This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/E8WXXcfuvBDPmOaMAFbCOw__lzs.roa File: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (raw, json) Hash identifier: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk= Subject key identifier: 13:C5:97:5D:C7:EE:BC:10:CF:98:E6:8C:00:56:C2:3B:0F:FF:97:3B Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Certificate serial: 019B797E54005454394977A8663DDC9B69A1 Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/E8WXXcfuvBDPmOaMAFbCOw__lzs.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51096 IP address blocks: 91.216.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:54:00:54:54:39:49:77:a8:66:3d:dc:9b:69:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13c5975dc7eebc10cf98e68c0056c23b0fff973b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:7d:cc:6c:d8:47:b5:d9:08:dc:d0:25:5f: 5a:01:42:84:26:61:ce:ea:08:7b:8a:41:e5:19:a4: 2a:80:49:41:d3:eb:22:e2:ed:b0:84:99:69:71:58: aa:dd:fb:cd:31:9e:66:57:71:fe:71:81:1d:2f:55: 52:62:79:53:ec:15:5f:2d:27:a3:a3:f6:37:c5:c6: fe:60:fd:20:29:96:e3:3b:72:c0:58:8f:ad:1c:8b: 18:7e:45:6f:f5:56:60:c5:ce:cb:5b:4b:28:c6:b3: 1c:af:60:53:33:4c:53:d6:41:1e:16:14:64:f4:64: 55:53:58:c9:ad:c6:3a:21:86:fd:4b:e5:d5:39:8e: 85:a9:20:08:64:10:a1:60:9a:4d:92:d0:ee:c5:84: 4c:02:3d:27:73:82:16:b6:6d:54:0f:d9:55:b8:c7: 0a:3d:dc:e2:70:22:3f:f5:32:2b:83:99:1d:23:14: fa:44:6a:f6:1b:95:7c:eb:c5:12:fa:f5:f3:af:db: 58:85:a2:ca:3f:75:f7:c5:0f:60:fb:2f:e1:8a:2b: 89:c5:94:e8:53:c3:0b:b9:45:a8:5c:f8:d8:fe:3e: 77:a0:5a:61:31:4d:9e:68:25:ab:d6:69:5a:ef:89: 4d:cc:83:43:ca:33:1d:5c:ad:47:cb:d7:ce:95:3f: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:97:5D:C7:EE:BC:10:CF:98:E6:8C:00:56:C2:3B:0F:FF:97:3B X509v3 Authority Key Identifier: keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/E8WXXcfuvBDPmOaMAFbCOw__lzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.150.0/24 Signature Algorithm: sha256WithRSAEncryption 56:2c:cb:af:16:d7:c1:de:b9:df:6d:ba:9e:1c:e1:a7:d3:d6: 97:24:0b:f5:87:96:8c:44:d5:6a:43:3b:5b:59:bc:91:e9:b3: 11:f6:3e:bc:f1:89:38:a6:4e:90:5c:ea:cf:45:57:54:ed:05: c6:41:b7:18:e3:f9:74:88:13:f1:03:f2:de:01:62:06:60:f6: 54:b0:d9:4c:e4:da:ce:91:40:4f:87:cb:17:f1:6b:c3:d9:b7: 5a:55:5f:c0:28:a0:77:8e:78:0c:16:e7:5f:64:cf:6b:96:b8: 5b:65:24:95:b9:5f:41:b5:1b:e4:49:9a:c0:07:2d:26:66:15: 6b:e5:86:c1:93:0b:f9:67:a9:0d:5e:0c:19:e8:ef:e6:74:3e: af:31:93:3d:d6:84:93:22:12:97:86:6b:1e:23:71:98:61:ef: d8:a3:3b:4f:3b:df:36:14:c1:9e:2d:08:eb:25:c8:cc:a9:c7: 59:10:60:56:f9:d6:45:76:80:ea:62:9c:a8:03:b8:69:4c:b9: 0b:b1:9d:e0:42:5f:26:7f:03:a4:d3:32:8c:df:6e:d1:d0:08: 1b:e7:49:5a:c4:92:46:56:1a:01:18:e3:19:52:03:53:6f:5a: a2:a9:a6:4f:4c:36:63:c0:5b:fa:ac:67:c4:89:5d:de:7c:d0: 22:f9:fd:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flQAVFQ5SXeoZj3cm2mhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0 YzNiMDgwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2M1OTc1ZGM3ZWViYzEwY2Y5OGU2OGMwMDU2YzIzYjBmZmY5NzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLZ9zGzYR7XZCNzQJV9aAUKEJmHO 6gh7ikHlGaQqgElB0+si4u2whJlpcViq3fvNMZ5mV3H+cYEdL1VSYnlT7BVfLSej o/Y3xcb+YP0gKZbjO3LAWI+tHIsYfkVv9VZgxc7LW0soxrMcr2BTM0xT1kEeFhRk 9GRVU1jJrcY6IYb9S+XVOY6FqSAIZBChYJpNktDuxYRMAj0nc4IWtm1UD9lVuMcK PdzicCI/9TIrg5kdIxT6RGr2G5V868US+vXzr9tYhaLKP3X3xQ9g+y/hiiuJxZTo U8MLuUWoXPjY/j53oFphMU2eaCWr1mla74lNzINDyjMdXK1Hy9fOlT/ETQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPFl13H7rwQz5jmjABWwjsP/5c7MB8GA1UdIwQY MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt ZGFkYmVlMWUyYzJjLzEvRThXWFhjZnV2QkRQbU9hTUFGYkNPd19fbHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iWMA0G CSqGSIb3DQEBCwUAA4IBAQBWLMuvFtfB3rnfbbqeHOGn09aXJAv1h5aMRNVqQztb WbyR6bMR9j688Yk4pk6QXOrPRVdU7QXGQbcY4/l0iBPxA/LeAWIGYPZUsNlM5NrO kUBPh8sX8WvD2bdaVV/AKKB3jngMFudfZM9rlrhbZSSVuV9BtRvkSZrABy0mZhVr 5YbBkwv5Z6kNXgwZ6O/mdD6vMZM91oSTIhKXhmseI3GYYe/YoztPO982FMGeLQjr JcjMqcdZEGBW+dZFdoDqYpyoA7hpTLkLsZ3gQl8mfwOk0zKM327R0Agb50laxJJG VhoBGOMZUgNTb1qiqaZPTDZjwFv6rGfEiV3efNAi+f1s -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:38 2026 by rpki-client