This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/LzrcKdtCnOcxwIXVys_RJ_TInLA.roa File: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (raw, json) Hash identifier: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4= Subject key identifier: 2F:3A:DC:29:DB:42:9C:E7:31:C0:85:D5:CA:CF:D1:27:F4:C8:9C:B0 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F4CD008267F20AFBCDD49D51B139 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/LzrcKdtCnOcxwIXVys_RJ_TInLA.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.220.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f4:cd:00:82:67:f2:0a:fb:cd:d4:9d:51:b1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f3adc29db429ce731c085d5cacfd127f4c89cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:08:10:7c:20:94:de:5b:64:dc:3b:62:30: 82:f5:01:1e:85:fd:7a:1a:e6:36:3c:16:6f:c6:8e: ff:66:18:03:d2:67:55:10:2c:76:00:25:28:29:8f: 7d:7b:26:00:45:18:80:d2:f0:5e:a7:1f:d3:18:ea: 37:4f:e8:07:29:3d:04:c0:bc:24:c0:84:5b:e6:2c: 1d:a9:a0:f1:4d:66:1b:ec:1e:07:d0:84:e2:91:bb: 4b:ca:d3:9a:a5:52:58:61:49:08:d0:e9:6a:59:a4: 43:e8:f3:8f:5a:2c:42:a2:ec:30:de:65:e9:3a:94: 6a:3d:32:4e:fb:6c:61:9f:5e:a0:89:61:48:ea:21: 0a:fb:4c:25:8e:4f:93:15:8b:07:b4:19:b8:d8:f9: 27:25:d2:ef:88:05:61:bd:21:c6:f7:ec:0b:7f:a2: 41:e4:d5:41:0b:b9:0e:ca:0f:71:23:d5:63:ce:35: 14:ed:d4:b1:55:e8:44:e3:cb:86:e1:e4:84:53:12: e0:44:50:f1:e3:45:0e:39:d3:1c:4e:e8:3c:1e:30: 51:04:3f:73:b6:37:bf:d6:46:1b:17:9f:5d:df:b4: 3c:c8:59:14:32:a8:7c:e9:30:02:36:8c:d9:50:41: a0:ea:68:4c:29:53:44:c9:1a:f2:2c:fb:74:d5:73: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3A:DC:29:DB:42:9C:E7:31:C0:85:D5:CA:CF:D1:27:F4:C8:9C:B0 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/LzrcKdtCnOcxwIXVys_RJ_TInLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.25.0/24 Signature Algorithm: sha256WithRSAEncryption 27:60:92:45:93:9b:fc:02:2e:55:b0:d4:fb:79:90:90:22:2d: 9e:d9:79:46:99:d4:45:1b:24:e2:70:a6:11:e4:db:43:53:ae: 9b:7e:bc:1f:e5:3d:68:78:fb:df:1b:6f:cd:98:99:90:30:8b: 31:04:4d:69:1d:4c:d7:d1:e8:a3:26:4c:ef:c9:47:3f:85:db: 10:5b:56:44:e4:c4:c5:cd:22:10:da:1f:d3:7f:a0:c4:41:90: 26:41:e5:ed:40:99:b9:10:b0:c6:24:7b:68:d6:01:6f:6a:87: 22:a5:c0:7b:56:ea:42:4d:6c:2c:58:b5:6a:59:21:a4:01:9e: 8a:e1:90:ba:90:b5:89:14:14:68:96:75:2e:41:54:8b:a8:e0: b3:7e:c2:e6:f7:7f:eb:e8:54:79:a8:ce:cd:4a:db:8b:87:2e: 43:f4:23:e3:7c:d7:3e:af:1f:a5:c6:77:f4:0b:c8:dd:56:a1: f4:dd:44:1d:b3:82:b8:6a:49:7c:00:cf:5d:30:2d:85:35:93: 68:60:23:eb:dc:05:06:4a:36:f1:e5:7a:e9:ba:06:fd:5e:97: e6:67:c7:69:30:a9:04:53:c7:43:aa:89:a2:c8:d0:e2:50:2f: 1d:23:9d:a4:2f:00:7e:d5:77:d7:58:3c:97:75:f1:67:8a:e7: f1:17:32:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvTNAIJn8gr7zdSdUbE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjNhZGMyOWRiNDI5Y2U3MzFjMDg1ZDVjYWNmZDEyN2Y0Yzg5Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywYIEHwglN5bZNw7YjCC9QEehf16 GuY2PBZvxo7/ZhgD0mdVECx2ACUoKY99eyYARRiA0vBepx/TGOo3T+gHKT0EwLwk wIRb5iwdqaDxTWYb7B4H0ITikbtLytOapVJYYUkI0OlqWaRD6POPWixCouww3mXp OpRqPTJO+2xhn16giWFI6iEK+0wljk+TFYsHtBm42PknJdLviAVhvSHG9+wLf6JB 5NVBC7kOyg9xI9VjzjUU7dSxVehE48uG4eSEUxLgRFDx40UOOdMcTug8HjBRBD9z tje/1kYbF59d37Q8yFkUMqh86TACNozZUEGg6mhMKVNEyRryLPt01XPDaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC863CnbQpznMcCF1crP0Sf0yJywMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvTHpyY0tkdENuT2N4d0lYVnlzX1JKX1RJbkxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wZMA0G CSqGSIb3DQEBCwUAA4IBAQAnYJJFk5v8Ai5VsNT7eZCQIi2e2XlGmdRFGyTicKYR 5NtDU66bfrwf5T1oePvfG2/NmJmQMIsxBE1pHUzX0eijJkzvyUc/hdsQW1ZE5MTF zSIQ2h/Tf6DEQZAmQeXtQJm5ELDGJHto1gFvaocipcB7VupCTWwsWLVqWSGkAZ6K 4ZC6kLWJFBRolnUuQVSLqOCzfsLm93/r6FR5qM7NStuLhy5D9CPjfNc+rx+lxnf0 C8jdVqH03UQds4K4akl8AM9dMC2FNZNoYCPr3AUGSjbx5Xrpugb9XpfmZ8dpMKkE U8dDqomiyNDiUC8dI52kLwB+1XfXWDyXdfFniufxFzLK -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:58 2026 by rpki-client