This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa File: LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa (raw, json) Hash identifier: 9dyJy9KVa6+GZ+Ne1KA1oy9opcxU4ZQ1lYWYUM4EkwU= Subject key identifier: 2C:2E:57:9E:46:6C:39:F3:42:3A:93:D9:A4:93:13:83:E6:28:1F:53 Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a Certificate serial: 019B76EAC4CBC7027AF5A960CFD2DC62FB52 Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199222 IP address blocks: 194.0.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c4:cb:c7:02:7a:f5:a9:60:cf:d2:dc:62:fb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c2e579e466c39f3423a93d9a4931383e6281f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:16:b1:b2:17:19:8b:df:65:9f:26:ca:04:71: e6:d1:5a:43:f9:73:df:38:8e:d6:06:51:62:65:bc: d4:51:46:5f:7c:ae:bd:59:91:34:8a:83:7d:6f:1d: bc:07:d3:91:bb:8a:46:db:53:6e:f3:9f:6f:c1:fc: 46:65:bc:2d:9b:f4:e3:80:f4:75:f0:72:8c:d7:b7: 07:15:98:9a:bf:7e:ec:08:85:64:f2:0e:6b:2d:44: 10:03:d5:36:68:47:9b:57:b4:0b:47:92:8e:88:6d: 7b:9c:f9:f3:37:a7:fa:13:d7:37:79:dd:6e:fc:d5: 13:1d:24:d9:35:ec:50:c7:1c:bb:e7:66:05:a9:20: 42:3f:f3:dd:44:da:c8:47:79:29:4c:98:65:ea:bd: 20:b8:be:fa:ee:82:78:9c:3e:2a:b7:9b:be:e8:74: d6:4f:c7:c7:19:89:b3:9c:17:73:d5:a8:38:6c:f8: b7:ca:09:71:88:1c:8a:22:5f:33:24:07:bf:14:af: 26:e0:6b:c1:d7:d7:f9:22:75:98:78:9f:94:14:b4: 6c:a0:ba:8c:89:3f:0d:ee:c5:60:a9:fd:5a:fe:79: 6e:b0:d4:5c:37:3d:54:07:8f:c8:4d:b7:90:7b:eb: b7:f8:f3:21:15:2a:7e:eb:37:dc:c1:11:62:0b:d6: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:57:9E:46:6C:39:F3:42:3A:93:D9:A4:93:13:83:E6:28:1F:53 X509v3 Authority Key Identifier: keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.62.0/24 Signature Algorithm: sha256WithRSAEncryption 00:79:b1:ba:b3:ee:75:ff:f7:06:a2:1c:00:4d:13:70:d4:36: be:b9:a9:38:80:bc:75:eb:2f:c8:cc:8d:31:64:be:d5:af:11: ad:8a:ac:ae:4e:86:ea:c9:1a:33:c4:49:ca:42:2d:d3:db:b7: e5:28:c7:82:16:cc:d9:05:56:cf:1c:2c:db:0f:02:aa:da:a8: 2f:2b:03:90:fe:a5:2b:df:2b:e5:fc:4b:74:f3:c2:b5:8d:33: 78:54:ea:3b:c9:66:a9:b8:6c:31:35:df:50:43:98:68:25:7e: 1d:e9:3f:0c:c1:7f:ec:9f:e8:0a:57:25:ec:bd:60:6b:a5:7e: 95:97:9c:f0:31:99:47:a2:f8:05:53:b8:b0:21:f1:01:cc:ee: c1:d1:d2:ca:e2:e2:9e:f8:f7:0a:5c:c8:71:12:c1:3b:90:df: b0:d0:2e:90:a9:d0:32:e1:c0:9f:07:10:b8:aa:c1:02:66:91: bb:55:17:fb:dc:d3:46:4e:24:e8:5b:54:5c:fd:01:5d:07:0e: 7f:af:8f:58:b1:7e:40:57:34:b5:53:3b:3e:ac:67:23:09:5b: 13:43:c4:98:3a:82:44:08:36:ba:03:eb:dd:e8:87:83:fb:d1: 72:74:48:c0:1f:3c:74:10:15:37:35:08:9c:9f:9f:6f:c5:a6: db:0b:bd:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sTLxwJ69algz9LcYvtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZGVhMmMxNTk5M2Q2ODMxNzUwYWE2MzBlMGU2ODBkOWVl Zjg4OGEwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzJlNTc5ZTQ2NmMzOWYzNDIzYTkzZDlhNDkzMTM4M2U2MjgxZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BaxshcZi99lnybKBHHm0VpD+XPf OI7WBlFiZbzUUUZffK69WZE0ioN9bx28B9ORu4pG21Nu859vwfxGZbwtm/TjgPR1 8HKM17cHFZiav37sCIVk8g5rLUQQA9U2aEebV7QLR5KOiG17nPnzN6f6E9c3ed1u /NUTHSTZNexQxxy752YFqSBCP/PdRNrIR3kpTJhl6r0guL767oJ4nD4qt5u+6HTW T8fHGYmznBdz1ag4bPi3yglxiByKIl8zJAe/FK8m4GvB19f5InWYeJ+UFLRsoLqM iT8N7sVgqf1a/nlusNRcNz1UB4/ITbeQe+u3+PMhFSp+6zfcwRFiC9YUywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwuV55GbDnzQjqT2aSTE4PmKB9TMB8GA1UdIwQY MBaAFPfeosFZk9aDF1CqYw4OaA2e74iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYt MzhkOTcxYzEzNDQxLzEvTEM1WG5rWnNPZk5DT3BQWnBKTVRnLVlvSDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYtMzhkOTcxYzEzNDQx LzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgA+MA0G CSqGSIb3DQEBCwUAA4IBAQAAebG6s+51//cGohwATRNw1Da+uak4gLx16y/IzI0x ZL7VrxGtiqyuTobqyRozxEnKQi3T27flKMeCFszZBVbPHCzbDwKq2qgvKwOQ/qUr 3yvl/Et088K1jTN4VOo7yWapuGwxNd9QQ5hoJX4d6T8MwX/sn+gKVyXsvWBrpX6V l5zwMZlHovgFU7iwIfEBzO7B0dLK4uKe+PcKXMhxEsE7kN+w0C6QqdAy4cCfBxC4 qsECZpG7VRf73NNGTiToW1Rc/QFdBw5/r49YsX5AVzS1Uzs+rGcjCVsTQ8SYOoJE CDa6A+vd6IeD+9FydEjAHzx0EBU3NQicn59vxabbC72K -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:22 2026 by rpki-client