This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/LkfXZqcx7G1RdcSSUX4VqE95iT0.roa File: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (raw, json) Hash identifier: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg= Subject key identifier: 2E:47:D7:66:A7:31:EC:6D:51:75:C4:92:51:7E:15:A8:4F:79:89:3D Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC809D904D28DF8AF10689724839E39 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/LkfXZqcx7G1RdcSSUX4VqE95iT0.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 45.134.156.0/22 maxlen: 24 45.134.158.0/24 maxlen: 24 45.134.159.0/24 maxlen: 24 78.136.248.0/22 maxlen: 24 88.204.40.0/21 maxlen: 24 185.232.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:09:d9:04:d2:8d:f8:af:10:68:97:24:83:9e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e47d766a731ec6d5175c492517e15a84f79893d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:f6:91:ea:ce:ce:6c:86:ff:5f:22:76:8b: 64:1b:00:71:a7:59:58:ae:52:b9:92:9b:83:c5:e0: 2b:7c:8c:eb:53:e9:6d:5d:3f:02:e6:91:37:ad:c2: c5:0e:ee:0b:7f:21:7b:40:4d:06:c7:b4:74:89:31: e9:78:3e:d7:88:49:36:d5:b6:7b:48:1a:06:02:aa: 88:a2:83:4b:28:58:7b:74:96:b4:ce:e4:a3:be:54: 59:93:7e:8c:34:87:d8:2e:cb:86:b2:13:42:a5:4a: 47:35:0f:9a:5c:ba:0d:1c:8c:21:68:09:5f:56:af: 96:fd:c4:56:35:ef:70:c9:8d:80:a1:01:a4:d8:82: 38:4f:bc:9c:d8:f3:2e:86:ed:74:89:f1:1d:b5:34: 8f:44:a2:e2:a7:7f:5f:9a:d6:ad:de:b0:d6:cb:2a: d4:7e:ea:6f:f1:e5:54:15:3f:d1:77:db:18:33:5c: e0:b5:39:01:3f:4c:e1:62:37:bf:6a:e5:4b:59:18: a7:e4:9b:6b:63:8e:45:79:f2:2b:f8:e8:82:7d:3b: 4e:c3:5e:fd:c7:3c:99:55:e9:c7:79:fe:68:85:82: da:65:2d:b7:a1:d3:70:92:20:83:07:36:d4:a5:9d: 68:70:de:c3:c1:7a:cb:68:7b:36:66:c8:fd:79:53: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:47:D7:66:A7:31:EC:6D:51:75:C4:92:51:7E:15:A8:4F:79:89:3D X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/LkfXZqcx7G1RdcSSUX4VqE95iT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.156.0/22 78.136.248.0/22 88.204.40.0/21 185.232.16.0/24 Signature Algorithm: sha256WithRSAEncryption c0:57:26:d8:78:56:08:9b:8c:82:a8:79:dd:d4:f1:26:7f:0f: d9:08:77:60:c3:20:0e:57:b7:68:f6:57:af:8e:4c:62:32:84: 08:29:ad:d1:11:4d:8f:c0:49:4c:93:2a:f7:d1:23:08:2f:cc: d9:d4:a1:d0:fd:36:4b:71:84:db:f1:f4:21:6b:f8:32:c0:b3: a6:52:b7:40:5d:e3:bf:9e:3c:0a:78:5b:6a:05:1f:04:da:97: e5:84:73:df:35:96:30:3e:29:1b:ea:38:e1:3f:bf:d4:0b:df: 3a:90:e3:0e:5f:31:78:68:64:2f:7a:e5:1f:f3:ff:f2:00:6a: b5:1a:c2:f1:03:c6:97:c4:ce:60:16:93:f0:12:64:b0:b0:a2: f8:0b:3c:37:e0:08:33:f9:77:db:23:73:0c:c3:49:43:19:6d: 75:8f:4c:ea:37:5a:c1:00:4e:7a:52:59:e8:ac:3b:93:1c:d0: 91:4b:33:47:e3:1d:da:50:1f:bd:bf:b9:4f:5a:a4:e9:9d:d4: 10:58:00:9a:c0:d5:91:14:37:55:25:5c:f8:53:74:e4:ba:65: eb:6f:2c:4e:ad:fc:38:85:73:87:14:21:0b:36:a9:ce:9c:a7: f6:e8:fc:1e:5b:cf:0c:dc:0b:ea:0f:81:d6:3a:62:a4:3e:cc: 41:57:6e:04 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yAnZBNKN+K8QaJckg545MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQ3ZDc2NmE3MzFlYzZkNTE3NWM0OTI1MTdlMTVhODRmNzk4OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL32kerOzmyG/18idotkGwBxp1lY rlK5kpuDxeArfIzrU+ltXT8C5pE3rcLFDu4LfyF7QE0Gx7R0iTHpeD7XiEk21bZ7 SBoGAqqIooNLKFh7dJa0zuSjvlRZk36MNIfYLsuGshNCpUpHNQ+aXLoNHIwhaAlf Vq+W/cRWNe9wyY2AoQGk2II4T7yc2PMuhu10ifEdtTSPRKLip39fmtat3rDWyyrU fupv8eVUFT/Rd9sYM1zgtTkBP0zhYje/auVLWRin5JtrY45FefIr+OiCfTtOw179 xzyZVenHef5ohYLaZS23odNwkiCDBzbUpZ1ocN7DwXrLaHs2Zsj9eVMqEQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFC5H12anMextUXXEklF+FahPeYk9MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvTGtmWFpxY3g3RzFSZGNTU1VYNFZxRTk1aVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLYacAwQC Toj4AwQDWMwoAwQAuegQMA0GCSqGSIb3DQEBCwUAA4IBAQDAVybYeFYIm4yCqHnd 1PEmfw/ZCHdgwyAOV7do9levjkxiMoQIKa3REU2PwElMkyr30SMIL8zZ1KHQ/TZL cYTb8fQha/gywLOmUrdAXeO/njwKeFtqBR8E2pflhHPfNZYwPikb6jjhP7/UC986 kOMOXzF4aGQveuUf8//yAGq1GsLxA8aXxM5gFpPwEmSwsKL4Czw34Agz+XfbI3MM w0lDGW11j0zqN1rBAE56UlnorDuTHNCRSzNH4x3aUB+9v7lPWqTpndQQWACawNWR FDdVJVz4U3TkumXrbyxOrfw4hXOHFCELNqnOnKf26PweW88M3AvqD4HWOmKkPsxB V24E -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:10 2026 by rpki-client