This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/LNkknaOANYr2AA8ZuXpEtPtOI2U.roa File: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (raw, json) Hash identifier: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8= Subject key identifier: 2C:D9:24:9D:A3:80:35:8A:F6:00:0F:19:B9:7A:44:B4:FB:4E:23:65 Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019B7F84B571280131961C44CFC59F245B0A Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/LNkknaOANYr2AA8ZuXpEtPtOI2U.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 193.53.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b5:71:28:01:31:96:1c:44:cf:c5:9f:24:5b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd9249da380358af6000f19b97a44b4fb4e2365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:05:10:f3:51:31:e5:f7:93:93:73:b6:c8: ec:75:63:56:52:9a:a8:8d:b0:30:97:33:b7:e1:00: 17:e0:27:e7:99:33:5e:31:fc:65:e1:37:26:f8:01: 95:90:c6:9e:29:9a:f6:fc:62:59:7a:05:15:d0:9b: 57:db:ed:90:3c:3e:b8:a0:3b:d8:b7:a8:73:1e:2c: 42:86:1c:a9:2d:8a:99:54:0e:3c:a3:68:d9:0d:2a: a7:f8:d3:24:0e:0a:07:f5:4c:67:76:aa:af:a1:3f: cd:7c:49:64:9b:58:d4:9b:f1:5d:b3:0d:af:4c:ad: e7:93:50:71:2f:5f:3e:5c:79:5a:a5:e2:07:42:87: fb:29:9c:27:22:30:9e:dc:19:c7:53:66:9c:de:28: e5:51:20:17:04:ef:2a:b4:55:06:ca:52:61:d4:81: ce:2f:53:0a:75:be:63:49:64:6d:84:b2:aa:d0:96: 8c:6a:0f:1c:91:71:1c:9c:62:df:ba:17:97:df:cf: 71:85:18:28:94:6c:47:54:26:87:23:d1:b2:55:fd: 56:9f:f6:32:0c:a0:e6:4e:cf:a6:f5:c2:85:7f:1e: d8:97:ce:98:fc:55:39:5a:21:1b:2e:36:39:75:07: 8d:ea:bb:1a:9c:e4:af:86:8e:ce:a9:69:18:4a:18: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:24:9D:A3:80:35:8A:F6:00:0F:19:B9:7A:44:B4:FB:4E:23:65 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/LNkknaOANYr2AA8ZuXpEtPtOI2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.249.0/24 Signature Algorithm: sha256WithRSAEncryption b7:0d:a1:7b:a0:f2:6e:03:f7:20:3a:67:1c:30:ff:1f:e4:19: 53:ad:1c:09:2d:91:ab:ad:28:3a:e4:ee:81:51:ec:72:89:02: df:b7:1a:ae:4d:66:ab:22:10:34:a7:4b:a9:39:6d:15:28:68: e7:ad:ec:d7:1e:3e:eb:d8:69:6e:a9:bd:6b:14:4c:72:5c:02: 8a:64:a4:2a:3d:b6:a7:9e:88:39:da:94:b8:9a:bd:01:6b:3b: ef:39:aa:f1:0f:e2:b7:95:f1:51:03:68:e3:cf:0e:8b:59:32: da:bb:43:3f:be:ab:7d:27:67:06:14:ab:6a:3c:de:9d:29:57: 6a:2f:63:bf:88:a4:9a:9b:c3:91:e2:d0:81:a2:bf:19:c9:de: 87:60:9c:a4:ac:09:9f:b4:fe:25:28:93:63:ac:7d:ac:d6:a4: 36:ab:9f:69:fd:cd:a8:81:ce:a2:cd:4f:6c:83:94:01:a0:39: 1c:21:b6:91:95:c5:b2:8f:2e:8d:a5:d2:ac:5b:2f:7d:b7:94: 21:60:04:12:86:96:6d:5a:2a:11:fe:52:74:3c:da:49:d4:90: e3:58:70:e6:2a:a4:79:d6:f3:09:7d:1a:c7:a4:b7:15:06:03: 87:e3:b2:b2:af:8f:9a:9d:d2:9d:ae:51:94:25:d5:b5:42:57: 2e:1f:6d:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLVxKAExlhxEz8WfJFsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Q5MjQ5ZGEzODAzNThhZjYwMDBmMTliOTdhNDRiNGZiNGUyMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EgFEPNRMeX3k5NztsjsdWNWUpqo jbAwlzO34QAX4CfnmTNeMfxl4Tcm+AGVkMaeKZr2/GJZegUV0JtX2+2QPD64oDvY t6hzHixChhypLYqZVA48o2jZDSqn+NMkDgoH9UxndqqvoT/NfElkm1jUm/Fdsw2v TK3nk1BxL18+XHlapeIHQof7KZwnIjCe3BnHU2ac3ijlUSAXBO8qtFUGylJh1IHO L1MKdb5jSWRthLKq0JaMag8ckXEcnGLfuheX389xhRgolGxHVCaHI9GyVf1Wn/Yy DKDmTs+m9cKFfx7Yl86Y/FU5WiEbLjY5dQeN6rsanOSvho7OqWkYShjEQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzZJJ2jgDWK9gAPGbl6RLT7TiNlMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvTE5ra25hT0FOWXIyQUE4WnVYcEV0UHRPSTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTX5MA0G CSqGSIb3DQEBCwUAA4IBAQC3DaF7oPJuA/cgOmccMP8f5BlTrRwJLZGrrSg65O6B UexyiQLftxquTWarIhA0p0upOW0VKGjnrezXHj7r2Gluqb1rFExyXAKKZKQqPban nog52pS4mr0BazvvOarxD+K3lfFRA2jjzw6LWTLau0M/vqt9J2cGFKtqPN6dKVdq L2O/iKSam8OR4tCBor8Zyd6HYJykrAmftP4lKJNjrH2s1qQ2q59p/c2ogc6izU9s g5QBoDkcIbaRlcWyjy6NpdKsWy99t5QhYAQShpZtWioR/lJ0PNpJ1JDjWHDmKqR5 1vMJfRrHpLcVBgOH47Kyr4+andKdrlGUJdW1QlcuH23r -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:25 2026 by rpki-client