This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/nLzx58TFso7KcSU-xZqQFwqs76E.roa File: nLzx58TFso7KcSU-xZqQFwqs76E.roa (raw, json) Hash identifier: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc= Subject key identifier: 9C:BC:F1:E7:C4:C5:B2:8E:CA:71:25:3E:C5:9A:90:17:0A:AC:EF:A1 Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b Certificate serial: 019B7BA4F5020986713FB106BC98EC2549F0 Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/nLzx58TFso7KcSU-xZqQFwqs76E.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213692 IP address blocks: 91.238.195.0/24 maxlen: 24 2a13:dc80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f5:02:09:86:71:3f:b1:06:bc:98:ec:25:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cbcf1e7c4c5b28eca71253ec59a90170aacefa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:ef:88:8c:c1:0c:58:14:83:21:13:96:78: e6:9a:9f:50:48:67:42:ab:e0:b9:49:76:d2:76:e5: d6:5a:6a:cd:f9:19:14:83:df:f8:38:9a:68:d9:fa: b3:7b:a0:41:e5:09:a0:83:1b:7e:20:66:99:0e:11: fa:36:fc:2d:78:79:8c:34:c6:3a:9e:f9:16:83:83: 6d:22:a8:b8:0a:c3:03:ab:ad:72:68:8a:7d:4c:7c: d0:da:92:25:71:a3:66:e8:de:ae:4a:f8:c8:7c:77: e5:d8:5f:3b:41:bf:22:df:7b:55:9f:e5:86:49:39: 22:52:96:e0:b4:a6:88:51:e0:ba:11:df:b5:a9:72: 9f:1c:85:57:46:59:97:5b:3a:d2:a6:7a:61:3d:9b: 1f:5f:82:5a:59:8a:8a:8b:c6:8f:e8:91:a2:e7:60: 56:f6:1a:09:b4:84:55:f5:55:0d:f6:57:e2:3c:9a: 49:d8:19:a8:67:59:43:a6:60:6a:d9:22:95:db:f9: 73:5a:ff:5d:9d:d9:6a:bc:70:34:93:2f:5c:96:22: 13:bf:06:fa:47:ef:c7:ec:0c:2d:1e:a2:5d:49:e9: 8f:1f:01:56:fe:e5:1f:5e:8f:80:1b:b8:1e:7d:34: 9e:2b:81:ec:5c:13:2f:9f:1b:99:15:d5:73:b2:c8: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BC:F1:E7:C4:C5:B2:8E:CA:71:25:3E:C5:9A:90:17:0A:AC:EF:A1 X509v3 Authority Key Identifier: keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/nLzx58TFso7KcSU-xZqQFwqs76E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.195.0/24 IPv6: 2a13:dc80::/29 Signature Algorithm: sha256WithRSAEncryption 18:81:92:77:f4:95:a6:e0:d4:5e:35:dd:36:ad:6a:fc:5f:dc: 1d:70:18:6d:de:86:83:8b:4c:c2:4c:59:39:00:c0:25:1c:64: 30:f2:d5:95:55:1f:c3:a7:3c:74:03:a8:a8:88:71:b3:68:ff: 17:79:e9:37:7e:9c:a8:d7:cf:98:84:bb:48:27:a8:45:06:e4: f1:ce:a8:5e:f3:0f:91:68:c8:71:58:b2:6d:8a:95:1e:89:77: 63:cf:49:fd:32:dc:93:49:7e:4a:5b:4b:95:af:b0:63:99:3c: 13:3f:f3:e3:5d:b7:d8:d5:3d:6b:ba:cb:17:85:4c:06:39:c0: 34:2f:d7:7b:8a:71:23:cd:10:2c:65:e0:71:5d:96:82:7a:27: 72:9d:dd:95:30:16:64:4a:51:20:55:9d:df:a3:2b:e0:d0:1d: 93:41:09:b5:14:12:ae:fb:ce:c5:5b:d8:cc:e0:24:c6:a3:f7: 75:e6:93:55:51:b4:82:8a:7d:80:c9:cd:35:2e:03:b1:0b:92: 41:79:12:ce:03:b1:ef:a4:01:a0:af:4b:8d:33:a9:80:85:58: 9e:27:14:40:60:65:62:54:65:c2:c6:fa:b0:33:c7:ea:94:23: 4f:6f:1e:a7:01:2d:7f:64:ff:79:02:5a:39:62:18:1d:7d:93: e2:3c:46:e7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pPUCCYZxP7EGvJjsJUnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0 ZDhlN2IwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2JjZjFlN2M0YzViMjhlY2E3MTI1M2VjNTlhOTAxNzBhYWNlZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxrviIzBDFgUgyETlnjmmp9QSGdC q+C5SXbSduXWWmrN+RkUg9/4OJpo2fqze6BB5Qmggxt+IGaZDhH6NvwteHmMNMY6 nvkWg4NtIqi4CsMDq61yaIp9THzQ2pIlcaNm6N6uSvjIfHfl2F87Qb8i33tVn+WG STkiUpbgtKaIUeC6Ed+1qXKfHIVXRlmXWzrSpnphPZsfX4JaWYqKi8aP6JGi52BW 9hoJtIRV9VUN9lfiPJpJ2BmoZ1lDpmBq2SKV2/lzWv9dndlqvHA0ky9cliITvwb6 R+/H7AwtHqJdSemPHwFW/uUfXo+AG7gefTSeK4HsXBMvnxuZFdVzssgmDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJy88efExbKOynElPsWakBcKrO+hMB8GA1UdIwQY MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt MTM0MWRlOGFiZTUxLzEvbkx6eDU4VEZzbzdLY1NVLXhacVFGd3FzNzZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+7DMA0E AgACMAcDBQMqE9yAMA0GCSqGSIb3DQEBCwUAA4IBAQAYgZJ39JWm4NReNd02rWr8 X9wdcBht3oaDi0zCTFk5AMAlHGQw8tWVVR/Dpzx0A6ioiHGzaP8Xeek3fpyo18+Y hLtIJ6hFBuTxzqhe8w+RaMhxWLJtipUeiXdjz0n9MtyTSX5KW0uVr7BjmTwTP/Pj XbfY1T1russXhUwGOcA0L9d7inEjzRAsZeBxXZaCeidynd2VMBZkSlEgVZ3foyvg 0B2TQQm1FBKu+87FW9jM4CTGo/d15pNVUbSCin2Ayc01LgOxC5JBeRLOA7HvpAGg r0uNM6mAhVieJxRAYGViVGXCxvqwM8fqlCNPbx6nAS1/ZP95Alo5YhgdfZPiPEbn -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:38 2026 by rpki-client