This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa File: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (raw, json) Hash identifier: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ= Subject key identifier: 2F:27:3B:2F:91:0D:36:73:66:78:51:62:3F:5D:E6:80:19:BE:B5:E4 Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3 Certificate serial: 019B7BA3C5CF4FA7B3663BC2722FB99BF476 Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213960 IP address blocks: 93.126.50.0/24 maxlen: 24 93.126.53.0/24 maxlen: 24 93.126.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c5:cf:4f:a7:b3:66:3b:c2:72:2f:b9:9b:f4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f273b2f910d3673667851623f5de68019beb5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:6a:dd:bb:4b:06:fd:3d:fc:5e:55:96:71:31: 3e:70:7e:6f:8b:f8:00:41:e3:1a:ed:ef:3d:33:28: 2d:39:f9:84:ac:0c:b8:96:92:d5:5f:38:c3:e6:f6: 9d:1f:68:c9:01:d6:d3:11:21:88:1f:ff:99:d2:b7: 23:3b:97:c1:7f:32:b4:75:e5:e5:dc:ee:62:34:3f: 5d:c8:de:18:55:b5:c6:27:f9:bc:72:dc:28:96:12: 42:6a:94:6a:0c:1b:5a:9a:8c:d9:df:f7:59:df:5f: 8f:4a:31:c2:0c:33:64:09:75:11:c9:6c:c1:67:41: 7a:44:ca:fd:f1:ed:b0:ad:6f:f7:38:b4:d7:3c:ec: 44:ff:29:27:bb:6f:72:02:fc:43:1c:c4:a8:41:85: 43:d7:4d:6c:18:47:36:3e:dc:60:3a:50:a9:67:a3: 84:1e:44:1c:71:8e:f8:5c:8e:48:80:61:ba:79:83: ee:1d:ec:f2:5d:b5:70:a5:38:c3:bd:dc:b3:aa:00: d5:86:ea:0c:b7:0e:ba:f6:63:d6:41:3f:ab:dc:6b: f2:40:a2:9b:de:52:50:de:97:95:e6:1e:ca:38:25: b8:ba:8a:b3:7f:17:18:e0:a4:e5:26:09:ad:71:c2: 97:bd:d1:6d:89:e1:e8:06:4f:76:1b:c6:65:9d:a4: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:27:3B:2F:91:0D:36:73:66:78:51:62:3F:5D:E6:80:19:BE:B5:E4 X509v3 Authority Key Identifier: keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.126.50.0/24 93.126.53.0-93.126.54.255 Signature Algorithm: sha256WithRSAEncryption a9:5e:b0:a9:5d:bf:71:38:d6:2b:65:26:70:42:4f:a0:71:28: 51:cb:01:70:f0:80:0b:ea:10:4d:7e:79:3b:15:12:a4:f7:64: d4:c4:67:66:f5:09:a0:5e:af:d0:a4:8b:e9:b9:25:37:5e:6f: 2a:39:59:0f:5a:4c:b2:a3:c0:5d:67:11:00:87:4b:f8:db:36: 11:0c:81:7d:75:0d:12:ed:cb:01:3d:cd:eb:86:f3:6e:8c:b8: c8:52:76:50:6f:76:3b:f8:35:d0:2b:57:a9:4a:80:e5:20:fe: ac:87:f3:f6:71:3f:fa:a5:bd:fa:51:f3:e3:59:6e:ba:2e:3e: f7:c3:46:7e:cc:e3:c8:4e:10:ee:3e:8f:44:6e:ad:18:cd:b4: 34:9d:b5:b1:70:2a:9c:7e:df:c6:f5:e8:29:4c:a7:38:d2:20: d4:2d:7b:eb:8f:88:1e:d5:d9:35:70:f6:32:59:12:f6:44:5f: 39:85:c1:a1:35:e4:4b:87:b5:36:d0:c9:ff:f8:4c:ee:45:3e: fa:76:30:58:de:f0:4c:e8:59:89:cc:27:45:00:7c:0b:89:ba: b8:c3:4d:da:36:cc:5d:a7:94:b7:03:5d:ed:87:5b:8f:2b:f9: df:7e:75:1b:3c:d6:a1:44:01:0d:aa:0d:37:bf:7e:57:99:d0: 26:67:d2:21 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7o8XPT6ezZjvCci+5m/R2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm NDA0ZDMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjI3M2IyZjkxMGQzNjczNjY3ODUxNjIzZjVkZTY4MDE5YmViNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2rdu0sG/T38XlWWcTE+cH5vi/gA QeMa7e89MygtOfmErAy4lpLVXzjD5vadH2jJAdbTESGIH/+Z0rcjO5fBfzK0deXl 3O5iND9dyN4YVbXGJ/m8ctwolhJCapRqDBtamozZ3/dZ31+PSjHCDDNkCXURyWzB Z0F6RMr98e2wrW/3OLTXPOxE/yknu29yAvxDHMSoQYVD101sGEc2PtxgOlCpZ6OE HkQccY74XI5IgGG6eYPuHezyXbVwpTjDvdyzqgDVhuoMtw669mPWQT+r3GvyQKKb 3lJQ3peV5h7KOCW4uoqzfxcY4KTlJgmtccKXvdFtieHoBk92G8ZlnaQcBwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFC8nOy+RDTZzZnhRYj9d5oAZvrXkMB8GA1UdIwQY MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt NmMzOTUwMTk0MzcwLzEvTHljN0w1RU5Obk5tZUZGaVAxM21nQm0tdGVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXX4yMAwD BABdfjUDBABdfjYwDQYJKoZIhvcNAQELBQADggEBAKlesKldv3E41itlJnBCT6Bx KFHLAXDwgAvqEE1+eTsVEqT3ZNTEZ2b1CaBer9Cki+m5JTdebyo5WQ9aTLKjwF1n EQCHS/jbNhEMgX11DRLtywE9zeuG826MuMhSdlBvdjv4NdArV6lKgOUg/qyH8/Zx P/qlvfpR8+NZbrouPvfDRn7M48hOEO4+j0RurRjNtDSdtbFwKpx+38b16ClMpzjS INQte+uPiB7V2TVw9jJZEvZEXzmFwaE15EuHtTbQyf/4TO5FPvp2MFje8EzoWYnM J0UAfAuJurjDTdo2zF2nlLcDXe2HW48r+d9+dRs81qFEAQ2qDTe/fleZ0CZn0iE= -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:22 2026 by rpki-client