMTBjZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C/aA7w/E2veR6zl7Zz2CuItdUZm h1OClMiIAli2cuQvHu8abtIM0CDTujNv61dg4JH0nKIYI8sJkRp/zi+WyAjZKc6A 2A3lVlHKP5fvPKzCJstuNEYvzyP4nC7uSXUmxLSWlRpV/P/X5Wl6Jl5/6rf92Kix oIcrDkl6E/khCn7Al7Xp2N8LSBCROsG2De43UNHvl7KaO+uTl8VNtX/40LW7lEi2 0QIUSVpj6F2WP6S3fc3b4f41301FpJLbseWqSLUfzwVqPdXK+TInp7kB18b6s8NI Ga543EVmmNk9BqxxFTLkyDJB/RmURn2x//wCbGZrlUQLuNo68xqI9xQH0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6SNz8mAxLIpfoCfRMmx2BxEM0sMB8GA1UdIwQY MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt MDhlOGYwY2JiODQwLzEvTHBJM1B5WURFc2lsLWdKOUV5YkhZSEVRelN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8g4MA0G CSqGSIb3DQEBCwUAA4IBAQBp4cUyY+o5bEgA1m4iNv3ig4hjjp0KOH9YVRD499sA Q+yZHpusHXEfZ+3bAJEOUmTbxnkSvNt0V+Iq7q41nkAqyfborqYP1N9QbT5vDNOc 6M7/mp3w8RTyOHeRZX5/Bgsvbx07hk8qQ1KTrp1LWe3E7yTbhN+LvytCTueU9j2v eU8z8SzYaRL1lYG5/RvK9XD3mwrU85W07FiuSzFU9px8dpRMd3ASx4C3YpVOsDD9 /bdOKxP0S/Ph6ePxT/Sy+KT7iXCemReUna9+NbOI2KTz4vx0tiL3AJb3dOMFFtgx OwBiD1hDxcScqJn3kY/fG/DWitjMmB/eG8maXcPeofP4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:00 2026 by rpki-client