This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LGaPjg2ZMGElLoNU2ExF85utrQQ.roa File: LGaPjg2ZMGElLoNU2ExF85utrQQ.roa (raw, json) Hash identifier: VUoknKxD1cBNRs/lq+C5Xu7tQKiIAerGKtu6ae2BE4A= Subject key identifier: 2C:66:8F:8E:0D:99:30:61:25:2E:83:54:D8:4C:45:F3:9B:AD:AD:04 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE51CC4CD1F1293B9C841DECD15E58 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LGaPjg2ZMGElLoNU2ExF85utrQQ.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30723 IP address blocks: 79.172.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:51:cc:4c:d1:f1:29:3b:9c:84:1d:ec:d1:5e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c668f8e0d993061252e8354d84c45f39badad04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:45:26:12:d2:b4:4d:a7:e0:01:4c:1c:2a: 48:8c:86:23:10:2d:b2:27:71:72:60:b8:b1:b3:0c: 95:c1:f0:8e:2d:dd:5f:ce:6c:31:e3:8c:6a:e7:f3: b7:b1:ba:f4:66:85:7d:d8:97:f3:df:bd:44:14:58: 60:51:ea:b5:70:dd:dd:ec:76:88:be:52:26:fb:b5: 65:b8:ae:fe:c8:67:d8:b1:6f:12:d5:3f:77:18:8d: b4:4f:ce:44:62:9b:2c:28:40:d8:a2:d1:a3:4d:f8: 1e:0b:d1:c8:20:08:3c:46:62:1d:66:f3:dd:01:ab: 7f:72:da:ff:64:78:b7:91:25:b9:dd:d0:93:1e:a8: e8:e8:b5:db:8d:40:8f:08:e8:1e:eb:19:97:81:b0: 9f:d0:1f:7f:bc:e5:ae:de:20:3c:84:09:1b:04:0d: bc:0a:11:89:05:bc:08:c2:ad:b4:a6:96:74:4f:da: c4:1d:01:c6:1b:d6:26:aa:f4:70:1c:72:94:84:11: 89:6b:86:cf:73:32:90:a1:75:8c:f8:84:04:45:d2: b2:8b:e7:64:c4:9d:06:80:ee:88:29:7e:42:e5:37: 8c:35:3d:62:c8:88:69:bb:f9:c2:a6:5f:fc:63:d5: 78:2b:49:fe:92:e2:fe:f3:fb:a1:32:46:70:d0:7d: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:66:8F:8E:0D:99:30:61:25:2E:83:54:D8:4C:45:F3:9B:AD:AD:04 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LGaPjg2ZMGElLoNU2ExF85utrQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.198.0/24 Signature Algorithm: sha256WithRSAEncryption 25:9b:f4:7f:f1:83:ae:23:5a:54:71:0c:d4:ec:11:39:98:2b: 1a:99:ba:03:cf:7f:23:0d:62:38:ed:e0:bf:3a:d0:0c:d3:ba: a2:9f:69:8f:07:c2:4d:9a:0e:f6:ab:a5:2f:a0:c8:39:21:a4: 86:0a:2b:b8:3a:b0:09:09:e9:99:20:ce:0e:76:f8:92:d2:47: 77:1b:68:e8:77:ed:10:b8:76:be:29:9d:69:73:0e:01:e5:c1: de:ab:3f:f2:bf:22:e5:53:2a:a8:2d:3f:d1:d9:6d:3e:bc:b2: 37:25:7a:9a:64:3a:79:39:09:4b:76:4b:52:0e:e4:c7:b5:dd: c6:01:6a:d1:e3:d0:68:aa:1c:fc:a9:3b:f4:f0:7d:a6:c8:a0: 29:05:28:48:09:da:21:6f:44:3c:d1:f9:7f:cb:d0:df:18:1f: 5e:04:49:a1:a6:3c:64:a7:7f:1b:bb:8f:87:64:a3:7c:a0:f4: 41:69:8c:ba:2a:8b:f1:c4:59:ca:0a:44:d4:58:7f:f1:b0:40: 3d:50:c1:cd:ca:73:7b:1c:86:ab:aa:21:30:e8:5c:82:d8:d5: 17:05:07:03:79:e1:ce:21:e9:08:4f:67:ca:5b:d0:ae:d4:86: a1:ef:de:87:4a:54:a8:65:c1:2e:3c:f9:d7:30:39:1b:de:45: e7:e6:c1:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lHMTNHxKTuchB3s0V5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzY2OGY4ZTBkOTkzMDYxMjUyZTgzNTRkODRjNDVmMzliYWRhZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuktFJhLStE2n4AFMHCpIjIYjEC2y J3FyYLixswyVwfCOLd1fzmwx44xq5/O3sbr0ZoV92Jfz371EFFhgUeq1cN3d7HaI vlIm+7VluK7+yGfYsW8S1T93GI20T85EYpssKEDYotGjTfgeC9HIIAg8RmIdZvPd Aat/ctr/ZHi3kSW53dCTHqjo6LXbjUCPCOge6xmXgbCf0B9/vOWu3iA8hAkbBA28 ChGJBbwIwq20ppZ0T9rEHQHGG9YmqvRwHHKUhBGJa4bPczKQoXWM+IQERdKyi+dk xJ0GgO6IKX5C5TeMNT1iyIhpu/nCpl/8Y9V4K0n+kuL+8/uhMkZw0H1IZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCxmj44NmTBhJS6DVNhMRfObra0EMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTEdhUGpnMlpNR0VsTG9OVTJFeEY4NXV0clFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zGMA0G CSqGSIb3DQEBCwUAA4IBAQAlm/R/8YOuI1pUcQzU7BE5mCsamboDz38jDWI47eC/ OtAM07qin2mPB8JNmg72q6UvoMg5IaSGCiu4OrAJCemZIM4OdviS0kd3G2jod+0Q uHa+KZ1pcw4B5cHeqz/yvyLlUyqoLT/R2W0+vLI3JXqaZDp5OQlLdktSDuTHtd3G AWrR49Boqhz8qTv08H2myKApBShICdohb0Q80fl/y9DfGB9eBEmhpjxkp38bu4+H ZKN8oPRBaYy6KovxxFnKCkTUWH/xsEA9UMHNynN7HIarqiEw6FyC2NUXBQcDeeHO IekIT2fKW9Cu1Iah796HSlSoZcEuPPnXMDkb3kXn5sHH -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:30 2026 by rpki-client