This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/LrQ0vm_GIspdaaQ4ARH_PykzBXI.roa File: LrQ0vm_GIspdaaQ4ARH_PykzBXI.roa (raw, json) Hash identifier: 9ZfR3ZtX3CAXZFDFgdJtkb7R/TyhsP5TAZR/1ws1AbQ= Subject key identifier: 2E:B4:34:BE:6F:C6:22:CA:5D:69:A4:38:01:11:FF:3F:29:33:05:72 Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Certificate serial: 019B7CEE28FF972790A447E8793048B65B09 Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/LrQ0vm_GIspdaaQ4ARH_PykzBXI.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29084 IP address blocks: 94.190.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:28:ff:97:27:90:a4:47:e8:79:30:48:b6:5b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eb434be6fc622ca5d69a4380111ff3f29330572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:a1:ba:2b:61:2c:e1:db:c2:74:e0:a1:e0: 32:77:80:a3:47:f0:e1:a4:44:25:bd:d5:6b:5c:73: fb:78:3c:d4:70:aa:eb:ee:ab:94:43:b9:e6:33:c5: f7:d4:ba:42:cc:3b:44:a3:bd:cd:c8:67:19:ff:5a: fd:ef:a7:73:bd:d5:5c:2a:dc:52:57:9b:cd:6b:57: 5d:ff:af:d0:03:f5:df:eb:32:d6:63:62:87:e9:14: 09:79:f6:69:1c:16:fb:45:52:b4:c9:be:5f:1c:6a: 17:de:be:b0:99:f0:69:28:62:ac:2b:cb:aa:51:87: 3b:ca:af:83:f9:dc:5a:90:6b:03:6e:53:0c:d5:80: 5a:08:09:3a:b7:db:9e:d4:13:96:7c:cc:2a:e6:0e: 6c:6c:b8:28:1e:1b:70:66:86:da:7d:fa:f6:dd:91: e7:e7:65:70:b8:7b:f8:87:ce:35:ea:84:e1:ba:0e: 44:44:0f:a2:57:a5:93:99:b6:07:2d:d1:8d:97:7e: 41:4a:d1:9e:f7:1c:f9:74:06:74:ab:86:3c:11:d6: 2c:fe:1a:0b:34:43:dd:f0:80:3a:e1:4d:01:87:3e: 80:02:ea:86:05:04:ab:fc:61:d8:47:3b:47:b1:ef: 5f:ff:82:65:48:c2:d1:ea:f8:1e:12:3a:5a:60:a8: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:34:BE:6F:C6:22:CA:5D:69:A4:38:01:11:FF:3F:29:33:05:72 X509v3 Authority Key Identifier: keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/LrQ0vm_GIspdaaQ4ARH_PykzBXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.190.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:b4:f4:56:1d:aa:a7:8e:e3:a3:0b:27:99:93:ae:5b:89:59: 11:ec:27:06:35:e0:0c:ad:19:72:b5:7f:be:a3:1e:2d:cc:e3: e5:76:90:ff:7a:29:f5:cf:c2:0a:1a:b5:2f:36:c9:c1:8e:42: e7:bb:c6:af:62:f9:33:d9:b9:d3:1d:6f:5f:c0:87:90:32:18: 2f:17:63:59:ab:7c:ef:dd:a2:bf:8c:a9:f8:07:b1:03:41:71: d7:fb:25:cb:47:f5:1d:5b:3b:b9:fd:d9:ce:4c:f1:b0:2e:a1: 91:97:16:1c:22:c1:16:a5:c8:9b:88:42:a8:73:23:37:5f:0f: 92:b4:8d:75:6b:73:03:3b:40:8a:5c:22:8f:9a:c9:33:c0:79: 36:da:26:50:0c:92:cc:a9:28:28:8e:41:e8:0b:b3:ef:28:d9: 6c:b9:05:29:8f:00:3e:be:5b:6b:c5:87:7b:b7:36:26:f2:c2: 24:5a:3c:35:a8:b0:84:51:0c:37:75:35:bd:50:bf:7d:08:47: a0:4c:7c:77:3c:d6:40:d1:17:5d:38:aa:08:59:3f:92:f5:21: f1:c0:f4:46:62:dc:fa:e8:79:b0:84:6f:ea:66:52:e9:3e:65: 59:48:0d:3f:b7:c8:4e:e2:c3:8c:48:29:18:a2:b9:34:06:86: dd:54:b4:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ij/lyeQpEfoeTBItlsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0 MmFkNGIwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWI0MzRiZTZmYzYyMmNhNWQ2OWE0MzgwMTExZmYzZjI5MzMwNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAOhuithLOHbwnTgoeAyd4CjR/Dh pEQlvdVrXHP7eDzUcKrr7quUQ7nmM8X31LpCzDtEo73NyGcZ/1r976dzvdVcKtxS V5vNa1dd/6/QA/Xf6zLWY2KH6RQJefZpHBb7RVK0yb5fHGoX3r6wmfBpKGKsK8uq UYc7yq+D+dxakGsDblMM1YBaCAk6t9ue1BOWfMwq5g5sbLgoHhtwZobaffr23ZHn 52VwuHv4h8416oThug5ERA+iV6WTmbYHLdGNl35BStGe9xz5dAZ0q4Y8EdYs/hoL NEPd8IA64U0Bhz6AAuqGBQSr/GHYRztHse9f/4JlSMLR6vgeEjpaYKjTcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC60NL5vxiLKXWmkOAER/z8pMwVyMB8GA1UdIwQY MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt YTIwZDJkNzUxZWI1LzEvTHJRMHZtX0dJc3BkYWFRNEFSSF9QeWt6QlhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1 LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXr78MA0G CSqGSIb3DQEBCwUAA4IBAQBftPRWHaqnjuOjCyeZk65biVkR7CcGNeAMrRlytX++ ox4tzOPldpD/ein1z8IKGrUvNsnBjkLnu8avYvkz2bnTHW9fwIeQMhgvF2NZq3zv 3aK/jKn4B7EDQXHX+yXLR/UdWzu5/dnOTPGwLqGRlxYcIsEWpcibiEKocyM3Xw+S tI11a3MDO0CKXCKPmskzwHk22iZQDJLMqSgojkHoC7PvKNlsuQUpjwA+vltrxYd7 tzYm8sIkWjw1qLCEUQw3dTW9UL99CEegTHx3PNZA0RddOKoIWT+S9SHxwPRGYtz6 6HmwhG/qZlLpPmVZSA0/t8hO4sOMSCkYork0BobdVLTB -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:13 2026 by rpki-client