This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa File: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (raw, json) Hash identifier: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0= Subject key identifier: 2D:96:3E:3E:AC:89:21:96:D4:31:A5:B9:2F:2C:64:66:ED:C1:D0:C1 Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Certificate serial: 019B7F147E6F901508DD104AD8213943111D Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58224 IP address blocks: 185.115.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7e:6f:90:15:08:dd:10:4a:d8:21:39:43:11:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d963e3eac892196d431a5b92f2c6466edc1d0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:d2:50:f8:0d:36:6d:6c:d2:a5:ca:84:a3: 3f:9d:71:7a:ab:87:27:e5:ce:f0:04:c1:fe:de:92: d3:97:cd:2c:2f:2e:ed:32:f1:7f:da:bf:90:6c:b1: 70:62:2f:ae:74:a5:a5:fc:4f:b0:5e:78:bf:38:1f: e0:5d:3d:4f:7e:26:03:e8:91:92:97:da:a2:96:37: 1c:27:73:8f:45:f0:ea:70:10:f0:8c:fc:ee:a7:b4: 1e:a0:2d:2e:cd:cc:18:df:a3:de:fc:57:0b:6a:6f: 63:7d:93:92:ad:d7:40:1a:77:8c:13:05:53:8b:fa: ed:8e:33:c0:54:39:86:6c:20:d5:97:c0:25:ae:d5: c2:eb:14:82:13:7f:0e:36:3a:6d:2c:3c:2d:0f:29: 83:e6:2d:72:7b:7b:6a:74:28:af:1c:ab:1b:a2:19: b6:95:2b:10:4a:ec:99:fd:ae:9c:2e:04:27:f6:83: f0:f4:73:0a:4d:d6:17:8c:24:e1:dd:f2:bc:54:20: 84:3b:ec:f7:5b:8e:24:96:b7:14:ad:85:fe:9a:28: 74:cd:3d:1a:5d:61:90:14:9d:ee:5b:d7:eb:e1:05: b6:7b:3c:b1:6e:49:70:72:05:72:b2:a3:b6:e9:62: 65:7d:b9:fd:64:16:6f:1f:d6:19:d3:e1:8a:a3:af: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:96:3E:3E:AC:89:21:96:D4:31:A5:B9:2F:2C:64:66:ED:C1:D0:C1 X509v3 Authority Key Identifier: keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.76.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:33:27:7d:6a:3f:29:ec:03:e6:ca:2c:6d:f7:64:61:a5:8e: 8a:c3:79:6d:d3:83:eb:f3:43:fb:f1:4b:a2:47:c6:33:03:10: ab:3f:57:1e:ed:77:7b:f2:41:54:cc:9c:4a:5a:e0:b5:a6:cf: 23:9a:f4:c6:2d:f8:71:fb:b7:3f:fa:10:01:f7:18:7f:95:d2: 2c:e8:48:b0:7b:45:f3:97:95:53:e1:45:86:b4:b3:df:c0:af: 2a:6f:47:91:8d:27:ea:5f:9d:b6:21:9b:58:5c:50:7a:a9:de: 98:6b:2d:27:0f:0e:c1:ba:61:9a:ee:1c:7f:86:ac:9c:c6:4a: 68:ca:97:2f:8b:1d:82:db:40:4c:32:f0:38:40:f6:cb:c8:95: 57:49:14:0e:a3:2f:78:53:f5:bf:f6:94:86:b6:b5:10:96:e6: c2:e2:d6:4a:81:4c:f7:83:8d:16:1c:a9:da:44:3f:3a:0b:10: c2:31:11:ec:ca:3c:d2:96:4d:57:42:02:78:a2:31:cb:4b:32: b2:37:3a:b9:9c:a9:36:d7:34:ea:63:82:52:96:b8:1e:b7:7b: 36:e2:a3:75:4e:84:95:02:53:78:e9:7f:bc:3b:80:f2:6c:fb: 47:e7:26:48:58:aa:55:4e:d9:1d:b2:7d:b3:77:c6:c1:6f:72: d3:82:9d:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FH5vkBUI3RBK2CE5QxEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi Yzc1M2IwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDk2M2UzZWFjODkyMTk2ZDQzMWE1YjkyZjJjNjQ2NmVkYzFkMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6PSUPgNNm1s0qXKhKM/nXF6q4cn 5c7wBMH+3pLTl80sLy7tMvF/2r+QbLFwYi+udKWl/E+wXni/OB/gXT1PfiYD6JGS l9qiljccJ3OPRfDqcBDwjPzup7QeoC0uzcwY36Pe/FcLam9jfZOSrddAGneMEwVT i/rtjjPAVDmGbCDVl8AlrtXC6xSCE38ONjptLDwtDymD5i1ye3tqdCivHKsbohm2 lSsQSuyZ/a6cLgQn9oPw9HMKTdYXjCTh3fK8VCCEO+z3W44klrcUrYX+mih0zT0a XWGQFJ3uW9fr4QW2ezyxbklwcgVysqO26WJlfbn9ZBZvH9YZ0+GKo68FwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2WPj6siSGW1DGluS8sZGbtwdDBMB8GA1UdIwQY MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt OGQ3MTVhYzIxN2UyLzEvTFpZLVBxeUpJWmJVTWFXNUx5eGtadTNCME1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXNMMA0G CSqGSIb3DQEBCwUAA4IBAQAKMyd9aj8p7APmyixt92RhpY6Kw3lt04Pr80P78Uui R8YzAxCrP1ce7Xd78kFUzJxKWuC1ps8jmvTGLfhx+7c/+hAB9xh/ldIs6Eiwe0Xz l5VT4UWGtLPfwK8qb0eRjSfqX522IZtYXFB6qd6Yay0nDw7BumGa7hx/hqycxkpo ypcvix2C20BMMvA4QPbLyJVXSRQOoy94U/W/9pSGtrUQlubC4tZKgUz3g40WHKna RD86CxDCMRHsyjzSlk1XQgJ4ojHLSzKyNzq5nKk21zTqY4JSlrget3s24qN1ToSV AlN46X+8O4DybPtH5yZIWKpVTtkdsn2zd8bBb3LTgp2W -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:11 2026 by rpki-client