This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/LNYXeGK0fNHFOXoFsTX923sjqo4.roa File: LNYXeGK0fNHFOXoFsTX923sjqo4.roa (raw, json) Hash identifier: HMZywae9ctDuPusaGMZ0nvtbkQTFjTevWXrmDyy57E0= Subject key identifier: 2C:D6:17:78:62:B4:7C:D1:C5:39:7A:05:B1:35:FD:DB:7B:23:AA:8E Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019B7C12BD91BF59E05B033BA5E6A3197E2A Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/LNYXeGK0fNHFOXoFsTX923sjqo4.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62160 IP address blocks: 78.108.176.0/20 maxlen: 20 78.108.187.0/24 maxlen: 24 94.198.224.0/21 maxlen: 21 94.198.240.0/21 maxlen: 21 2a04:a380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bd:91:bf:59:e0:5b:03:3b:a5:e6:a3:19:7e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd6177862b47cd1c5397a05b135fddb7b23aa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:db:73:72:1d:dd:f0:80:36:08:27:4c:b4: dd:c5:67:3b:45:e7:27:81:eb:90:a5:8b:37:62:d0: d4:55:65:97:f6:bc:13:89:e8:5e:78:ca:82:04:df: b7:3c:e9:05:17:04:43:3b:aa:2b:59:41:dc:45:35: 19:ff:cc:12:5e:96:1d:53:b3:79:9a:48:86:78:41: 3f:94:eb:3c:23:7c:26:12:b7:e8:dd:71:8c:1e:98: 8b:74:9f:eb:52:94:99:6e:1b:b5:9a:2c:ee:72:94: 4c:71:5d:18:35:93:39:8e:40:e0:c2:9d:fb:44:08: aa:b7:44:00:93:25:f4:3a:58:ad:bf:04:4d:c6:c2: f3:56:6c:2a:fb:3f:1b:b8:dd:22:0d:80:29:84:eb: ce:bc:02:52:66:45:eb:7a:91:5a:64:8c:46:4b:a2: 32:6d:73:8e:b0:ec:00:80:32:04:f3:62:15:fd:ac: 4e:2a:b5:4f:fb:11:57:c3:9b:52:68:d8:15:58:85: 77:4c:86:68:7d:ca:5e:c3:bb:f2:83:81:7b:d4:66: 52:40:c7:c9:f7:3b:94:ed:1b:31:5f:4f:80:38:22: a5:22:b1:13:79:84:3e:99:ec:b7:86:03:f2:e7:4c: bb:0c:cf:70:a0:05:32:aa:36:7a:e2:f5:86:86:0d: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:17:78:62:B4:7C:D1:C5:39:7A:05:B1:35:FD:DB:7B:23:AA:8E X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/LNYXeGK0fNHFOXoFsTX923sjqo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.176.0/20 94.198.224.0/21 94.198.240.0/21 IPv6: 2a04:a380::/29 Signature Algorithm: sha256WithRSAEncryption 09:24:6d:41:b2:43:fe:f1:04:d5:18:26:41:16:5d:20:58:76: 17:c6:09:19:e8:d4:d5:a5:aa:db:0a:89:eb:57:fb:b7:b5:4a: 6d:30:42:ee:ef:78:fe:9f:4b:a7:c7:55:2f:2f:3b:55:5a:f4: 8e:d6:4c:60:41:34:a8:a0:c5:10:6b:a1:70:2a:34:33:7d:07: 70:7e:df:29:c6:99:e7:c9:c4:07:d3:65:23:c8:d5:24:22:3e: 66:50:52:bc:7f:cd:6f:2b:8d:a1:cd:dd:95:4c:d9:1e:72:23: 64:d6:89:8c:b2:56:6d:43:2d:b2:c9:8d:d2:ab:fa:cb:f3:8b: ef:07:6d:26:87:2a:50:c5:4c:cb:9e:2b:d1:96:f8:92:2e:24: e1:f2:29:ec:cf:1b:ea:2c:52:57:7e:79:8c:cb:d3:d9:44:a5: c4:9c:0f:76:06:77:6f:77:43:ce:19:d8:69:ca:f3:7d:c1:a1: ad:89:7f:c7:d2:6e:58:0c:f4:7e:79:6a:75:85:7c:06:53:a9: ad:f2:1d:f7:e0:d2:5c:82:fd:32:9b:17:62:71:f1:91:1d:ea: 61:97:09:96:11:ba:88:06:e6:44:90:f0:6e:e9:06:69:36:7b: df:9f:9a:45:a0:49:0a:8b:6e:55:6a:ca:63:24:67:d9:00:29: 56:57:84:18 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8Er2Rv1ngWwM7peajGX4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Q2MTc3ODYyYjQ3Y2QxYzUzOTdhMDViMTM1ZmRkYjdiMjNhYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0/bc3Id3fCANggnTLTdxWc7Recn geuQpYs3YtDUVWWX9rwTieheeMqCBN+3POkFFwRDO6orWUHcRTUZ/8wSXpYdU7N5 mkiGeEE/lOs8I3wmErfo3XGMHpiLdJ/rUpSZbhu1mizucpRMcV0YNZM5jkDgwp37 RAiqt0QAkyX0OlitvwRNxsLzVmwq+z8buN0iDYAphOvOvAJSZkXrepFaZIxGS6Iy bXOOsOwAgDIE82IV/axOKrVP+xFXw5tSaNgVWIV3TIZofcpew7vyg4F71GZSQMfJ 9zuU7RsxX0+AOCKlIrETeYQ+mey3hgPy50y7DM9woAUyqjZ64vWGhg0YMQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCzWF3hitHzRxTl6BbE1/dt7I6qOMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvTE5ZWGVHSzBmTkhGT1hvRnNUWDkyM3NqcW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQETmywAwQD XsbgAwQDXsbwMA0EAgACMAcDBQMqBKOAMA0GCSqGSIb3DQEBCwUAA4IBAQAJJG1B skP+8QTVGCZBFl0gWHYXxgkZ6NTVparbConrV/u3tUptMELu73j+n0unx1UvLztV WvSO1kxgQTSooMUQa6FwKjQzfQdwft8pxpnnycQH02UjyNUkIj5mUFK8f81vK42h zd2VTNkeciNk1omMslZtQy2yyY3Sq/rL84vvB20mhypQxUzLnivRlviSLiTh8ins zxvqLFJXfnmMy9PZRKXEnA92Bndvd0POGdhpyvN9waGtiX/H0m5YDPR+eWp1hXwG U6mt8h334NJcgv0ymxdicfGRHephlwmWEbqIBuZEkPBu6QZpNnvfn5pFoEkKi25V aspjJGfZAClWV4QY -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:59 2026 by rpki-client