This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/LNX9e0qM1FUUPu7JPg66r69yK3k.roa File: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (raw, json) Hash identifier: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M= Subject key identifier: 2C:D5:FD:7B:4A:8C:D4:55:14:3E:EE:C9:3E:0E:BA:AF:AF:72:2B:79 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB418E2BBAC608FFB00E7A203C14A9 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/LNX9e0qM1FUUPu7JPg66r69yK3k.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48528 IP address blocks: 212.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:41:8e:2b:ba:c6:08:ff:b0:0e:7a:20:3c:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd5fd7b4a8cd455143eeec93e0ebaafaf722b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:d9:d2:eb:cf:88:50:28:4f:ed:93:45:79: 77:d0:77:28:9e:77:78:1d:5f:ea:53:e6:e6:d2:c9: 90:93:75:80:be:53:dc:18:07:6b:74:3f:82:76:e5: 5c:e9:87:d1:d9:2b:4a:d1:32:49:93:94:5e:4a:82: a6:3b:9e:0e:83:6e:25:00:0d:ca:fd:08:dc:35:89: 5f:9f:a4:9a:c3:40:58:25:10:7e:0b:28:24:e2:3e: 93:23:e4:60:2d:e8:0b:d1:01:9c:91:a7:50:73:c6: b0:3e:4e:15:24:19:23:09:a6:1f:5d:79:4d:81:2a: 81:4b:bc:71:61:63:2b:b1:05:87:33:30:50:fc:05: 78:13:7e:1b:44:fb:73:b9:0a:a5:ee:76:f8:a7:03: 7a:73:2a:75:49:f5:24:48:76:29:16:4e:1d:6a:e7: 67:75:6e:fd:20:38:75:32:f6:1b:2a:ff:f0:d3:2e: 9b:4a:5f:14:fb:2f:96:b5:04:89:24:a7:d6:87:9c: 1f:60:d0:f9:60:48:cc:44:6e:66:95:f3:b2:b4:9a: e4:bf:7e:70:c6:97:29:f6:9d:1c:19:9b:93:6e:06: 00:3c:81:5b:3d:55:03:a4:86:19:3f:6e:d7:b7:cb: 8b:f7:31:78:bf:96:8c:12:f9:8e:4b:c3:f9:f8:87: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:FD:7B:4A:8C:D4:55:14:3E:EE:C9:3E:0E:BA:AF:AF:72:2B:79 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/LNX9e0qM1FUUPu7JPg66r69yK3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.71.0/24 Signature Algorithm: sha256WithRSAEncryption b4:d8:e8:6c:af:3d:eb:3e:01:ae:bf:c1:a6:ba:ca:95:d5:fd: 42:ee:96:48:e4:7f:05:7c:2b:26:3c:00:27:99:98:84:11:a1: 4e:fc:be:20:fe:55:3a:c8:ab:7c:c0:3e:4d:96:0a:bf:05:d6: 2c:d8:99:95:df:67:f0:4a:79:bf:31:ad:45:d9:4c:52:d1:cd: 4c:52:e0:e8:e4:9c:a3:3a:b0:49:55:26:0a:77:ed:e4:de:d0: 9c:38:98:6e:72:56:d6:51:86:39:1b:02:13:c4:a5:18:6e:e9: b6:b7:80:a7:8b:d0:b1:f2:4b:42:9b:00:de:01:53:0a:a4:94: 5d:db:10:6a:3f:3e:a2:1a:2b:76:f8:c1:f7:5b:23:ad:2c:f8: de:7d:71:6a:5a:91:27:1c:e6:65:a0:eb:af:e0:3b:ad:dd:13: 55:6c:df:a7:b8:34:f6:93:4b:f5:9d:96:5d:7c:63:29:ab:96: 34:02:24:ad:5d:ef:bc:c7:f6:be:62:66:c9:b5:04:79:43:f1: 18:41:98:2a:38:76:0d:d4:da:ea:26:98:58:25:1c:b5:6c:1a: c2:c9:38:86:cc:2d:4e:7e:a4:ad:73:31:d1:b8:dd:d1:98:66: 29:46:f4:fb:f7:9f:b4:07:f7:7c:9d:e5:74:7c:be:ba:fb:f1: e4:49:db:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0GOK7rGCP+wDnogPBSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Q1ZmQ3YjRhOGNkNDU1MTQzZWVlYzkzZTBlYmFhZmFmNzIyYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42XZ0uvPiFAoT+2TRXl30Hconnd4 HV/qU+bm0smQk3WAvlPcGAdrdD+CduVc6YfR2StK0TJJk5ReSoKmO54Og24lAA3K /QjcNYlfn6Saw0BYJRB+Cygk4j6TI+RgLegL0QGckadQc8awPk4VJBkjCaYfXXlN gSqBS7xxYWMrsQWHMzBQ/AV4E34bRPtzuQql7nb4pwN6cyp1SfUkSHYpFk4daudn dW79IDh1MvYbKv/w0y6bSl8U+y+WtQSJJKfWh5wfYND5YEjMRG5mlfOytJrkv35w xpcp9p0cGZuTbgYAPIFbPVUDpIYZP27Xt8uL9zF4v5aMEvmOS8P5+IfBjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzV/XtKjNRVFD7uyT4Ouq+vcit5MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvTE5YOWUwcU0xRlVVUHU3SlBnNjZyNjl5SzNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZHMA0G CSqGSIb3DQEBCwUAA4IBAQC02Ohsrz3rPgGuv8GmusqV1f1C7pZI5H8FfCsmPAAn mZiEEaFO/L4g/lU6yKt8wD5Nlgq/BdYs2JmV32fwSnm/Ma1F2UxS0c1MUuDo5Jyj OrBJVSYKd+3k3tCcOJhuclbWUYY5GwITxKUYbum2t4Cni9Cx8ktCmwDeAVMKpJRd 2xBqPz6iGit2+MH3WyOtLPjefXFqWpEnHOZloOuv4Dut3RNVbN+nuDT2k0v1nZZd fGMpq5Y0AiStXe+8x/a+YmbJtQR5Q/EYQZgqOHYN1NrqJphYJRy1bBrCyTiGzC1O fqStczHRuN3RmGYpRvT795+0B/d8neV0fL66+/HkSdvW -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:32 2026 by rpki-client