This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LkuFSHUi_PPB5NuvTJTNDeBdhTI.roa File: LkuFSHUi_PPB5NuvTJTNDeBdhTI.roa (raw, json) Hash identifier: jItYjcMFyM9uLUe+VALqHFkmbgSj4R5165/kZm6B9eI= Subject key identifier: 2E:4B:85:48:75:22:FC:F3:C1:E4:DB:AF:4C:94:CD:0D:E0:5D:85:32 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C19817A642FEA01DB7D84884F6A3 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LkuFSHUi_PPB5NuvTJTNDeBdhTI.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200023 IP address blocks: 202.49.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c1:98:17:a6:42:fe:a0:1d:b7:d8:48:84:f6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e4b85487522fcf3c1e4dbaf4c94cd0de05d8532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:21:9b:97:b9:79:77:50:31:64:5e:03:3e:17: 39:05:9b:5e:cb:1d:06:b5:d5:7e:f6:9b:25:16:ef: 0d:e4:cd:8d:81:a6:d7:38:33:28:b9:3b:af:25:24: 16:9f:6a:aa:bd:17:03:4c:c0:8a:97:a5:61:a2:86: 63:a2:2f:05:35:70:70:cf:6c:b7:45:05:6b:e6:5b: 0d:1e:79:42:fb:38:43:e3:1f:56:de:e6:16:7c:98: 74:8d:13:5d:1b:76:65:e3:e2:62:1b:1e:f7:a2:7f: 44:55:6a:ce:12:01:7a:88:ff:15:2f:0f:1e:d6:22: a5:67:7b:c3:a2:29:db:4f:fa:1d:29:92:3c:88:4e: c0:d6:1c:5b:52:ad:41:bc:9d:6f:36:be:1d:b8:22: da:26:f5:89:15:0e:be:6d:e2:42:03:07:6e:d1:4c: 0c:0c:ef:0a:0e:4c:da:55:10:d9:7e:6d:c9:ab:97: d4:0b:f4:32:dd:42:af:69:0f:91:49:bb:fc:84:84: 4d:b1:7c:83:42:3e:54:5a:e9:c2:97:f5:cc:6c:2d: 43:6b:ff:ca:20:d3:f0:f0:ca:53:c6:7b:f8:23:fc: 56:7d:ab:cf:25:0a:69:f9:fb:9f:a0:b4:86:aa:d0: f2:c3:e9:77:ac:e3:38:1c:b1:fd:f7:26:c1:97:78: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:85:48:75:22:FC:F3:C1:E4:DB:AF:4C:94:CD:0D:E0:5D:85:32 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LkuFSHUi_PPB5NuvTJTNDeBdhTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.49.92.0/22 Signature Algorithm: sha256WithRSAEncryption 66:91:25:f5:6e:80:26:50:35:c3:f4:26:5f:f7:2e:18:80:df: 1f:ba:ad:f8:1b:4b:bd:36:51:1c:a2:90:0f:ce:4b:2b:98:fe: 8f:5e:93:61:4c:8b:bd:83:84:a1:95:c8:64:54:0f:d9:86:e3: c1:15:1c:96:be:32:ea:54:b9:b2:d2:2b:21:dc:1c:43:77:56: 63:c8:ad:e0:50:a9:72:07:31:f8:00:f9:05:91:79:19:42:50: 44:f6:47:b4:59:87:6b:dd:0a:44:ca:7d:91:90:dd:34:7e:de: 91:50:37:25:48:0c:9c:67:d1:41:fc:79:38:fc:f8:cc:4e:78: a6:dc:cf:3f:2a:69:3a:16:48:0b:c9:72:28:5c:b1:66:50:79: 92:ff:e1:be:ac:e2:2b:70:7e:d5:c7:81:1b:4f:a5:06:fa:2b: 0f:4c:63:5d:48:c2:9d:ef:46:8b:73:f1:d0:bf:f9:d7:7f:d1: 34:54:34:48:35:dc:2a:01:08:7b:0b:bb:7c:57:94:8c:00:e4: 12:2c:d4:32:f0:7e:e9:84:fc:fc:04:17:d3:fe:d5:a1:d1:c5: 6e:dc:2b:b5:62:54:1e:96:fa:cb:e6:83:35:98:d0:fe:5b:8d: c6:44:06:d7:bd:11:de:12:4a:96:08:be:a3:f3:ff:ca:a5:a6: cb:dc:e9:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8GYF6ZC/qAdt9hIhPajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTRiODU0ODc1MjJmY2YzYzFlNGRiYWY0Yzk0Y2QwZGUwNWQ4NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iGbl7l5d1AxZF4DPhc5BZteyx0G tdV+9pslFu8N5M2NgabXODMouTuvJSQWn2qqvRcDTMCKl6VhooZjoi8FNXBwz2y3 RQVr5lsNHnlC+zhD4x9W3uYWfJh0jRNdG3Zl4+JiGx73on9EVWrOEgF6iP8VLw8e 1iKlZ3vDoinbT/odKZI8iE7A1hxbUq1BvJ1vNr4duCLaJvWJFQ6+beJCAwdu0UwM DO8KDkzaVRDZfm3Jq5fUC/Qy3UKvaQ+RSbv8hIRNsXyDQj5UWunCl/XMbC1Da//K INPw8MpTxnv4I/xWfavPJQpp+fufoLSGqtDyw+l3rOM4HLH99ybBl3jpmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5LhUh1IvzzweTbr0yUzQ3gXYUyMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvTGt1RlNIVWlfUFBCNU51dlRKVE5EZUJkaFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyjFcMA0G CSqGSIb3DQEBCwUAA4IBAQBmkSX1boAmUDXD9CZf9y4YgN8fuq34G0u9NlEcopAP zksrmP6PXpNhTIu9g4ShlchkVA/ZhuPBFRyWvjLqVLmy0ish3BxDd1ZjyK3gUKly BzH4APkFkXkZQlBE9ke0WYdr3QpEyn2RkN00ft6RUDclSAycZ9FB/Hk4/PjMTnim 3M8/Kmk6FkgLyXIoXLFmUHmS/+G+rOIrcH7Vx4EbT6UG+isPTGNdSMKd70aLc/HQ v/nXf9E0VDRINdwqAQh7C7t8V5SMAOQSLNQy8H7phPz8BBfT/tWh0cVu3Cu1YlQe lvrL5oM1mND+W43GRAbXvRHeEkqWCL6j8//KpabL3OnC -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:22 2026 by rpki-client