This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LumDKv8yJCaTy-63lwCESoCV9wg.roa File: LumDKv8yJCaTy-63lwCESoCV9wg.roa (raw, json) Hash identifier: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744= Subject key identifier: 2E:E9:83:2A:FF:32:24:26:93:CB:EE:B7:97:00:84:4A:80:95:F7:08 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F14435DBCE19549D2C93169830107B4 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LumDKv8yJCaTy-63lwCESoCV9wg.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43093 IP address blocks: 78.159.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:43:5d:bc:e1:95:49:d2:c9:31:69:83:01:07:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee9832aff32242693cbeeb79700844a8095f708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:d9:91:01:09:1c:e5:c2:4b:49:c7:c7:c4: cf:20:04:ea:1e:11:d0:42:c0:92:3e:d0:96:2e:b7: db:14:24:78:c5:4c:6b:fb:76:3a:85:ec:ae:ef:0c: 27:d5:e3:52:46:68:6e:f4:6e:a0:47:46:2a:8e:6b: bc:81:9d:0a:f0:4e:5b:6c:9d:41:c7:49:a8:84:85: 57:37:98:89:1f:2d:00:db:93:55:46:8f:2d:ac:b1: a7:69:f4:80:22:ab:e8:ee:20:9c:4c:97:8e:81:b9: 36:db:04:6e:65:6f:d1:82:e9:35:1d:5d:a4:76:7b: 62:d5:93:58:8d:e2:1c:9f:1d:78:ac:65:f2:8a:14: 81:9e:92:00:70:d9:95:87:a5:0c:36:d5:ca:aa:ff: 2a:83:82:c9:ed:00:fb:46:e6:eb:f8:d2:6b:40:e9: 6e:49:a0:3b:fb:91:6b:a0:14:c5:63:4c:e4:5b:7c: 95:3a:25:c9:0c:4e:98:7c:b7:a8:6f:85:a9:4e:d0: 47:d8:21:46:c0:e7:a7:ac:78:20:57:03:e2:8d:74: 13:d7:5e:6a:2c:a4:e1:87:6a:0c:ff:83:58:1d:b7: 6a:4a:a1:45:08:ff:21:db:48:10:ce:36:49:f9:5e: 99:24:53:23:6c:46:0f:dc:a8:a1:a3:52:fc:c4:9f: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:83:2A:FF:32:24:26:93:CB:EE:B7:97:00:84:4A:80:95:F7:08 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LumDKv8yJCaTy-63lwCESoCV9wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.81.0/24 Signature Algorithm: sha256WithRSAEncryption a1:cd:75:69:34:d5:b6:8d:0a:68:ca:f3:18:75:0b:7e:18:b7: 8f:b5:56:ad:47:93:58:a3:36:ce:52:09:1e:3d:2d:e6:70:63: e8:25:d8:f0:89:83:1b:24:91:8d:8f:2d:db:75:ea:0a:13:cf: cc:55:f8:74:a7:ff:04:a0:c2:d0:38:0c:05:82:19:1c:bd:c9: bf:29:3d:88:f3:f2:5f:26:81:bb:28:f1:51:fb:05:9d:91:18: 04:c8:eb:c2:bc:ab:25:2e:e1:59:05:56:85:14:bd:c1:e5:15: f3:2d:f8:c7:e9:21:6a:70:0b:e4:0c:66:40:a1:0a:00:41:3c: bb:60:93:04:64:6e:f7:c2:67:12:28:9b:9d:f9:28:b9:86:44: 81:01:29:14:f9:5e:6c:dc:4c:82:f2:57:40:06:3f:e4:15:dd: 92:3d:71:8a:31:bd:88:16:c7:9e:97:a9:be:f0:31:0e:9d:bd: cf:23:57:96:fb:38:14:d6:74:b6:63:31:89:ee:5e:fb:fd:85: 77:80:6c:bd:21:10:ed:f2:67:1e:8e:8f:d8:0e:73:5c:3e:9e: 21:54:a7:dd:f9:57:61:8b:62:ac:8b:28:27:04:4e:3b:3f:cd: 81:70:45:b3:75:65:43:a0:78:6a:1e:27:18:eb:8f:d4:75:75: 93:0a:0b:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FENdvOGVSdLJMWmDAQe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWU5ODMyYWZmMzIyNDI2OTNjYmVlYjc5NzAwODQ0YTgwOTVmNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27/ZkQEJHOXCS0nHx8TPIATqHhHQ QsCSPtCWLrfbFCR4xUxr+3Y6heyu7wwn1eNSRmhu9G6gR0Yqjmu8gZ0K8E5bbJ1B x0mohIVXN5iJHy0A25NVRo8trLGnafSAIqvo7iCcTJeOgbk22wRuZW/Rguk1HV2k dnti1ZNYjeIcnx14rGXyihSBnpIAcNmVh6UMNtXKqv8qg4LJ7QD7Rubr+NJrQOlu SaA7+5FroBTFY0zkW3yVOiXJDE6YfLeob4WpTtBH2CFGwOenrHggVwPijXQT115q LKThh2oM/4NYHbdqSqFFCP8h20gQzjZJ+V6ZJFMjbEYP3Kiho1L8xJ8svwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7pgyr/MiQmk8vut5cAhEqAlfcIMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTHVtREt2OHlKQ2FUeS02M2x3Q0VTb0NWOXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9RMA0G CSqGSIb3DQEBCwUAA4IBAQChzXVpNNW2jQpoyvMYdQt+GLePtVatR5NYozbOUgke PS3mcGPoJdjwiYMbJJGNjy3bdeoKE8/MVfh0p/8EoMLQOAwFghkcvcm/KT2I8/Jf JoG7KPFR+wWdkRgEyOvCvKslLuFZBVaFFL3B5RXzLfjH6SFqcAvkDGZAoQoAQTy7 YJMEZG73wmcSKJud+Si5hkSBASkU+V5s3EyC8ldABj/kFd2SPXGKMb2IFseel6m+ 8DEOnb3PI1eW+zgU1nS2YzGJ7l77/YV3gGy9IRDt8mcejo/YDnNcPp4hVKfd+Vdh i2KsiygnBE47P82BcEWzdWVDoHhqHicY64/UdXWTCgtt -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:43 2026 by rpki-client