This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LXUS_h6rzDhQbkmJBFLDmuzTF1o.roa File: LXUS_h6rzDhQbkmJBFLDmuzTF1o.roa (raw, json) Hash identifier: K9CJkXLgwIkcBvymukJ2u/Lf7iEBrbmKZbLcDFN+NK4= Subject key identifier: 2D:75:12:FE:1E:AB:CC:38:50:6E:49:89:04:52:C3:9A:EC:D3:17:5A Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019ACBC492AF740D2B9BEFA380E918E188AA Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LXUS_h6rzDhQbkmJBFLDmuzTF1o.roa Signing time: Fri 28 Nov 2025 18:40:48 +0000 ROA not before: Fri 28 Nov 2025 18:40:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206174 IP address blocks: 2a0d:d3c0::/29 maxlen: 29 2a0d:f5c0::/29 maxlen: 29 2a0e:8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:c4:92:af:74:0d:2b:9b:ef:a3:80:e9:18:e1:88:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 28 18:40:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d7512fe1eabcc38506e49890452c39aecd3175a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:36:ba:f2:df:41:a0:9a:67:02:b5:b3:6d: 02:9a:d8:64:0b:f1:85:3f:59:bd:1c:dd:e4:e1:8a: 93:3d:b9:b6:66:16:4c:8b:4b:83:f9:45:7b:41:90: b2:88:a5:ea:b5:30:c5:03:74:11:8f:e7:46:8a:85: 0b:da:29:01:fa:84:5a:9a:44:48:16:2a:bf:6e:82: 89:a8:8e:6e:80:e2:75:81:df:e0:e5:41:59:cd:b3: 89:d5:61:40:84:c7:31:d6:bf:bc:ad:df:7f:e6:6a: fa:e1:ea:7b:02:22:75:70:56:63:3e:44:31:c3:53: 5d:4b:28:44:36:2b:69:97:6d:14:03:d8:4e:fd:09: d5:62:79:34:48:ee:5a:89:32:fd:73:6b:0c:e4:a6: 90:0d:cc:c7:94:28:b9:bf:2c:3e:dc:13:06:70:09: 88:43:ec:7d:24:00:a6:52:56:a3:60:15:96:0b:51: 64:cc:66:00:28:95:1f:13:56:a7:07:80:a8:f0:25: eb:8e:65:3d:27:b4:cc:cf:20:81:9f:b9:3e:5a:68: 63:6b:e9:3b:bc:c6:76:6b:72:4f:8f:4e:12:b1:12: ac:bf:1f:42:67:22:37:80:65:e7:71:80:55:ec:93: 26:9d:83:36:5d:4d:ec:d7:ae:4b:39:13:ca:c1:04: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:12:FE:1E:AB:CC:38:50:6E:49:89:04:52:C3:9A:EC:D3:17:5A X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LXUS_h6rzDhQbkmJBFLDmuzTF1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d3c0::/29 2a0d:f5c0::/29 2a0e:8c0::/29 Signature Algorithm: sha256WithRSAEncryption 84:fa:cd:61:35:e0:5c:c9:46:55:04:18:8a:63:34:4c:f8:e8: 59:db:20:5d:82:c7:85:97:ad:df:41:f6:79:15:f8:85:2f:ce: d8:07:5b:04:3c:cf:ed:40:30:1d:01:8a:c8:06:11:dd:22:92: 7f:6b:f1:c8:d1:44:3c:11:be:73:32:4b:59:ab:7f:6f:3a:07: 18:79:24:97:b6:aa:39:93:93:72:4a:b6:d2:16:21:61:58:bb: cf:8d:c7:11:62:6d:77:3e:0e:49:83:61:af:ca:bc:05:c9:c6: 05:12:3d:c7:59:51:7b:af:13:fb:38:d4:d9:2f:96:6e:db:a8: 47:a7:39:92:09:d8:e4:a4:a8:25:e5:78:19:ef:ae:a4:a1:7d: a7:ea:8f:f4:bb:db:71:e6:c5:af:50:90:ae:a2:9b:18:0c:3b: d9:c7:1f:66:b3:ad:06:19:00:da:e4:fd:31:75:82:08:cc:39: cd:85:e5:92:53:2c:19:46:7e:4d:57:f5:cb:6a:c6:39:88:cd: cf:fd:99:93:7a:d4:46:af:17:8f:ba:86:72:3b:f8:1c:6b:54: 38:6e:f3:4d:0e:7f:bb:f3:2c:99:a8:0a:a5:77:80:32:76:cc: 7d:27:7a:82:23:db:85:63:2c:10:c5:47:c4:8f:28:a7:de:0c: c7:73:d4:24 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrLxJKvdA0rm++jgOkY4YiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTI4MTg0MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc1MTJmZTFlYWJjYzM4NTA2ZTQ5ODkwNDUyYzM5YWVjZDMxNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDU2uvLfQaCaZwK1s20CmthkC/GF P1m9HN3k4YqTPbm2ZhZMi0uD+UV7QZCyiKXqtTDFA3QRj+dGioUL2ikB+oRamkRI Fiq/boKJqI5ugOJ1gd/g5UFZzbOJ1WFAhMcx1r+8rd9/5mr64ep7AiJ1cFZjPkQx w1NdSyhENitpl20UA9hO/QnVYnk0SO5aiTL9c2sM5KaQDczHlCi5vyw+3BMGcAmI Q+x9JACmUlajYBWWC1FkzGYAKJUfE1anB4Co8CXrjmU9J7TMzyCBn7k+Wmhja+k7 vMZ2a3JPj04SsRKsvx9CZyI3gGXncYBV7JMmnYM2XU3s165LORPKwQT+7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC11Ev4eq8w4UG5JiQRSw5rs0xdaMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTFhVU19oNnJ6RGhRYmttSkJGTERtdXpURjFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg3TwAMF AyoN9cADBQMqDgjAMA0GCSqGSIb3DQEBCwUAA4IBAQCE+s1hNeBcyUZVBBiKYzRM +OhZ2yBdgseFl63fQfZ5FfiFL87YB1sEPM/tQDAdAYrIBhHdIpJ/a/HI0UQ8Eb5z MktZq39vOgcYeSSXtqo5k5NySrbSFiFhWLvPjccRYm13Pg5Jg2GvyrwFycYFEj3H WVF7rxP7ONTZL5Zu26hHpzmSCdjkpKgl5XgZ766koX2n6o/0u9tx5sWvUJCuopsY DDvZxx9ms60GGQDa5P0xdYIIzDnNheWSUywZRn5NV/XLasY5iM3P/ZmTetRGrxeP uoZyO/gca1Q4bvNNDn+78yyZqAqld4Aydsx9J3qCI9uFYywQxUfEjyin3gzHc9Qk -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:15 2025 by rpki-client