This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LZeeC2d9V0ngnsCyiiDAwQaxrYM.roa File: LZeeC2d9V0ngnsCyiiDAwQaxrYM.roa (raw, json) Hash identifier: BRCOX90E+4Vj18uQ6zDFiNTkuxhYy/po9Yzt/fnebd8= Subject key identifier: 2D:97:9E:0B:67:7D:57:49:E0:9E:C0:B2:8A:20:C0:C1:06:B1:AD:83 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB8A30ABF3912FD2CCA6BBDC45BA2F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LZeeC2d9V0ngnsCyiiDAwQaxrYM.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395092 IP address blocks: 213.166.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8a:30:ab:f3:91:2f:d2:cc:a6:bb:dc:45:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d979e0b677d5749e09ec0b28a20c0c106b1ad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:9c:69:70:56:d2:d6:4f:fc:55:98:2c:3a: b3:00:8c:23:74:7e:9c:c1:a7:09:2a:bb:76:98:ab: c0:22:fe:51:3f:a5:43:eb:74:be:0d:40:44:01:ab: d9:64:1e:df:3f:08:2d:b7:96:8f:fb:36:f7:64:3b: 57:0a:67:de:ff:cc:57:8a:cf:d7:9c:0d:99:2f:08: 0f:2c:1b:42:62:d6:67:59:b0:6e:1c:18:09:21:09: 23:a9:c6:af:77:27:34:8d:f0:fd:40:1b:7a:dd:61: e5:a3:33:3c:7d:98:9a:c7:e2:1f:0c:df:33:dc:8c: a9:75:f6:18:af:2a:80:b5:28:e2:9e:ee:be:0f:1c: 84:42:cf:8d:01:8c:dd:a2:89:29:24:3e:a6:e9:53: a2:cc:81:17:29:28:68:c7:e9:f2:c1:1f:bc:92:71: 5c:c8:98:60:3e:58:cd:74:4d:20:02:e0:6b:a8:b4: 29:f0:cf:ae:13:12:1a:a1:23:f8:2e:0a:70:e9:e2: 91:14:51:4f:d8:01:9d:1d:60:cf:b9:db:60:20:ad: f6:a1:9d:03:0c:84:92:93:b6:fe:11:d6:20:2c:59: 04:c5:9b:7e:5e:a9:ac:d8:be:d6:a0:4e:f3:53:43: c6:c2:ba:58:51:2c:11:9a:0a:c7:74:7d:d7:0f:80: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:97:9E:0B:67:7D:57:49:E0:9E:C0:B2:8A:20:C0:C1:06:B1:AD:83 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LZeeC2d9V0ngnsCyiiDAwQaxrYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.166.94.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ab:df:36:85:80:a4:76:62:29:06:09:ef:f6:fa:93:e3:6f: 0f:56:11:4a:dc:a0:27:89:28:14:f4:0a:24:78:13:9f:fd:1a: 1f:61:f9:39:db:8e:34:d0:bb:21:14:77:e7:1b:82:d6:05:5e: e9:c1:88:5d:d5:8e:26:ce:b4:6b:d9:a1:f9:18:e4:a2:aa:53: bd:8c:55:6a:e9:2e:24:fc:d5:02:22:6d:bb:61:fa:1a:8b:60: 25:cf:36:e3:90:1a:b7:f6:06:66:a1:98:d9:a5:c5:60:65:76: 80:d0:38:19:36:22:4f:1e:ae:8e:1d:2d:e6:d7:52:31:e7:ff: 2a:5c:50:a0:71:f0:9a:ee:76:f9:f0:01:5f:83:f1:8f:34:4b: 11:47:64:b2:06:5d:66:81:3a:21:f5:25:a9:4d:c7:df:6b:bf: 62:fd:9a:f9:c4:eb:32:5f:dc:4e:95:83:29:d9:56:84:bc:87: d0:45:0d:76:6c:18:8f:41:21:42:24:e1:ab:1a:65:7c:20:f5: 7e:7b:3f:46:57:56:be:1b:25:b7:07:b4:b1:c2:95:ff:c4:94: 01:2a:f0:6f:97:23:93:cd:ed:c9:c7:8a:b5:20:eb:15:bc:4d: a6:21:6e:e3:0b:15:82:9e:4d:82:98:cc:92:2d:fb:b2:53:6e: b0:59:09:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4owq/ORL9LMprvcRbovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDk3OWUwYjY3N2Q1NzQ5ZTA5ZWMwYjI4YTIwYzBjMTA2YjFhZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpecaXBW0tZP/FWYLDqzAIwjdH6c wacJKrt2mKvAIv5RP6VD63S+DUBEAavZZB7fPwgtt5aP+zb3ZDtXCmfe/8xXis/X nA2ZLwgPLBtCYtZnWbBuHBgJIQkjqcavdyc0jfD9QBt63WHlozM8fZiax+IfDN8z 3IypdfYYryqAtSjinu6+DxyEQs+NAYzdookpJD6m6VOizIEXKShox+nywR+8knFc yJhgPljNdE0gAuBrqLQp8M+uExIaoSP4Lgpw6eKRFFFP2AGdHWDPudtgIK32oZ0D DISSk7b+EdYgLFkExZt+Xqms2L7WoE7zU0PGwrpYUSwRmgrHdH3XD4BTMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2XngtnfVdJ4J7AsoogwMEGsa2DMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTFplZUMyZDlWMG5nbnNDeWlpREF3UWF4cllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aZeMA0G CSqGSIb3DQEBCwUAA4IBAQApq982hYCkdmIpBgnv9vqT428PVhFK3KAniSgU9Aok eBOf/RofYfk524400LshFHfnG4LWBV7pwYhd1Y4mzrRr2aH5GOSiqlO9jFVq6S4k /NUCIm27Yfoai2AlzzbjkBq39gZmoZjZpcVgZXaA0DgZNiJPHq6OHS3m11Ix5/8q XFCgcfCa7nb58AFfg/GPNEsRR2SyBl1mgToh9SWpTcffa79i/Zr5xOsyX9xOlYMp 2VaEvIfQRQ12bBiPQSFCJOGrGmV8IPV+ez9GV1a+GyW3B7SxwpX/xJQBKvBvlyOT ze3Jx4q1IOsVvE2mIW7jCxWCnk2CmMySLfuyU26wWQmr -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:59 2026 by rpki-client