This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/LKXy-UiiwJTm9i-RPVj4M4X3jaQ.roa File: LKXy-UiiwJTm9i-RPVj4M4X3jaQ.roa (raw, json) Hash identifier: 4COeScrO5G+pH7nKA4NnbTjope4Fy5I6kyVaqtY/stg= Subject key identifier: 2C:A5:F2:F9:48:A2:C0:94:E6:F6:2F:91:3D:58:F8:33:85:F7:8D:A4 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019B7C12D1AB925E43B1BAB67AF63EE81EFF Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/LKXy-UiiwJTm9i-RPVj4M4X3jaQ.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43528 IP address blocks: 91.195.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d1:ab:92:5e:43:b1:ba:b6:7a:f6:3e:e8:1e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca5f2f948a2c094e6f62f913d58f83385f78da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:6f:bd:27:54:89:63:f3:0e:66:e2:75:5e: 26:e3:30:df:8a:a3:50:e1:a6:3d:a5:ba:d1:a2:93: 8b:dc:2d:e6:2b:00:26:f2:66:c4:41:cc:6b:34:f8: 08:37:6f:bb:d4:d4:21:b6:17:0f:db:e4:00:f0:8b: e5:76:e9:2b:23:cd:fc:91:b4:f0:63:c6:36:48:40: 93:16:de:23:f0:d2:14:9c:0e:ae:07:55:99:a1:b5: eb:b7:20:16:45:29:8e:52:7e:63:12:50:6f:d1:8c: de:2e:c9:85:df:be:e0:8c:83:34:88:02:1f:d0:57: 20:63:90:8f:7f:c2:4b:5f:d4:34:3b:4e:bd:aa:a0: 79:22:40:b6:00:50:f1:c4:1f:59:45:30:94:ca:9f: a2:99:5e:6c:cc:fd:64:62:0f:2d:1e:b9:ba:09:48: 67:d6:60:23:42:b5:87:3e:a5:39:42:3c:3d:30:34: 0c:3a:8d:e9:ea:71:98:d5:02:f1:79:57:a0:8d:e5: 77:87:d4:c1:86:4f:5d:df:0a:58:26:20:cc:29:33: ba:5e:4f:f8:73:ef:a5:c7:09:18:33:64:5f:51:89: 06:8e:69:12:a7:f3:20:64:f7:75:ef:39:80:30:fa: bc:68:30:a2:5c:5d:14:d6:3f:2c:02:a4:8b:2b:52: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A5:F2:F9:48:A2:C0:94:E6:F6:2F:91:3D:58:F8:33:85:F7:8D:A4 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/LKXy-UiiwJTm9i-RPVj4M4X3jaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.34.0/23 Signature Algorithm: sha256WithRSAEncryption 39:a0:13:db:88:d5:99:96:a8:ea:16:e7:75:b6:86:1e:ed:28: d8:2f:6f:bc:cd:eb:26:dd:ba:4a:d6:83:45:71:e5:88:8e:08: 3b:4e:5b:65:2f:c5:93:7e:49:7a:36:af:42:9a:55:56:1b:ec: 5b:f6:0e:8b:bc:27:29:c0:35:7d:f1:d8:c8:02:6e:a3:81:be: b0:0b:58:52:05:6d:9f:06:e5:35:ea:27:2d:21:2d:e6:80:cd: 37:c2:67:6a:31:7b:63:62:d2:14:d9:c0:88:41:19:14:d4:8a: 05:b6:ae:06:7a:0a:98:df:7c:22:9a:50:f0:c5:2f:23:e1:20: ca:f2:72:f3:3a:98:48:be:47:ef:be:e1:73:00:2f:fe:a5:ea: 30:18:82:e3:90:01:c5:b3:7e:cd:ef:e9:72:8a:dc:0f:1e:48: 7e:1c:3c:40:5c:e9:f8:b1:e4:95:02:dc:ec:16:bd:c8:02:3b: 42:f9:82:30:05:b7:80:a6:1f:d1:ae:ec:ea:19:33:89:e9:d6: bc:e3:a7:44:11:61:43:99:7f:52:45:cf:88:f0:8f:15:f4:4c: ab:f2:cb:cd:13:3f:2f:48:c2:46:58:ed:9e:09:22:b5:d1:72: fc:ed:87:f7:e4:43:ea:02:aa:b6:71:87:1b:30:ba:f1:c3:4a: 97:f9:a0:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtGrkl5Dsbq2evY+6B7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2E1ZjJmOTQ4YTJjMDk0ZTZmNjJmOTEzZDU4ZjgzMzg1Zjc4ZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA199vvSdUiWPzDmbidV4m4zDfiqNQ 4aY9pbrRopOL3C3mKwAm8mbEQcxrNPgIN2+71NQhthcP2+QA8IvldukrI838kbTw Y8Y2SECTFt4j8NIUnA6uB1WZobXrtyAWRSmOUn5jElBv0YzeLsmF377gjIM0iAIf 0FcgY5CPf8JLX9Q0O069qqB5IkC2AFDxxB9ZRTCUyp+imV5szP1kYg8tHrm6CUhn 1mAjQrWHPqU5Qjw9MDQMOo3p6nGY1QLxeVegjeV3h9TBhk9d3wpYJiDMKTO6Xk/4 c++lxwkYM2RfUYkGjmkSp/MgZPd17zmAMPq8aDCiXF0U1j8sAqSLK1JnBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyl8vlIosCU5vYvkT1Y+DOF942kMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvTEtYeS1VaWl3SlRtOWktUlBWajRNNFgzamFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8MiMA0G CSqGSIb3DQEBCwUAA4IBAQA5oBPbiNWZlqjqFud1toYe7SjYL2+8zesm3bpK1oNF ceWIjgg7TltlL8WTfkl6Nq9CmlVWG+xb9g6LvCcpwDV98djIAm6jgb6wC1hSBW2f BuU16ictIS3mgM03wmdqMXtjYtIU2cCIQRkU1IoFtq4GegqY33wimlDwxS8j4SDK 8nLzOphIvkfvvuFzAC/+peowGILjkAHFs37N7+lyitwPHkh+HDxAXOn4seSVAtzs Fr3IAjtC+YIwBbeAph/RruzqGTOJ6da846dEEWFDmX9SRc+I8I8V9Eyr8svNEz8v SMJGWO2eCSK10XL87Yf35EPqAqq2cYcbMLrxw0qX+aBa -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:06 2026 by rpki-client