This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/lZLW-wsw6d3GxiW6Sro7Eh3csOY.roa File: lZLW-wsw6d3GxiW6Sro7Eh3csOY.roa (raw, json) Hash identifier: hvHIBYoeM67nOQZDqyjfvl6O46S/kuShpEMpH2Ojvpo= Subject key identifier: 95:92:D6:FB:0B:30:E9:DD:C6:C6:25:BA:4A:BA:3B:12:1D:DC:B0:E6 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A720E6714835D57D6C7741C00AF233B38 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/lZLW-wsw6d3GxiW6Sro7Eh3csOY.roa Signing time: Tue 11 Nov 2025 08:35:37 +0000 ROA not before: Tue 11 Nov 2025 08:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215519 IP address blocks: 170.168.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:0e:67:14:83:5d:57:d6:c7:74:1c:00:af:23:3b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 11 08:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9592d6fb0b30e9ddc6c625ba4aba3b121ddcb0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:e5:36:7e:3b:92:c3:8d:23:b0:57:6d:e3: 4b:a5:9a:3b:b8:97:14:2e:07:2e:14:2a:d2:fe:7f: 88:96:77:84:a3:e8:94:a0:18:2a:bd:08:b2:aa:71: f6:cb:c9:60:3f:0c:f4:1f:07:69:e6:ef:f7:8e:4e: e5:56:ad:2c:53:49:ac:c7:e6:92:ce:f1:17:fa:bd: 4e:b9:42:98:da:46:14:08:d3:44:7f:b2:32:4d:91: 7a:7e:22:b1:07:19:5b:b7:c3:14:b9:15:0b:f7:bf: 40:b2:f4:7a:27:d0:84:3f:18:93:c9:59:c1:ce:c1: 6f:54:43:05:37:72:aa:ba:be:87:0f:f4:85:91:38: d2:b0:f0:a9:8e:c1:18:2c:9e:44:11:bb:c6:e9:5d: 1c:6a:11:92:6b:e7:e0:ef:d9:7f:12:5c:d2:0c:b8: 1e:cc:76:be:38:83:3a:48:9e:26:f3:61:f8:e4:63: ff:b1:ab:b2:91:ef:35:08:8f:5f:5c:64:54:ec:59: fa:ca:ad:34:2c:f5:41:96:a0:86:72:bc:ee:a2:2f: 5d:ba:6f:ee:b3:6c:c1:e6:63:0c:06:8e:f0:86:b4: ae:92:3e:ca:91:ec:b1:53:50:9f:68:46:b4:c6:1e: 21:30:7c:b3:31:ac:35:ea:5b:27:66:af:49:01:5e: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:92:D6:FB:0B:30:E9:DD:C6:C6:25:BA:4A:BA:3B:12:1D:DC:B0:E6 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/lZLW-wsw6d3GxiW6Sro7Eh3csOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.78.0/24 Signature Algorithm: sha256WithRSAEncryption 22:8c:87:2c:ca:0e:76:7b:b1:ab:a2:ae:a6:d1:fc:30:e1:6b: 21:bb:2e:de:9b:9f:60:e2:17:8f:e1:83:ff:74:26:13:bd:ee: 1c:ea:81:0a:55:d7:7c:b5:bd:e3:d7:7c:6e:fa:ad:ec:c1:bb: ed:57:7b:2b:49:5a:be:27:d2:66:5a:0b:16:f2:ef:36:aa:55: 1f:82:c6:2e:f1:a6:cd:c9:30:61:17:2d:0c:e7:e8:b8:2c:cc: 15:d5:51:24:28:f7:9c:3a:38:ac:10:ad:87:cb:7d:14:35:26: 29:6d:a3:a6:ff:65:13:26:0a:21:e3:b5:e3:ad:ec:4c:35:35: db:15:ce:79:61:c2:64:fc:e3:32:98:4a:cf:27:39:1a:95:86: fb:42:dd:e1:8a:e1:3b:3c:0d:42:24:a3:dd:44:37:6c:ef:78: 83:7f:dd:04:f8:1a:6c:be:6c:b1:21:6e:7b:86:ba:82:58:7d: ef:3a:b8:9b:57:d4:31:11:f6:43:9b:ce:4f:00:20:c4:fa:6e: 67:3c:9e:18:af:c3:86:b2:02:c4:f8:a2:c0:41:53:7e:98:5b: 6a:00:54:a5:f3:06:9e:c9:a9:1a:be:80:41:7b:67:58:c0:43: 2c:7f:70:42:30:c8:04:79:d6:15:c7:5f:40:35:44:0a:df:76: dd:f7:69:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpyDmcUg11X1sd0HACvIzs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTExMDgzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTkyZDZmYjBiMzBlOWRkYzZjNjI1YmE0YWJhM2IxMjFkZGNiMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0PlNn47ksONI7BXbeNLpZo7uJcU LgcuFCrS/n+IlneEo+iUoBgqvQiyqnH2y8lgPwz0Hwdp5u/3jk7lVq0sU0msx+aS zvEX+r1OuUKY2kYUCNNEf7IyTZF6fiKxBxlbt8MUuRUL979AsvR6J9CEPxiTyVnB zsFvVEMFN3Kqur6HD/SFkTjSsPCpjsEYLJ5EEbvG6V0cahGSa+fg79l/ElzSDLge zHa+OIM6SJ4m82H45GP/sauyke81CI9fXGRU7Fn6yq00LPVBlqCGcrzuoi9dum/u s2zB5mMMBo7whrSukj7KkeyxU1CfaEa0xh4hMHyzMaw16lsnZq9JAV7a5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWS1vsLMOndxsYlukq6OxId3LDmMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbFpMVy13c3c2ZDNHeGlXNlNybzdFaDNjc09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhOMA0G CSqGSIb3DQEBCwUAA4IBAQAijIcsyg52e7Groq6m0fww4Wshuy7em59g4heP4YP/ dCYTve4c6oEKVdd8tb3j13xu+q3swbvtV3srSVq+J9JmWgsW8u82qlUfgsYu8abN yTBhFy0M5+i4LMwV1VEkKPecOjisEK2Hy30UNSYpbaOm/2UTJgoh47XjrexMNTXb Fc55YcJk/OMymErPJzkalYb7Qt3hiuE7PA1CJKPdRDds73iDf90E+BpsvmyxIW57 hrqCWH3vOribV9QxEfZDm85PACDE+m5nPJ4Yr8OGsgLE+KLAQVN+mFtqAFSl8wae yakavoBBe2dYwEMsf3BCMMgEedYVx19ANUQK33bd92kt -----END CERTIFICATE-----Generated at Sat Dec 6 10:50:27 2025 by rpki-client