This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/Lz876iU0xtfcqSVTekYcUEB8rNY.roa File: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (raw, json) Hash identifier: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI= Subject key identifier: 2F:3F:3B:EA:25:34:C6:D7:DC:A9:25:53:7A:46:1C:50:40:7C:AC:D6 Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671 Certificate serial: 019B78A2ADC6B7CA11876EAE9F23E7500BA4 Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/Lz876iU0xtfcqSVTekYcUEB8rNY.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56729 IP address blocks: 93.189.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ad:c6:b7:ca:11:87:6e:ae:9f:23:e7:50:0b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f3f3bea2534c6d7dca925537a461c50407cacd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:d9:bf:9a:77:ef:1b:53:5e:48:f9:2e:dc: 5d:c2:c7:22:3e:6c:88:4d:1e:8c:c4:2e:c8:33:95: 7e:f0:8a:ef:2f:4f:5e:8f:34:1d:74:5d:17:fc:48: 25:11:4c:23:54:6e:ec:30:64:64:d2:ab:ef:7b:3f: f3:a7:00:1b:c4:3e:7e:d1:76:ce:ba:27:da:ae:9b: fc:ce:d2:bf:78:67:03:63:36:8b:87:aa:fe:02:49: 0d:46:59:fa:02:25:d1:c0:47:26:bc:e3:10:bc:82: fa:76:ed:8a:0d:e8:8f:2a:e9:6b:7b:5c:be:a6:65: 4e:ea:02:ad:3a:4f:6b:07:6e:56:5b:85:6c:03:17: 5c:82:27:79:6e:aa:82:1e:1e:53:12:8c:b9:b0:f6: bb:f2:b5:73:04:6c:35:60:56:61:5e:be:cd:ad:be: bd:95:97:27:04:c5:f6:e6:3a:57:9f:d6:e0:72:fc: 1e:c9:07:b9:10:c4:e6:73:06:dd:bb:09:f1:17:10: a5:5d:67:13:3f:5e:ba:63:02:5b:20:fa:d8:55:b0: 37:48:77:05:be:1c:be:b5:7a:d5:59:2b:8e:c0:ef: 65:a9:6f:03:08:95:b1:81:fa:d8:ed:67:40:9d:30: 0b:d6:fd:84:4a:3a:b8:81:b9:c9:3c:93:e3:ba:3d: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:3B:EA:25:34:C6:D7:DC:A9:25:53:7A:46:1C:50:40:7C:AC:D6 X509v3 Authority Key Identifier: keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/Lz876iU0xtfcqSVTekYcUEB8rNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.126.0/23 Signature Algorithm: sha256WithRSAEncryption ba:34:f5:37:be:73:db:d7:5d:3e:e4:ff:64:54:41:b0:d9:39: 1a:ae:71:ab:d1:a6:5f:48:67:eb:73:0b:53:7b:21:a6:89:90: cb:e2:05:46:be:c6:c5:92:32:a3:5c:b7:14:7b:81:6b:04:0c: 36:26:c0:d2:4b:56:90:04:4d:a8:06:a2:6b:ab:4c:40:c4:54: c2:d0:7c:58:1f:09:cb:65:1b:cd:10:8d:d4:08:86:d4:66:48: 44:5e:b8:34:0f:79:43:73:98:e4:ed:0b:b7:1b:f2:8c:6e:e9: fe:a6:26:50:61:e4:99:60:21:40:95:ff:1f:ec:5c:4d:55:65: 6a:f2:ab:be:b8:b7:41:04:c2:b4:7b:5d:c2:e6:9c:d1:ce:7a: 61:ee:94:22:ff:a0:77:87:1a:c2:ac:7f:19:62:45:a7:bc:64: 3d:e0:81:17:3e:5b:29:c4:27:85:02:d9:2b:f1:81:70:e4:7d: 73:a9:f0:89:5e:e8:70:22:43:09:2a:db:35:af:a4:50:5e:b3: e7:a3:75:eb:55:5d:fc:1b:f8:8c:45:f0:92:2e:26:c7:be:a7: e8:88:27:1d:8d:06:4f:50:ba:95:b3:1b:b3:e9:e5:cf:b7:df: 89:cf:23:21:42:c0:91:06:4b:7e:53:28:e9:e7:74:0e:52:cb: e5:de:97:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oq3Gt8oRh26unyPnUAukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3 YzE2NzEwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjNmM2JlYTI1MzRjNmQ3ZGNhOTI1NTM3YTQ2MWM1MDQwN2NhY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3/Zv5p37xtTXkj5LtxdwsciPmyI TR6MxC7IM5V+8IrvL09ejzQddF0X/EglEUwjVG7sMGRk0qvvez/zpwAbxD5+0XbO uifarpv8ztK/eGcDYzaLh6r+AkkNRln6AiXRwEcmvOMQvIL6du2KDeiPKulre1y+ pmVO6gKtOk9rB25WW4VsAxdcgid5bqqCHh5TEoy5sPa78rVzBGw1YFZhXr7Nrb69 lZcnBMX25jpXn9bgcvweyQe5EMTmcwbduwnxFxClXWcTP166YwJbIPrYVbA3SHcF vhy+tXrVWSuOwO9lqW8DCJWxgfrY7WdAnTAL1v2ESjq4gbnJPJPjuj0hJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC8/O+olNMbX3KklU3pGHFBAfKzWMB8GA1UdIwQY MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt YjY0Y2FiNGJiZGZmLzEvTHo4NzZpVTB4dGZjcVNWVGVrWWNVRUI4ck5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXb1+MA0G CSqGSIb3DQEBCwUAA4IBAQC6NPU3vnPb110+5P9kVEGw2TkarnGr0aZfSGfrcwtT eyGmiZDL4gVGvsbFkjKjXLcUe4FrBAw2JsDSS1aQBE2oBqJrq0xAxFTC0HxYHwnL ZRvNEI3UCIbUZkhEXrg0D3lDc5jk7Qu3G/KMbun+piZQYeSZYCFAlf8f7FxNVWVq 8qu+uLdBBMK0e13C5pzRznph7pQi/6B3hxrCrH8ZYkWnvGQ94IEXPlspxCeFAtkr 8YFw5H1zqfCJXuhwIkMJKts1r6RQXrPno3XrVV38G/iMRfCSLibHvqfoiCcdjQZP ULqVsxuz6eXPt9+JzyMhQsCRBkt+Uyjp53QOUsvl3pdE -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:05 2026 by rpki-client