This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/lcBaOkK9THwl0XIqZgkoB-TZsbs.roa File: lcBaOkK9THwl0XIqZgkoB-TZsbs.roa (raw, json) Hash identifier: wKKJUT7JPve5W6FxY/yzXFmsp0AF6c9Iy3VcPHnP9M4= Subject key identifier: 95:C0:5A:3A:42:BD:4C:7C:25:D1:72:2A:66:09:28:07:E4:D9:B1:BB Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019B7C129A99FCA631CBE4D258C4B626724C Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/lcBaOkK9THwl0XIqZgkoB-TZsbs.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20766 IP address blocks: 45.94.17.0/24 maxlen: 24 45.94.18.0/23 maxlen: 23 80.67.160.0/19 maxlen: 19 80.67.182.0/24 maxlen: 24 185.57.124.0/22 maxlen: 22 193.23.30.0/24 maxlen: 24 2001:910::/32 maxlen: 32 2001:913:4000::/36 maxlen: 36 2a04:9ac2::/32 maxlen: 32 2a0f:6780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9a:99:fc:a6:31:cb:e4:d2:58:c4:b6:26:72:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95c05a3a42bd4c7c25d1722a66092807e4d9b1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:7c:f7:ee:40:78:5a:41:83:02:e7:2c:a4: a2:75:97:d8:2b:28:8a:4f:17:9e:bf:12:79:e0:d2: 99:a4:13:96:65:08:ea:86:06:29:e3:aa:26:4d:5f: c3:5d:f2:b9:9c:78:8c:3d:36:b2:74:f8:00:2f:90: 03:48:0e:48:de:61:2e:81:98:d1:87:9c:4c:59:cb: ff:15:49:db:07:2d:1c:52:2b:4a:ab:40:6c:23:03: 7d:ac:e3:58:49:81:01:f0:0f:39:84:56:ca:4d:5b: e7:02:3c:56:0e:a1:41:6f:c5:a0:9b:03:70:7d:a9: 21:3d:0f:96:dd:a0:90:ba:01:aa:f0:fd:87:da:47: 42:7e:7c:e5:e6:6a:89:73:28:e0:6c:68:3d:f7:74: 87:2e:82:96:41:21:01:0e:58:0c:b7:fe:3f:f4:94: bc:a0:18:df:43:be:25:a8:ad:09:5b:5c:4c:a4:94: c2:83:51:29:5e:d4:ae:54:8f:97:17:25:31:d1:82: 51:d2:eb:ed:ff:7f:ab:9e:c2:23:b0:3c:04:4b:c6: 80:ca:99:b1:bc:37:19:ee:ad:fc:48:ac:1d:f9:7d: ea:1b:95:41:a9:18:3a:7d:b3:ae:a0:2e:60:7a:1f: ef:50:d4:38:48:7a:ae:77:60:e4:12:55:ad:09:a4: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C0:5A:3A:42:BD:4C:7C:25:D1:72:2A:66:09:28:07:E4:D9:B1:BB X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/lcBaOkK9THwl0XIqZgkoB-TZsbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.17.0-45.94.19.255 80.67.160.0/19 185.57.124.0/22 193.23.30.0/24 IPv6: 2001:910::/32 2001:913:4000::/36 2a04:9ac2::/32 2a0f:6780::/29 Signature Algorithm: sha256WithRSAEncryption 8b:26:2a:67:b0:fc:2a:69:2e:35:f7:2d:3d:42:ee:c6:aa:38: de:29:b9:a0:35:26:17:28:0d:d4:cd:47:94:ce:c3:54:72:de: 61:46:ca:55:bb:7b:16:75:df:5f:ec:04:34:9d:9b:ad:e0:85: 7e:46:8b:c0:e4:7b:e7:88:f5:d6:38:25:a2:56:31:45:33:22: 21:f3:96:f4:3a:4c:c3:71:1d:71:4e:18:22:50:7c:8e:58:da: 76:86:94:00:cb:a1:68:65:71:12:cf:2b:8e:1d:33:8b:5d:2c: 41:74:c2:a3:1f:de:2c:53:97:be:d8:8e:9c:55:23:5b:e4:9d: a4:e7:9c:9f:38:b2:66:28:3c:16:f0:1f:f0:e3:23:df:b0:6f: ac:24:82:75:75:fd:c0:dc:85:e1:f4:9e:ba:69:81:2f:e0:de: c2:9c:cf:2b:95:17:2b:92:ec:d1:2f:1b:f1:5e:07:c6:f8:46: a6:bf:b6:34:7c:a2:7f:bc:a6:58:ae:5f:bb:91:94:9f:ad:35: f6:a4:f9:ea:0a:1d:86:7f:f6:e4:ae:7b:13:b9:c3:14:88:fd: 88:6a:70:92:ed:8e:24:57:45:94:ed:9e:14:70:13:9a:7a:f3: a1:0e:c8:78:2b:dc:7d:dc:9c:cf:48:4c:cd:77:09:a0:6f:19: 5e:56:05:19 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt8EpqZ/KYxy+TSWMS2JnJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWMwNWEzYTQyYmQ0YzdjMjVkMTcyMmE2NjA5MjgwN2U0ZDliMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTh89+5AeFpBgwLnLKSidZfYKyiK TxeevxJ54NKZpBOWZQjqhgYp46omTV/DXfK5nHiMPTaydPgAL5ADSA5I3mEugZjR h5xMWcv/FUnbBy0cUitKq0BsIwN9rONYSYEB8A85hFbKTVvnAjxWDqFBb8WgmwNw fakhPQ+W3aCQugGq8P2H2kdCfnzl5mqJcyjgbGg993SHLoKWQSEBDlgMt/4/9JS8 oBjfQ74lqK0JW1xMpJTCg1EpXtSuVI+XFyUx0YJR0uvt/3+rnsIjsDwES8aAypmx vDcZ7q38SKwd+X3qG5VBqRg6fbOuoC5geh/vUNQ4SHqud2DkElWtCaQxlQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJXAWjpCvUx8JdFyKmYJKAfk2bG7MB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvbGNCYU9rSzlUSHdsMFhJcVpna29CLVRac2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAmBAIAATAgMAwDBAAtXhED BAItXhADBAVQQ6ADBAK5OXwDBADBFx4wIwQCAAIwHQMFACABCRADBgQgAQkTQAMF ACoEmsIDBQMqD2eAMA0GCSqGSIb3DQEBCwUAA4IBAQCLJipnsPwqaS419y09Qu7G qjjeKbmgNSYXKA3UzUeUzsNUct5hRspVu3sWdd9f7AQ0nZut4IV+RovA5HvniPXW OCWiVjFFMyIh85b0OkzDcR1xThgiUHyOWNp2hpQAy6FoZXESzyuOHTOLXSxBdMKj H94sU5e+2I6cVSNb5J2k55yfOLJmKDwW8B/w4yPfsG+sJIJ1df3A3IXh9J66aYEv 4N7CnM8rlRcrkuzRLxvxXgfG+Eamv7Y0fKJ/vKZYrl+7kZSfrTX2pPnqCh2Gf/bk rnsTucMUiP2IanCS7Y4kV0WU7Z4UcBOaevOhDsh4K9x93JzPSEzNdwmgbxleVgUZ -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:25 2026 by rpki-client