This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/LSR72QEmUADG4ewqs1cGB5O6L5A.roa File: LSR72QEmUADG4ewqs1cGB5O6L5A.roa (raw, json) Hash identifier: jGbD2MiJo2PP+98Uc63/6UUJ8vLeSjWRc3U57w38K80= Subject key identifier: 2D:24:7B:D9:01:26:50:00:C6:E1:EC:2A:B3:57:06:07:93:BA:2F:90 Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Certificate serial: 019B7BA4BE78033763B2DA195B0F56FBCBBA Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/LSR72QEmUADG4ewqs1cGB5O6L5A.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9095 IP address blocks: 160.75.0.0/16 maxlen: 24 161.9.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:be:78:03:37:63:b2:da:19:5b:0f:56:fb:cb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d247bd901265000c6e1ec2ab357060793ba2f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:8d:65:d8:5a:08:33:5b:41:f7:b8:0f:de: d1:e0:27:a7:df:95:31:b7:da:de:2f:35:90:9a:20: 20:41:c2:f8:db:1b:9d:fc:87:3a:ca:b7:c1:d9:77: 67:22:a3:f7:fc:00:27:dc:3d:2d:62:fc:d2:a4:1f: 26:8b:d2:db:c7:92:0e:d5:05:ae:cd:ab:52:a8:60: 09:23:53:40:50:35:ea:65:2c:50:f9:2d:5d:11:65: 37:f2:f4:2b:d8:ab:fc:2c:5f:0e:86:b2:5a:4b:5a: db:d6:4c:86:0f:0e:5f:dd:7b:ed:20:08:7e:c6:87: 71:42:71:cd:b4:1d:fe:68:7b:70:ab:51:77:81:79: ff:79:5d:70:a4:ad:3d:7c:1c:d0:3a:a2:d5:88:36: 16:aa:58:6b:e8:c0:79:b8:b8:1e:6f:53:76:01:71: 1f:10:38:78:c0:ea:83:bf:2d:24:aa:07:da:d9:2b: a5:14:7a:66:53:2e:76:86:aa:0c:74:2e:4f:d9:f0: 80:21:35:91:91:59:8f:20:15:63:60:a0:f9:cc:d2: 8f:17:1c:23:9e:97:47:9c:b2:35:98:ce:68:9a:f8: 71:05:d5:f4:fd:9b:92:fd:49:d1:96:38:a1:f1:46: df:12:0c:88:5d:f5:26:a0:10:14:c5:78:86:5b:f9: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:24:7B:D9:01:26:50:00:C6:E1:EC:2A:B3:57:06:07:93:BA:2F:90 X509v3 Authority Key Identifier: keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/LSR72QEmUADG4ewqs1cGB5O6L5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.75.0.0/16 161.9.0.0/17 Signature Algorithm: sha256WithRSAEncryption 66:85:7f:f8:e6:23:60:da:14:af:db:a9:a2:ce:b2:af:e1:1d: 3d:d5:56:fe:bf:42:ca:24:9f:b5:8c:b0:2f:9e:df:de:e0:c7: d0:82:29:f0:2d:f9:23:c7:87:23:7e:56:25:9c:58:8c:13:73: b8:e9:b9:90:ef:ed:0b:47:3e:1f:33:2f:a3:0e:0d:36:ca:cd: 38:3a:00:bc:6c:6d:bb:9b:67:bb:9b:72:55:91:84:80:de:2b: f2:0d:ee:82:05:de:a9:aa:a8:9d:d3:a9:4a:1e:7e:c8:0c:db: 14:20:6c:40:a2:e6:23:2a:22:5b:76:d9:83:db:3a:6d:d5:47: a9:e5:6c:92:fd:7a:09:fc:bc:64:82:17:99:1a:aa:08:b2:7a: 5f:70:ac:a4:b8:4e:76:38:db:30:77:22:3f:da:e9:5d:33:6e: 1e:fd:5c:e5:03:80:a8:8d:e7:59:46:6f:4f:6d:4f:97:62:44: 5a:9a:3e:b4:4b:8e:6b:e9:03:72:97:77:8e:90:65:04:9d:e3: 2a:1b:81:61:5f:79:37:2a:59:86:7b:f4:28:bb:93:f8:da:09: 11:fc:9f:41:27:0f:0b:07:d9:25:58:7a:30:84:41:bc:97:5b: 69:bc:4a:90:bd:8c:6a:71:0b:5a:c2:f2:c8:b4:65:42:75:4c: 08:01:bc:77 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7pL54AzdjstoZWw9W+8u6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWE3OGIyOGYwNTRmNzJmNTIyNmFlM2VjNDU0OTgwZWQy YTEwYzkwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDI0N2JkOTAxMjY1MDAwYzZlMWVjMmFiMzU3MDYwNzkzYmEyZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xqNZdhaCDNbQfe4D97R4Cen35Ux t9reLzWQmiAgQcL42xud/Ic6yrfB2XdnIqP3/AAn3D0tYvzSpB8mi9Lbx5IO1QWu zatSqGAJI1NAUDXqZSxQ+S1dEWU38vQr2Kv8LF8OhrJaS1rb1kyGDw5f3XvtIAh+ xodxQnHNtB3+aHtwq1F3gXn/eV1wpK09fBzQOqLViDYWqlhr6MB5uLgeb1N2AXEf EDh4wOqDvy0kqgfa2SulFHpmUy52hqoMdC5P2fCAITWRkVmPIBVjYKD5zNKPFxwj npdHnLI1mM5omvhxBdX0/ZuS/UnRljih8UbfEgyIXfUmoBAUxXiGW/lWbQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFC0ke9kBJlAAxuHsKrNXBgeTui+QMB8GA1UdIwQY MBaAFBPqeLKPBU9y9SJq4+xFSYDtKhDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUt MTA5OGQ2ZDg4ZGU4LzEvTFNSNzJRRW1VQURHNGV3cXMxY0dCNU82TDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUtMTA5OGQ2ZDg4ZGU4 LzEvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAoEsDBAeh CQAwDQYJKoZIhvcNAQELBQADggEBAGaFf/jmI2DaFK/bqaLOsq/hHT3VVv6/Qsok n7WMsC+e397gx9CCKfAt+SPHhyN+ViWcWIwTc7jpuZDv7QtHPh8zL6MODTbKzTg6 ALxsbbubZ7ubclWRhIDeK/IN7oIF3qmqqJ3TqUoefsgM2xQgbECi5iMqIlt22YPb Om3VR6nlbJL9egn8vGSCF5kaqgiyel9wrKS4TnY42zB3Ij/a6V0zbh79XOUDgKiN 51lGb09tT5diRFqaPrRLjmvpA3KXd46QZQSd4yobgWFfeTcqWYZ79Ci7k/jaCRH8 n0EnDwsH2SVYejCEQbyXW2m8SpC9jGpxC1rC8si0ZUJ1TAgBvHc= -----END CERTIFICATE-----Generated at Mon Jan 26 14:53:53 2026 by rpki-client