This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUik-SGBwHUmYD3x4agUpI4YC_0.roa File: LUik-SGBwHUmYD3x4agUpI4YC_0.roa (raw, json) Hash identifier: wrYJ5w/gKcQ2kIbfoFzdbUCeHMytrQJuBwb39pmbv5g= Subject key identifier: 2D:48:A4:F9:21:81:C0:75:26:60:3D:F1:E1:A8:14:A4:8E:18:0B:FD Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35789172B25924FC940FED6AFD436C Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUik-SGBwHUmYD3x4agUpI4YC_0.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48931 IP address blocks: 80.96.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:78:91:72:b2:59:24:fc:94:0f:ed:6a:fd:43:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d48a4f92181c07526603df1e1a814a48e180bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:f3:1d:10:48:cb:95:9c:ab:0a:e3:44:89: 98:05:7a:54:8e:27:60:55:ac:09:57:d6:c3:1d:0e: dd:9c:e8:32:ba:31:a7:85:85:b6:33:36:df:18:fe: a7:73:bb:86:50:cb:f1:e8:00:42:01:22:1e:11:2b: 0c:fa:66:ae:c9:9f:12:a5:a9:7c:a6:0a:f0:bd:7e: 3e:a4:b7:31:06:19:4f:fd:a0:db:da:79:14:fb:fb: 8e:a3:d2:d7:6d:b3:3f:78:2c:8a:6b:0c:49:d7:68: 61:b3:9a:26:73:e6:f3:69:b9:fb:bd:c1:78:74:2c: e0:d8:44:d1:17:94:8b:be:92:c4:bf:93:be:f7:de: b8:cb:c6:ed:d8:af:e7:47:f4:1c:8e:48:16:a3:fc: 54:af:51:f5:5b:22:af:f1:81:27:40:35:73:d5:78: 61:17:29:58:64:fd:0e:0e:e5:84:cb:5e:0d:b9:f9: 86:c1:83:72:07:5e:ca:63:a6:8e:8f:cd:de:b7:1b: 25:7f:50:66:1d:fa:9b:5e:e0:29:cb:e8:aa:0c:30: f0:fb:db:03:60:4c:e5:32:ac:21:cb:6f:59:fb:11: 82:e6:70:09:48:ad:41:6d:5b:cd:ed:07:bd:a0:a1: 5d:a5:9e:2a:47:89:39:1e:10:5f:b6:3b:21:6a:b5: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:48:A4:F9:21:81:C0:75:26:60:3D:F1:E1:A8:14:A4:8E:18:0B:FD X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUik-SGBwHUmYD3x4agUpI4YC_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:f8:b8:44:77:9f:ff:50:56:62:98:f5:47:34:3a:c2:ab:64: e3:e0:44:f4:1e:6f:63:89:42:8b:90:80:da:d5:00:ec:df:3c: 79:9a:62:75:bc:43:47:54:c7:9e:74:36:1f:22:f4:af:8a:0b: 2a:ed:bb:2d:b1:92:fe:8a:75:ee:d7:cb:17:96:28:4e:f9:42: 31:e1:24:de:ba:57:07:b0:f7:f9:fb:e5:68:2d:14:c3:89:b3: d4:16:bb:1c:6b:28:c7:45:f8:ba:3d:f4:e2:5b:ba:56:bf:8b: 0c:80:f0:59:22:ec:3c:33:52:39:9c:c4:dc:82:2c:fe:24:f9: 9f:f2:c9:d4:62:53:9b:62:f8:f4:16:11:a5:5a:f6:52:76:80: 74:0f:b5:a0:bc:ac:63:dd:93:07:4a:63:34:e1:38:57:57:08: 0c:55:d5:51:a5:7d:4b:94:ab:1c:8d:75:ae:2e:88:ef:8c:a6: 48:f9:ac:8b:88:75:d7:70:55:52:81:0e:bd:82:d6:53:8e:9e: 3a:7d:40:64:a9:a3:b0:06:e9:f7:b0:80:8a:63:1c:5c:c3:f2: 7f:19:9a:46:9c:58:0f:2a:cf:27:ef:3f:c3:22:87:3f:a8:34: db:c0:1b:25:37:49:73:7f:e0:ba:ae:1d:56:ac:0e:b3:91:7d: b2:41:da:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXiRcrJZJPyUD+1q/UNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDQ4YTRmOTIxODFjMDc1MjY2MDNkZjFlMWE4MTRhNDhlMTgwYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd/zHRBIy5WcqwrjRImYBXpUjidg VawJV9bDHQ7dnOgyujGnhYW2MzbfGP6nc7uGUMvx6ABCASIeESsM+mauyZ8Spal8 pgrwvX4+pLcxBhlP/aDb2nkU+/uOo9LXbbM/eCyKawxJ12hhs5omc+bzabn7vcF4 dCzg2ETRF5SLvpLEv5O+9964y8bt2K/nR/QcjkgWo/xUr1H1WyKv8YEnQDVz1Xhh FylYZP0ODuWEy14NufmGwYNyB17KY6aOj83etxslf1BmHfqbXuApy+iqDDDw+9sD YEzlMqwhy29Z+xGC5nAJSK1BbVvN7Qe9oKFdpZ4qR4k5HhBftjsharXZuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC1IpPkhgcB1JmA98eGoFKSOGAv9MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvTFVpay1TR0J3SFVtWUQzeDRhZ1VwSTRZQ18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGBjMA0G CSqGSIb3DQEBCwUAA4IBAQAe+LhEd5//UFZimPVHNDrCq2Tj4ET0Hm9jiUKLkIDa 1QDs3zx5mmJ1vENHVMeedDYfIvSvigsq7bstsZL+inXu18sXlihO+UIx4STeulcH sPf5++VoLRTDibPUFrscayjHRfi6PfTiW7pWv4sMgPBZIuw8M1I5nMTcgiz+JPmf 8snUYlObYvj0FhGlWvZSdoB0D7WgvKxj3ZMHSmM04ThXVwgMVdVRpX1LlKscjXWu LojvjKZI+ayLiHXXcFVSgQ69gtZTjp46fUBkqaOwBun3sICKYxxcw/J/GZpGnFgP Ks8n7z/DIoc/qDTbwBslN0lzf+C6rh1WrA6zkX2yQdpJ -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:05 2026 by rpki-client