This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/LSNWkgOLtwrIgkskEEdUWslrcYU.roa File: LSNWkgOLtwrIgkskEEdUWslrcYU.roa (raw, json) Hash identifier: rlDcH3vdhioNykJjL99tYvd4elgnxnowJyDvC0dIzK8= Subject key identifier: 2D:23:56:92:03:8B:B7:0A:C8:82:4B:24:10:47:54:5A:C9:6B:71:85 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB570F90F96C55CC8CE54B1B81293E Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/LSNWkgOLtwrIgkskEEdUWslrcYU.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202798 IP address blocks: 2.189.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:57:0f:90:f9:6c:55:cc:8c:e5:4b:1b:81:29:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d235692038bb70ac8824b241047545ac96b7185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:c3:b3:53:dd:80:64:de:b0:64:59:8d:34: 38:0b:39:ef:0b:63:89:55:1e:93:d4:e7:a6:4f:85: 3b:d6:c1:ad:0f:89:0c:38:ea:2c:3b:e5:9d:d2:25: a3:25:12:11:69:0a:04:9d:4a:6c:de:79:ed:b8:97: bf:4a:ce:e1:93:ea:6e:ba:71:92:af:2d:c1:66:ec: 42:31:90:c7:ab:47:e6:b9:60:24:18:a5:07:37:a9: 7c:fa:71:51:ec:4b:5a:17:58:c9:d6:f1:53:fe:9a: 31:0d:fd:cc:f6:0b:3f:59:be:80:b0:2e:2a:df:d9: 03:91:49:3b:89:56:0b:49:7d:59:5b:dc:5e:fe:41: 38:53:e0:0a:03:0b:12:a9:5c:7a:71:f4:01:1d:21: 43:28:0b:ef:a0:7d:dc:cc:d1:21:ec:da:da:26:07: 52:7d:e1:5b:24:54:81:6d:b7:62:ef:64:c4:64:5e: 01:f8:02:ee:b5:cc:41:4d:08:54:94:7e:20:77:4a: 37:34:11:1a:27:b9:9e:a9:cf:4c:09:08:99:03:54: 4c:e2:9a:16:97:09:0c:c2:d1:42:02:a2:23:d4:86: 48:63:86:67:c3:df:6d:27:02:2d:50:aa:ef:38:3e: bf:4b:67:c0:45:e8:ac:03:c1:cb:6f:af:19:2d:ea: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:56:92:03:8B:B7:0A:C8:82:4B:24:10:47:54:5A:C9:6B:71:85 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/LSNWkgOLtwrIgkskEEdUWslrcYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.189.58.0/24 Signature Algorithm: sha256WithRSAEncryption 90:db:c1:73:51:c9:1b:ce:74:08:1f:3f:fd:0f:4c:65:77:9e: ef:57:a8:c1:8a:32:a3:77:8c:58:64:8c:6a:b8:83:2f:33:de: c3:51:8a:5a:fb:98:65:57:30:53:1c:6b:33:81:fd:9d:28:87: 53:00:17:6f:f3:70:c1:16:a5:8e:01:dd:69:c3:68:63:82:02: f6:ce:50:da:53:a2:0c:a2:cc:64:6f:a1:6b:06:b5:1a:24:31: ef:34:14:c7:c1:67:98:c4:6f:a8:d3:78:30:f5:54:9a:1c:e9: c5:db:6f:3d:7a:c6:99:f9:33:77:7d:e2:bb:29:24:3b:b0:97: 66:cb:14:92:ee:98:63:e4:f2:f2:d8:78:66:af:f9:b9:4a:3c: 29:83:54:81:4b:17:2c:a5:91:de:d7:fb:8f:9d:f0:52:a3:dd: db:7b:43:f6:eb:6c:60:63:4c:96:d0:3e:3a:62:89:96:5c:23: 99:a7:bb:70:56:79:63:c3:eb:6a:7b:50:16:82:36:6d:8a:d3: dd:5e:ed:db:86:c6:fe:bb:b5:8d:3f:67:3c:27:3b:82:bf:7d: 5f:b4:4a:1e:0f:40:3c:a6:88:f3:64:4c:06:3b:06:5b:b9:f4: 12:2b:da:cd:57:5b:46:4f:72:38:9f:2a:af:ee:e0:1e:37:c3: d0:e8:1d:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261cPkPlsVcyM5UsbgSk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDIzNTY5MjAzOGJiNzBhYzg4MjRiMjQxMDQ3NTQ1YWM5NmI3MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn7Ds1PdgGTesGRZjTQ4CznvC2OJ VR6T1OemT4U71sGtD4kMOOosO+Wd0iWjJRIRaQoEnUps3nntuJe/Ss7hk+puunGS ry3BZuxCMZDHq0fmuWAkGKUHN6l8+nFR7EtaF1jJ1vFT/poxDf3M9gs/Wb6AsC4q 39kDkUk7iVYLSX1ZW9xe/kE4U+AKAwsSqVx6cfQBHSFDKAvvoH3czNEh7NraJgdS feFbJFSBbbdi72TEZF4B+ALutcxBTQhUlH4gd0o3NBEaJ7meqc9MCQiZA1RM4poW lwkMwtFCAqIj1IZIY4Znw99tJwItUKrvOD6/S2fAReisA8HLb68ZLerw7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0jVpIDi7cKyIJLJBBHVFrJa3GFMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvTFNOV2tnT0x0d3JJZ2tza0VFZFVXc2xyY1lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAr06MA0G CSqGSIb3DQEBCwUAA4IBAQCQ28FzUckbznQIHz/9D0xld57vV6jBijKjd4xYZIxq uIMvM97DUYpa+5hlVzBTHGszgf2dKIdTABdv83DBFqWOAd1pw2hjggL2zlDaU6IM osxkb6FrBrUaJDHvNBTHwWeYxG+o03gw9VSaHOnF2289esaZ+TN3feK7KSQ7sJdm yxSS7phj5PLy2Hhmr/m5Sjwpg1SBSxcspZHe1/uPnfBSo93be0P262xgY0yW0D46 YomWXCOZp7twVnljw+tqe1AWgjZtitPdXu3bhsb+u7WNP2c8JzuCv31ftEoeD0A8 pojzZEwGOwZbufQSK9rNV1tGT3I4nyqv7uAeN8PQ6B3m -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:46 2026 by rpki-client