This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Lz5wCJXM7C8kU6jXb0ZYWr6LPX8.roa File: Lz5wCJXM7C8kU6jXb0ZYWr6LPX8.roa (raw, json) Hash identifier: oJMErKQ6IHUrut+90HwB8OFS0TRtq6dDiD0tvuI9pO0= Subject key identifier: 2F:3E:70:08:95:CC:EC:2F:24:53:A8:D7:6F:46:58:5A:BE:8B:3D:7F Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41 Certificate serial: 019B7CED32046DDF7E0B2F92FE6078892204 Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Lz5wCJXM7C8kU6jXb0ZYWr6LPX8.roa Signing time: Fri 02 Jan 2026 04:17:58 +0000 ROA not before: Fri 02 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199819 IP address blocks: 193.8.197.0/24 maxlen: 24 2001:678:75c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:32:04:6d:df:7e:0b:2f:92:fe:60:78:89:22:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f3e700895ccec2f2453a8d76f46585abe8b3d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:89:45:cb:35:e2:cb:01:18:67:96:e7:86: 4d:2a:04:c7:a1:97:91:9d:a3:1f:9c:2b:63:74:f7: d0:09:7f:5e:04:bb:e4:34:da:c9:0b:fc:d0:de:5e: ab:fa:0a:c7:b0:48:98:ad:38:ae:d7:a7:1a:8d:e5: c8:33:2c:6e:f9:63:42:f0:b7:fd:0d:60:92:90:d4: 1f:0a:ff:69:87:90:7f:52:fb:4a:f4:b9:6b:72:17: fa:d7:98:b9:82:d9:c9:37:58:61:79:0f:40:73:03: 25:13:19:e8:af:5a:ce:39:21:97:65:09:75:14:a8: fb:07:2d:79:8c:55:41:03:6e:bf:7e:6e:5b:d3:93: 59:54:74:b3:29:ac:d8:16:34:36:12:f2:60:b7:6e: 49:33:2c:b1:16:b5:dd:99:e6:0f:44:d7:78:60:e1: 45:e3:2f:3a:c8:42:eb:57:1e:39:b2:a3:25:78:55: 1b:ae:2c:ee:e9:45:63:dd:90:6e:f4:54:c4:9a:3a: e0:61:23:5f:96:3b:fa:6d:e0:a4:bd:76:82:d8:1e: b1:5a:7b:91:74:5a:3d:29:7d:3d:9a:a1:94:5c:6b: 12:61:78:5f:88:42:73:a4:0b:da:b3:9a:cf:cf:ee: 56:9c:f3:e5:65:c0:75:3f:7e:62:b2:b3:cc:7d:8d: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:70:08:95:CC:EC:2F:24:53:A8:D7:6F:46:58:5A:BE:8B:3D:7F X509v3 Authority Key Identifier: keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Lz5wCJXM7C8kU6jXb0ZYWr6LPX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.197.0/24 IPv6: 2001:678:75c::/48 Signature Algorithm: sha256WithRSAEncryption 67:dc:f8:42:76:f1:1e:5b:86:8e:92:13:6d:5c:90:6b:fa:b1: 73:72:c2:12:bb:2c:b0:cc:6b:01:f2:e8:6f:7e:b0:de:1b:4a: 46:f2:35:8e:e0:31:67:81:ac:8f:81:5c:c4:15:20:01:a6:00: 59:6f:93:0c:9b:2d:df:9b:f3:f7:22:40:05:e5:41:89:bb:36: 7f:2c:7e:8f:dd:7a:9f:9c:04:6a:c1:fd:6c:6b:70:80:39:e9: f6:dd:0b:7d:f4:6c:26:cc:cc:a5:61:a0:bf:8d:65:28:4c:26: b9:41:e6:56:cc:68:ce:e1:ca:3b:a4:88:b8:4d:f3:54:57:30: 57:bb:51:f3:35:c6:1f:f3:ea:5d:67:15:fd:33:ee:1b:34:f7: a6:48:43:66:c2:68:95:db:5e:8f:68:6b:e1:22:42:69:f5:65: 40:e6:f8:26:4a:c3:7e:16:bf:71:b7:e6:58:ed:52:fd:d4:c8: 52:c4:72:d1:5e:8c:8a:48:1e:c2:87:a1:08:49:75:45:90:1a: 5e:ea:ac:bb:bb:00:21:4a:d7:8b:1d:ed:7d:0e:d9:69:93:12: d2:be:30:5c:8a:e0:ac:b2:4d:88:cd:bc:42:29:54:91:34:a1: 54:27:56:60:55:57:14:61:70:78:d5:7e:00:37:16:ef:35:30: 80:6c:58:5d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87TIEbd9+Cy+S/mB4iSIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTlhYWQ1ZDRiMjJmNDg3M2UwOTQ3YmM3ZjQyZmExZGQ1 YzFmNDEwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjNlNzAwODk1Y2NlYzJmMjQ1M2E4ZDc2ZjQ2NTg1YWJlOGIzZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqduJRcs14ssBGGeW54ZNKgTHoZeR naMfnCtjdPfQCX9eBLvkNNrJC/zQ3l6r+grHsEiYrTiu16cajeXIMyxu+WNC8Lf9 DWCSkNQfCv9ph5B/UvtK9Llrchf615i5gtnJN1hheQ9AcwMlExnor1rOOSGXZQl1 FKj7By15jFVBA26/fm5b05NZVHSzKazYFjQ2EvJgt25JMyyxFrXdmeYPRNd4YOFF 4y86yELrVx45sqMleFUbrizu6UVj3ZBu9FTEmjrgYSNfljv6beCkvXaC2B6xWnuR dFo9KX09mqGUXGsSYXhfiEJzpAvas5rPz+5WnPPlZcB1P35isrPMfY0qRQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC8+cAiVzOwvJFOo129GWFq+iz1/MB8GA1UdIwQY MBaAFBcZqtXUsi9Ic+CUe8f0L6HdXB9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTBmZWMtMjhmMy00NGIwLTljZmYt MzMxZDRhMGQxNDI3LzEvTHo1d0NKWE03QzhrVTZqWGIwWllXcjZMUFg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yOTBmZWMtMjhmMy00NGIwLTljZmYtMzMxZDRhMGQxNDI3 LzEvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQjFMA8E AgACMAkDBwAgAQZ4B1wwDQYJKoZIhvcNAQELBQADggEBAGfc+EJ28R5bho6SE21c kGv6sXNywhK7LLDMawHy6G9+sN4bSkbyNY7gMWeBrI+BXMQVIAGmAFlvkwybLd+b 8/ciQAXlQYm7Nn8sfo/dep+cBGrB/WxrcIA56fbdC330bCbMzKVhoL+NZShMJrlB 5lbMaM7hyjukiLhN81RXMFe7UfM1xh/z6l1nFf0z7hs096ZIQ2bCaJXbXo9oa+Ei Qmn1ZUDm+CZKw34Wv3G35ljtUv3UyFLEctFejIpIHsKHoQhJdUWQGl7qrLu7ACFK 14sd7X0O2WmTEtK+MFyK4KyyTYjNvEIpVJE0oVQnVmBVVxRhcHjVfgA3Fu81MIBs WF0= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:46 2026 by rpki-client