This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa File: LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa (raw, json) Hash identifier: e8wyE9wUQVdgZv92jtZNgewyht9dy7i4a6DuplyRPmE= Subject key identifier: 2D:93:D5:59:AC:D4:24:72:AC:57:05:C1:D1:0E:50:14:E5:FF:53:82 Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f Certificate serial: 019B7C80645BF3E16CDF167A032DD705E997 Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202416 IP address blocks: 82.136.32.0/24 maxlen: 24 2001:4088:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:5b:f3:e1:6c:df:16:7a:03:2d:d7:05:e9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d93d559acd42472ac5705c1d10e5014e5ff5382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:73:37:01:96:79:96:ee:2c:f4:ad:ae:22: 86:2d:5a:b2:e6:5e:3f:f7:8d:2f:6b:f9:d3:79:32: 3b:ed:6c:f7:43:2a:b2:7e:13:56:b7:6c:f7:38:dd: b3:86:e7:10:23:c5:0f:83:8f:fa:b3:6f:71:7a:b7: 2a:87:90:ee:91:8f:5f:52:c5:fc:1c:9b:67:2d:19: 68:62:74:25:4a:04:8b:0e:bd:f4:ad:f6:60:57:87: 30:b6:1a:fb:4d:bc:ff:70:39:5c:7a:29:0c:0e:f4: a8:e7:3b:77:55:2e:6f:50:47:0f:01:dc:c6:94:82: 41:ae:4f:4f:06:cb:b3:8b:a8:56:f0:06:16:00:ba: 46:cc:f7:9b:f7:a6:f0:a2:f0:e9:75:5d:cb:f6:5a: 5e:2c:36:71:ae:64:65:96:49:01:b1:5a:22:91:77: 69:b2:c5:23:d5:db:10:41:6a:76:f7:ed:50:6a:b4: ed:62:34:b9:c8:0b:9e:f5:d2:51:9f:92:9e:4f:3f: 67:aa:f5:6f:2b:9d:b9:20:22:0b:c4:cf:0d:b5:26: 9f:30:2d:05:cf:d2:92:b4:6e:7e:a4:be:8f:8f:fe: ee:f6:90:31:47:88:8c:51:64:4b:b1:3f:46:71:0f: db:e9:9c:46:3a:94:42:7b:3f:0d:36:18:b4:df:94: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:93:D5:59:AC:D4:24:72:AC:57:05:C1:D1:0E:50:14:E5:FF:53:82 X509v3 Authority Key Identifier: keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.136.32.0/24 IPv6: 2001:4088:20::/48 Signature Algorithm: sha256WithRSAEncryption 6c:35:a4:5c:aa:5d:db:2b:ef:ff:b9:1b:1d:34:46:72:9f:a3: 41:36:96:10:a1:73:a5:06:b5:12:fb:fd:0f:89:f1:00:ab:54: 7c:28:01:73:12:d2:57:a0:3a:74:c6:b1:8a:44:17:52:fd:8f: 65:64:73:97:14:68:92:6e:85:10:06:f2:99:9c:59:73:46:63: b8:75:0e:f7:c4:07:27:3d:7b:f3:05:79:ee:fc:a0:a6:dd:88: b5:21:e0:25:43:d9:eb:4e:28:59:87:4b:9d:95:b7:55:8a:14: cb:a9:22:18:62:cc:03:c3:6c:c3:6e:9e:b8:e1:fc:de:e9:74: 9d:b5:95:7f:ca:e0:b3:71:bf:b1:11:fc:d8:a0:ae:1f:30:02: 29:a9:c2:a2:e5:7c:e0:b0:de:80:ca:9b:63:b1:20:fd:ac:9d: 52:73:39:0c:f3:70:f9:4a:1b:7d:be:a5:03:95:82:cc:f8:b2: cf:c3:0f:65:15:7b:4a:2c:07:7e:dd:26:aa:9c:90:cf:b5:ca: 58:d4:02:c5:78:1f:a2:ac:d7:5e:fb:07:d3:76:b1:f1:07:83: b4:d4:1a:ca:3f:b5:c4:92:f2:a9:ad:d7:68:b8:c0:f4:b5:d4: b3:d4:5c:8c:a0:c5:19:84:a8:53:d7:d8:25:f8:78:e6:f4:5c: e7:0a:88:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gGRb8+Fs3xZ6Ay3XBemXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4 NjEyM2YwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkzZDU1OWFjZDQyNDcyYWM1NzA1YzFkMTBlNTAxNGU1ZmY1MzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4VzNwGWeZbuLPStriKGLVqy5l4/ 940va/nTeTI77Wz3QyqyfhNWt2z3ON2zhucQI8UPg4/6s29xercqh5DukY9fUsX8 HJtnLRloYnQlSgSLDr30rfZgV4cwthr7Tbz/cDlceikMDvSo5zt3VS5vUEcPAdzG lIJBrk9PBsuzi6hW8AYWALpGzPeb96bwovDpdV3L9lpeLDZxrmRllkkBsVoikXdp ssUj1dsQQWp29+1QarTtYjS5yAue9dJRn5KeTz9nqvVvK525ICILxM8NtSafMC0F z9KStG5+pL6Pj/7u9pAxR4iMUWRLsT9GcQ/b6ZxGOpRCez8NNhi035RtMwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC2T1Vms1CRyrFcFwdEOUBTl/1OCMB8GA1UdIwQY MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt NGIxZjYxNjUzZjNkLzEvTFpQVldhelVKSEtzVndYQjBRNVFGT1hfVTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUoggMA8E AgACMAkDBwAgAUCIACAwDQYJKoZIhvcNAQELBQADggEBAGw1pFyqXdsr7/+5Gx00 RnKfo0E2lhChc6UGtRL7/Q+J8QCrVHwoAXMS0legOnTGsYpEF1L9j2Vkc5cUaJJu hRAG8pmcWXNGY7h1DvfEByc9e/MFee78oKbdiLUh4CVD2etOKFmHS52Vt1WKFMup IhhizAPDbMNunrjh/N7pdJ21lX/K4LNxv7ER/Nigrh8wAimpwqLlfOCw3oDKm2Ox IP2snVJzOQzzcPlKG32+pQOVgsz4ss/DD2UVe0osB37dJqqckM+1yljUAsV4H6Ks 1177B9N2sfEHg7TUGso/tcSS8qmt12i4wPS11LPUXIygxRmEqFPX2CX4eOb0XOcK iCw= -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:48 2026 by rpki-client