This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LEZswSgqNvknohmPUGC7s0YlcXc.roa File: LEZswSgqNvknohmPUGC7s0YlcXc.roa (raw, json) Hash identifier: 5r91XfQeTjdGQhLQjcBgSwQR09rja64A7Vb0OmzSkpE= Subject key identifier: 2C:46:6C:C1:28:2A:36:F9:27:A2:19:8F:50:60:BB:B3:46:25:71:77 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE4D6A8A0F6620FAC6ECF0A9C7B16A Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LEZswSgqNvknohmPUGC7s0YlcXc.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.229.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4d:6a:8a:0f:66:20:fa:c6:ec:f0:a9:c7:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c466cc1282a36f927a2198f5060bbb346257177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:7f:b2:4b:98:2a:92:29:99:57:28:c9:f9: 7e:d5:28:a4:4b:72:75:25:57:66:f8:51:2a:90:7b: 50:56:c8:b7:08:d0:b0:94:75:cc:97:b0:b7:2f:1b: 86:2e:77:f4:e7:36:5b:db:45:d0:c6:db:72:68:c7: 74:c4:c1:37:bb:89:ce:88:f4:84:38:0e:39:39:23: fe:ec:d3:42:a3:90:11:df:7f:d0:0c:48:63:94:82: 24:81:a9:98:f8:2d:c6:d4:20:3a:6e:4e:e6:9f:9a: a6:e2:f7:08:76:8d:4f:f8:0d:62:de:a9:11:ff:d6: 45:f0:97:81:6b:6d:31:a5:5e:a3:b1:d9:b7:27:89: ee:ac:b9:82:a4:46:6f:a8:16:60:f0:67:90:8b:d3: 79:ee:a0:07:d6:06:66:ae:1b:d4:fe:df:25:7f:bf: 52:e4:46:53:d3:f0:c2:39:d0:c1:32:8c:8b:10:3c: ed:bf:38:7f:69:41:79:a8:d1:44:a8:f6:22:c1:69: 81:89:7c:c3:87:c9:4c:7b:56:eb:f4:af:a1:b9:a0: 52:d4:d6:0d:1b:e9:46:a0:00:ca:31:06:7b:e6:67: 73:d3:f5:a0:ac:9f:82:f5:39:a9:84:05:9d:a7:9c: db:49:d9:a6:ea:28:52:69:bd:59:7d:29:0a:70:b8: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:46:6C:C1:28:2A:36:F9:27:A2:19:8F:50:60:BB:B3:46:25:71:77 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LEZswSgqNvknohmPUGC7s0YlcXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.110.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:d9:37:0a:8e:a1:2c:5f:e1:62:36:5b:c8:90:79:4f:b3:50: fa:4b:f6:39:54:3b:75:71:d2:2b:78:9c:17:b2:06:29:c4:c0: 59:87:55:1c:20:d3:29:93:06:c3:c4:ab:62:5d:af:8e:58:18: 21:3f:c4:59:26:e6:9e:d6:c5:67:e1:de:97:b6:06:7e:90:1c: b1:f6:06:87:30:a5:ac:16:dc:c0:38:25:8d:94:47:52:e2:f8: 98:3f:9f:41:20:66:86:43:a6:2d:4a:4c:e2:a7:7e:ae:ee:f0: 33:0f:11:f5:e3:2e:d1:c1:fc:05:6c:22:b1:96:0d:5b:6f:72: ae:93:4e:b0:cc:41:56:a7:d5:e6:b0:d2:29:72:76:1f:15:dc: 90:cb:65:0b:bd:a0:52:05:3e:c4:ae:38:4a:04:9e:30:7a:10: 47:7e:a8:7a:d0:69:77:1d:de:35:48:f8:bc:97:bb:4a:77:72: e8:81:8c:4e:b8:83:9e:38:cd:03:b3:99:ea:27:7d:1f:26:7b: 55:0c:29:20:b2:20:c5:e6:4d:9d:4d:25:24:ce:26:e0:b4:7f: c9:46:b2:ea:fc:ec:c1:b7:f0:22:df:fd:28:6b:50:8f:44:96: ae:43:c2:ad:19:2e:1c:c0:b3:1f:2f:a2:65:03:62:4a:88:be: b7:08:87:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87k1qig9mIPrG7PCpx7FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzQ2NmNjMTI4MmEzNmY5MjdhMjE5OGY1MDYwYmJiMzQ2MjU3MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSZ/skuYKpIpmVcoyfl+1SikS3J1 JVdm+FEqkHtQVsi3CNCwlHXMl7C3LxuGLnf05zZb20XQxttyaMd0xME3u4nOiPSE OA45OSP+7NNCo5AR33/QDEhjlIIkgamY+C3G1CA6bk7mn5qm4vcIdo1P+A1i3qkR /9ZF8JeBa20xpV6jsdm3J4nurLmCpEZvqBZg8GeQi9N57qAH1gZmrhvU/t8lf79S 5EZT0/DCOdDBMoyLEDztvzh/aUF5qNFEqPYiwWmBiXzDh8lMe1br9K+huaBS1NYN G+lGoADKMQZ75mdz0/WgrJ+C9TmphAWdp5zbSdmm6ihSab1ZfSkKcLj1LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCxGbMEoKjb5J6IZj1Bgu7NGJXF3MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTEVac3dTZ3FOdmtub2htUFVHQzdzMFlsY1hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VuMA0G CSqGSIb3DQEBCwUAA4IBAQCM2TcKjqEsX+FiNlvIkHlPs1D6S/Y5VDt1cdIreJwX sgYpxMBZh1UcINMpkwbDxKtiXa+OWBghP8RZJuae1sVn4d6XtgZ+kByx9gaHMKWs FtzAOCWNlEdS4viYP59BIGaGQ6YtSkzip36u7vAzDxH14y7RwfwFbCKxlg1bb3Ku k06wzEFWp9XmsNIpcnYfFdyQy2ULvaBSBT7ErjhKBJ4wehBHfqh60Gl3Hd41SPi8 l7tKd3LogYxOuIOeOM0Ds5nqJ30fJntVDCkgsiDF5k2dTSUkzibgtH/JRrLq/OzB t/Ai3/0oa1CPRJauQ8KtGS4cwLMfL6JlA2JKiL63CIe/ -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:42 2026 by rpki-client