This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/LcnRPWMP0InV3_yP2jprbNChb0s.roa File: LcnRPWMP0InV3_yP2jprbNChb0s.roa (raw, json) Hash identifier: e8UDEtmRI7MTyD+knc6LFW/m5Kw2e0PHXCb9DXA2Dt8= Subject key identifier: 2D:C9:D1:3D:63:0F:D0:89:D5:DF:FC:8F:DA:3A:6B:6C:D0:A1:6F:4B Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e Certificate serial: 019B7B36A20387536C5C6C120D68E042BE51 Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/LcnRPWMP0InV3_yP2jprbNChb0s.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47869 IP address blocks: 91.229.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a2:03:87:53:6c:5c:6c:12:0d:68:e0:42:be:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dc9d13d630fd089d5dffc8fda3a6b6cd0a16f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:13:dc:3c:a0:ad:c2:99:8f:0d:9d:18:08: 40:21:60:a7:d9:78:da:11:a6:36:69:4f:f6:50:8b: 84:2d:f2:18:ad:a7:87:76:a9:6e:bb:0e:6a:f1:84: 78:33:1d:22:5c:b9:52:60:8d:f7:52:de:1a:2e:0c: ac:c0:71:0c:8b:12:8d:70:87:3c:32:a9:1c:1b:ed: 47:e9:2b:ad:7f:5a:c2:6c:58:6a:c3:a1:1b:8a:93: 42:75:09:15:ad:72:ae:93:71:7b:43:cd:cf:91:ce: f0:a3:d3:8d:c1:f2:1a:9e:76:bd:14:c1:ec:c9:55: ab:fc:ab:17:f1:cb:00:8e:d5:14:42:39:5b:ec:b6: 86:ec:c9:c7:d0:d3:5e:0a:aa:a0:66:9a:a0:98:f4: 46:51:ce:fa:18:78:ec:e6:6a:36:2a:48:03:65:80: 63:35:fc:9a:56:3e:f6:f2:2f:91:00:cc:72:81:98: e9:e1:54:63:26:e4:fe:c6:3e:da:73:e3:57:52:c5: 01:a0:b4:51:98:ce:a0:d3:9c:5e:d4:68:dd:3f:7f: 22:fd:f2:8b:82:9b:27:c0:b5:11:5a:34:ef:c1:7a: 20:7f:33:cc:e3:85:b4:bc:66:17:2a:c3:ad:40:59: 6b:ac:2e:4e:95:6c:31:9b:2a:b3:28:91:d4:6a:b0: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C9:D1:3D:63:0F:D0:89:D5:DF:FC:8F:DA:3A:6B:6C:D0:A1:6F:4B X509v3 Authority Key Identifier: keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/LcnRPWMP0InV3_yP2jprbNChb0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.60.0/22 Signature Algorithm: sha256WithRSAEncryption 64:34:ba:95:9e:88:f6:9d:9e:90:70:e6:c1:bd:9a:6e:35:b9: 97:ce:6f:dc:e7:58:12:d3:03:59:bd:2a:6d:b5:c4:0e:d4:eb: 80:b8:40:a5:f6:52:e0:e3:c3:42:cc:b4:b7:6c:4f:d4:6d:e6: f9:27:e6:6f:33:49:16:d0:ca:e4:a8:ed:d7:4b:97:da:5b:12: f3:a8:ea:df:fa:9e:b0:87:77:36:71:74:4a:70:77:0c:cf:6b: 16:d0:32:90:89:ef:02:77:c4:00:2c:1a:b0:f9:6e:14:e9:27: da:41:68:a6:39:02:4e:41:2c:5d:15:59:c4:2c:64:d8:dc:1b: 2d:33:ae:27:bb:d5:c8:fc:76:83:a2:d0:b2:af:4f:4c:cc:f4: f1:72:52:6c:71:f1:a2:17:94:23:1d:14:c4:96:a4:74:3c:fc: 96:26:1c:40:46:38:5e:8a:b7:ca:f1:e4:e8:6d:30:b4:04:b4: 7e:db:24:5f:fa:c5:72:cd:18:00:a4:ce:20:6d:61:9f:24:1b: 26:91:1a:40:6a:50:5b:a8:72:81:cd:37:74:67:f3:87:1b:5f: 93:f8:b8:38:93:1f:54:95:53:06:5d:21:64:c1:65:ba:46:5b: ab:b8:98:3a:e4:14:f7:67:2e:ce:62:7a:e8:5d:ce:f5:e0:79: b8:cf:72:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqIDh1NsXGwSDWjgQr5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmIyMmYyNzkwNTk3NDg0YmY5NjkxNWE4MzU0M2MxOTRi M2ZkMWUwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGM5ZDEzZDYzMGZkMDg5ZDVkZmZjOGZkYTNhNmI2Y2QwYTE2ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12wT3DygrcKZjw2dGAhAIWCn2Xja EaY2aU/2UIuELfIYraeHdqluuw5q8YR4Mx0iXLlSYI33Ut4aLgyswHEMixKNcIc8 MqkcG+1H6Sutf1rCbFhqw6EbipNCdQkVrXKuk3F7Q83Pkc7wo9ONwfIanna9FMHs yVWr/KsX8csAjtUUQjlb7LaG7MnH0NNeCqqgZpqgmPRGUc76GHjs5mo2KkgDZYBj NfyaVj728i+RAMxygZjp4VRjJuT+xj7ac+NXUsUBoLRRmM6g05xe1GjdP38i/fKL gpsnwLURWjTvwXogfzPM44W0vGYXKsOtQFlrrC5OlWwxmyqzKJHUarDtZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC3J0T1jD9CJ1d/8j9o6a2zQoW9LMB8GA1UdIwQY MBaAFFdrIvJ5BZdIS/lpFag1Q8GUs/0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82ZWZhYzQtZDc1YS00MjVkLTkxNTct YWVlNmViMjg1MTRkLzEvTGNuUlBXTVAwSW5WM195UDJqcHJiTkNoYjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS82ZWZhYzQtZDc1YS00MjVkLTkxNTctYWVlNmViMjg1MTRk LzEvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+U8MA0G CSqGSIb3DQEBCwUAA4IBAQBkNLqVnoj2nZ6QcObBvZpuNbmXzm/c51gS0wNZvSpt tcQO1OuAuECl9lLg48NCzLS3bE/Ubeb5J+ZvM0kW0MrkqO3XS5faWxLzqOrf+p6w h3c2cXRKcHcMz2sW0DKQie8Cd8QALBqw+W4U6SfaQWimOQJOQSxdFVnELGTY3Bst M64nu9XI/HaDotCyr09MzPTxclJscfGiF5QjHRTElqR0PPyWJhxARjheirfK8eTo bTC0BLR+2yRf+sVyzRgApM4gbWGfJBsmkRpAalBbqHKBzTd0Z/OHG1+T+Lg4kx9U lVMGXSFkwWW6RluruJg65BT3Zy7OYnroXc714Hm4z3Kl -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:35 2026 by rpki-client