This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/LnYH5U1q89AlKFf8pYePsqhkNDM.roa File: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (raw, json) Hash identifier: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA= Subject key identifier: 2E:76:07:E5:4D:6A:F3:D0:25:28:57:FC:A5:87:8F:B2:A8:64:34:33 Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb Certificate serial: 019B7C12AFFCD5F476AE5FB5E2AB08C5D5A8 Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/LnYH5U1q89AlKFf8pYePsqhkNDM.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49650 IP address blocks: 37.130.208.0/21 maxlen: 21 91.215.64.0/22 maxlen: 22 188.65.20.0/22 maxlen: 22 195.49.176.0/24 maxlen: 24 195.49.177.0/24 maxlen: 24 195.49.178.0/24 maxlen: 24 195.49.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:af:fc:d5:f4:76:ae:5f:b5:e2:ab:08:c5:d5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e7607e54d6af3d0252857fca5878fb2a8643433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:6c:76:7e:f7:b5:d3:7d:40:87:2d:b0:e6:d7: 52:4b:1e:37:2a:c6:63:33:e4:8b:1d:93:80:4b:20: 9d:de:91:16:bc:0d:a1:32:db:d8:30:6b:0c:f8:52: ac:58:47:ec:94:52:bf:ca:7c:0b:b6:0a:ad:0a:1b: 01:ef:95:e7:b6:ad:84:d8:d7:7a:b3:88:9d:c7:2e: 2e:01:dd:d7:f3:68:4d:e4:82:0a:63:3b:25:49:44: c9:b4:ee:d6:72:dc:74:7e:65:97:0b:c2:9a:22:f3: cf:5d:9b:f5:ba:56:0a:1b:a6:b2:6d:19:30:2c:e6: 82:e9:3f:5b:95:54:b7:b4:91:8e:fa:3c:81:25:c3: 68:f1:75:6b:7a:20:af:37:c2:8e:8a:4f:97:53:0f: 06:df:bf:fb:69:77:ff:2c:53:b5:d8:c8:7a:c5:60: a1:eb:88:b8:de:af:40:b8:0d:a0:11:f5:ec:c6:7b: d6:25:b7:f6:11:4f:c7:af:70:e6:8b:d4:35:68:4e: 26:d7:6f:e1:5f:a2:13:ea:40:5e:fb:c7:04:d1:ef: a6:27:a9:e9:72:9d:26:b2:64:05:91:c8:a8:9a:b1: a7:bd:31:b3:ef:e4:b0:d8:7b:24:ab:23:fb:10:8d: 6c:5b:9f:1a:23:a2:d2:2b:33:bf:fe:c7:65:87:99: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:07:E5:4D:6A:F3:D0:25:28:57:FC:A5:87:8F:B2:A8:64:34:33 X509v3 Authority Key Identifier: keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/LnYH5U1q89AlKFf8pYePsqhkNDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.208.0/21 91.215.64.0/22 188.65.20.0/22 195.49.176.0/22 Signature Algorithm: sha256WithRSAEncryption a7:ca:0f:22:d1:ea:da:19:6d:c9:a1:e3:d7:d3:5b:da:da:b1: 9e:ab:4a:3b:85:50:22:2b:5d:fc:85:a2:96:bd:e9:b1:42:57: 71:6d:9a:15:6e:90:02:76:00:30:c7:b9:5f:76:24:03:64:85: 44:06:5c:5f:f2:bb:b9:74:c5:bf:8e:5d:f2:27:fc:25:99:d8: ec:1f:9c:fd:fe:07:3f:8b:1b:66:42:e5:46:b7:69:31:79:0e: 8c:ab:7f:59:be:b5:eb:76:bf:60:7a:3c:a6:97:9e:85:5e:df: e0:0e:e8:c5:05:12:2e:88:e0:70:2b:7b:47:78:aa:c3:46:91: 51:16:17:0f:24:c5:8d:60:39:a8:08:86:a2:da:35:c9:1a:77: 03:28:e1:67:e2:74:9c:8b:5b:b0:b5:a6:6e:54:85:6e:67:05: dc:aa:22:b5:cd:3b:a1:60:62:8e:2b:0e:d3:ce:6a:6e:92:b5: 81:26:81:6d:a8:aa:eb:09:fc:00:92:4f:6e:81:1b:ec:ae:52: 9f:89:3e:4a:23:b3:8e:04:a6:f4:76:a9:b7:de:89:90:08:18: ac:4a:e0:19:46:82:23:88:ff:a0:63:5b:bd:98:f7:7e:5a:af: 1e:67:95:00:70:5d:c4:30:8c:81:f8:ec:08:35:a1:78:f4:2d: a4:1e:1a:fb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Eq/81fR2rl+14qsIxdWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzM2NkNjI3OWUzYWRjMTk5Y2NlZDE0NDhmODA4ODE4NDI5 NTlkYmIwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc2MDdlNTRkNmFmM2QwMjUyODU3ZmNhNTg3OGZiMmE4NjQzNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Gx2fve1031Ahy2w5tdSSx43KsZj M+SLHZOASyCd3pEWvA2hMtvYMGsM+FKsWEfslFK/ynwLtgqtChsB75Xntq2E2Nd6 s4idxy4uAd3X82hN5IIKYzslSUTJtO7Wctx0fmWXC8KaIvPPXZv1ulYKG6aybRkw LOaC6T9blVS3tJGO+jyBJcNo8XVreiCvN8KOik+XUw8G37/7aXf/LFO12Mh6xWCh 64i43q9AuA2gEfXsxnvWJbf2EU/Hr3Dmi9Q1aE4m12/hX6IT6kBe+8cE0e+mJ6np cp0msmQFkciomrGnvTGz7+Sw2HskqyP7EI1sW58aI6LSKzO//sdlh5mXyQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFC52B+VNavPQJShX/KWHj7KoZDQzMB8GA1UdIwQY MBaAFKM81ieeOtwZnM7RRI+AiBhClZ27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTkt YWE1YmIwYWJhYzIzLzEvTG5ZSDVVMXE4OUFsS0ZmOHBZZVBzcWhrTkRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTktYWE1YmIwYWJhYzIz LzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJYLQAwQC W9dAAwQCvEEUAwQCwzGwMA0GCSqGSIb3DQEBCwUAA4IBAQCnyg8i0eraGW3JoePX 01va2rGeq0o7hVAiK138haKWvemxQldxbZoVbpACdgAwx7lfdiQDZIVEBlxf8ru5 dMW/jl3yJ/wlmdjsH5z9/gc/ixtmQuVGt2kxeQ6Mq39ZvrXrdr9gejyml56FXt/g DujFBRIuiOBwK3tHeKrDRpFRFhcPJMWNYDmoCIai2jXJGncDKOFn4nSci1uwtaZu VIVuZwXcqiK1zTuhYGKOKw7TzmpukrWBJoFtqKrrCfwAkk9ugRvsrlKfiT5KI7OO BKb0dqm33omQCBisSuAZRoIjiP+gY1u9mPd+Wq8eZ5UAcF3EMIyB+OwINaF49C2k Hhr7 -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:32 2026 by rpki-client