This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa File: LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa (raw, json) Hash identifier: MkMyhvMq/UW3J/dY/hJ1MwyOPfnqAuGRvt2LQG0g8xw= Subject key identifier: 2E:9A:84:64:18:F5:84:3E:8B:52:38:85:54:FE:51:26:66:E3:0D:CD Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Certificate serial: 019B77C6A41575F8B720C8E33AC246923BD2 Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 193.43.27.0/24 maxlen: 24 2001:67c:168::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a4:15:75:f8:b7:20:c8:e3:3a:c2:46:92:3b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e9a846418f5843e8b52388554fe512666e30dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:36:d0:17:3a:64:45:d5:45:62:49:6c:91: 38:61:12:bb:ee:07:74:ca:e0:a7:03:ff:fd:f8:84: cc:e1:d1:41:72:af:99:ed:e2:15:1e:a9:35:52:be: c5:d1:4a:26:9b:aa:2b:89:f0:3b:8d:e1:c4:a6:f0: c3:ac:3f:0e:ba:38:0e:57:29:b9:56:b6:c8:95:e2: 25:9b:d7:92:e3:09:ff:a6:39:2d:f9:be:5d:49:19: fa:ca:26:b5:01:70:a7:3b:1f:6d:b6:2f:16:ae:41: 24:d3:0c:d3:8f:54:be:3a:0c:e0:f8:1f:f1:12:e3: 64:64:de:38:ef:ef:4c:3c:e8:c7:a1:df:fc:e8:4d: 1c:eb:13:12:76:cc:b0:ee:e1:c1:a1:64:2d:f4:65: 2c:99:23:3b:3b:92:ba:1c:40:1e:f2:7d:e9:76:44: 1a:0d:36:45:03:e9:40:86:d9:03:76:28:f1:36:6b: c6:55:b6:7f:b7:b7:fe:d1:3a:e9:b7:e7:c2:fc:3c: 61:0f:f4:cc:cc:59:b5:61:2a:ac:aa:a7:9d:de:61: b2:79:1d:ab:5c:f0:30:5f:8a:54:37:8d:78:79:8d: 96:f2:7e:e8:bf:a4:1f:0a:b3:05:54:24:72:84:51: 84:5d:a5:91:05:d3:67:81:bc:35:2b:6a:bd:9f:0a: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:84:64:18:F5:84:3E:8B:52:38:85:54:FE:51:26:66:E3:0D:CD X509v3 Authority Key Identifier: keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.27.0/24 IPv6: 2001:67c:168::/48 Signature Algorithm: sha256WithRSAEncryption 29:21:fa:78:50:29:e6:3c:6f:81:e1:4e:b4:bb:e6:4f:7e:da: 14:f4:f6:e3:09:91:3b:80:00:56:d7:8e:bf:25:00:ee:a0:15: ff:2d:f7:5d:8d:60:33:15:06:2d:56:3a:30:ae:90:78:9e:bd: b8:4c:d2:32:97:1e:22:db:83:85:a6:12:ef:a5:fa:05:da:08: a5:ca:94:94:7e:20:71:71:1c:29:e2:fc:cb:5d:2a:01:0a:a9: 82:b9:a3:6d:0c:72:8f:14:15:ec:55:e4:b8:db:02:86:7b:69: c5:5b:0c:64:c7:38:da:9c:7a:1f:b1:3a:6b:d1:19:69:a8:21: a8:14:28:e6:9e:1a:97:e6:b9:fb:d7:4c:94:4d:97:bf:17:16: fc:04:1e:bf:7a:03:93:76:67:16:28:23:00:24:1a:cd:dd:bb: 74:6a:f6:1c:40:51:36:e4:6b:fc:d1:10:67:f9:a9:ab:3d:a0: d1:16:0e:7a:3b:9e:bf:ef:81:0a:70:04:7b:99:17:8b:62:1e: 75:ea:1e:1d:db:62:5b:2a:50:d0:4f:d4:81:4b:ae:dc:c1:d6: 5c:fd:88:24:10:3c:17:73:33:de:98:b6:a5:3e:6f:45:65:08: 1d:ce:1e:10:9f:39:ed:22:ef:73:a1:ec:75:51:b9:1f:20:8b: 52:59:2b:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xqQVdfi3IMjjOsJGkjvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjI0ZWE0NWQwODFkNDAyZmZkNmJmNGRkOTVlM2ZmNmYy ZGM0ODEwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTlhODQ2NDE4ZjU4NDNlOGI1MjM4ODU1NGZlNTEyNjY2ZTMwZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmA20Bc6ZEXVRWJJbJE4YRK77gd0 yuCnA//9+ITM4dFBcq+Z7eIVHqk1Ur7F0Uomm6orifA7jeHEpvDDrD8OujgOVym5 VrbIleIlm9eS4wn/pjkt+b5dSRn6yia1AXCnOx9tti8WrkEk0wzTj1S+Ogzg+B/x EuNkZN447+9MPOjHod/86E0c6xMSdsyw7uHBoWQt9GUsmSM7O5K6HEAe8n3pdkQa DTZFA+lAhtkDdijxNmvGVbZ/t7f+0Trpt+fC/DxhD/TMzFm1YSqsqqed3mGyeR2r XPAwX4pUN414eY2W8n7ov6QfCrMFVCRyhFGEXaWRBdNngbw1K2q9nwqQpQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC6ahGQY9YQ+i1I4hVT+USZm4w3NMB8GA1UdIwQY MBaAFMUiTqRdCB1AL/1r9N2V4/9vLcSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt NTIzNTZjZDVkYTkwLzEvTHBxRVpCajFoRDZMVWppRlZQNVJKbWJqRGMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw LzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwSsbMA8E AgACMAkDBwAgAQZ8AWgwDQYJKoZIhvcNAQELBQADggEBACkh+nhQKeY8b4HhTrS7 5k9+2hT09uMJkTuAAFbXjr8lAO6gFf8t912NYDMVBi1WOjCukHievbhM0jKXHiLb g4WmEu+l+gXaCKXKlJR+IHFxHCni/MtdKgEKqYK5o20Mco8UFexV5LjbAoZ7acVb DGTHONqceh+xOmvRGWmoIagUKOaeGpfmufvXTJRNl78XFvwEHr96A5N2ZxYoIwAk Gs3du3Rq9hxAUTbka/zREGf5qas9oNEWDno7nr/vgQpwBHuZF4tiHnXqHh3bYlsq UNBP1IFLrtzB1lz9iCQQPBdzM96YtqU+b0VlCB3OHhCfOe0i73Oh7HVRuR8gi1JZ K2g= -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:03 2026 by rpki-client