This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LwcGi6gaBxXQld7KF8Z51tQcrBI.roa
File: LwcGi6gaBxXQld7KF8Z51tQcrBI.roa (raw, json)
Hash identifier: SPy2mj+6jlCo2V+MxEwDcEf3PeEIig0F+bBJ16HVakk=
Subject key identifier: 2F:07:06:8B:A8:1A:07:15:D0:95:DE:CA:17:C6:79:D6:D4:1C:AC:12
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758FBF746D44BA9EC2C22B16F95F2F8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LwcGi6gaBxXQld7KF8Z51tQcrBI.roa
Signing time: Thu 01 Jan 2026 02:17:58 +0000
ROA not before: Thu 01 Jan 2026 02:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198489
IP address blocks: 178.16.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:fb:f7:46:d4:4b:a9:ec:2c:22:b1:6f:95:f2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f07068ba81a0715d095deca17c679d6d41cac12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:6d:c7:da:6f:bc:57:84:27:82:21:c7:d7:
99:4d:2f:55:e8:1d:89:e1:55:28:ee:cb:9a:71:44:
ba:c6:c6:c8:27:f0:d3:aa:c0:4d:40:7d:46:04:15:
ef:df:69:7f:30:0e:58:00:73:6b:9a:e6:27:42:01:
e0:8b:45:07:eb:7a:5b:58:e6:c2:b7:4c:39:85:94:
84:b7:86:a0:53:ca:e7:34:25:1e:c4:02:52:3a:f8:
be:89:3d:59:e1:ec:02:63:4d:81:75:b9:72:9a:6d:
b2:37:00:ea:79:c7:74:77:f9:91:89:b3:41:10:01:
55:f8:17:0c:0e:dd:f0:6e:ef:cb:a9:00:fb:a4:5d:
02:c3:83:8e:cc:af:8b:86:57:4c:57:04:b5:f9:e6:
43:f7:1c:d3:2d:a1:87:91:8f:d1:d7:b0:dc:a5:38:
d9:e9:3b:2e:8e:04:21:54:d6:e0:48:d8:46:be:5f:
1e:32:c5:b1:35:e4:ce:af:b9:03:c7:e3:35:c7:22:
41:d4:44:de:f2:91:5a:06:a7:59:f6:9a:9e:15:99:
e5:72:fd:0b:b6:b1:81:1e:a5:9b:c1:ab:27:31:48:
3f:d4:5a:cd:6b:24:cb:0d:53:29:2b:ef:a4:5f:97:
d7:7b:6e:4f:65:7a:71:fd:5a:ff:5d:13:43:6d:2b:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:06:8B:A8:1A:07:15:D0:95:DE:CA:17:C6:79:D6:D4:1C:AC:12
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LwcGi6gaBxXQld7KF8Z51tQcrBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a8:fe:39:26:1a:52:01:08:39:87:06:56:f9:30:07:9a:bf:
25:11:4a:41:86:29:d3:72:06:14:06:5e:9e:0e:4d:80:1c:e6:
4d:96:f9:a1:98:e6:dd:c7:d6:55:ee:0b:a5:8a:17:3c:1d:86:
2f:b8:ef:6d:8e:c0:b5:98:86:be:a1:16:d6:be:a9:b0:05:fa:
59:01:4c:90:24:49:51:77:bb:f9:b5:ee:9a:1b:83:20:03:a1:
72:ec:3f:73:3a:08:a7:d2:85:46:eb:27:de:07:f6:49:39:11:
e4:0a:bc:e0:6a:25:ea:18:1e:2f:37:6f:3c:d2:f5:01:6b:1b:
d0:e8:c3:58:1e:dc:30:96:72:71:d6:1b:a5:37:e0:25:a5:64:
cc:c9:29:ea:f0:ea:1f:d6:83:2a:c4:eb:d0:70:a0:59:df:62:
ca:8e:9b:79:f8:01:58:fa:46:40:ff:5e:e0:35:83:ad:86:0a:
9e:02:fa:16:f6:2b:c6:9e:8f:d0:8d:19:27:6a:14:29:1d:c6:
1e:d5:36:99:2a:74:0b:20:ee:d7:65:1c:0f:b8:55:4c:e4:76:
db:a8:ae:da:76:14:f4:8f:62:55:22:09:ee:46:68:1e:72:02:
d3:83:5b:b7:c3:1c:66:6e:93:e7:1f:a1:c6:7e:9a:7f:69:a7:
73:73:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:44 2026 by rpki-client