This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/LnaW5765Yz17Jsu6jhp4pcS4phE.roa File: LnaW5765Yz17Jsu6jhp4pcS4phE.roa (raw, json) Hash identifier: IQeYGnlewk42LV1orLSIQiV+CC/nS8IwBcXiQsT3VkU= Subject key identifier: 2E:76:96:E7:BE:B9:63:3D:7B:26:CB:BA:8E:1A:78:A5:C4:B8:A6:11 Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351 Certificate serial: 019B7834374D0AD752C6A0ACE11C2FA548D4 Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/LnaW5765Yz17Jsu6jhp4pcS4phE.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198085 IP address blocks: 195.66.110.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:37:4d:0a:d7:52:c6:a0:ac:e1:1c:2f:a5:48:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e7696e7beb9633d7b26cbba8e1a78a5c4b8a611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:31:0d:7b:65:45:6c:92:db:66:fc:b1:6f: 05:40:57:9a:95:59:40:cc:76:8d:f6:24:f2:22:27: b7:cb:ed:d8:2c:23:e2:f2:f0:ba:00:58:58:05:03: 06:a7:dc:42:14:e7:52:ee:cd:7e:91:fc:c9:d9:1c: 42:17:f3:6b:a0:d9:96:40:73:c9:c3:21:ce:39:a2: ce:65:d2:11:24:1a:74:8f:97:85:9b:a9:04:f3:0d: 77:57:36:d5:92:7e:dc:93:fc:d7:46:73:8c:b6:de: 2c:5d:c0:b7:a8:af:e6:6e:4e:cc:88:d0:aa:30:a7: aa:16:29:09:9f:f9:dc:f8:1c:68:a0:df:af:bc:3a: e2:12:a7:6e:bd:54:6e:34:fb:15:3d:66:d2:22:7d: 4c:a8:b3:2d:07:9d:23:3e:10:85:6b:88:27:16:a4: b2:aa:0e:2b:d8:92:40:90:41:f2:43:b6:c0:3c:13: 3b:72:2d:d8:8a:36:59:3e:6b:87:89:97:14:e1:4c: 03:d9:87:f1:8a:4e:88:ef:f6:fe:66:34:fa:12:e9: 36:85:cc:c1:9a:46:76:a4:35:16:5c:8f:a0:b5:05: d3:24:aa:a3:6c:01:94:c8:98:53:b9:d6:d6:8a:26: 94:49:03:17:5d:01:5c:6a:f1:9f:f4:99:c4:50:67: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:96:E7:BE:B9:63:3D:7B:26:CB:BA:8E:1A:78:A5:C4:B8:A6:11 X509v3 Authority Key Identifier: keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/LnaW5765Yz17Jsu6jhp4pcS4phE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.110.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:dc:b8:10:4a:f6:45:10:1c:ee:88:93:ad:73:c5:f7:df:fe: dd:6f:34:33:7f:81:03:60:c4:e0:7c:ae:61:72:e7:24:7b:3b: 88:80:44:25:9c:d9:bf:52:24:68:5f:97:fc:d2:d1:08:5c:1a: ff:8a:98:95:c4:f5:26:07:0f:60:f6:6a:e7:01:b3:04:2d:a0: b2:63:7a:9b:43:6e:f7:87:c9:b2:12:01:16:cb:7a:7b:23:6e: d5:dc:00:6c:8c:26:a4:82:ca:f4:91:84:4e:89:e4:3a:95:a6: 74:e1:37:6c:9f:d6:a3:9d:14:37:21:79:11:13:11:4f:8e:08: d8:bc:21:9e:8b:41:e1:7a:29:9b:46:a3:b3:b7:d2:bf:19:0b: e6:7c:7d:6c:99:36:48:fe:59:08:10:05:a7:2a:49:fb:a2:2b: 8a:ba:b2:ba:b7:52:ac:30:ca:8e:b6:92:3a:a6:54:32:83:95: 93:43:08:a7:2a:12:0e:b9:b1:4c:5e:6a:fd:e7:df:49:6d:8d: 56:62:40:4e:34:ce:1e:ef:3a:79:73:06:33:ca:c8:28:d6:3d: b3:64:94:d0:64:ca:81:d2:48:e4:16:7b:9f:cc:ea:07:41:86: f2:ca:25:48:c7:e8:48:aa:1e:b8:ce:23:fe:aa:90:12:3d:30: a0:1d:cc:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDdNCtdSxqCs4RwvpUjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3 YzEzNTEwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc2OTZlN2JlYjk2MzNkN2IyNmNiYmE4ZTFhNzhhNWM0YjhhNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsYxDXtlRWyS22b8sW8FQFealVlA zHaN9iTyIie3y+3YLCPi8vC6AFhYBQMGp9xCFOdS7s1+kfzJ2RxCF/NroNmWQHPJ wyHOOaLOZdIRJBp0j5eFm6kE8w13VzbVkn7ck/zXRnOMtt4sXcC3qK/mbk7MiNCq MKeqFikJn/nc+BxooN+vvDriEqduvVRuNPsVPWbSIn1MqLMtB50jPhCFa4gnFqSy qg4r2JJAkEHyQ7bAPBM7ci3YijZZPmuHiZcU4UwD2Yfxik6I7/b+ZjT6Euk2hczB mkZ2pDUWXI+gtQXTJKqjbAGUyJhTudbWiiaUSQMXXQFcavGf9JnEUGfqoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC52lue+uWM9eybLuo4aeKXEuKYRMB8GA1UdIwQY MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt NzMwZmNkMGU1ZGNhLzEvTG5hVzU3NjVZejE3SnN1NmpocDRwY1M0cGhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JuMA0G CSqGSIb3DQEBCwUAA4IBAQBu3LgQSvZFEBzuiJOtc8X33/7dbzQzf4EDYMTgfK5h cuckezuIgEQlnNm/UiRoX5f80tEIXBr/ipiVxPUmBw9g9mrnAbMELaCyY3qbQ273 h8myEgEWy3p7I27V3ABsjCakgsr0kYROieQ6laZ04Tdsn9ajnRQ3IXkRExFPjgjY vCGei0HheimbRqOzt9K/GQvmfH1smTZI/lkIEAWnKkn7oiuKurK6t1KsMMqOtpI6 plQyg5WTQwinKhIOubFMXmr9599JbY1WYkBONM4e7zp5cwYzysgo1j2zZJTQZMqB 0kjkFnufzOoHQYbyyiVIx+hIqh64ziP+qpASPTCgHcy2 -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:52 2026 by rpki-client