This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/lkwTPzFQR_MXjNlSl2fjCt-hEOc.roa File: lkwTPzFQR_MXjNlSl2fjCt-hEOc.roa (raw, json) Hash identifier: bVbXDJJ5aDC+G2MskbiLbGMin2Lx7CiB4V4YqH05sP4= Subject key identifier: 96:4C:13:3F:31:50:47:F3:17:8C:D9:52:97:67:E3:0A:DF:A1:10:E7 Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Certificate serial: 019BE4BE888F648DF9582E048FC01AB36572 Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/lkwTPzFQR_MXjNlSl2fjCt-hEOc.roa Signing time: Thu 22 Jan 2026 08:07:30 +0000 ROA not before: Thu 22 Jan 2026 08:07:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204582 IP address blocks: 45.144.44.0/29 maxlen: 29 45.144.44.0/30 maxlen: 30 2a0e:eac0:2000::/44 maxlen: 48 2a0e:eac0:2001::/48 maxlen: 48 2a0e:eac0:2002::/48 maxlen: 48 2a0e:eac0:2010::/44 maxlen: 48 2a0e:eac0:2030::/44 maxlen: 44 2a0e:eac0:2100::/44 maxlen: 48 2a0e:eac0:2101::/48 maxlen: 48 2a0e:eac0:2110::/44 maxlen: 48 2a0e:eac0:2200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:be:88:8f:64:8d:f9:58:2e:04:8f:c0:1a:b3:65:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Validity Not Before: Jan 22 08:07:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=964c133f315047f3178cd9529767e30adfa110e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:5a:d2:62:20:69:7f:4b:09:d2:45:de:60: f4:f3:f1:9f:46:23:49:60:42:23:a4:b8:03:7e:dd: 33:9a:76:c2:81:7c:0e:58:87:ef:95:da:6f:6f:9d: b1:ea:3a:41:fd:ac:b4:41:61:68:9b:67:10:c7:e8: 53:de:e3:79:3d:b0:6f:a3:36:dd:2e:a2:c4:cb:6a: e5:83:98:41:25:40:08:5e:ad:a3:1f:59:45:0e:14: 62:2b:5a:f6:bb:4d:f6:37:5d:73:87:95:16:ac:dd: 76:09:ac:6b:03:09:b1:f7:a9:5e:a3:ef:c9:ec:9a: 99:a5:aa:64:37:4b:d0:be:49:3f:ea:52:4b:d6:da: 4b:3c:25:2e:cd:39:f8:de:b8:b2:d7:f1:fe:20:7e: c8:fb:17:ad:6d:b4:bb:f3:49:25:92:a6:cd:8d:17: fb:50:cb:24:0a:e8:e7:e5:f5:60:cd:b9:a6:a4:e6: 90:07:d6:2c:d6:4e:be:3c:d3:a4:1c:61:3c:1f:07: ab:23:7c:6f:6c:73:0d:c8:2a:21:6b:8f:10:12:99: b9:55:4c:85:87:2e:8c:e9:50:61:25:f3:d9:85:6f: 93:28:24:6a:2f:9a:9c:9f:40:48:0c:5a:5d:69:1e: 07:d1:7b:b2:b1:10:f5:b4:3d:88:cf:05:6d:38:c5: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4C:13:3F:31:50:47:F3:17:8C:D9:52:97:67:E3:0A:DF:A1:10:E7 X509v3 Authority Key Identifier: keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/lkwTPzFQR_MXjNlSl2fjCt-hEOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.44.0/29 IPv6: 2a0e:eac0:2000::/43 2a0e:eac0:2030::/44 2a0e:eac0:2100::/43 2a0e:eac0:2200::/48 Signature Algorithm: sha256WithRSAEncryption 9a:c8:c8:b1:df:38:aa:b8:6b:d8:9b:99:d4:e5:b7:ad:64:f5: e0:4e:54:1b:df:62:1a:9b:71:fd:b7:2c:9c:5c:2d:a0:ba:10: 91:68:91:bd:dc:f9:2d:30:b8:24:5d:bc:f2:a7:b2:f2:e8:b6: db:d1:b8:1e:2f:00:74:47:0f:95:eb:d0:4e:b2:7c:b5:c9:1e: d3:10:2f:fc:f5:57:11:36:22:55:1d:7c:65:a1:86:c1:01:a8: 7d:6e:cf:87:44:57:66:e1:11:c3:d3:9c:3e:8a:7a:d7:71:b9: 4c:30:ef:03:9d:fd:91:66:1e:db:0a:8a:42:9e:bf:21:68:5e: d5:59:07:50:26:65:16:36:13:07:d4:0c:d8:28:d2:7a:b8:4c: 3e:8b:6b:a3:72:b8:1b:ca:62:cf:e2:dc:cf:e9:68:41:ae:5b: 66:d3:5d:c7:75:a9:36:5f:b5:cb:a1:3d:72:2d:af:59:ce:8a: 83:9c:6a:29:b9:4d:ca:74:1d:7a:79:58:8c:f0:67:48:1b:3e: 0e:ea:5a:c5:7f:c4:a5:fa:29:a1:62:16:de:62:6e:95:53:86: eb:2b:01:db:da:84:63:f2:7c:95:25:0b:e7:8d:2c:56:99:4f: ce:9f:81:b8:d6:24:1c:3b:ea:e6:a4:13:5a:60:bc:5f:cb:80: 41:b9:f1:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZvkvoiPZI35WC4Ej8Aas2VyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw ZWEzYTAwHhcNMjYwMTIyMDgwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjRjMTMzZjMxNTA0N2YzMTc4Y2Q5NTI5NzY3ZTMwYWRmYTExMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Fa0mIgaX9LCdJF3mD08/GfRiNJ YEIjpLgDft0zmnbCgXwOWIfvldpvb52x6jpB/ay0QWFom2cQx+hT3uN5PbBvozbd LqLEy2rlg5hBJUAIXq2jH1lFDhRiK1r2u032N11zh5UWrN12CaxrAwmx96leo+/J 7JqZpapkN0vQvkk/6lJL1tpLPCUuzTn43riy1/H+IH7I+xetbbS780klkqbNjRf7 UMskCujn5fVgzbmmpOaQB9Ys1k6+PNOkHGE8HwerI3xvbHMNyCoha48QEpm5VUyF hy6M6VBhJfPZhW+TKCRqL5qcn0BIDFpdaR4H0XuysRD1tD2IzwVtOMUSCQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJZMEz8xUEfzF4zZUpdn4wrfoRDnMB8GA1UdIwQY MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt MDBjYTMxMjZiM2ZlLzEvbGt3VFB6RlFSX01Yak5sU2wyZmpDdC1oRU9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzANBAIAATAHAwUDLZAsADAq BAIAAjAkAwcFKg7qwCAAAwcEKg7qwCAwAwcFKg7qwCEAAwcAKg7qwCIAMA0GCSqG SIb3DQEBCwUAA4IBAQCayMix3ziquGvYm5nU5betZPXgTlQb32Iam3H9tyycXC2g uhCRaJG93PktMLgkXbzyp7Ly6Lbb0bgeLwB0Rw+V69BOsny1yR7TEC/89VcRNiJV HXxloYbBAah9bs+HRFdm4RHD05w+inrXcblMMO8Dnf2RZh7bCopCnr8haF7VWQdQ JmUWNhMH1AzYKNJ6uEw+i2ujcrgbymLP4tzP6WhBrltm013Hdak2X7XLoT1yLa9Z zoqDnGopuU3KdB16eViM8GdIGz4O6lrFf8Sl+imhYhbeYm6VU4brKwHb2oRj8nyV JQvnjSxWmU/On4G41iQcO+rmpBNaYLxfy4BBufFO -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:40 2026 by rpki-client