This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/lcmCUf_CgzeIR8L7taeEF8YZZn4.roa File: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (raw, json) Hash identifier: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII= Subject key identifier: 95:C9:82:51:FF:C2:83:37:88:47:C2:FB:B5:A7:84:17:C6:19:66:7E Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Certificate serial: 019B7F80FC08A619F4081D214055FF73B5B4 Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/lcmCUf_CgzeIR8L7taeEF8YZZn4.roa Signing time: Fri 02 Jan 2026 16:18:38 +0000 ROA not before: Fri 02 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25117 IP address blocks: 185.228.228.0/22 maxlen: 24 2a03:7787:fffc::/47 maxlen: 47 2a03:7787:fffe::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:fc:08:a6:19:f4:08:1d:21:40:55:ff:73:b5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Validity Not Before: Jan 2 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95c98251ffc283378847c2fbb5a78417c619667e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:b1:62:85:e2:12:ec:5b:ad:e2:01:d8:62: 55:71:31:c4:2f:83:1d:ae:a2:75:6f:b0:ae:12:b8: c1:f1:9c:e7:a0:9f:fe:62:8d:4b:1c:21:4c:47:2a: 2b:3f:cb:8e:e9:25:f8:31:bf:bb:28:9a:85:b7:1d: 13:89:b9:a6:f2:b5:36:df:94:ef:84:2f:55:6a:e6: b7:ea:e0:73:a1:6d:0d:15:3a:6f:3b:0d:6f:0c:93: 94:87:12:44:c7:b8:d4:89:e6:05:9c:83:75:5f:f7: 0f:23:11:a0:fd:12:43:2b:70:4a:99:f3:8b:1c:3c: c8:8f:92:62:74:2d:02:34:99:bf:4b:e7:38:e5:4b: 56:d0:ae:ab:2f:f1:8b:65:15:2c:20:e0:00:8a:f4: 6c:1b:7e:0c:7c:a1:2f:85:7f:2a:72:3e:07:ac:02: 54:0a:dd:28:bb:e2:02:3a:f6:61:ee:be:57:0c:9b: 28:e4:42:77:37:a5:06:a4:90:79:c7:4e:73:65:16: 3b:d0:fe:e1:7d:88:f3:2b:7d:6a:fe:2b:fe:a5:f4: 03:92:57:a5:5b:f9:03:74:ce:2a:07:00:00:e5:50: 35:e9:ef:68:3b:26:e9:84:84:1f:98:d9:ed:88:8e: 99:e1:5e:73:1f:e5:42:ce:41:ad:88:0d:e7:b7:a3: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C9:82:51:FF:C2:83:37:88:47:C2:FB:B5:A7:84:17:C6:19:66:7E X509v3 Authority Key Identifier: keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/lcmCUf_CgzeIR8L7taeEF8YZZn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.228.0/22 IPv6: 2a03:7787:fffc::/46 Signature Algorithm: sha256WithRSAEncryption 4c:e8:c7:ef:de:f0:5d:94:11:bc:d7:ab:aa:b9:ba:18:b0:86: 49:56:3e:4a:06:43:cb:04:9f:f2:8f:d0:4d:d9:8e:1b:9d:52: 5a:78:b2:e7:09:86:d2:ae:e2:fe:24:ec:2a:50:0c:29:29:8a: 60:87:af:8c:b4:1f:36:e3:08:5c:da:96:d8:e2:e1:9e:7b:e7: 96:58:f2:94:c7:02:3c:80:bb:32:d3:d0:30:e8:60:86:06:cb: 38:8c:7f:cf:e2:1a:b2:07:ce:c3:72:e2:b4:74:0b:c2:93:38: 99:c4:d3:7b:ff:22:cb:e8:a4:11:14:36:3f:6e:4f:83:9a:6d: 3d:2e:30:38:14:dd:ed:f3:ce:de:1b:c0:fb:44:7d:d2:da:aa: 45:7e:61:5a:88:32:5c:05:dc:c7:d0:45:d8:7b:05:38:50:41: a5:cc:13:a2:c1:b5:1c:1a:f7:54:1a:61:0b:97:8d:36:7d:9b: 81:cc:7d:b1:de:cb:63:26:1a:9f:82:9a:75:38:17:2f:a3:72: 28:b6:96:86:f0:c8:a7:b0:1d:c8:b6:36:18:f8:cd:70:1e:c3: 8b:41:b7:94:39:93:bc:18:41:db:20:77:59:56:3a:7d:28:d1: b8:37:a1:7b:00:12:d6:63:cd:2b:eb:76:7d:6e:d7:0d:a8:a7: 83:6c:69:67 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gPwIphn0CB0hQFX/c7W0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1 N2EyNTMwHhcNMjYwMTAyMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWM5ODI1MWZmYzI4MzM3ODg0N2MyZmJiNWE3ODQxN2M2MTk2NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+2xYoXiEuxbreIB2GJVcTHEL4Md rqJ1b7CuErjB8ZznoJ/+Yo1LHCFMRyorP8uO6SX4Mb+7KJqFtx0Tibmm8rU235Tv hC9Vaua36uBzoW0NFTpvOw1vDJOUhxJEx7jUieYFnIN1X/cPIxGg/RJDK3BKmfOL HDzIj5JidC0CNJm/S+c45UtW0K6rL/GLZRUsIOAAivRsG34MfKEvhX8qcj4HrAJU Ct0ou+ICOvZh7r5XDJso5EJ3N6UGpJB5x05zZRY70P7hfYjzK31q/iv+pfQDklel W/kDdM4qBwAA5VA16e9oOybphIQfmNntiI6Z4V5zH+VCzkGtiA3nt6MOPQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJXJglH/woM3iEfC+7WnhBfGGWZ+MB8GA1UdIwQY MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt NDU4YTI3MzYxNTdhLzEvbGNtQ1VmX0NnemVJUjhMN3RhZUVGOFlaWm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCueTkMA8E AgACMAkDBwIqA3eH//wwDQYJKoZIhvcNAQELBQADggEBAEzox+/e8F2UEbzXq6q5 uhiwhklWPkoGQ8sEn/KP0E3ZjhudUlp4sucJhtKu4v4k7CpQDCkpimCHr4y0Hzbj CFzaltji4Z5755ZY8pTHAjyAuzLT0DDoYIYGyziMf8/iGrIHzsNy4rR0C8KTOJnE 03v/IsvopBEUNj9uT4OabT0uMDgU3e3zzt4bwPtEfdLaqkV+YVqIMlwF3MfQRdh7 BThQQaXME6LBtRwa91QaYQuXjTZ9m4HMfbHey2MmGp+CmnU4Fy+jcii2lobwyKew Hci2Nhj4zXAew4tBt5Q5k7wYQdsgd1lWOn0o0bg3oXsAEtZjzSvrdn1u1w2op4Ns aWc= -----END CERTIFICATE-----Generated at Wed Jan 7 03:10:16 2026 by rpki-client