This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/LzYZHC-rjJGbruYM23VscVWulpM.roa File: LzYZHC-rjJGbruYM23VscVWulpM.roa (raw, json) Hash identifier: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns= Subject key identifier: 2F:36:19:1C:2F:AB:8C:91:9B:AE:E6:0C:DB:75:6C:71:55:AE:96:93 Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Certificate serial: 019B7A5B4D590F37546A90C972AAF10424DD Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/LzYZHC-rjJGbruYM23VscVWulpM.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34977 IP address blocks: 176.126.196.0/23 maxlen: 24 185.216.52.0/22 maxlen: 24 185.252.172.0/22 maxlen: 24 188.208.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4d:59:0f:37:54:6a:90:c9:72:aa:f1:04:24:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f36191c2fab8c919baee60cdb756c7155ae9693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:41:86:39:4c:16:e8:d0:2b:03:25:e9:b8: c7:3a:ac:32:67:ea:65:2e:9d:f4:4c:d0:bf:ac:cf: 2a:0d:4e:f5:15:1c:4c:e5:50:9b:88:5c:c5:56:11: db:8e:8f:81:5e:a0:67:86:72:64:98:08:9b:d1:ce: 2b:47:88:a9:95:6d:02:05:90:90:65:55:b9:2e:d2: 50:7c:6b:98:27:d9:59:8e:a3:5d:d3:b8:59:73:e9: f8:e4:38:5b:07:0f:ff:30:28:73:82:09:98:43:5e: 4f:79:a3:ec:3a:88:b0:e7:23:4d:b6:76:de:78:91: 7b:23:7c:a4:62:27:6e:31:e6:a9:8b:de:db:b9:68: 30:34:f8:fb:0f:0c:f7:57:ab:52:b7:4d:5e:ac:0d: 5b:a1:97:89:a8:5d:bc:20:9c:a2:44:c8:27:fb:6d: 40:ff:8b:7a:51:f0:4c:5d:40:dc:4f:56:3b:c7:04: db:80:b7:33:03:c5:0f:9f:46:b5:a7:53:9a:ee:14: 7b:23:c4:52:a1:e0:08:a8:4c:45:cb:56:b0:f4:f3: 98:d0:df:a2:b0:ba:bc:b7:c3:5c:c7:30:e2:46:aa: aa:6d:8e:2d:d5:f8:a1:97:9c:8e:94:9d:69:e5:7b: d8:25:0b:1a:05:24:31:87:5b:a6:7d:55:87:7f:d4: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:19:1C:2F:AB:8C:91:9B:AE:E6:0C:DB:75:6C:71:55:AE:96:93 X509v3 Authority Key Identifier: keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/LzYZHC-rjJGbruYM23VscVWulpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.196.0/23 185.216.52.0/22 185.252.172.0/22 188.208.28.0/23 Signature Algorithm: sha256WithRSAEncryption 12:68:35:d0:99:e8:17:05:04:4f:ee:d5:16:5c:d7:66:4e:f6: f0:0b:a2:40:6c:a7:64:9f:3e:b9:b7:cc:b0:c5:6c:48:de:27: 14:66:b8:f9:c6:df:13:34:4f:0d:12:b1:c7:f5:fe:61:bd:5f: 2c:c5:11:a6:92:28:93:5c:b4:a8:99:06:26:34:fb:a0:59:af: 83:3c:7e:37:86:f7:85:3f:ed:40:56:c3:69:a4:59:cd:05:da: d5:ea:d3:b3:9a:c6:0d:0a:a8:04:a1:56:0b:ad:7f:b9:88:f0: 27:b7:b0:07:1c:c5:e5:95:a0:4b:25:53:d9:1b:07:1c:e7:ca: 89:50:23:7f:95:e1:af:1e:50:18:dc:d5:1c:e6:df:ea:33:db: b1:22:30:d1:ee:a1:1e:f8:7b:71:60:93:31:5c:91:97:43:56: 42:99:0e:fb:a0:3e:26:7a:65:4d:d9:ad:52:2d:a5:d6:a5:2e: 2a:ac:99:d4:56:2d:28:91:c7:bd:eb:a3:63:eb:dc:89:b2:44: ef:e4:4e:4c:56:0d:eb:cf:cf:ae:c8:28:da:2b:22:8e:e9:31: 04:28:df:62:99:ab:61:e4:44:35:cd:1f:86:b5:f2:34:26:a4: 3f:a4:70:fb:37:20:54:e6:6b:79:c8:8d:01:1a:fa:84:13:f5: 17:b7:b9:cd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6W01ZDzdUapDJcqrxBCTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy ZjM1ZTEwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjM2MTkxYzJmYWI4YzkxOWJhZWU2MGNkYjc1NmM3MTU1YWU5NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn9BhjlMFujQKwMl6bjHOqwyZ+pl Lp30TNC/rM8qDU71FRxM5VCbiFzFVhHbjo+BXqBnhnJkmAib0c4rR4iplW0CBZCQ ZVW5LtJQfGuYJ9lZjqNd07hZc+n45DhbBw//MChzggmYQ15PeaPsOoiw5yNNtnbe eJF7I3ykYiduMeapi97buWgwNPj7Dwz3V6tSt01erA1boZeJqF28IJyiRMgn+21A /4t6UfBMXUDcT1Y7xwTbgLczA8UPn0a1p1Oa7hR7I8RSoeAIqExFy1aw9POY0N+i sLq8t8NcxzDiRqqqbY4t1fihl5yOlJ1p5XvYJQsaBSQxh1umfVWHf9TNdQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFC82GRwvq4yRm67mDNt1bHFVrpaTMB8GA1UdIwQY MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt YTQ3ZDE0MWNmYzVhLzEvTHpZWkhDLXJqSkdicnVZTTIzVnNjVld1bHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBsH7EAwQC udg0AwQCufysAwQBvNAcMA0GCSqGSIb3DQEBCwUAA4IBAQASaDXQmegXBQRP7tUW XNdmTvbwC6JAbKdknz65t8ywxWxI3icUZrj5xt8TNE8NErHH9f5hvV8sxRGmkiiT XLSomQYmNPugWa+DPH43hveFP+1AVsNppFnNBdrV6tOzmsYNCqgEoVYLrX+5iPAn t7AHHMXllaBLJVPZGwcc58qJUCN/leGvHlAY3NUc5t/qM9uxIjDR7qEe+HtxYJMx XJGXQ1ZCmQ77oD4memVN2a1SLaXWpS4qrJnUVi0okce966Nj69yJskTv5E5MVg3r z8+uyCjaKyKO6TEEKN9imath5EQ1zR+GtfI0JqQ/pHD7NyBU5mt5yI0BGvqEE/UX t7nN -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:56 2026 by rpki-client