This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa File: lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa (raw, json) Hash identifier: lV4Xq524SycxtnX+ET+22iLBNWE46Mr/vlQVFjNh0m0= Subject key identifier: 95:CB:04:20:36:7C:90:24:7D:AE:19:14:94:DF:6E:0B:3A:96:C8:69 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B78A267C0E6C84EA07A45E7AE24B19ECA Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa Signing time: Thu 01 Jan 2026 08:17:47 +0000 ROA not before: Thu 01 Jan 2026 08:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 91.227.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:67:c0:e6:c8:4e:a0:7a:45:e7:ae:24:b1:9e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95cb0420367c90247dae191494df6e0b3a96c869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:95:2a:d5:49:1e:a3:9b:a6:cf:2b:62:e0: 52:85:cc:d4:0c:0d:c6:49:5b:2b:0a:f8:42:86:49: 12:6e:23:a7:4f:12:00:06:78:a6:62:0a:06:a9:be: 38:d0:13:21:d3:8d:e1:42:8e:ee:ed:1d:39:44:3a: 1f:7e:2c:e1:6a:d1:bf:50:d9:59:fc:cb:85:35:6d: 6d:6c:4f:4d:6a:ca:90:05:e9:3e:61:00:e7:97:30: 18:e7:0d:46:60:6e:1e:3b:cc:6c:49:fe:c3:2f:c3: f2:ed:04:e8:9b:d4:ff:bc:ce:01:3f:ff:ef:76:5b: 2d:87:f5:4d:95:4d:25:9c:a0:b6:90:16:88:22:f1: e2:c5:9b:f1:4a:a1:bd:25:1c:29:ba:11:a5:30:d5: 1f:85:a4:cf:7f:78:53:f6:92:9c:b9:89:8c:00:b0: 58:81:87:64:04:74:c1:9d:25:51:a3:28:9a:8d:17: 6b:71:53:93:e0:fc:23:0b:b2:16:39:41:9c:79:d7: 9b:72:0f:1d:11:49:96:2d:a5:59:0c:b4:9e:d4:5a: 4a:f0:a0:ca:eb:d5:f2:67:14:b6:79:b0:40:0b:6c: ed:62:90:72:c2:31:52:50:b6:72:36:49:d3:2f:aa: 3e:25:d0:c7:68:1b:5e:a3:de:33:fb:c9:7c:7b:9d: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CB:04:20:36:7C:90:24:7D:AE:19:14:94:DF:6E:0B:3A:96:C8:69 X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.253.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:84:ed:04:af:84:65:06:c4:82:9a:a0:26:f3:7d:95:b8:95: 6e:53:f1:36:c9:30:5e:0f:ce:44:7c:6e:8f:d3:72:c9:df:64: 67:f5:d8:43:70:da:c0:6a:36:10:91:65:c7:0c:ea:10:2f:48: e0:a0:0c:34:76:1b:73:e8:6a:f2:c1:d3:ad:84:67:04:67:53: c3:ff:a7:c7:bb:b8:ff:f5:ce:11:c4:53:33:69:cd:f7:20:b6: 98:16:4d:fc:3e:c1:de:d6:d5:5a:bc:dd:36:70:4a:f8:21:82: 5d:24:70:d6:e0:83:e9:a9:e4:ff:28:f6:f4:e3:db:9c:2d:95: e0:6b:8a:97:74:95:d9:ba:fe:c3:5a:ff:42:76:68:42:64:a5: e2:06:33:3c:7b:f6:fe:8a:73:d9:a1:01:92:37:cf:a5:24:94: 4d:47:e9:d1:0e:b5:aa:fd:a5:80:30:aa:a7:4f:43:9a:bb:47: d7:4b:4f:a9:8d:2d:e6:4d:97:eb:6e:ec:f9:8a:66:a8:b9:7b: 67:18:67:e3:89:69:d5:bf:01:f2:b6:49:98:6b:4d:3e:f8:bb: db:0d:9f:2f:de:ec:fd:dd:9b:12:cb:a1:92:d7:ae:d6:8e:90: 56:aa:49:54:1e:b2:6e:ed:df:fa:66:e0:c0:b1:c7:ed:be:e1: a6:50:83:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4omfA5shOoHpF564ksZ7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWNiMDQyMDM2N2M5MDI0N2RhZTE5MTQ5NGRmNmUwYjNhOTZjODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67SVKtVJHqObps8rYuBShczUDA3G SVsrCvhChkkSbiOnTxIABnimYgoGqb440BMh043hQo7u7R05RDoffizhatG/UNlZ /MuFNW1tbE9NasqQBek+YQDnlzAY5w1GYG4eO8xsSf7DL8Py7QTom9T/vM4BP//v dlsth/VNlU0lnKC2kBaIIvHixZvxSqG9JRwpuhGlMNUfhaTPf3hT9pKcuYmMALBY gYdkBHTBnSVRoyiajRdrcVOT4PwjC7IWOUGcedebcg8dEUmWLaVZDLSe1FpK8KDK 69XyZxS2ebBAC2ztYpBywjFSULZyNknTL6o+JdDHaBteo94z+8l8e52V6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXLBCA2fJAkfa4ZFJTfbgs6lshpMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvbGNzRUlEWjhrQ1I5cmhrVWxOOXVDenFXeUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+P9MA0G CSqGSIb3DQEBCwUAA4IBAQB7hO0Er4RlBsSCmqAm832VuJVuU/E2yTBeD85EfG6P 03LJ32Rn9dhDcNrAajYQkWXHDOoQL0jgoAw0dhtz6GrywdOthGcEZ1PD/6fHu7j/ 9c4RxFMzac33ILaYFk38PsHe1tVavN02cEr4IYJdJHDW4IPpqeT/KPb049ucLZXg a4qXdJXZuv7DWv9CdmhCZKXiBjM8e/b+inPZoQGSN8+lJJRNR+nRDrWq/aWAMKqn T0Oau0fXS0+pjS3mTZfrbuz5imaouXtnGGfjiWnVvwHytkmYa00++LvbDZ8v3uz9 3ZsSy6GS167WjpBWqklUHrJu7d/6ZuDAscftvuGmUIN+ -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:42 2026 by rpki-client