This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/lnvQS4iYli9A_kevH6oCyIpYWtw.roa
File: lnvQS4iYli9A_kevH6oCyIpYWtw.roa (raw, json)
Hash identifier: bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=
Subject key identifier: 96:7B:D0:4B:88:98:96:2F:40:FE:47:AF:1F:AA:02:C8:8A:58:5A:DC
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 019B77C740BB7785120909EAE22617CE8303
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/lnvQS4iYli9A_kevH6oCyIpYWtw.roa
Signing time: Thu 01 Jan 2026 04:18:25 +0000
ROA not before: Thu 01 Jan 2026 04:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44381
IP address blocks: 195.191.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:40:bb:77:85:12:09:09:ea:e2:26:17:ce:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Jan 1 04:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=967bd04b8898962f40fe47af1faa02c88a585adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:df:51:a3:f8:fe:df:11:f8:39:a3:3e:64:
ef:ea:3e:10:84:0c:ce:cd:ba:10:49:51:2c:e4:3f:
6e:d0:1c:c3:a7:bf:05:23:65:ed:0b:d3:f4:c4:27:
21:c1:67:ef:d0:60:97:87:78:84:2c:93:b8:b8:3a:
14:b5:36:23:ef:b6:a9:91:20:41:71:e9:bb:01:85:
7a:66:56:c9:c6:00:25:e7:35:d7:f5:49:08:ec:7b:
e9:28:44:4d:9d:5d:85:8a:89:85:97:39:e7:77:24:
fe:60:f6:16:39:d0:7b:cb:2a:68:b0:de:6f:9a:26:
36:08:ad:61:a6:f0:02:91:c8:e6:fc:18:06:1e:c1:
c0:60:35:ad:2a:c7:f4:1f:14:45:ca:11:d3:5e:d5:
65:62:9e:e1:1d:2e:ec:24:0c:68:0f:45:65:24:c2:
9d:fb:b9:06:b7:d7:a3:9f:17:54:10:68:1e:25:99:
2b:c6:20:5d:3e:75:1e:b6:64:2b:d9:01:8f:fe:0f:
96:47:49:11:99:6a:5e:25:b7:32:bf:83:a0:ce:1d:
b0:b7:4d:79:a8:d6:5a:5d:0d:e5:a0:6a:c7:86:3d:
08:5d:e1:ca:4d:f3:fb:16:a1:33:17:1a:a0:0f:e3:
12:e7:f7:d4:86:3e:8a:1a:a2:42:45:3e:46:7c:b0:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:D0:4B:88:98:96:2F:40:FE:47:AF:1F:AA:02:C8:8A:58:5A:DC
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/lnvQS4iYli9A_kevH6oCyIpYWtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:9d:26:27:46:cd:51:f6:58:33:c7:3f:98:09:85:a5:8c:38:
45:ca:e4:48:65:a2:09:57:6c:a3:d6:5a:e6:f7:98:fd:a5:ab:
27:d4:13:a8:1d:d7:81:37:b6:5a:b6:af:2e:84:eb:74:bf:3e:
be:8d:97:47:fd:cc:81:c1:ae:4d:f5:bc:2c:3b:d4:96:9f:02:
5c:d2:34:97:35:60:a1:1f:23:f4:a7:27:aa:33:88:b9:a3:f2:
3b:95:ff:e3:18:00:ab:0f:49:fd:9d:c6:45:7a:94:37:c8:53:
53:27:e1:16:8a:ce:cc:fe:b1:e5:d9:72:0a:99:b3:35:72:dc:
61:76:f2:95:ce:9e:bb:ae:70:44:08:2f:36:0f:a3:f1:c3:ca:
f8:c1:e5:f2:93:b8:d7:74:08:d8:d1:ff:3d:aa:9a:06:86:f9:
73:24:2b:f5:62:23:14:b0:95:b5:75:c9:42:5b:de:41:17:a8:
e3:4c:f5:8b:91:42:99:36:d5:7a:b5:71:65:5e:68:ff:98:3e:
78:fa:b9:8f:96:62:83:ca:ea:3e:4d:1d:2c:12:6e:26:a5:36:
62:14:ed:2d:65:b6:bd:c3:3a:09:2f:c1:99:2d:04:67:e6:41:
8d:8a:58:e6:6e:36:15:3f:b3:ab:73:96:95:13:a6:bc:6f:5d:
fb:2d:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:47 2026 by rpki-client