This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LWjP0PJUCQmWfPJfiAj5o7KEiGc.roa File: LWjP0PJUCQmWfPJfiAj5o7KEiGc.roa (raw, json) Hash identifier: O9UmcscBckrcJatEsOfmN0pOVCLkW79iVT5rDPjbUdw= Subject key identifier: 2D:68:CF:D0:F2:54:09:09:96:7C:F2:5F:88:08:F9:A3:B2:84:88:67 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80314C237A07ED5D7BC5AEC81D1A55 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LWjP0PJUCQmWfPJfiAj5o7KEiGc.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216117 IP address blocks: 2.58.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:31:4c:23:7a:07:ed:5d:7b:c5:ae:c8:1d:1a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d68cfd0f2540909967cf25f8808f9a3b2848867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:53:ac:68:75:7c:fa:70:92:6a:5c:18:32: cd:8a:af:a1:08:c4:81:28:b1:5a:c8:24:7c:ae:55: 7f:37:c6:4c:51:6f:0b:ac:0b:38:ad:5a:04:ce:52: f2:93:a6:0f:f0:57:f9:e5:71:3c:8a:a1:d4:b7:bb: b7:ce:3f:69:79:6e:68:d1:b3:1b:54:fe:b9:89:de: 94:f2:2c:70:72:06:fe:ad:3b:8a:e8:0a:9f:1e:47: 39:2d:79:7d:c6:01:1a:5c:9d:d0:e4:f4:76:b0:eb: a0:07:19:25:ae:4b:f0:fb:cb:15:7b:6d:27:c9:81: b9:a9:fe:7d:7a:04:0d:5f:74:ec:c8:69:14:27:39: 2e:3d:82:8c:be:90:97:28:67:95:68:cc:a7:0e:c3: 59:ca:43:fd:ac:e9:e2:61:76:32:d9:ed:6e:a1:55: 7a:03:f1:f9:c7:93:cc:a5:a9:39:cb:9f:67:3c:88: 59:ab:26:4e:ba:c6:7c:2c:31:86:ff:2f:48:18:ea: 11:44:c9:cb:96:0e:6e:0a:0a:0d:ca:7c:07:62:4d: 87:f8:43:27:02:9d:4c:2f:aa:04:06:ee:96:c1:67: 45:77:78:55:02:1e:8a:08:c3:fa:64:85:48:d6:7c: 6f:58:a5:68:c5:c3:14:b7:54:cc:a7:b4:93:a7:e3: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:CF:D0:F2:54:09:09:96:7C:F2:5F:88:08:F9:A3:B2:84:88:67 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LWjP0PJUCQmWfPJfiAj5o7KEiGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.199.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:61:64:b1:40:1c:20:cd:27:29:1e:d1:fa:a9:38:85:7b:52: 3d:ea:dc:d5:15:62:ef:b0:4c:6c:53:52:11:b1:5e:ca:2e:b2: 67:6b:cb:e0:7a:a2:ec:fc:fe:a1:8b:0f:7f:30:f5:11:40:ec: 43:90:95:a8:da:a7:05:d6:11:89:46:3e:d6:1f:41:55:31:7d: 7a:c8:de:19:a2:7f:36:d2:87:f2:91:9f:3c:25:4a:0b:74:2b: 84:be:af:3a:7b:e8:95:8c:1c:79:39:bb:a7:fa:08:37:b4:58: 44:a6:d0:49:e7:4b:2e:3c:72:6f:b7:4b:75:64:a5:a3:8f:b1: fc:5b:47:6e:4a:5a:c4:c5:50:8b:1b:74:c6:0e:a5:f2:0a:fe: bd:0b:3e:08:a0:35:1e:f9:ef:9e:0e:69:18:eb:76:12:9e:dc: 72:9a:2d:76:67:6b:49:d4:29:42:70:bf:88:a8:20:44:52:e4: be:23:72:1a:a7:d4:a1:b1:97:bf:b3:fc:79:d2:5d:ca:4d:34: 50:71:08:67:6b:34:8d:2e:62:33:f3:f9:a5:f0:c6:1e:57:a6: 2b:b6:96:0d:9b:4a:e3:e7:cf:08:ca:84:f5:01:66:78:6a:b2: 81:3f:fe:0a:5a:8c:4c:85:ab:9b:d4:7f:7a:bf:5f:dd:08:5e: b7:cc:c9:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDFMI3oH7V17xa7IHRpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDY4Y2ZkMGYyNTQwOTA5OTY3Y2YyNWY4ODA4ZjlhM2IyODQ4ODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIdTrGh1fPpwkmpcGDLNiq+hCMSB KLFayCR8rlV/N8ZMUW8LrAs4rVoEzlLyk6YP8Ff55XE8iqHUt7u3zj9peW5o0bMb VP65id6U8ixwcgb+rTuK6AqfHkc5LXl9xgEaXJ3Q5PR2sOugBxklrkvw+8sVe20n yYG5qf59egQNX3TsyGkUJzkuPYKMvpCXKGeVaMynDsNZykP9rOniYXYy2e1uoVV6 A/H5x5PMpak5y59nPIhZqyZOusZ8LDGG/y9IGOoRRMnLlg5uCgoNynwHYk2H+EMn Ap1ML6oEBu6WwWdFd3hVAh6KCMP6ZIVI1nxvWKVoxcMUt1TMp7STp+OJnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC1oz9DyVAkJlnzyX4gI+aOyhIhnMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvTFdqUDBQSlVDUW1XZlBKZmlBajVvN0tFaUdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjrHMA0G CSqGSIb3DQEBCwUAA4IBAQB6YWSxQBwgzScpHtH6qTiFe1I96tzVFWLvsExsU1IR sV7KLrJna8vgeqLs/P6hiw9/MPURQOxDkJWo2qcF1hGJRj7WH0FVMX16yN4Zon82 0ofykZ88JUoLdCuEvq86e+iVjBx5Obun+gg3tFhEptBJ50suPHJvt0t1ZKWjj7H8 W0duSlrExVCLG3TGDqXyCv69Cz4IoDUe+e+eDmkY63YSntxymi12Z2tJ1ClCcL+I qCBEUuS+I3Iap9ShsZe/s/x50l3KTTRQcQhnazSNLmIz8/ml8MYeV6YrtpYNm0rj 588IyoT1AWZ4arKBP/4KWoxMhaub1H96v1/dCF63zMky -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:41 2026 by rpki-client