This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LZKBtRAnkWJksVddtEVaS-2l15k.roa File: LZKBtRAnkWJksVddtEVaS-2l15k.roa (raw, json) Hash identifier: wqturJ0XPUvfiMtjIiO/I1LFYLZ9Dvk52zxM/k9Oh6Y= Subject key identifier: 2D:92:81:B5:10:27:91:62:64:B1:57:5D:B4:45:5A:4B:ED:A5:D7:99 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB7D4314103651312107CE545C1808 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LZKBtRAnkWJksVddtEVaS-2l15k.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205828 IP address blocks: 2a0d:5340::/29 maxlen: 29 2a0d:b2c0::/29 maxlen: 29 2a0f:2200::/29 maxlen: 29 2a0f:cb80::/29 maxlen: 29 2a11:25c0::/29 maxlen: 29 2a12:2f80::/29 maxlen: 29 2a12:ce00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7d:43:14:10:36:51:31:21:07:ce:54:5c:18:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d9281b51027916264b1575db4455a4beda5d799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:5a:0c:4a:b4:e5:c5:e6:a9:31:d3:86:05: 6f:ab:d4:86:08:33:f4:48:d0:ba:b4:f7:e9:6f:14: 32:f1:50:3f:e5:c9:d8:c5:fc:c6:5e:72:c1:91:14: e8:19:53:fc:70:0d:8d:eb:86:65:79:a9:88:0a:eb: e9:7b:b0:aa:c9:dc:b8:c6:33:35:fd:fa:8b:e5:22: 00:98:db:24:6c:a0:d4:9f:9c:ab:b6:ce:9c:19:f1: c7:48:34:f3:7c:f5:13:5b:d1:b6:ff:76:79:0b:a9: f4:f5:7d:e1:d9:b2:ee:11:cb:47:e4:46:bf:33:d5: a2:47:0d:5d:18:3d:43:95:63:0c:ae:a9:20:ab:8f: ff:f5:15:fc:60:bf:7e:d8:3e:be:93:7d:c6:7d:92: 92:1e:63:0c:6a:b6:4b:ac:b7:25:c2:4c:e2:86:78: 12:15:ab:cd:c6:6d:be:46:a4:f9:1c:51:ab:f2:9e: 74:10:17:e2:f1:2d:b0:9e:c3:08:5b:7f:cb:a6:b2: b1:a4:d8:33:3c:52:c2:4c:db:28:99:75:ee:e6:2b: a8:f0:2f:b7:f7:7c:e2:86:85:8e:09:88:28:3e:1a: 02:01:c9:ad:e0:c0:4b:ac:f2:7f:c3:17:5b:75:24: 7b:36:96:0d:4d:90:1d:b8:37:4d:e8:7b:7a:76:80: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:92:81:B5:10:27:91:62:64:B1:57:5D:B4:45:5A:4B:ED:A5:D7:99 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LZKBtRAnkWJksVddtEVaS-2l15k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:5340::/29 2a0d:b2c0::/29 2a0f:2200::/29 2a0f:cb80::/29 2a11:25c0::/29 2a12:2f80::/29 2a12:ce00::/29 Signature Algorithm: sha256WithRSAEncryption 12:ce:37:cf:7d:c1:34:6d:f0:d0:89:03:bd:97:6e:52:49:80: b6:ac:2e:7f:b4:33:54:8a:69:8d:ea:46:8e:aa:4d:d6:ae:a0: 1f:26:a2:38:cc:5c:6c:7b:b4:7f:ac:f4:d6:7c:77:56:47:88: ad:f7:b6:3b:b5:71:57:f6:f5:82:05:4d:22:2a:02:ac:2a:cd: d1:ea:ea:fc:88:68:f8:72:0b:ad:26:f0:74:08:78:6c:01:03: 35:f7:bf:59:0a:6d:66:2d:58:ed:cb:93:37:3e:f2:90:c4:9b: 36:5e:6e:99:14:29:a6:73:dc:ee:b3:e8:a9:79:58:75:b3:ca: 8a:92:34:1b:ee:1c:05:f7:bc:80:93:c9:1d:1b:08:db:d9:e4: fc:a3:b8:84:b8:08:d6:92:bc:d5:a3:0c:65:8d:82:6f:56:b1: 01:2e:1a:55:f9:c7:2f:5e:6f:67:0d:ba:8d:b5:56:fb:c0:e8: d6:95:b9:44:3a:ab:43:54:f0:70:c5:e5:38:72:6f:35:88:e2: ab:31:de:74:55:c0:ef:7f:07:a9:28:9a:51:81:59:29:ad:c5: 4e:9d:14:00:ae:16:4b:b6:d9:ee:63:ed:1e:3d:30:d7:ff:53: 81:23:8b:07:23:45:45:5b:71:39:58:01:2d:a7:43:0a:d1:00: 54:a1:e6:3f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt9y31DFBA2UTEhB85UXBgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkyODFiNTEwMjc5MTYyNjRiMTU3NWRiNDQ1NWE0YmVkYTVkNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vJaDEq05cXmqTHThgVvq9SGCDP0 SNC6tPfpbxQy8VA/5cnYxfzGXnLBkRToGVP8cA2N64ZleamICuvpe7Cqydy4xjM1 /fqL5SIAmNskbKDUn5yrts6cGfHHSDTzfPUTW9G2/3Z5C6n09X3h2bLuEctH5Ea/ M9WiRw1dGD1DlWMMrqkgq4//9RX8YL9+2D6+k33GfZKSHmMMarZLrLclwkzihngS FavNxm2+RqT5HFGr8p50EBfi8S2wnsMIW3/LprKxpNgzPFLCTNsomXXu5iuo8C+3 93zihoWOCYgoPhoCAcmt4MBLrPJ/wxdbdSR7NpYNTZAduDdN6Ht6doB7LQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFC2SgbUQJ5FiZLFXXbRFWkvtpdeZMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTFpLQnRSQW5rV0prc1ZkZHRFVmFTLTJsMTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKg1TQAMF AyoNssADBQMqDyIAAwUDKg/LgAMFAyoRJcADBQMqEi+AAwUDKhLOADANBgkqhkiG 9w0BAQsFAAOCAQEAEs43z33BNG3w0IkDvZduUkmAtqwuf7QzVIppjepGjqpN1q6g HyaiOMxcbHu0f6z01nx3VkeIrfe2O7VxV/b1ggVNIioCrCrN0erq/Iho+HILrSbw dAh4bAEDNfe/WQptZi1Y7cuTNz7ykMSbNl5umRQppnPc7rPoqXlYdbPKipI0G+4c Bfe8gJPJHRsI29nk/KO4hLgI1pK81aMMZY2Cb1axAS4aVfnHL15vZw26jbVW+8Do 1pW5RDqrQ1TwcMXlOHJvNYjiqzHedFXA738HqSiaUYFZKa3FTp0UAK4WS7bZ7mPt Hj0w1/9TgSOLByNFRVtxOVgBLadDCtEAVKHmPw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:50 2026 by rpki-client