This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/lzXLAIjACs1Bx9oz4DgcwHPeNF8.roa File: lzXLAIjACs1Bx9oz4DgcwHPeNF8.roa (raw, json) Hash identifier: upiFNR/QzeT3gsXFOefs4FeLqiK3KnqjLgLfoF3nuM8= Subject key identifier: 97:35:CB:00:88:C0:0A:CD:41:C7:DA:33:E0:38:1C:C0:73:DE:34:5F Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F4D680C8FE983E537482BD5E9535 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/lzXLAIjACs1Bx9oz4DgcwHPeNF8.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 89.23.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f4:d6:80:c8:fe:98:3e:53:74:82:bd:5e:95:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9735cb0088c00acd41c7da33e0381cc073de345f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:a8:b5:2b:97:ae:67:db:d5:8a:c8:67:ea: 51:50:2d:7d:12:ab:5c:85:15:31:e7:31:bf:14:59: 50:7b:db:71:2d:eb:a1:59:27:be:b7:66:9b:cc:eb: ac:0c:28:44:8e:2f:b6:8d:7a:6e:12:df:84:c2:37: 64:e2:e7:c6:32:e6:42:8e:9f:fe:34:70:fc:80:49: 92:36:a7:a1:d6:af:55:d7:03:7b:30:ef:95:56:20: 4d:0a:4f:2d:74:64:8f:7e:c0:14:1f:26:b9:4e:9d: 8c:2e:19:62:aa:5b:46:d2:85:81:09:28:6e:a7:e1: 77:75:3e:d1:56:81:fd:c3:a3:00:b5:f9:c9:96:0f: 31:07:5b:e2:15:16:2a:37:08:4a:b7:13:ce:cd:9c: 6a:2b:95:81:6d:77:93:0c:10:e9:b4:34:09:de:59: cd:5a:b3:8c:71:07:78:42:9b:74:02:ff:ef:c0:26: 3f:46:b8:61:00:e9:c8:d7:5e:c8:17:95:a3:85:20: 72:b4:03:ca:a1:b7:d8:7e:1b:98:01:a6:1e:79:5a: 14:b9:be:79:98:73:52:4b:b0:d6:d2:ef:4d:7b:38: b8:30:a5:de:ee:6d:36:5a:1c:dd:3f:3f:be:ce:34: cc:45:01:d6:4f:c9:f1:52:91:16:cc:6d:53:19:2a: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:CB:00:88:C0:0A:CD:41:C7:DA:33:E0:38:1C:C0:73:DE:34:5F X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/lzXLAIjACs1Bx9oz4DgcwHPeNF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.76.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:4f:ad:68:9c:42:f0:66:14:21:ba:c2:3d:68:8f:82:90:48: 10:2f:c1:65:c7:2d:09:68:63:49:b2:34:90:6c:2e:8f:1b:19: 0e:75:f8:5f:46:4a:35:c7:c9:81:10:88:e5:fb:4e:d1:b1:66: a4:00:ef:dc:84:9f:0c:7b:0c:99:b2:b1:58:8a:07:e6:17:10: 1c:75:1c:3f:1c:46:d9:d8:ec:3d:a4:f3:94:a5:2a:43:bd:61: 6b:4c:5e:5c:da:39:a8:9d:34:b5:e4:d7:dd:41:3b:cc:08:27: e2:79:2f:c9:25:17:ef:53:be:70:3c:79:13:a8:5a:4d:05:18: 6f:3c:22:f7:ee:09:df:f7:53:1b:b6:90:6f:ec:ba:25:f6:ea: 89:ee:da:03:97:3e:cc:51:47:b3:42:5f:e1:45:7a:5a:a2:bb: 4b:3d:cf:7f:db:f6:e7:ce:10:12:98:ce:a8:f7:08:5a:94:d0: 9e:2e:0e:b6:ba:c4:c0:49:c0:3b:54:19:0a:a7:37:78:42:cd: a8:e2:25:71:ab:b3:4f:d3:59:c7:ad:27:39:b5:9c:6c:55:2f: b2:a0:13:7b:9e:b0:32:77:83:45:7d:75:89:bf:20:c3:bd:68: 9f:f4:da:57:ca:f8:cb:09:67:25:03:71:10:54:5e:aa:af:9c: 12:38:a8:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvTWgMj+mD5TdIK9XpU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzM1Y2IwMDg4YzAwYWNkNDFjN2RhMzNlMDM4MWNjMDczZGUzNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3OotSuXrmfb1YrIZ+pRUC19Eqtc hRUx5zG/FFlQe9txLeuhWSe+t2abzOusDChEji+2jXpuEt+Ewjdk4ufGMuZCjp/+ NHD8gEmSNqeh1q9V1wN7MO+VViBNCk8tdGSPfsAUHya5Tp2MLhliqltG0oWBCShu p+F3dT7RVoH9w6MAtfnJlg8xB1viFRYqNwhKtxPOzZxqK5WBbXeTDBDptDQJ3lnN WrOMcQd4Qpt0Av/vwCY/RrhhAOnI117IF5WjhSBytAPKobfYfhuYAaYeeVoUub55 mHNSS7DW0u9Nezi4MKXe7m02WhzdPz++zjTMRQHWT8nxUpEWzG1TGSpUYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJc1ywCIwArNQcfaM+A4HMBz3jRfMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvbHpYTEFJakFDczFCeDlvejREZ2N3SFBlTkY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdMMA0G CSqGSIb3DQEBCwUAA4IBAQAdT61onELwZhQhusI9aI+CkEgQL8Flxy0JaGNJsjSQ bC6PGxkOdfhfRko1x8mBEIjl+07RsWakAO/chJ8MewyZsrFYigfmFxAcdRw/HEbZ 2Ow9pPOUpSpDvWFrTF5c2jmonTS15NfdQTvMCCfieS/JJRfvU75wPHkTqFpNBRhv PCL37gnf91MbtpBv7Lol9uqJ7toDlz7MUUezQl/hRXpaortLPc9/2/bnzhASmM6o 9whalNCeLg62usTAScA7VBkKpzd4Qs2o4iVxq7NP01nHrSc5tZxsVS+yoBN7nrAy d4NFfXWJvyDDvWif9NpXyvjLCWclA3EQVF6qr5wSOKi0 -----END CERTIFICATE-----Generated at Mon Jan 19 05:24:21 2026 by rpki-client