This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa File: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (raw, json) Hash identifier: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE= Subject key identifier: 2F:3E:A5:1E:A7:BE:D2:A3:63:BA:F1:8B:34:EB:FD:3C:6C:17:F8:D5 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF1654A6D97DE64EE12C894B12A10D8 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa Signing time: Fri 02 Jan 2026 18:21:25 +0000 ROA not before: Fri 02 Jan 2026 18:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 194.38.49.0/24 maxlen: 24 194.38.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:65:4a:6d:97:de:64:ee:12:c8:94:b1:2a:10:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f3ea51ea7bed2a363baf18b34ebfd3c6c17f8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:7a:b8:5c:5c:36:9e:92:6f:1d:07:c8:49: a4:15:6e:19:2e:5c:08:72:94:2c:45:54:d2:7e:ca: 8b:c9:61:c8:4f:1b:70:4d:9f:4d:56:36:e2:f0:93: 9b:c5:4c:3a:28:16:5c:54:6b:07:e1:e5:67:07:bd: 37:20:ad:d3:74:7e:bb:63:be:fa:4f:7b:70:d7:16: db:45:80:b5:0b:4a:a9:7e:3e:19:51:78:b4:9a:ab: 46:c0:2c:72:17:98:11:a3:a2:4c:29:32:0e:fd:15: e1:0d:c3:27:0c:2b:56:ab:07:32:66:71:0c:bc:fe: 02:c3:4a:c3:31:13:09:c3:75:6c:1b:7b:f1:85:40: b1:68:3e:de:27:02:3f:6f:b3:81:54:82:4d:ea:6f: 11:df:3b:2a:51:a5:66:1f:b0:d0:9f:c5:d0:d1:f7: bb:0d:b9:bf:6e:45:a7:b8:ce:bf:49:10:30:82:d5: 85:6a:d5:0b:03:23:0f:9b:26:ba:a0:dc:b3:1c:1d: 3c:83:73:d7:e2:2e:0c:ed:e0:18:3a:45:df:33:ea: 55:8e:cd:4a:de:10:2a:60:87:df:0d:c1:17:33:8a: 2b:5d:a5:d1:3e:81:a7:b8:6b:2c:d8:08:7a:b9:73: fd:33:f5:85:99:b0:fc:fc:c8:69:2e:40:a8:de:49: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:A5:1E:A7:BE:D2:A3:63:BA:F1:8B:34:EB:FD:3C:6C:17:F8:D5 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.49.0/24 194.38.51.0/24 Signature Algorithm: sha256WithRSAEncryption 01:0f:e5:78:84:50:9f:1c:da:15:f0:66:48:f0:d2:39:1c:d0: 52:b8:08:88:9d:22:c0:fc:a1:94:3c:a3:09:9f:ae:23:a4:84: 7e:48:d8:79:a0:da:83:17:c5:d8:93:e6:d2:39:c9:fc:69:ba: 2a:68:8f:8c:da:08:0b:28:d9:90:50:aa:81:75:77:f6:e1:87: 2c:a5:66:59:1d:9b:21:2f:c8:db:46:1a:9c:c5:37:55:dd:41: 61:7e:68:c6:dd:8b:c2:bf:6e:b4:ef:54:68:76:6d:c7:39:9a: 8d:0e:d5:f9:c7:51:46:3d:b5:fe:f2:15:e0:e5:de:1d:b1:81: 37:e1:3c:01:28:88:1f:6e:e6:4d:62:16:d4:5c:6b:dd:0c:3b: 89:ed:fb:e1:85:e0:83:c2:40:f7:56:32:cb:89:da:2c:52:f7: 63:9b:9a:5a:8a:f6:ef:59:5c:cb:9a:be:05:dd:5f:d2:5e:bd: 37:14:dc:27:10:c1:00:9d:b6:80:73:f5:dc:8d:5e:d1:0b:f3: 10:cd:dc:37:cf:0e:58:17:11:4d:b7:78:3b:f9:30:3f:da:37: 98:61:74:6a:b3:cd:cb:bf:30:ff:7b:33:42:6f:dc:92:6e:f0: ef:78:69:43:f1:80:52:54:45:01:57:cc:c7:c2:f7:52:10:14: e5:4d:5c:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8WVKbZfeZO4SyJSxKhDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjNlYTUxZWE3YmVkMmEzNjNiYWYxOGIzNGViZmQzYzZjMTdmOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5V6uFxcNp6Sbx0HyEmkFW4ZLlwI cpQsRVTSfsqLyWHITxtwTZ9NVjbi8JObxUw6KBZcVGsH4eVnB703IK3TdH67Y776 T3tw1xbbRYC1C0qpfj4ZUXi0mqtGwCxyF5gRo6JMKTIO/RXhDcMnDCtWqwcyZnEM vP4Cw0rDMRMJw3VsG3vxhUCxaD7eJwI/b7OBVIJN6m8R3zsqUaVmH7DQn8XQ0fe7 Dbm/bkWnuM6/SRAwgtWFatULAyMPmya6oNyzHB08g3PX4i4M7eAYOkXfM+pVjs1K 3hAqYIffDcEXM4orXaXRPoGnuGss2Ah6uXP9M/WFmbD8/MhpLkCo3knmrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC8+pR6nvtKjY7rxizTr/TxsF/jVMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvTHo2bEhxZS0wcU5qdXZHTE5PdjlQR3dYLU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiYxAwQA wiYzMA0GCSqGSIb3DQEBCwUAA4IBAQABD+V4hFCfHNoV8GZI8NI5HNBSuAiInSLA /KGUPKMJn64jpIR+SNh5oNqDF8XYk+bSOcn8aboqaI+M2ggLKNmQUKqBdXf24Ycs pWZZHZshL8jbRhqcxTdV3UFhfmjG3YvCv26071Rodm3HOZqNDtX5x1FGPbX+8hXg 5d4dsYE34TwBKIgfbuZNYhbUXGvdDDuJ7fvhheCDwkD3VjLLidosUvdjm5paivbv WVzLmr4F3V/SXr03FNwnEMEAnbaAc/XcjV7RC/MQzdw3zw5YFxFNt3g7+TA/2jeY YXRqs83LvzD/ezNCb9ySbvDveGlD8YBSVEUBV8zHwvdSEBTlTVzT -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client