This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lwielbprqxIvPKEvXn-j1PF1_c0.roa File: lwielbprqxIvPKEvXn-j1PF1_c0.roa (raw, json) Hash identifier: TvSsQfDKQZ1vOOgI70lCKu12JkvX+5muHh585vHCsAs= Subject key identifier: 97:08:9E:95:BA:6B:AB:12:2F:3C:A1:2F:5E:7F:A3:D4:F1:75:FD:CD Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30ABB1A8175E78C00628E2F97BBA6 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lwielbprqxIvPKEvXn-j1PF1_c0.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 45.84.88.0/24 maxlen: 24 45.89.244.0/24 maxlen: 24 45.91.193.0/24 maxlen: 24 109.206.236.0/24 maxlen: 24 194.113.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0a:bb:1a:81:75:e7:8c:00:62:8e:2f:97:bb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97089e95ba6bab122f3ca12f5e7fa3d4f175fdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:69:e6:52:36:28:9c:b8:97:c6:48:42:49: 8f:46:8f:60:13:db:31:ec:82:6b:78:77:79:1d:48: e9:69:71:9e:65:0f:52:25:5d:3b:56:b2:98:27:03: 32:86:d8:a0:65:1b:24:60:af:9b:32:22:e8:24:ea: b4:cc:ec:bd:58:80:98:73:8a:a2:f9:af:e0:7c:18: 45:c9:2b:ae:1b:5e:42:67:31:7c:3a:3e:59:5b:0e: 73:7f:17:8f:d9:7a:37:af:47:1a:6c:b9:1e:64:ab: 21:5b:7c:62:31:a8:80:ee:82:24:fd:52:58:61:ea: 6e:f3:b5:02:a3:a3:0c:3a:b3:d2:fd:4b:d6:f4:a3: 86:2a:70:bd:07:04:f9:ed:ba:e3:99:9d:68:79:fb: 99:4b:b0:94:01:73:cd:f8:9e:6a:6d:14:91:3e:72: c1:7e:67:d1:92:71:df:ea:2b:06:24:9a:68:80:d3: 6f:4e:ed:e0:1e:5c:28:9c:49:5d:86:e3:2c:48:64: 3f:e8:55:ed:25:9d:05:a4:63:45:f9:d1:85:4d:74: 30:94:d4:41:a4:1c:b8:65:a4:ec:3c:72:71:11:f8: 24:ab:36:cd:0f:df:af:e0:8b:d0:65:be:25:28:fb: 21:53:09:8d:1c:4c:78:44:01:75:04:41:7a:59:16: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:9E:95:BA:6B:AB:12:2F:3C:A1:2F:5E:7F:A3:D4:F1:75:FD:CD X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lwielbprqxIvPKEvXn-j1PF1_c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.88.0/24 45.89.244.0/24 45.91.193.0/24 109.206.236.0/24 194.113.37.0/24 Signature Algorithm: sha256WithRSAEncryption a2:6f:bf:55:8e:8c:6f:99:69:9e:c6:c8:89:8f:23:bc:62:84: 49:6d:15:2c:80:c1:2a:12:90:8b:1e:1e:e2:89:51:9b:63:1d: a1:ac:db:e2:2b:be:c5:f1:7a:2d:37:ff:8a:10:f9:f6:7b:7c: c0:01:23:da:1d:87:46:b0:52:ab:28:8d:a0:03:0f:25:19:2b: d2:30:47:38:92:40:1e:2f:78:bb:39:41:73:8a:ed:6e:e3:c5: c5:f6:4c:19:39:39:29:cf:fe:04:d9:9a:1d:3f:f1:e5:fc:4d: de:1e:11:17:f8:3d:c2:49:41:61:e3:5f:61:1f:ef:72:d4:3c: f4:3d:b3:cf:26:04:6b:b9:59:04:4d:4b:6c:08:13:3d:c1:56: c9:99:3d:d4:1b:a4:6b:61:eb:1e:60:07:b5:80:50:fe:4f:e3: cf:f5:28:a4:bd:77:f9:6c:52:05:32:eb:da:db:a6:b2:39:04: bc:df:44:e9:c6:d5:cc:b3:e8:71:c4:9b:2e:c0:e4:a5:88:dc: 1f:31:bd:8a:90:67:d1:84:20:68:32:46:ac:a0:a8:76:58:05: b4:52:62:dc:2c:ef:a2:fa:63:0a:d5:f1:c7:c5:99:0c:8b:46: 5a:63:80:82:3b:97:6f:af:bc:ac:2f:b2:d8:d3:1e:c6:34:63: 48:e4:47:b0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4owq7GoF154wAYo4vl7umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzA4OWU5NWJhNmJhYjEyMmYzY2ExMmY1ZTdmYTNkNGYxNzVmZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGpp5lI2KJy4l8ZIQkmPRo9gE9sx 7IJreHd5HUjpaXGeZQ9SJV07VrKYJwMyhtigZRskYK+bMiLoJOq0zOy9WICYc4qi +a/gfBhFySuuG15CZzF8Oj5ZWw5zfxeP2Xo3r0cabLkeZKshW3xiMaiA7oIk/VJY Yepu87UCo6MMOrPS/UvW9KOGKnC9BwT57brjmZ1oefuZS7CUAXPN+J5qbRSRPnLB fmfRknHf6isGJJpogNNvTu3gHlwonEldhuMsSGQ/6FXtJZ0FpGNF+dGFTXQwlNRB pBy4ZaTsPHJxEfgkqzbND9+v4IvQZb4lKPshUwmNHEx4RAF1BEF6WRaBuwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJcInpW6a6sSLzyhL15/o9Txdf3NMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbHdpZWxicHJxeEl2UEtFdlhuLWoxUEYxX2MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVRYAwQA LVn0AwQALVvBAwQAbc7sAwQAwnElMA0GCSqGSIb3DQEBCwUAA4IBAQCib79Vjoxv mWmexsiJjyO8YoRJbRUsgMEqEpCLHh7iiVGbYx2hrNviK77F8XotN/+KEPn2e3zA ASPaHYdGsFKrKI2gAw8lGSvSMEc4kkAeL3i7OUFziu1u48XF9kwZOTkpz/4E2Zod P/Hl/E3eHhEX+D3CSUFh419hH+9y1Dz0PbPPJgRruVkETUtsCBM9wVbJmT3UG6Rr YeseYAe1gFD+T+PP9SikvXf5bFIFMuva26ayOQS830TpxtXMs+hxxJsuwOSliNwf Mb2KkGfRhCBoMkasoKh2WAW0UmLcLO+i+mMK1fHHxZkMi0ZaY4CCO5dvr7ysL7LY 0x7GNGNI5Eew -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:12 2026 by rpki-client