This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/LVnCjRcjjJugeZU7F2u-KxJtwAQ.roa File: LVnCjRcjjJugeZU7F2u-KxJtwAQ.roa (raw, json) Hash identifier: ylxQWgfVVWwm78l5Bka4wgWgmP/rLMqGsxRUOuQhgFc= Subject key identifier: 2D:59:C2:8D:17:23:8C:9B:A0:79:95:3B:17:6B:BE:2B:12:6D:C0:04 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019AB4EF56D57FC5B9287FC0C6B2FE91A43E Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/LVnCjRcjjJugeZU7F2u-KxJtwAQ.roa Signing time: Mon 24 Nov 2025 08:16:15 +0000 ROA not before: Mon 24 Nov 2025 08:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 89.23.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:ef:56:d5:7f:c5:b9:28:7f:c0:c6:b2:fe:91:a4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Nov 24 08:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d59c28d17238c9ba079953b176bbe2b126dc004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:80:0b:e0:78:b3:a0:f2:b5:09:12:b3:8d:f1: cb:0d:ec:23:72:d5:00:cf:fd:e3:8d:b1:db:b3:d5: ef:d5:fb:82:d5:ab:ba:bd:a0:1c:47:54:c5:4c:05: 64:63:cb:c9:45:8f:6e:39:b7:79:ff:b1:ee:af:5e: 5e:10:47:5b:e7:fe:9b:aa:2a:6e:cc:51:32:0e:1d: f2:6f:1d:b3:70:28:64:eb:06:ad:10:dc:ed:b5:33: 0e:cf:50:55:75:33:51:bc:4b:0d:10:ff:be:6a:72: 1f:d0:d1:6c:45:51:3d:bd:de:88:e8:61:e2:3c:bb: 1c:72:20:51:55:39:fb:3d:97:5a:7c:85:7a:0d:2f: ca:26:1d:0b:6b:7b:28:a7:81:34:5f:16:40:05:4d: 3f:98:56:6d:bf:b8:e6:5b:7e:91:d0:6e:76:fb:17: f5:ca:91:5a:3e:a2:85:54:bb:fe:97:1a:3b:58:68: 46:99:15:9b:69:3f:0d:2e:4d:0c:65:8d:d3:93:f9: 8f:b8:fd:e6:0b:b7:5a:9e:97:c2:a4:d7:a6:9c:6f: ba:e2:3f:a8:26:8e:5b:84:87:cd:0a:19:61:d2:04: 96:18:f4:98:9a:9a:32:35:30:30:56:b4:b3:a1:cc: 6b:db:af:98:c4:4f:1e:f4:fc:0a:9b:73:59:e1:d7: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:C2:8D:17:23:8C:9B:A0:79:95:3B:17:6B:BE:2B:12:6D:C0:04 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/LVnCjRcjjJugeZU7F2u-KxJtwAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.66.0/24 Signature Algorithm: sha256WithRSAEncryption 89:5c:7c:66:e9:aa:22:f0:6e:10:3b:94:2c:32:66:c6:5b:b1: f4:a8:90:f6:9b:e3:ef:d6:2b:32:22:ed:01:89:d4:88:9f:b3: 85:39:28:04:ac:e1:e5:1f:43:52:ee:90:b2:01:63:d6:65:5b: 12:5e:c1:f1:97:8f:58:14:bb:0f:d9:b9:7e:a4:4a:66:79:61: 47:cd:60:ca:c7:bb:eb:aa:98:99:13:13:a0:05:6a:c4:df:0b: 13:2e:ef:76:5f:cd:34:72:cb:b6:c9:28:68:0e:53:21:7a:29: 05:db:64:cc:74:c6:af:28:47:48:9d:6d:4e:17:0a:bd:79:40: da:0e:e9:ad:bf:6e:87:7b:58:df:29:6f:48:94:e1:8f:e2:1b: 74:ae:59:74:06:b2:ce:24:c7:e6:14:b4:2b:40:d0:a5:93:1f: 57:07:34:43:9b:8d:5a:0b:84:00:06:4b:24:c8:47:b4:be:da: 83:ac:2b:6c:cf:12:85:31:b4:e5:95:48:65:84:bc:91:bd:82: 18:dc:6c:85:eb:a0:36:d2:b2:5b:56:c8:31:b2:c1:6c:7c:2d: 1e:25:a0:0a:8d:57:f2:68:fa:fe:9b:85:d0:57:84:5a:f5:74: 10:ab:c5:30:0e:3f:50:62:97:0c:54:a8:25:80:6d:af:0e:7b: 60:d9:ce:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq071bVf8W5KH/AxrL+kaQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMTI0MDgxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDU5YzI4ZDE3MjM4YzliYTA3OTk1M2IxNzZiYmUyYjEyNmRjMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IAL4HizoPK1CRKzjfHLDewjctUA z/3jjbHbs9Xv1fuC1au6vaAcR1TFTAVkY8vJRY9uObd5/7Hur15eEEdb5/6bqipu zFEyDh3ybx2zcChk6watENzttTMOz1BVdTNRvEsNEP++anIf0NFsRVE9vd6I6GHi PLscciBRVTn7PZdafIV6DS/KJh0La3sop4E0XxZABU0/mFZtv7jmW36R0G52+xf1 ypFaPqKFVLv+lxo7WGhGmRWbaT8NLk0MZY3Tk/mPuP3mC7danpfCpNemnG+64j+o Jo5bhIfNChlh0gSWGPSYmpoyNTAwVrSzocxr26+YxE8e9PwKm3NZ4dcNFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC1Zwo0XI4yboHmVOxdrvisSbcAEMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvTFZuQ2pSY2pqSnVnZVpVN0YydS1LeEp0d0FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdCMA0G CSqGSIb3DQEBCwUAA4IBAQCJXHxm6aoi8G4QO5QsMmbGW7H0qJD2m+Pv1isyIu0B idSIn7OFOSgErOHlH0NS7pCyAWPWZVsSXsHxl49YFLsP2bl+pEpmeWFHzWDKx7vr qpiZExOgBWrE3wsTLu92X800csu2yShoDlMheikF22TMdMavKEdInW1OFwq9eUDa Dumtv26He1jfKW9IlOGP4ht0rll0BrLOJMfmFLQrQNClkx9XBzRDm41aC4QABksk yEe0vtqDrCtszxKFMbTllUhlhLyRvYIY3GyF66A20rJbVsgxssFsfC0eJaAKjVfy aPr+m4XQV4Ra9XQQq8UwDj9QYpcMVKglgG2vDntg2c4t -----END CERTIFICATE-----Generated at Sat Dec 6 13:58:59 2025 by rpki-client