This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LXUX-ZYnuEwmnonpAXMF-IHJBpA.roa File: LXUX-ZYnuEwmnonpAXMF-IHJBpA.roa (raw, json) Hash identifier: BU2CVTTdIk3LDv5RdvOCPKPosGbT6nmLXE/48hdgC84= Subject key identifier: 2D:75:17:F9:96:27:B8:4C:26:9E:89:E9:01:73:05:F8:81:C9:06:90 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019C1CBDDFBF6A2B79B6C738F17AC2A17C31 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LXUX-ZYnuEwmnonpAXMF-IHJBpA.roa Signing time: Mon 02 Feb 2026 05:05:31 +0000 ROA not before: Mon 02 Feb 2026 05:05:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214783 IP address blocks: 89.144.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 12:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:bd:df:bf:6a:2b:79:b6:c7:38:f1:7a:c2:a1:7c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Feb 2 05:05:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d7517f99627b84c269e89e9017305f881c90690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:ad:a2:a7:4b:13:4c:7e:98:79:33:44:8a: a6:d3:64:61:78:54:a3:92:bd:c7:ea:3d:cb:8a:f4: 57:f6:a0:c0:48:f0:b5:ca:cf:5e:b6:b0:aa:a5:8a: 8f:25:82:3a:ea:56:90:fa:a0:8b:94:78:39:a1:52: 35:22:d1:b8:18:f5:09:1c:f0:a6:bd:cb:11:7d:eb: 96:66:c4:5a:4d:8a:7c:15:f2:77:c8:ad:5e:33:b6: a8:39:c1:6c:d5:f3:b3:d6:07:13:80:51:c9:c8:6d: 04:f0:f2:a8:94:8b:eb:3f:c9:05:d7:84:56:2f:3d: 75:fa:f9:26:b4:4f:f8:14:da:45:79:a3:cc:92:e1: 71:fe:d9:1c:a4:a0:08:15:0e:6f:02:77:48:cf:90: 90:97:67:c0:20:87:ca:a9:88:69:9e:e8:f2:7f:31: d8:e7:02:26:d1:f7:5c:9a:71:94:98:ca:71:fd:d2: 95:1a:aa:bb:c6:01:e5:a4:bb:2d:00:d2:de:ee:df: f3:e0:cc:3d:37:06:5f:7f:d1:ef:bc:a5:4f:fa:64: ff:8d:5c:6b:a9:f1:74:ea:a7:f4:38:de:d3:b2:97: 2a:78:9e:78:95:47:ba:ab:b9:09:b3:0e:c4:90:45: 1a:e1:82:99:d9:fd:7b:c0:10:87:a9:49:c5:9c:a6: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:17:F9:96:27:B8:4C:26:9E:89:E9:01:73:05:F8:81:C9:06:90 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LXUX-ZYnuEwmnonpAXMF-IHJBpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.55.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b5:05:95:71:7c:7b:2d:78:be:f9:8a:1f:46:77:c6:3c:e9: d6:1a:2d:f3:f7:0b:99:83:b4:ff:8c:51:a7:04:d7:36:d8:c3: c6:c9:67:2c:ed:8d:37:74:77:71:bf:ee:45:60:d9:21:52:fd: 9c:af:94:40:26:56:28:34:9d:69:39:39:81:3d:92:84:1a:b7: e6:f0:5e:86:5a:86:93:38:a8:a4:13:9a:03:aa:a8:60:23:73: 22:d0:d1:bb:93:2b:dd:5d:b2:73:e0:54:bc:a2:6c:d3:e6:f5: 13:eb:bb:85:62:9b:10:54:01:af:2e:20:86:61:aa:1f:fa:28: 08:8b:05:cb:03:1d:94:50:0c:92:aa:9f:46:ce:37:50:16:c5: 2b:a7:02:91:1d:37:fe:dd:a0:89:2c:de:ef:69:c9:8d:d2:4f: e8:43:13:54:89:59:0f:e9:8e:88:15:1a:1e:65:46:40:93:f3: 03:e0:25:ff:94:94:c3:ac:98:08:16:9a:ba:88:43:ba:3b:37: 6f:c3:59:c1:95:70:f6:44:72:1a:1f:37:c0:2d:da:c5:5d:88: fe:48:21:96:59:8d:83:87:1c:f7:82:bf:3d:93:c6:b0:98:9e: 39:bf:5c:a9:cc:13:41:1b:38:cb:d4:ec:d2:2e:6a:13:2e:fc: f2:e5:c5:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwcvd+/ait5tsc48XrCoXwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMjAyMDUwNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc1MTdmOTk2MjdiODRjMjY5ZTg5ZTkwMTczMDVmODgxYzkwNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcetoqdLE0x+mHkzRIqm02RheFSj kr3H6j3LivRX9qDASPC1ys9etrCqpYqPJYI66laQ+qCLlHg5oVI1ItG4GPUJHPCm vcsRfeuWZsRaTYp8FfJ3yK1eM7aoOcFs1fOz1gcTgFHJyG0E8PKolIvrP8kF14RW Lz11+vkmtE/4FNpFeaPMkuFx/tkcpKAIFQ5vAndIz5CQl2fAIIfKqYhpnujyfzHY 5wIm0fdcmnGUmMpx/dKVGqq7xgHlpLstANLe7t/z4Mw9NwZff9HvvKVP+mT/jVxr qfF06qf0ON7TspcqeJ54lUe6q7kJsw7EkEUa4YKZ2f17wBCHqUnFnKbJJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC11F/mWJ7hMJp6J6QFzBfiByQaQMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTFhVWC1aWW51RXdtbm9ucEFYTUYtSUhKQnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZA3MA0G CSqGSIb3DQEBCwUAA4IBAQB+tQWVcXx7LXi++YofRnfGPOnWGi3z9wuZg7T/jFGn BNc22MPGyWcs7Y03dHdxv+5FYNkhUv2cr5RAJlYoNJ1pOTmBPZKEGrfm8F6GWoaT OKikE5oDqqhgI3Mi0NG7kyvdXbJz4FS8omzT5vUT67uFYpsQVAGvLiCGYaof+igI iwXLAx2UUAySqp9GzjdQFsUrpwKRHTf+3aCJLN7vacmN0k/oQxNUiVkP6Y6IFRoe ZUZAk/MD4CX/lJTDrJgIFpq6iEO6Ozdvw1nBlXD2RHIaHzfALdrFXYj+SCGWWY2D hxz3gr89k8awmJ45v1ypzBNBGzjL1OzSLmoTLvzy5cXZ -----END CERTIFICATE-----Generated at Mon Feb 2 17:17:25 2026 by rpki-client