This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/LkuAGA9ZNG8_D0G5FvbvkgMtYlw.roa File: LkuAGA9ZNG8_D0G5FvbvkgMtYlw.roa (raw, json) Hash identifier: z0+oehkcJnMFPYAtIUmN7hDL9AzLr/MsXKgzwwXbOjs= Subject key identifier: 2E:4B:80:18:0F:59:34:6F:3F:0F:41:B9:16:F6:EF:92:03:2D:62:5C Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA284398D5218C92066CBB3996B8FB Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/LkuAGA9ZNG8_D0G5FvbvkgMtYlw.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 185.177.78.0/23 maxlen: 24 194.104.4.0/24 maxlen: 24 212.69.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:28:43:98:d5:21:8c:92:06:6c:bb:39:96:b8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e4b80180f59346f3f0f41b916f6ef92032d625c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:e7:b1:a0:3c:08:99:10:28:11:78:70:b7: ba:ef:17:b2:34:65:91:13:95:25:8c:df:be:dc:d0: b0:fb:68:de:28:b8:d0:e6:22:b3:1d:8a:82:4b:fc: 5c:88:a0:bf:d4:4f:31:89:b5:d9:bb:90:2a:9e:07: 83:ec:d1:8e:7a:c3:77:55:c0:fc:cf:5d:e3:6a:19: c4:97:ec:be:cf:28:60:07:da:72:70:55:72:87:59: d6:b3:b1:e3:17:e7:e2:c7:8c:c4:24:87:10:31:a4: d0:0c:a7:d0:e5:24:5e:55:95:f9:7e:35:5e:4a:53: 5d:94:3d:83:7d:81:53:8a:a5:39:cf:21:7b:b1:5b: 01:7c:b0:46:4e:e3:60:5f:75:a7:b6:10:26:55:a9: c9:0b:a9:44:cf:75:2c:da:8b:ce:28:fe:92:85:ee: 80:df:f8:aa:de:01:8c:73:27:c4:77:b1:19:b8:d0: 08:e3:f4:5b:b3:e5:92:04:e7:c9:79:20:82:66:e5: 8e:5a:ac:8d:ed:c4:75:7c:9c:5c:f5:2a:8a:6b:ad: ad:71:6a:35:e5:58:4b:71:9c:83:f9:91:ce:1b:b6: c3:51:dd:0b:34:ab:c5:36:24:ab:cd:1f:59:06:0b: ca:be:f5:c7:26:8a:b5:96:13:06:5b:19:38:0a:0e: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:80:18:0F:59:34:6F:3F:0F:41:B9:16:F6:EF:92:03:2D:62:5C X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/LkuAGA9ZNG8_D0G5FvbvkgMtYlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.78.0/23 194.104.4.0/24 212.69.133.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:a6:bb:61:e8:6f:7a:11:e9:c9:8c:8d:cb:a5:aa:4f:20:27: cb:cb:be:78:fd:2e:2a:c6:68:f8:2f:d3:e3:fe:57:fd:1c:5c: 73:10:a2:a1:15:72:88:2a:c7:da:12:c7:e1:b2:e1:88:ec:02: 95:c9:95:88:3c:fe:fa:5d:25:b8:74:10:c3:83:01:75:8e:0f: 3a:d0:94:e2:44:8b:28:c5:7c:e6:57:5c:68:9e:29:1e:69:1a: a1:9b:3e:b8:5c:af:48:8e:5d:8c:d7:e9:03:9f:c4:d5:8a:e5: ac:4e:47:18:da:c2:3d:c9:1a:6b:10:3b:ee:a3:40:d6:fb:8d: d5:3f:5b:fc:7f:45:db:37:f3:e6:6a:20:4d:6e:91:50:38:69: e3:9c:97:55:4e:a1:8a:11:4b:b0:01:d6:37:f7:3a:74:8f:be: 5a:87:bc:f8:a8:79:3b:3f:b1:59:92:0b:5a:72:2b:63:18:06: cf:df:61:ea:36:dd:1c:e2:21:fb:d5:81:9b:58:0a:01:6b:f6: 31:f2:d3:51:cc:64:ee:b4:cd:69:7b:15:99:6d:e5:ff:29:ce: 81:06:f0:46:15:fc:1e:af:f3:e4:fa:21:a3:7e:48:72:b4:46: 2e:82:fc:4f:5e:f8:90:4b:c2:7d:9b:25:90:0b:62:a7:6e:8b: 15:f2:02:92 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yihDmNUhjJIGbLs5lrj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTRiODAxODBmNTkzNDZmM2YwZjQxYjkxNmY2ZWY5MjAzMmQ2MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVznsaA8CJkQKBF4cLe67xeyNGWR E5UljN++3NCw+2jeKLjQ5iKzHYqCS/xciKC/1E8xibXZu5AqngeD7NGOesN3VcD8 z13jahnEl+y+zyhgB9pycFVyh1nWs7HjF+fix4zEJIcQMaTQDKfQ5SReVZX5fjVe SlNdlD2DfYFTiqU5zyF7sVsBfLBGTuNgX3WnthAmVanJC6lEz3Us2ovOKP6She6A 3/iq3gGMcyfEd7EZuNAI4/Rbs+WSBOfJeSCCZuWOWqyN7cR1fJxc9SqKa62tcWo1 5VhLcZyD+ZHOG7bDUd0LNKvFNiSrzR9ZBgvKvvXHJoq1lhMGWxk4Cg6GewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC5LgBgPWTRvPw9BuRb275IDLWJcMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvTGt1QUdBOVpORzhfRDBHNUZ2YnZrZ010WWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBubFOAwQA wmgEAwQA1EWFMA0GCSqGSIb3DQEBCwUAA4IBAQAPprth6G96EenJjI3LpapPICfL y754/S4qxmj4L9Pj/lf9HFxzEKKhFXKIKsfaEsfhsuGI7AKVyZWIPP76XSW4dBDD gwF1jg860JTiRIsoxXzmV1xonikeaRqhmz64XK9Ijl2M1+kDn8TViuWsTkcY2sI9 yRprEDvuo0DW+43VP1v8f0XbN/PmaiBNbpFQOGnjnJdVTqGKEUuwAdY39zp0j75a h7z4qHk7P7FZkgtacitjGAbP32HqNt0c4iH71YGbWAoBa/Yx8tNRzGTutM1pexWZ beX/Kc6BBvBGFfwer/Pk+iGjfkhytEYugvxPXviQS8J9myWQC2KnbosV8gKS -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:46 2026 by rpki-client