This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/LwxlxO59sLpFilR69YBzUan2hpk.roa File: LwxlxO59sLpFilR69YBzUan2hpk.roa (raw, json) Hash identifier: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs= Subject key identifier: 2F:0C:65:C4:EE:7D:B0:BA:45:8A:54:7A:F5:80:73:51:A9:F6:86:99 Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Certificate serial: 019B7DCB56AF5C0644BF799700001178BCD6 Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/LwxlxO59sLpFilR69YBzUan2hpk.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202352 IP address blocks: 2a05:6584::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:56:af:5c:06:44:bf:79:97:00:00:11:78:bc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f0c65c4ee7db0ba458a547af5807351a9f68699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:d3:2e:3d:25:bd:fb:f2:8d:3b:da:9e:34: ce:9f:b9:96:5c:76:ac:1c:41:09:ea:46:fa:47:f6: 17:81:a2:08:4d:04:1c:74:57:0f:e5:00:97:83:00: f2:b6:8e:b4:66:ec:38:13:65:32:7e:eb:85:1f:a7: cc:ae:73:cd:4d:03:20:d2:85:64:dc:d6:cf:40:a1: 19:12:49:df:12:a0:ed:d1:c4:93:78:98:37:6a:7a: 54:92:d0:2e:71:2f:2c:92:65:85:b7:82:36:5a:2a: 86:06:a8:e2:91:7f:f1:ed:80:0d:8f:c0:31:20:3f: a8:a6:34:6e:a1:4a:e6:af:54:bc:3f:e3:e1:f4:53: 17:ad:f1:19:5e:ee:5a:91:42:f4:21:c5:12:75:ee: 3c:2d:ff:98:53:a4:49:54:f3:13:07:02:35:3d:78: e8:e3:30:02:55:b1:b7:7a:e8:1f:d1:dd:9b:f3:0a: e4:94:6b:d4:17:b6:7c:bb:dc:25:f2:09:f8:11:58: 74:b0:1d:df:71:6b:9e:80:22:ee:7f:19:b4:df:a8: 04:d2:7d:b5:c8:6f:a7:0f:64:8d:e7:36:35:6f:dd: 39:91:18:4f:c6:52:9a:e5:5c:27:e7:7f:b0:f0:52: 91:f3:63:55:6c:4b:2b:2a:be:ae:2a:c8:1e:1d:e8: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0C:65:C4:EE:7D:B0:BA:45:8A:54:7A:F5:80:73:51:A9:F6:86:99 X509v3 Authority Key Identifier: keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/LwxlxO59sLpFilR69YBzUan2hpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:6584::/32 Signature Algorithm: sha256WithRSAEncryption 9d:17:65:8a:0e:82:e6:c1:8c:ba:49:51:ce:3b:29:ce:67:ac: ff:bf:55:a0:c8:a2:60:52:1c:04:50:60:b7:77:bb:f3:0d:d3: 4e:72:8c:39:14:3d:2d:cc:85:f1:d9:1b:fe:b5:4a:2f:fe:36: a6:dd:0d:af:f2:49:12:12:1e:6a:a6:cd:7b:ae:2a:f7:95:97: b9:35:7d:67:86:9e:9a:d9:d8:2f:dd:a8:b0:a4:a2:21:2d:95: ec:a4:40:22:8a:4a:45:0b:7e:75:1f:89:cb:2c:a2:21:d7:a1: 27:c9:2e:e5:9b:99:0d:d4:9c:1f:f4:9f:c9:b3:83:fe:c9:51: 39:d8:b5:17:e5:99:ad:a4:fe:4d:04:f7:7f:0f:66:50:85:c9: 73:29:91:59:4a:4e:b1:75:cf:55:27:7f:62:ff:bb:a6:13:0c: 5e:5c:6d:99:fa:ca:3d:80:3d:e1:47:97:64:8d:dd:98:b9:fe: 9d:09:2f:a7:21:02:b1:e1:44:43:4e:ca:6c:b8:af:86:1b:50: 93:24:2a:bb:58:4a:91:03:14:0c:a6:64:29:7e:fd:10:27:d2: 82:9b:57:5f:82:b5:01:fd:56:92:9a:53:03:00:46:a6:8e:d0: 92:73:bc:30:e9:d1:12:66:9c:f6:83:9e:5f:ca:1b:24:74:27: e0:d6:47:a2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y1avXAZEv3mXAAAReLzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0 NjM3NDIwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjBjNjVjNGVlN2RiMGJhNDU4YTU0N2FmNTgwNzM1MWE5ZjY4Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGDTLj0lvfvyjTvanjTOn7mWXHas HEEJ6kb6R/YXgaIITQQcdFcP5QCXgwDyto60Zuw4E2UyfuuFH6fMrnPNTQMg0oVk 3NbPQKEZEknfEqDt0cSTeJg3anpUktAucS8skmWFt4I2WiqGBqjikX/x7YANj8Ax ID+opjRuoUrmr1S8P+Ph9FMXrfEZXu5akUL0IcUSde48Lf+YU6RJVPMTBwI1PXjo 4zACVbG3eugf0d2b8wrklGvUF7Z8u9wl8gn4EVh0sB3fcWuegCLufxm036gE0n21 yG+nD2SN5zY1b905kRhPxlKa5Vwn53+w8FKR82NVbEsrKr6uKsgeHeiDtwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC8MZcTufbC6RYpUevWAc1Gp9oaZMB8GA1UdIwQY MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt MzZlMGM4YWZlMjZhLzEvTHd4bHhPNTlzTHBGaWxSNjlZQnpVYW4yaHBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgVlhDAN BgkqhkiG9w0BAQsFAAOCAQEAnRdlig6C5sGMuklRzjspzmes/79VoMiiYFIcBFBg t3e78w3TTnKMORQ9LcyF8dkb/rVKL/42pt0Nr/JJEhIeaqbNe64q95WXuTV9Z4ae mtnYL92osKSiIS2V7KRAIopKRQt+dR+JyyyiIdehJ8ku5ZuZDdScH/SfybOD/slR Odi1F+WZraT+TQT3fw9mUIXJcymRWUpOsXXPVSd/Yv+7phMMXlxtmfrKPYA94UeX ZI3dmLn+nQkvpyECseFEQ07KbLivhhtQkyQqu1hKkQMUDKZkKX79ECfSgptXX4K1 Af1WkppTAwBGpo7QknO8MOnREmac9oOeX8obJHQn4NZHog== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:57 2026 by rpki-client