This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa File: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (raw, json) Hash identifier: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc= Subject key identifier: 2F:02:68:F9:93:80:81:AD:57:B0:C0:7A:90:99:A8:26:1B:03:2A:2E Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba Certificate serial: 019B78352D1FE4C53C62081F0B06C9E6B237 Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206013 IP address blocks: 80.89.160.0/20 maxlen: 20 80.94.208.0/20 maxlen: 20 88.83.128.0/19 maxlen: 19 2a00:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2d:1f:e4:c5:3c:62:08:1f:0b:06:c9:e6:b2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f0268f9938081ad57b0c07a9099a8261b032a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:67:aa:39:b9:a4:85:ad:89:da:e2:f5:42: cd:0c:d2:23:7b:13:ff:41:1a:94:77:80:e9:40:52: c6:ae:68:8f:06:7e:6d:65:0d:4a:62:f1:cc:a6:3e: 3b:c0:e5:50:7e:b6:57:60:66:b9:14:db:b8:d4:e4: 1c:4b:6a:84:90:ea:a8:d8:b1:a1:30:f8:51:af:7a: fd:d3:57:50:a0:b1:d1:85:a8:cb:af:68:73:02:11: dd:d4:9a:c9:d1:af:3e:8e:9a:82:c7:c0:be:19:03: 49:0f:e3:2b:34:6e:3a:a2:c7:c2:25:ae:15:9f:2d: e8:e2:b9:76:bf:4f:1f:14:49:8f:f2:49:e1:a9:45: 44:f2:70:69:18:64:97:10:ea:ed:d2:b4:bd:14:cd: ae:9b:52:8c:4f:55:7b:53:23:a8:41:b3:a4:33:06: 08:11:22:77:d5:32:c3:24:b3:a6:a7:f0:63:ab:7d: ec:08:ef:dd:b1:1a:2e:d1:54:77:80:c4:89:e4:c4: 86:6a:bc:78:7d:aa:45:03:b6:22:16:1f:e7:3f:a1: 2a:0f:fd:22:36:c7:8f:5b:a1:d8:2a:a2:d4:f2:de: 2f:62:02:36:0b:50:f5:ee:4f:f2:9f:18:7e:bc:a7: e2:97:c4:d7:29:35:ab:ef:ac:3e:76:67:4a:f3:41: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:68:F9:93:80:81:AD:57:B0:C0:7A:90:99:A8:26:1B:03:2A:2E X509v3 Authority Key Identifier: keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.160.0/20 80.94.208.0/20 88.83.128.0/19 IPv6: 2a00:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 56:f9:69:c2:39:58:ec:9d:c7:22:df:0b:8f:55:12:e3:f6:eb: 63:3a:2b:27:01:12:3d:48:2a:67:93:76:8d:1f:45:a3:b5:87: 58:7a:f2:e3:fd:27:1a:ee:47:64:dc:9d:24:a5:f3:b8:31:b0: 53:0d:be:36:c4:f5:85:89:70:68:d8:23:95:3d:ac:dd:d8:4f: ec:65:1b:65:c6:ea:e1:27:02:46:b6:a6:bf:eb:d7:f7:60:43: b4:b3:2f:58:d4:f5:c0:f1:27:63:ee:cc:12:66:f7:99:49:6e: 5c:78:e3:3a:f2:84:6c:de:65:7a:63:89:1a:d3:0d:af:8e:9b: d5:b0:48:d7:c8:c8:e0:67:a6:2b:c9:1e:18:2f:da:3a:a4:7b: 90:21:4e:37:25:67:bf:f1:e5:67:55:59:6a:4c:71:18:ea:7f: 2f:f7:a3:02:13:c6:43:7e:9c:f9:6b:df:19:7b:f1:df:63:f4: 7d:e2:2a:a0:d1:a3:3e:ac:45:8a:f0:b6:ae:89:50:a9:49:25: c3:dc:4b:e8:45:22:98:38:22:c7:bd:1b:9a:a5:5b:1b:8e:21: 38:65:3b:37:bf:3c:18:8f:e1:3b:a9:07:4d:5a:87:b4:a1:ed: 69:84:da:11:e1:00:2e:88:d1:be:32:92:ab:2c:66:e6:32:37: 82:57:ba:01 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NS0f5MU8YggfCwbJ5rI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjliNDAyYjY3ZDc1OTM2ZjQ1ZGM4YmM1NGI4NjgxNGUw NjM2YmEwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjAyNjhmOTkzODA4MWFkNTdiMGMwN2E5MDk5YTgyNjFiMDMyYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNNnqjm5pIWtidri9ULNDNIjexP/ QRqUd4DpQFLGrmiPBn5tZQ1KYvHMpj47wOVQfrZXYGa5FNu41OQcS2qEkOqo2LGh MPhRr3r901dQoLHRhajLr2hzAhHd1JrJ0a8+jpqCx8C+GQNJD+MrNG46osfCJa4V ny3o4rl2v08fFEmP8knhqUVE8nBpGGSXEOrt0rS9FM2um1KMT1V7UyOoQbOkMwYI ESJ31TLDJLOmp/Bjq33sCO/dsRou0VR3gMSJ5MSGarx4fapFA7YiFh/nP6EqD/0i NsePW6HYKqLU8t4vYgI2C1D17k/ynxh+vKfil8TXKTWr76w+dmdK80FsmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFC8CaPmTgIGtV7DAepCZqCYbAyouMB8GA1UdIwQY MBaAFE5ptAK2fXWTb0Xci8VLhoFOBja6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQt MTZiNDE5NmZhMjk0LzEvTHdKby1aT0FnYTFYc01CNmtKbW9KaHNES2k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQtMTZiNDE5NmZhMjk0 LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFmgAwQE UF7QAwQFWFOAMA0EAgACMAcDBQAqAG6AMA0GCSqGSIb3DQEBCwUAA4IBAQBW+WnC OVjsncci3wuPVRLj9utjOisnARI9SCpnk3aNH0WjtYdYevLj/Sca7kdk3J0kpfO4 MbBTDb42xPWFiXBo2COVPazd2E/sZRtlxurhJwJGtqa/69f3YEO0sy9Y1PXA8Sdj 7swSZveZSW5ceOM68oRs3mV6Y4ka0w2vjpvVsEjXyMjgZ6YryR4YL9o6pHuQIU43 JWe/8eVnVVlqTHEY6n8v96MCE8ZDfpz5a98Ze/HfY/R94iqg0aM+rEWK8LauiVCp SSXD3EvoRSKYOCLHvRuapVsbjiE4ZTs3vzwYj+E7qQdNWoe0oe1phNoR4QAuiNG+ MpKrLGbmMjeCV7oB -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:36 2026 by rpki-client