This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/lg-osn9EUdIDJV3HpKBV7GEVZBA.roa File: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (raw, json) Hash identifier: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw= Subject key identifier: 96:0F:A8:B2:7F:44:51:D2:03:25:5D:C7:A4:A0:55:EC:61:15:64:10 Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Certificate serial: 019B791003BBC92E0B9C863C7C5DA8466C2E Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/lg-osn9EUdIDJV3HpKBV7GEVZBA.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 141.59.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:03:bb:c9:2e:0b:9c:86:3c:7c:5d:a8:46:6c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=960fa8b27f4451d203255dc7a4a055ec61156410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:c2:fa:2c:f8:81:f2:d2:b8:e4:0d:97:47: 32:27:5f:d0:87:58:f9:9f:e3:74:c8:d6:b3:c6:6f: 87:c7:22:bc:b7:bc:3c:0e:1a:85:ac:e7:d1:02:ec: 50:63:81:a8:0c:b4:c4:80:ac:c3:72:18:33:e3:7b: a5:bc:c8:6a:9d:25:a5:1c:c5:77:aa:1a:b6:9c:90: b7:8a:2e:30:6d:38:1d:ef:a1:5a:ae:00:de:a7:51: bd:12:24:95:49:f4:00:0d:9d:a9:f2:a7:cc:1b:4d: 5b:6a:42:6b:34:49:d5:48:03:f0:54:a7:73:2c:8a: e0:d9:8b:a0:c0:67:b3:e2:bf:3c:e2:0c:19:52:f2: 86:e8:42:6e:6f:35:d4:30:52:d0:75:1f:48:1b:5d: c0:f6:d5:9b:6c:87:ed:53:85:04:1a:15:51:fd:5b: f9:46:f5:85:f3:80:90:78:bf:29:9b:d1:49:ab:03: 19:e7:0d:72:df:05:69:66:7f:2e:f7:07:13:da:f0: ca:97:5d:c5:e6:d1:f5:93:19:ea:76:a5:51:16:5a: 0c:20:69:ac:d8:aa:b7:23:45:85:9e:b7:23:95:0a: b4:20:3a:7f:32:0c:bf:31:be:11:76:3d:b4:54:9f: 0f:94:00:50:f1:07:13:55:18:8e:27:3e:12:30:35: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:A8:B2:7F:44:51:D2:03:25:5D:C7:A4:A0:55:EC:61:15:64:10 X509v3 Authority Key Identifier: keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/lg-osn9EUdIDJV3HpKBV7GEVZBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:dc:d1:be:c5:95:82:5e:d1:bc:9f:f1:22:47:d8:a3:c9:5f: 53:2c:22:6b:9d:2a:0a:c8:2f:ca:3f:dc:0f:df:bf:0e:3e:50: ed:7d:88:3e:1a:0b:99:3d:30:f4:2c:50:49:61:7c:46:43:a5: e3:2a:88:e5:31:e0:c8:a3:1d:22:bb:c7:27:67:04:38:f2:28: 83:89:6c:e2:76:2b:2a:65:07:bc:0f:25:ad:ef:b4:0b:3b:7a: cb:71:70:04:48:68:90:15:ea:9d:28:f6:54:95:75:cc:6c:f2: 9f:e9:a4:ee:98:75:6f:4d:c8:ef:1e:d1:53:c9:67:aa:2b:b0: 12:5f:19:8b:4b:64:c8:be:17:5d:db:58:2a:4d:14:89:40:0d: d4:58:ee:42:45:06:86:b7:63:9d:91:f4:3d:bc:a4:ec:db:aa: 9e:07:c9:7e:4f:22:57:34:21:53:1c:21:8a:ea:86:0c:3c:d9: c7:24:d0:f1:cb:6a:97:6d:fc:cd:f3:19:ff:53:d5:f3:a4:56: 41:77:60:2c:19:04:c8:b6:2f:66:24:3c:7f:94:65:9a:cc:e0: a5:00:3c:d5:07:bb:c1:06:e0:e7:b7:12:ba:a1:d8:4a:56:f0: d0:4f:dd:b4:9f:9d:7f:6f:4d:1e:ff:40:a9:d2:7a:82:0a:6e: 1d:32:e3:3d -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5EAO7yS4LnIY8fF2oRmwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2 ZGJkZWYwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjBmYThiMjdmNDQ1MWQyMDMyNTVkYzdhNGEwNTVlYzYxMTU2NDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrbC+iz4gfLSuOQNl0cyJ1/Qh1j5 n+N0yNazxm+HxyK8t7w8DhqFrOfRAuxQY4GoDLTEgKzDchgz43ulvMhqnSWlHMV3 qhq2nJC3ii4wbTgd76FargDep1G9EiSVSfQADZ2p8qfMG01bakJrNEnVSAPwVKdz LIrg2YugwGez4r884gwZUvKG6EJubzXUMFLQdR9IG13A9tWbbIftU4UEGhVR/Vv5 RvWF84CQeL8pm9FJqwMZ5w1y3wVpZn8u9wcT2vDKl13F5tH1kxnqdqVRFloMIGms 2Kq3I0WFnrcjlQq0IDp/Mgy/Mb4Rdj20VJ8PlABQ8QcTVRiOJz4SMDUyawIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJYPqLJ/RFHSAyVdx6SgVexhFWQQMB8GA1UdIwQY MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct ODk0OWU3NTFiMjE5LzEvbGctb3NuOUVVZElESlYzSHBLQlY3R0VWWkJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5 LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjTswDQYJ KoZIhvcNAQELBQADggEBAErc0b7FlYJe0byf8SJH2KPJX1MsImudKgrIL8o/3A/f vw4+UO19iD4aC5k9MPQsUElhfEZDpeMqiOUx4MijHSK7xydnBDjyKIOJbOJ2Kypl B7wPJa3vtAs7estxcARIaJAV6p0o9lSVdcxs8p/ppO6YdW9NyO8e0VPJZ6orsBJf GYtLZMi+F13bWCpNFIlADdRY7kJFBoa3Y52R9D28pOzbqp4HyX5PIlc0IVMcIYrq hgw82cck0PHLapdt/M3zGf9T1fOkVkF3YCwZBMi2L2YkPH+UZZrM4KUAPNUHu8EG 4Oe3Erqh2EpW8NBP3bSfnX9vTR7/QKnSeoIKbh0y4z0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:05 2026 by rpki-client