This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lpJ_XjHkoBndBFAe0tPQdczaOcU.roa File: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (raw, json) Hash identifier: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc= Subject key identifier: 96:92:7F:5E:31:E4:A0:19:DD:04:50:1E:D2:D3:D0:75:CC:DA:39:C5 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF1742215F17C4B47F21418F78A4F52 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lpJ_XjHkoBndBFAe0tPQdczaOcU.roa Signing time: Fri 02 Jan 2026 18:21:28 +0000 ROA not before: Fri 02 Jan 2026 18:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401418 IP address blocks: 207.244.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:74:22:15:f1:7c:4b:47:f2:14:18:f7:8a:4f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96927f5e31e4a019dd04501ed2d3d075ccda39c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:92:b5:90:b7:63:9b:85:a7:93:b8:9f:ee: 60:dd:42:8c:03:f6:03:ba:f4:ae:cf:41:06:64:75: c4:f7:58:ee:a0:34:78:54:37:b6:f8:7e:89:28:86: af:3b:19:9d:22:1f:da:19:ae:b0:e9:1e:b7:5e:74: 79:57:e2:c3:88:b3:35:77:da:c3:88:93:33:b2:86: e5:b0:d4:96:fc:b7:58:bc:9b:c2:93:1d:9a:3a:2a: a8:d3:13:d8:1a:ac:65:21:aa:13:c0:1e:b5:36:9b: 15:1c:e3:bf:9a:1b:cd:fb:c8:77:82:95:e5:5b:55: 0f:4d:db:95:26:5d:1d:4c:09:20:00:51:6b:32:d4: fe:0b:e3:9a:a1:28:11:c8:c0:a0:97:15:e4:19:ba: 68:5e:0f:68:85:26:f1:45:63:44:5e:e0:c1:16:2e: 74:49:49:61:04:bc:b6:56:b3:2a:c2:4a:cc:38:19: 94:83:da:cf:6a:58:36:ea:e0:fd:b1:a1:9a:02:47: 20:d9:b2:a9:ee:ba:91:d8:76:24:0f:e8:7a:26:52: 65:c4:7f:fe:a2:5f:d7:92:85:02:2b:8e:9a:7a:58: 2c:1e:0f:3c:55:7e:a1:c7:a6:b0:ee:1a:8c:12:19: b1:3c:67:a5:5e:e2:20:9f:64:9f:15:bd:13:14:fa: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:7F:5E:31:E4:A0:19:DD:04:50:1E:D2:D3:D0:75:CC:DA:39:C5 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lpJ_XjHkoBndBFAe0tPQdczaOcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.208.0/24 Signature Algorithm: sha256WithRSAEncryption 69:26:4f:9c:7f:89:22:a9:09:ee:26:fe:58:31:dc:e4:8d:e5: 58:dc:85:ca:4b:a6:a7:6c:66:67:a5:e5:df:25:49:61:4f:50: bd:30:bb:a0:bc:ba:de:be:a7:0f:e5:62:a9:61:4e:ce:3e:80: 65:22:58:43:33:c7:43:72:36:75:a9:77:85:c2:8a:af:95:70: 7f:02:0b:9d:8c:28:cd:5a:cd:f5:ea:dd:be:73:8b:52:60:e2: a3:4e:62:e9:62:9a:72:70:19:81:76:6c:8c:5f:c7:a1:8c:b1: 9c:aa:cd:c7:82:cb:db:2f:30:c3:79:f5:a3:18:c4:5f:ed:19: bb:b4:30:a1:4a:53:2e:a3:55:8c:72:8f:f9:80:6a:f4:94:a4: 09:18:dd:ae:2d:5c:9c:bb:39:a5:62:69:a6:78:14:37:4a:f7: 3e:ad:e8:18:b3:44:5f:9a:f2:0d:03:86:7b:e4:30:55:91:e3: 1b:96:41:fb:58:2f:ac:9b:1f:81:8c:a8:eb:20:d6:75:4b:fe: dc:03:56:26:70:81:81:f4:b9:2d:cf:c8:dd:82:5b:a7:b5:b5: 84:f9:ef:72:4d:68:46:fd:8b:4d:3d:36:17:34:5e:5a:fd:88: b1:ed:3d:39:46:c6:47:c6:dc:b8:13:a0:4f:99:df:45:d1:0a: 43:1e:83:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8XQiFfF8S0fyFBj3ik9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjkyN2Y1ZTMxZTRhMDE5ZGQwNDUwMWVkMmQzZDA3NWNjZGEzOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut2StZC3Y5uFp5O4n+5g3UKMA/YD uvSuz0EGZHXE91juoDR4VDe2+H6JKIavOxmdIh/aGa6w6R63XnR5V+LDiLM1d9rD iJMzsoblsNSW/LdYvJvCkx2aOiqo0xPYGqxlIaoTwB61NpsVHOO/mhvN+8h3gpXl W1UPTduVJl0dTAkgAFFrMtT+C+OaoSgRyMCglxXkGbpoXg9ohSbxRWNEXuDBFi50 SUlhBLy2VrMqwkrMOBmUg9rPalg26uD9saGaAkcg2bKp7rqR2HYkD+h6JlJlxH/+ ol/XkoUCK46aelgsHg88VX6hx6aw7hqMEhmxPGelXuIgn2SfFb0TFPoWpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaSf14x5KAZ3QRQHtLT0HXM2jnFMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvbHBKX1hqSGtvQm5kQkZBZTB0UFFkY3phT2NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TQMA0G CSqGSIb3DQEBCwUAA4IBAQBpJk+cf4kiqQnuJv5YMdzkjeVY3IXKS6anbGZnpeXf JUlhT1C9MLugvLrevqcP5WKpYU7OPoBlIlhDM8dDcjZ1qXeFwoqvlXB/AgudjCjN Ws316t2+c4tSYOKjTmLpYppycBmBdmyMX8ehjLGcqs3HgsvbLzDDefWjGMRf7Rm7 tDChSlMuo1WMco/5gGr0lKQJGN2uLVycuzmlYmmmeBQ3Svc+regYs0RfmvINA4Z7 5DBVkeMblkH7WC+smx+BjKjrINZ1S/7cA1YmcIGB9Lktz8jdgluntbWE+e9yTWhG /YtNPTYXNF5a/Yix7T05RsZHxty4E6BPmd9F0QpDHoOm -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:37 2026 by rpki-client