This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/lcaeC_rCe0YppgUeaDDfYFa7APQ.roa File: lcaeC_rCe0YppgUeaDDfYFa7APQ.roa (raw, json) Hash identifier: lbUPIo4FBRLOgfU++DH00nMxTHqUeGn4o2qqnjY9/XM= Subject key identifier: 95:C6:9E:0B:FA:C2:7B:46:29:A6:05:1E:68:30:DF:60:56:BB:00:F4 Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Certificate serial: 019B7E38E98BDEF2FD0EEE1794F14BB0C053 Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/lcaeC_rCe0YppgUeaDDfYFa7APQ.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 87.236.96.0/21 maxlen: 21 91.199.58.0/24 maxlen: 24 185.145.60.0/22 maxlen: 22 195.93.238.0/23 maxlen: 23 2a02:cc8::/32 maxlen: 32 2a02:cc9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e9:8b:de:f2:fd:0e:ee:17:94:f1:4b:b0:c0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95c69e0bfac27b4629a6051e6830df6056bb00f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:d3:e2:08:f8:f6:2a:ce:07:fb:28:e2:03: ec:22:77:6c:0d:0f:4b:de:12:42:e3:e3:35:2b:1c: 99:1c:74:d5:df:14:e9:12:5d:ab:c2:f3:ac:cf:01: 9f:a7:0a:61:94:d9:9c:ff:00:d0:4b:0d:e1:a6:7b: fb:a2:4c:18:15:aa:28:1f:fb:8e:37:c8:ea:d9:a8: a2:a4:f2:26:2e:41:5b:07:b2:9a:80:91:74:cb:93: 8e:fc:14:dd:84:83:f4:a4:df:d9:80:ce:22:47:99: af:d6:46:3f:21:e4:f7:89:c7:9c:07:19:45:d4:82: b4:36:07:40:50:60:ad:05:7d:be:47:90:95:2a:c7: 78:3e:be:c5:12:0d:e7:99:30:b1:9f:1b:b6:eb:df: 10:83:4b:28:5d:a6:a8:ed:51:9c:78:8c:cf:93:8f: 58:26:98:80:59:85:7e:6f:bb:42:5d:6b:42:c4:e0: 8d:b3:ad:28:10:d9:8a:e1:c3:18:3f:2a:07:5c:2e: 9a:30:61:17:37:25:23:3f:5a:01:b8:5b:40:fb:11: dc:fe:21:ae:60:eb:76:47:73:87:bf:9f:81:89:fe: 2e:52:32:85:c8:41:3a:ea:26:32:30:7b:e9:40:c9: 0c:be:25:2f:74:a5:6a:4a:12:ac:dc:75:99:4b:8c: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:9E:0B:FA:C2:7B:46:29:A6:05:1E:68:30:DF:60:56:BB:00:F4 X509v3 Authority Key Identifier: keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/lcaeC_rCe0YppgUeaDDfYFa7APQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.96.0/21 91.199.58.0/24 185.145.60.0/22 195.93.238.0/23 IPv6: 2a02:cc8::/31 Signature Algorithm: sha256WithRSAEncryption aa:20:00:de:be:74:f3:4f:c4:03:73:b5:a3:32:8b:27:89:7b: b5:ed:a0:bb:58:f0:e8:52:d9:fc:57:17:61:82:db:1d:3e:62: b1:30:d5:a3:dc:44:40:38:bd:9c:4d:cd:bc:e3:13:f9:e1:bc: 21:59:e0:7e:67:67:50:68:be:e8:30:df:27:8a:1d:ca:23:98: 61:bb:50:f2:aa:22:6e:c9:04:3a:e1:5b:02:57:9a:9d:20:f0: 4f:8d:de:3d:46:5f:71:2a:ba:d4:60:0f:7a:7c:47:75:94:f3: 25:91:61:b9:ca:f1:22:5e:15:66:50:a3:cd:d4:f0:f9:30:12: 1c:25:d2:f8:65:0d:98:f6:7a:ee:05:51:c3:d9:7a:d7:69:06: b0:da:20:60:c1:8d:ac:2e:18:dd:4b:fd:fe:04:e2:0d:ea:77: 66:16:95:18:46:3c:10:74:8d:30:68:4c:0c:34:8b:29:87:11: 10:f2:3f:96:35:ee:1c:c8:b3:08:29:23:12:b1:44:a5:be:7b: f2:f7:9e:6a:86:9f:b0:44:26:b6:f6:40:89:cc:78:2e:1d:e2: d9:bb:ea:5b:cd:49:48:01:90:bf:ab:7a:f4:a0:2d:8c:e5:57: 7a:e6:86:a4:8b:6a:0b:d3:a6:1e:02:3b:44:5c:67:71:a5:7c: 81:7a:82:f9 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+OOmL3vL9Du4XlPFLsMBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3 Y2EyOGUwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWM2OWUwYmZhYzI3YjQ2MjlhNjA1MWU2ODMwZGY2MDU2YmIwMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk/T4gj49irOB/so4gPsIndsDQ9L 3hJC4+M1KxyZHHTV3xTpEl2rwvOszwGfpwphlNmc/wDQSw3hpnv7okwYFaooH/uO N8jq2aiipPImLkFbB7KagJF0y5OO/BTdhIP0pN/ZgM4iR5mv1kY/IeT3icecBxlF 1IK0NgdAUGCtBX2+R5CVKsd4Pr7FEg3nmTCxnxu2698Qg0soXaao7VGceIzPk49Y JpiAWYV+b7tCXWtCxOCNs60oENmK4cMYPyoHXC6aMGEXNyUjP1oBuFtA+xHc/iGu YOt2R3OHv5+Bif4uUjKFyEE66iYyMHvpQMkMviUvdKVqShKs3HWZS4zrFwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJXGngv6wntGKaYFHmgw32BWuwD0MB8GA1UdIwQY MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm LTJiNGEzNTM4YzVlMy8xL2xjYWVDX3JDZTBZcHBnVWVhRERmWUZhN0FQUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNmLTJiNGEzNTM4YzVl My8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBANX7GAD BABbxzoDBAK5kTwDBAHDXe4wDQQCAAIwBwMFASoCDMgwDQYJKoZIhvcNAQELBQAD ggEBAKogAN6+dPNPxANztaMyiyeJe7XtoLtY8OhS2fxXF2GC2x0+YrEw1aPcREA4 vZxNzbzjE/nhvCFZ4H5nZ1Bovugw3yeKHcojmGG7UPKqIm7JBDrhWwJXmp0g8E+N 3j1GX3EqutRgD3p8R3WU8yWRYbnK8SJeFWZQo83U8PkwEhwl0vhlDZj2eu4FUcPZ etdpBrDaIGDBjawuGN1L/f4E4g3qd2YWlRhGPBB0jTBoTAw0iymHERDyP5Y17hzI swgpIxKxRKW+e/L3nmqGn7BEJrb2QInMeC4d4tm76lvNSUgBkL+revSgLYzlV3rm hqSLagvTph4CO0RcZ3GlfIF6gvk= -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:41 2026 by rpki-client