This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa File: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (raw, json) Hash identifier: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg= Subject key identifier: 2D:6F:D8:EC:4A:03:86:63:F6:E0:71:30:EA:94:EA:FF:2A:4A:BB:10 Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Certificate serial: 019B77C681986C1727C49539972C4A257ECC Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6204 IP address blocks: 103.246.249.0/24 maxlen: 24 205.237.108.0/24 maxlen: 24 2a12:3200:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:98:6c:17:27:c4:95:39:97:2c:4a:25:7e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d6fd8ec4a038663f6e07130ea94eaff2a4abb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:07:24:d4:1a:2b:11:de:f8:6c:f8:f0:21: 5e:76:d3:42:49:1f:69:07:91:b1:f9:1c:5f:ec:a2: 88:79:5a:e5:14:49:75:ea:f6:ba:48:75:a4:57:e7: 9b:67:1a:5c:71:9f:37:ab:00:a3:6d:bc:a7:27:8f: a7:d5:23:96:06:78:ff:13:42:1d:62:dd:dd:e5:cf: 3a:0f:3c:37:9b:5c:89:9f:f8:d2:ea:84:26:d7:dc: 34:da:d7:63:43:8b:9e:84:b2:9a:73:ff:e7:14:84: e1:72:16:fe:ed:ce:f2:88:e1:72:b5:c4:b0:c7:4e: 61:b8:8e:8b:34:d5:08:9d:b7:57:32:5f:37:71:ec: 3d:84:cc:43:27:7f:68:05:12:0e:c7:13:a9:8b:25: 2c:4f:ab:f1:eb:2a:a4:73:43:e5:71:5d:df:18:81: 9a:fa:a9:2b:e5:14:1f:86:b3:d9:06:0f:71:17:33: a4:07:3f:ea:37:4b:d9:3f:19:f1:88:70:42:43:c7: 87:bd:c3:f9:84:d3:4a:95:11:49:8c:c8:ed:dc:70: 18:ba:7a:dd:9e:da:a2:ed:2b:39:71:59:34:49:21: 01:c6:66:b0:0e:39:c5:b1:15:c4:93:46:cb:f1:d9: 6f:d3:7c:45:6e:8a:cb:2a:18:3f:6d:1b:da:26:41: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6F:D8:EC:4A:03:86:63:F6:E0:71:30:EA:94:EA:FF:2A:4A:BB:10 X509v3 Authority Key Identifier: keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.249.0/24 205.237.108.0/24 IPv6: 2a12:3200:f000::/36 Signature Algorithm: sha256WithRSAEncryption 81:57:f3:29:20:81:4f:fc:3b:03:ba:e1:0b:6d:7e:b1:2c:52: ef:69:a2:15:0f:09:09:d8:61:e4:2f:88:21:f1:0e:39:eb:5a: f9:b0:2e:ce:12:18:fd:d1:42:97:dd:f2:f7:4b:2c:e2:fc:22: 2f:81:09:aa:50:7e:3c:20:e1:f3:c5:1c:1c:87:58:96:70:25: 3a:2f:40:b0:3f:58:8d:8a:83:3a:1c:ff:b1:c6:69:76:be:6b: 1e:46:07:92:dc:48:c7:7d:24:27:53:d9:1b:1c:5c:38:5a:69: 84:eb:13:57:e4:dc:6c:ce:a1:e6:6b:63:3a:0c:f9:8c:60:c1: c2:12:b5:40:73:b0:af:68:56:5e:f5:67:97:64:18:fd:5e:c5: ec:06:1c:20:89:41:c5:d0:94:6a:32:78:32:11:db:a5:63:fc: ab:1d:59:b8:69:b1:d1:30:0b:f2:0e:18:00:96:d0:5f:ac:b6: f1:71:8b:41:18:10:7b:0c:8d:ea:c6:ae:b1:90:03:fd:97:e0: be:8a:ba:86:07:64:9f:ab:0d:a2:21:5f:14:db:be:7d:be:03: 9b:57:19:82:f6:d7:98:58:03:ee:16:99:a5:d9:49:92:5e:03: 88:f4:01:0a:00:55:9e:c6:95:4a:be:2b:48:ba:71:13:9e:5b: 11:36:02:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xoGYbBcnxJU5lyxKJX7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1 MWRlZDAwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDZmZDhlYzRhMDM4NjYzZjZlMDcxMzBlYTk0ZWFmZjJhNGFiYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkHJNQaKxHe+Gz48CFedtNCSR9p B5Gx+Rxf7KKIeVrlFEl16va6SHWkV+ebZxpccZ83qwCjbbynJ4+n1SOWBnj/E0Id Yt3d5c86Dzw3m1yJn/jS6oQm19w02tdjQ4uehLKac//nFIThchb+7c7yiOFytcSw x05huI6LNNUInbdXMl83cew9hMxDJ39oBRIOxxOpiyUsT6vx6yqkc0PlcV3fGIGa +qkr5RQfhrPZBg9xFzOkBz/qN0vZPxnxiHBCQ8eHvcP5hNNKlRFJjMjt3HAYunrd ntqi7Ss5cVk0SSEBxmawDjnFsRXEk0bL8dlv03xFborLKhg/bRvaJkHzNwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFC1v2OxKA4Zj9uBxMOqU6v8qSrsQMB8GA1UdIwQY MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt MWNhZGE2ZThiMWE5LzEvTFdfWTdFb0RobVAyNEhFdzZwVHFfeXBLdXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5 LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAZ/b5AwQA ze1sMA4EAgACMAgDBgQqEjIA8DANBgkqhkiG9w0BAQsFAAOCAQEAgVfzKSCBT/w7 A7rhC21+sSxS72miFQ8JCdhh5C+IIfEOOeta+bAuzhIY/dFCl93y90ss4vwiL4EJ qlB+PCDh88UcHIdYlnAlOi9AsD9YjYqDOhz/scZpdr5rHkYHktxIx30kJ1PZGxxc OFpphOsTV+TcbM6h5mtjOgz5jGDBwhK1QHOwr2hWXvVnl2QY/V7F7AYcIIlBxdCU ajJ4MhHbpWP8qx1ZuGmx0TAL8g4YAJbQX6y28XGLQRgQewyN6sausZAD/Zfgvoq6 hgdkn6sNoiFfFNu+fb4Dm1cZgvbXmFgD7haZpdlJkl4DiPQBCgBVnsaVSr4rSLpx E55bETYC8Q== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client