This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa File: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (raw, json) Hash identifier: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk= Subject key identifier: 97:16:E6:76:07:69:49:7C:85:2D:4F:C1:CF:99:77:5B:DB:DB:A3:48 Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3 Certificate serial: 019B783550B047C69F02E9C8886211634F13 Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57105 IP address blocks: 91.230.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:50:b0:47:c6:9f:02:e9:c8:88:62:11:63:4f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9716e6760769497c852d4fc1cf99775bdbdba348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:6e:5d:cd:aa:a5:c1:cf:66:15:b8:77:b2: 35:6c:15:dc:a8:0c:6a:ee:45:d6:9c:bf:11:b9:4d: 6b:ed:26:67:af:e0:2e:cb:a8:8c:92:88:ed:ad:df: 5c:36:cb:c4:3e:47:77:42:4d:03:3d:16:31:62:8b: 12:0b:4a:af:43:e8:18:f1:e0:f7:de:b5:9a:7a:88: 0c:aa:41:de:55:8f:1e:8d:eb:b1:e4:2f:8b:e4:40: 9b:df:28:a1:9d:ec:f1:cb:7b:4c:41:51:c5:7f:7f: 4f:d4:d9:66:33:81:c6:8b:20:09:49:99:6d:02:0e: 5f:53:86:c8:e4:e7:af:38:cf:09:b5:15:61:73:28: 8a:db:c5:cd:de:6b:8e:8e:25:78:3f:15:d1:3f:c4: d3:d0:a0:b8:e6:e3:37:29:7f:73:2f:dd:c5:86:07: 38:57:83:35:b8:2f:61:35:b3:4d:3d:29:83:71:56: 1e:43:27:f9:e8:a0:6e:89:95:92:c0:d6:96:4f:11: ef:e2:53:ac:f1:57:c5:10:65:6b:3d:47:b0:90:7c: c8:53:53:73:c4:5b:60:d6:32:81:d2:47:d4:f8:51: 0a:41:f3:46:e4:1d:0c:71:f6:c9:f2:b9:fe:c5:45: 0d:0a:3e:d3:79:de:c7:63:ff:ba:12:ba:32:7f:16: 78:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:16:E6:76:07:69:49:7C:85:2D:4F:C1:CF:99:77:5B:DB:DB:A3:48 X509v3 Authority Key Identifier: keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.206.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:57:46:eb:38:87:4b:42:80:f1:fe:79:1e:a7:e3:16:24:03: 2e:48:1a:0b:d7:3c:b5:7f:e2:7f:3d:cf:20:03:ee:94:aa:da: d6:24:be:9c:db:c0:34:69:e9:5e:d2:17:23:2a:41:3e:ea:e0: 60:b1:2b:bf:03:80:43:84:76:8c:88:67:6c:88:7b:42:ce:ad: 17:73:67:bc:61:3d:93:02:57:dc:a9:8b:92:18:89:3c:84:17: 0c:b7:ac:42:b3:11:a0:37:31:08:bd:44:e4:04:ca:5a:a6:f2: 90:9b:30:f3:09:54:d6:fc:80:83:4f:fa:a3:0f:82:e6:dc:de: 7f:54:86:15:74:f0:1b:e9:ad:92:9e:7e:11:2b:84:f5:d0:2c: e2:e6:1e:a4:e3:bd:ac:43:65:6d:89:37:ab:0b:3a:fe:b2:09: 74:99:5f:49:98:27:19:d6:67:90:94:64:38:f4:bb:96:29:36: 0c:5a:91:66:9a:05:91:cd:33:26:0a:ff:da:40:33:2b:52:be: a9:07:c8:2f:5d:b5:47:e8:29:74:c3:0d:c1:4b:80:91:db:62: aa:ca:8a:73:42:10:81:ed:f6:36:f0:15:be:71:75:dd:7d:ea: 8c:f9:50:67:1e:00:25:da:a9:03:a3:92:54:b6:b6:3b:96:87: 64:b9:57:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVCwR8afAunIiGIRY08TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MjcxNDQzOTA1Zjk0MGIxMzhkOWQ0YjRhMzQ4N2NiZmJk MDIxZTMwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzE2ZTY3NjA3Njk0OTdjODUyZDRmYzFjZjk5Nzc1YmRiZGJhMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j5uXc2qpcHPZhW4d7I1bBXcqAxq 7kXWnL8RuU1r7SZnr+Auy6iMkojtrd9cNsvEPkd3Qk0DPRYxYosSC0qvQ+gY8eD3 3rWaeogMqkHeVY8ejeux5C+L5ECb3yihnezxy3tMQVHFf39P1NlmM4HGiyAJSZlt Ag5fU4bI5OevOM8JtRVhcyiK28XN3muOjiV4PxXRP8TT0KC45uM3KX9zL93Fhgc4 V4M1uC9hNbNNPSmDcVYeQyf56KBuiZWSwNaWTxHv4lOs8VfFEGVrPUewkHzIU1Nz xFtg1jKB0kfU+FEKQfNG5B0McfbJ8rn+xUUNCj7Ted7HY/+6EroyfxZ4nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJcW5nYHaUl8hS1Pwc+Zd1vb26NIMB8GA1UdIwQY MBaAFOgnFEOQX5QLE42dS0o0h8v70CHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUt NTdjN2U2MTk5YjEyLzEvbHhibWRnZHBTWHlGTFVfQno1bDNXOXZibzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUtNTdjN2U2MTk5YjEy LzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+bOMA0G CSqGSIb3DQEBCwUAA4IBAQBbV0brOIdLQoDx/nkep+MWJAMuSBoL1zy1f+J/Pc8g A+6UqtrWJL6c28A0aele0hcjKkE+6uBgsSu/A4BDhHaMiGdsiHtCzq0Xc2e8YT2T AlfcqYuSGIk8hBcMt6xCsxGgNzEIvUTkBMpapvKQmzDzCVTW/ICDT/qjD4Lm3N5/ VIYVdPAb6a2Snn4RK4T10Czi5h6k472sQ2VtiTerCzr+sgl0mV9JmCcZ1meQlGQ4 9LuWKTYMWpFmmgWRzTMmCv/aQDMrUr6pB8gvXbVH6Cl0ww3BS4CR22KqyopzQhCB 7fY28BW+cXXdfeqM+VBnHgAl2qkDo5JUtrY7lodkuVcs -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:06 2026 by rpki-client