This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/LgvbuVV_52WynAHYpwvRHpZVnNI.roa
File: LgvbuVV_52WynAHYpwvRHpZVnNI.roa (raw, json)
Hash identifier: 2NYmdNRzlmlK0EtbozdXHwFXd15kCmUNnu2aelmVQRI=
Subject key identifier: 2E:0B:DB:B9:55:7F:E7:65:B2:9C:01:D8:A7:0B:D1:1E:96:55:9C:D2
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 019B7DCAA97F299C0A450F4F623B489A1281
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/LgvbuVV_52WynAHYpwvRHpZVnNI.roa
Signing time: Fri 02 Jan 2026 08:19:52 +0000
ROA not before: Fri 02 Jan 2026 08:19:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44447
IP address blocks: 93.92.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:a9:7f:29:9c:0a:45:0f:4f:62:3b:48:9a:12:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Jan 2 08:19:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e0bdbb9557fe765b29c01d8a70bd11e96559cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:1a:d5:e2:23:e8:da:2a:9d:6c:4a:64:e7:
14:cc:a2:b9:bf:97:e5:a4:d1:52:4b:e7:7d:c0:2f:
b2:e8:b4:77:b8:10:3f:78:f3:c0:f8:4a:9a:7b:cb:
25:ea:ea:a9:f6:28:6f:b8:ab:08:42:0d:eb:a0:f9:
b1:e6:e5:7b:be:82:b8:de:87:63:41:13:4a:33:f3:
e5:32:da:aa:72:4d:38:e0:1e:d0:2a:61:bd:2d:63:
93:7b:76:c1:69:33:96:ea:23:90:1e:5f:f3:b1:6a:
96:0d:2c:ac:3b:7c:28:bb:f5:00:29:8e:ad:e7:05:
dd:78:93:9d:20:62:b2:9c:77:fd:b2:a9:f2:ec:7c:
90:90:4a:ef:a7:d8:43:3e:0c:1b:cf:c7:31:3c:35:
09:ec:94:7d:09:04:8a:84:2b:e3:e8:d9:de:d3:c2:
ea:c2:53:0f:e3:ea:91:32:40:e0:67:60:15:8c:24:
fe:7a:02:99:5b:d6:4e:f7:ec:ed:fa:09:09:85:67:
0f:6c:f3:08:92:b1:73:43:5b:4c:ac:7e:2f:56:e3:
1c:1b:93:bb:71:d7:0d:1d:ba:f0:bd:cd:c6:a0:d2:
06:70:81:ea:80:5f:57:f5:62:2f:6f:83:d2:de:f6:
f2:c9:af:0a:e9:fa:8d:8e:b9:aa:ec:be:4e:87:a9:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:DB:B9:55:7F:E7:65:B2:9C:01:D8:A7:0B:D1:1E:96:55:9C:D2
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/LgvbuVV_52WynAHYpwvRHpZVnNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.0.0/21
Signature Algorithm: sha256WithRSAEncryption
af:78:85:1b:c1:86:bc:f5:32:2e:03:51:6f:d4:fd:f7:a5:18:
73:1f:3f:3b:d6:58:ad:ed:4c:74:6f:0b:9c:94:f0:04:45:87:
bb:09:de:82:76:03:0f:c8:8c:e9:ca:96:0a:ff:4e:af:d5:c2:
58:76:22:7f:72:1f:aa:45:14:87:64:89:c9:c2:9a:9a:bd:b9:
10:d6:b4:dd:da:b7:ec:2a:4a:dd:a2:74:f2:65:cc:ed:fa:85:
2d:35:22:10:9f:18:9a:e1:a9:63:7b:30:9f:36:7c:c7:9c:b3:
2e:e7:fa:8d:45:18:7d:85:31:99:db:38:a3:d6:02:79:17:bf:
a0:9f:4e:59:7d:2c:40:07:b4:94:51:eb:46:49:af:9d:78:2e:
f2:eb:eb:d2:56:3f:77:7f:d2:63:80:3f:89:68:44:c3:11:d2:
89:f6:75:d0:14:48:df:ab:a4:8f:72:09:3c:1c:95:5d:01:f1:
46:c0:4b:76:08:66:85:e0:16:e5:89:45:fa:92:7d:bc:cc:d3:
99:04:a3:c1:77:55:6d:14:a3:52:5a:7d:f3:32:c2:4f:68:bc:
79:da:1c:43:7d:b3:7a:12:97:09:cd:52:f8:47:56:1c:84:47:
14:c3:45:f8:b8:9b:c3:53:01:a1:e4:9f:e0:25:29:d5:d5:a3:
78:66:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:05 2026 by rpki-client