This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUzjpoVFhw88iG4puj1BDUqf-ZM.roa
File: LUzjpoVFhw88iG4puj1BDUqf-ZM.roa (raw, json)
Hash identifier: GP0cjRH6zF09V1PhwrVt/Ir5eEAm6HqNEdBJdbMjF04=
Subject key identifier: 2D:4C:E3:A6:85:45:87:0F:3C:88:6E:29:BA:3D:41:0D:4A:9F:F9:93
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B357CDA645ABDC06FE8E8653C8E4AEC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUzjpoVFhw88iG4puj1BDUqf-ZM.roa
Signing time: Thu 01 Jan 2026 20:17:41 +0000
ROA not before: Thu 01 Jan 2026 20:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50939
IP address blocks: 80.96.32.0/22 maxlen: 22
194.153.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:7c:da:64:5a:bd:c0:6f:e8:e8:65:3c:8e:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d4ce3a68545870f3c886e29ba3d410d4a9ff993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:59:bd:cc:e5:ce:2d:43:ec:fc:47:39:e4:
d4:37:6c:13:81:a0:da:41:e1:c8:ae:8c:0f:ea:12:
8b:c6:5e:06:99:de:0c:1a:3c:34:98:f6:24:b7:4f:
ec:cb:01:00:4d:1c:92:aa:be:78:d9:01:87:b4:73:
1f:62:21:75:c4:0d:37:f1:81:eb:7e:57:e6:9f:22:
f4:e0:72:ec:4e:29:9e:70:4b:71:e3:22:54:94:1b:
46:ff:e7:ae:ed:ff:a5:e6:f2:27:13:82:06:af:47:
a6:35:91:13:85:1c:e9:f6:fb:1e:51:9f:1e:05:d1:
49:e1:10:11:84:db:f4:d9:ec:ca:55:02:60:e8:f6:
f8:f4:fb:c4:32:12:77:f4:b9:e4:d0:1f:43:91:88:
ed:34:23:37:ea:ef:ed:5c:af:c5:65:e1:35:d0:71:
42:21:0e:c7:11:0a:fb:c6:0d:44:b9:a6:59:3e:90:
45:17:9e:8c:c3:21:4b:9a:8a:4a:30:05:61:64:ec:
b8:d1:c2:9f:2f:15:11:db:5b:e3:af:20:2f:66:bc:
66:a5:32:d6:79:8b:71:cb:00:63:61:85:32:93:5d:
10:9a:f5:89:cc:ff:17:fc:a3:c0:e9:09:fb:e6:f4:
b4:a9:8d:ad:9d:8b:1d:47:d5:f9:0e:53:14:47:61:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:E3:A6:85:45:87:0F:3C:88:6E:29:BA:3D:41:0D:4A:9F:F9:93
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUzjpoVFhw88iG4puj1BDUqf-ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.32.0/22
194.153.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:2a:ad:61:6b:cf:62:14:6e:47:be:12:5f:a2:0f:04:cd:ef:
66:16:65:e3:da:3e:95:fb:00:39:af:b0:35:b3:2d:39:87:56:
fd:85:69:ee:a0:98:33:6b:05:1e:68:67:3d:03:cb:11:16:6c:
d9:78:4f:5a:92:b1:a3:0e:6e:d5:5f:90:9e:fd:e5:88:4b:1d:
e1:86:c2:67:76:8e:21:2e:38:7f:08:8e:d4:db:4c:95:ba:c4:
69:1d:6e:99:6b:dd:73:eb:a7:c7:51:55:c2:89:1a:a8:0c:8a:
fd:25:5b:08:a8:90:71:14:80:65:d9:66:79:a7:e2:c0:a4:7c:
c4:5a:de:ae:cc:66:70:e7:e8:73:98:ce:aa:7e:a9:2b:79:59:
bb:eb:5b:c1:53:56:65:2a:7a:e2:28:05:0a:6e:df:ce:2d:44:
c2:9a:bd:cc:29:72:41:13:9b:93:5b:98:30:f6:15:d7:59:1b:
d6:bf:0d:b9:67:11:84:86:b7:6a:b3:7d:26:a2:0a:db:b3:f5:
e6:95:5d:85:c1:44:e4:4c:49:c0:e0:96:03:6e:3c:f8:db:99:
91:dd:fb:e2:ff:5b:ea:a6:77:10:03:72:70:b2:46:76:43:91:
db:a6:99:bb:44:51:72:01:be:8e:87:c2:33:53:77:e3:90:5d:
b4:68:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:58 2026 by rpki-client