This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/lz_WC5uJeICfjQzpAPaUtpnLmOE.roa File: lz_WC5uJeICfjQzpAPaUtpnLmOE.roa (raw, json) Hash identifier: RYYydhlLpv7/DuyZEPW9/qv3fOSivSmlz/esgSVQG5U= Subject key identifier: 97:3F:D6:0B:9B:89:78:80:9F:8D:0C:E9:00:F6:94:B6:99:CB:98:E1 Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398 Certificate serial: 019B77C6D6F00C6DD9FB7491EB9956EA58C3 Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/lz_WC5uJeICfjQzpAPaUtpnLmOE.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 193.26.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d6:f0:0c:6d:d9:fb:74:91:eb:99:56:ea:58:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=973fd60b9b8978809f8d0ce900f694b699cb98e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:fe:67:a9:a9:5d:5a:d5:b7:6e:ef:dd:63: 93:c9:7f:d4:22:29:ec:69:eb:9d:e2:b5:7d:dd:e6: ff:db:a0:7a:6c:cc:2a:50:0a:dc:07:70:1f:b3:72: e4:93:b8:76:d5:b0:bc:cf:f9:d6:e5:57:fb:54:18: e1:88:f1:93:9b:a9:41:3a:59:09:02:aa:9a:39:fe: 59:46:d2:fe:c8:73:89:01:4d:6c:80:2d:65:61:4b: 68:22:36:5a:c4:2e:5d:8a:9a:ab:3c:07:93:22:9b: c0:c3:6d:0e:20:f5:a2:46:a3:5d:2b:e0:54:48:16: 46:a8:d4:3d:f6:bb:ee:99:58:eb:2b:a1:51:06:1c: 19:36:62:fc:c6:01:f1:ec:78:aa:ef:b8:bb:b7:56: e1:62:93:3f:f1:c5:e2:08:a0:17:f9:2b:b9:7d:19: 74:ee:a4:a8:3a:42:26:b9:21:1b:f4:8f:57:b0:7e: d1:d1:2e:09:2d:28:b9:5c:14:0f:49:d8:44:f5:d4: 33:f1:10:68:aa:2c:1b:72:d8:55:ac:36:e5:9c:1f: 4b:ad:ad:fd:70:92:a1:00:fb:4f:06:49:e6:21:03: 33:6f:a0:05:dc:40:cc:31:d7:5e:2b:82:38:1d:8f: 51:ee:49:6b:87:66:db:49:23:af:67:03:87:e6:de: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:D6:0B:9B:89:78:80:9F:8D:0C:E9:00:F6:94:B6:99:CB:98:E1 X509v3 Authority Key Identifier: keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/lz_WC5uJeICfjQzpAPaUtpnLmOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.7.0/24 Signature Algorithm: sha256WithRSAEncryption 83:d7:73:6f:1b:ca:3a:dd:66:0b:41:b2:63:ac:03:81:7f:2a: 4b:87:0e:70:0d:8c:65:85:1b:19:0f:fb:d4:8b:38:4c:1a:2a: 16:d2:b3:21:83:0e:1a:e7:8a:f0:7b:b9:aa:20:0e:52:1b:7c: fd:70:fd:70:15:da:b3:92:20:a7:5b:14:0e:bf:53:88:5c:1d: 34:ee:2d:da:7f:d4:e2:0d:88:0c:b0:56:93:3f:19:4e:84:90: 6c:5c:0d:48:a4:14:66:5c:ec:74:b4:32:58:2e:ba:39:3d:20: fc:c1:ec:e4:b4:2e:a3:aa:45:22:8a:c8:67:d2:78:e2:e0:3f: 33:78:a0:cb:fe:84:e6:e5:a9:8e:13:c0:18:65:65:ad:b3:be: 52:4b:97:7e:2b:1c:0a:88:2e:c4:24:88:5f:d0:8f:89:22:c2: 18:ba:d0:1b:61:ca:60:0d:66:9f:1c:18:14:2b:ad:04:27:ba: d4:23:69:4c:b4:e8:76:8e:00:cd:ce:8e:25:4c:98:8f:79:46: a2:ea:9f:59:6f:a9:9a:d2:33:3c:a0:52:38:2d:f1:45:ea:ea: 73:e2:e0:a0:b1:13:3c:01:f5:28:53:09:74:29:e0:0b:82:75: 59:71:a3:51:3c:84:ca:ea:2b:a0:12:d8:a6:3d:56:3f:ef:36: 10:ae:71:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtbwDG3Z+3SR65lW6ljDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmQxYjU5ZDVjYWFmNzUwNmJjMGQ1YzM0ZjMwYzIxNTli MDQzOTgwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzNmZDYwYjliODk3ODgwOWY4ZDBjZTkwMGY2OTRiNjk5Y2I5OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsD+Z6mpXVrVt27v3WOTyX/UIins aeud4rV93eb/26B6bMwqUArcB3Afs3Lkk7h21bC8z/nW5Vf7VBjhiPGTm6lBOlkJ AqqaOf5ZRtL+yHOJAU1sgC1lYUtoIjZaxC5dipqrPAeTIpvAw20OIPWiRqNdK+BU SBZGqNQ99rvumVjrK6FRBhwZNmL8xgHx7Hiq77i7t1bhYpM/8cXiCKAX+Su5fRl0 7qSoOkImuSEb9I9XsH7R0S4JLSi5XBQPSdhE9dQz8RBoqiwbcthVrDblnB9Lra39 cJKhAPtPBknmIQMzb6AF3EDMMddeK4I4HY9R7klrh2bbSSOvZwOH5t52hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJc/1gubiXiAn40M6QD2lLaZy5jhMB8GA1UdIwQY MBaAFCL9G1nVyq91BrwNXDTzDCFZsEOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84NTBlOTYtMTkxZi00ZGNiLTllZGIt Y2Q1OGZhMjAxNGRkLzEvbHpfV0M1dUplSUNmalF6cEFQYVV0cG5MbU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84NTBlOTYtMTkxZi00ZGNiLTllZGItY2Q1OGZhMjAxNGRk LzEvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRoHMA0G CSqGSIb3DQEBCwUAA4IBAQCD13NvG8o63WYLQbJjrAOBfypLhw5wDYxlhRsZD/vU izhMGioW0rMhgw4a54rwe7mqIA5SG3z9cP1wFdqzkiCnWxQOv1OIXB007i3af9Ti DYgMsFaTPxlOhJBsXA1IpBRmXOx0tDJYLro5PSD8wezktC6jqkUiishn0nji4D8z eKDL/oTm5amOE8AYZWWts75SS5d+KxwKiC7EJIhf0I+JIsIYutAbYcpgDWafHBgU K60EJ7rUI2lMtOh2jgDNzo4lTJiPeUai6p9Zb6ma0jM8oFI4LfFF6upz4uCgsRM8 AfUoUwl0KeALgnVZcaNRPITK6iugEtimPVY/7zYQrnGk -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:51 2026 by rpki-client