This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LWGwWy7bjWoYi_hHP7YeEjcI4Xc.roa File: LWGwWy7bjWoYi_hHP7YeEjcI4Xc.roa (raw, json) Hash identifier: hYXKVn0MFSgM7X5ejh2foLY1IoZrNm8NfTqdJ3+ISIA= Subject key identifier: 2D:61:B0:5B:2E:DB:8D:6A:18:8B:F8:47:3F:B6:1E:12:37:08:E1:77 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A346EF6F9FACBF43E78879BD68FC0B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LWGwWy7bjWoYi_hHP7YeEjcI4Xc.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 87.120.92.0/24 maxlen: 24 87.120.205.0/24 maxlen: 24 87.120.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:46:ef:6f:9f:ac:bf:43:e7:88:79:bd:68:fc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d61b05b2edb8d6a188bf8473fb61e123708e177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:93:66:c1:1e:86:5f:3d:47:c8:f8:b3:50: 63:7e:d5:30:ca:98:7e:f0:75:af:27:d3:8b:08:ea: 83:ba:72:62:42:73:b3:26:80:bf:b4:1b:6d:10:ed: df:fd:90:4f:50:19:95:28:c7:8a:48:7b:56:3c:f8: 59:a1:47:db:c2:0b:a1:17:10:ae:b8:c1:e1:61:7f: 38:d3:1f:3c:44:c0:d4:02:d3:28:d1:89:26:e8:93: 1b:1f:16:4b:e6:e5:f1:76:8c:0e:55:11:84:93:03: 8c:1e:5d:ea:3e:a5:26:f4:dc:2f:19:81:ea:70:ae: dd:e1:cc:b3:ae:d9:47:fd:e1:06:0e:f2:f6:ad:61: db:f8:22:cd:ed:ba:e5:b7:4b:6a:d9:99:27:08:27: 7f:0e:5f:5a:af:fd:62:80:0b:e5:f6:20:20:06:08: e0:c5:9b:9a:ec:f8:b9:a0:5a:a5:fe:89:da:dd:70: 0a:8c:fa:73:54:25:54:b9:5b:a5:fb:18:1f:d8:bb: b7:6d:65:91:cd:b6:6c:4a:bd:f8:f5:67:5a:00:dc: 24:31:49:f9:01:d0:51:68:ec:cb:85:f5:c7:19:56: 5f:21:51:71:d7:e7:16:e6:b4:fd:43:2e:82:1c:90: e0:8a:a5:be:a3:ce:3f:93:58:5a:20:50:b7:38:05: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:61:B0:5B:2E:DB:8D:6A:18:8B:F8:47:3F:B6:1E:12:37:08:E1:77 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LWGwWy7bjWoYi_hHP7YeEjcI4Xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.92.0/24 87.120.205.0/24 87.120.216.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ff:9b:a0:d3:1f:fa:ad:67:5f:31:2d:db:94:21:dd:bb:8c: b4:60:84:20:96:15:8a:91:2d:5f:1a:37:83:0a:f4:c1:bd:9c: 98:2c:8f:50:07:84:37:64:7c:ee:d1:ed:36:2d:20:5f:e5:8d: 4e:dc:a1:cb:c5:19:4d:df:6f:ee:91:07:02:f3:57:b8:ea:52: ec:7f:fe:2d:9b:72:29:20:36:5c:fe:e8:51:5d:d3:96:a7:ca: 51:c5:0d:68:b3:fe:b8:5b:16:35:ed:04:09:0d:af:82:7a:8a: 67:18:87:95:a0:12:8c:d1:bc:e5:00:4a:95:ac:a0:3c:93:9d: b6:af:c2:ee:35:2b:75:d4:73:55:cc:b3:4b:8c:10:6f:fc:9a: 79:b9:2d:8f:50:0b:c4:6c:df:30:eb:f7:e9:83:00:b1:45:fe: 8c:54:3b:6a:ee:9a:fb:68:cd:82:2b:f4:09:fc:70:b8:1b:d0: 61:ab:e4:96:8f:77:cc:2b:8c:c0:e0:5c:dd:5f:1d:84:51:c5: 6d:b0:de:b3:36:56:48:72:17:c1:09:18:a4:f9:b1:cc:d1:2e: 49:48:8d:14:b5:ae:0c:ec:36:fd:10:c3:53:57:a3:c7:12:3a: 14:07:03:ae:44:ad:c8:d1:ea:93:a2:b7:25:55:9d:21:d1:cf: 18:87:8d:c0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4o0bvb5+sv0PniHm9aPwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDYxYjA1YjJlZGI4ZDZhMTg4YmY4NDczZmI2MWUxMjM3MDhlMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlSTZsEehl89R8j4s1BjftUwyph+ 8HWvJ9OLCOqDunJiQnOzJoC/tBttEO3f/ZBPUBmVKMeKSHtWPPhZoUfbwguhFxCu uMHhYX840x88RMDUAtMo0Ykm6JMbHxZL5uXxdowOVRGEkwOMHl3qPqUm9NwvGYHq cK7d4cyzrtlH/eEGDvL2rWHb+CLN7brlt0tq2ZknCCd/Dl9ar/1igAvl9iAgBgjg xZua7Pi5oFql/ona3XAKjPpzVCVUuVul+xgf2Lu3bWWRzbZsSr349WdaANwkMUn5 AdBRaOzLhfXHGVZfIVFx1+cW5rT9Qy6CHJDgiqW+o84/k1haIFC3OAXsIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC1hsFsu241qGIv4Rz+2HhI3COF3MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTFdHd1d5N2JqV29ZaV9oSFA3WWVFamNJNFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV3hcAwQA V3jNAwQAV3jYMA0GCSqGSIb3DQEBCwUAA4IBAQBr/5ug0x/6rWdfMS3blCHdu4y0 YIQglhWKkS1fGjeDCvTBvZyYLI9QB4Q3ZHzu0e02LSBf5Y1O3KHLxRlN32/ukQcC 81e46lLsf/4tm3IpIDZc/uhRXdOWp8pRxQ1os/64WxY17QQJDa+CeopnGIeVoBKM 0bzlAEqVrKA8k522r8LuNSt11HNVzLNLjBBv/Jp5uS2PUAvEbN8w6/fpgwCxRf6M VDtq7pr7aM2CK/QJ/HC4G9Bhq+SWj3fMK4zA4FzdXx2EUcVtsN6zNlZIchfBCRik +bHM0S5JSI0Uta4M7Db9EMNTV6PHEjoUBwOuRK3I0eqTorclVZ0h0c8Yh43A -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client