This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/lskIdwRbHzMZEWLGTNl2U0zpcVc.roa File: lskIdwRbHzMZEWLGTNl2U0zpcVc.roa (raw, json) Hash identifier: KELAneudQMw0Lv1CUTTdAguNyi2AXca3YtUqnwbLd4U= Subject key identifier: 96:C9:08:77:04:5B:1F:33:19:11:62:C6:4C:D9:76:53:4C:E9:71:57 Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Certificate serial: 019B7BA51E2EC3DC393A1AA590F28C70AB7D Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/lskIdwRbHzMZEWLGTNl2U0zpcVc.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59590 IP address blocks: 89.44.204.0/24 maxlen: 24 188.241.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:2e:c3:dc:39:3a:1a:a5:90:f2:8c:70:ab:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96c90877045b1f33191162c64cd976534ce97157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:6a:b8:8e:ac:89:87:e6:bd:1f:34:39:11: b3:42:8d:e3:7c:4e:a1:62:c0:e8:9b:00:a3:d7:78: 2b:d7:68:b4:c9:8f:90:7c:c3:e7:2f:e4:fd:16:8d: 68:c6:db:b2:c2:bf:e4:48:e9:9d:9f:87:0a:a4:6e: 29:62:83:5d:e3:8f:51:3c:57:d6:eb:26:ff:0d:64: ec:bb:e9:cd:18:f5:56:64:55:db:34:86:6f:14:bc: 46:1f:99:56:5c:25:9f:82:17:dd:de:55:04:cc:d1: e3:21:0a:30:6e:68:cd:21:ac:67:44:a8:f1:74:ed: 6d:36:60:14:b6:43:b7:75:2e:b7:ad:69:4a:27:de: 21:29:09:db:b6:8d:7f:34:8d:93:f5:d0:77:d8:67: 64:57:8b:24:41:7c:92:b1:d3:87:cb:2c:1a:24:51: 8a:17:15:ff:4c:82:76:2c:86:52:b1:1c:ed:5c:25: f5:2f:a7:76:c4:8c:b8:a2:53:ec:b4:c7:da:b5:80: 6e:25:7b:8d:34:02:60:da:40:f9:cf:18:56:6f:ef: 22:db:10:8a:df:a0:c8:6c:30:ef:c3:38:b6:1c:75: 08:41:7b:d5:45:ff:9a:de:73:07:4f:f9:9c:ba:99: bd:09:99:bc:6d:4b:43:79:98:ec:05:50:0c:cb:39: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C9:08:77:04:5B:1F:33:19:11:62:C6:4C:D9:76:53:4C:E9:71:57 X509v3 Authority Key Identifier: keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/lskIdwRbHzMZEWLGTNl2U0zpcVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.204.0/24 188.241.208.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ff:2e:79:b0:49:da:b2:05:dd:39:6a:90:a2:7e:6c:16:49: b1:da:c6:33:cf:24:46:04:e5:f0:e4:58:f4:93:72:16:0f:b9: 9f:82:d9:78:4d:6c:3a:0e:be:b1:3f:79:1e:8c:f2:3d:63:b7: 12:dd:2f:0f:fb:7e:73:48:a9:36:50:ec:53:9e:d4:4d:45:92: d6:32:e5:bd:d9:1f:4b:9b:0f:e9:24:35:6f:d4:e7:e4:ed:54: 34:4a:c2:dd:c1:ab:1b:8d:97:2c:b9:7d:e9:69:df:05:b4:e8: 9a:14:ec:54:fc:18:8f:58:58:0e:92:5e:4c:81:99:83:44:1b: 7e:e6:fd:1f:b5:b0:e2:aa:51:75:21:66:45:e3:c1:75:b2:30: 5a:38:08:4a:88:cd:25:d2:7b:b2:c4:19:27:39:8b:ad:ec:d1: 6e:20:95:a1:50:71:f5:e4:72:31:86:eb:cc:3b:78:51:01:86: 5b:52:f0:5f:22:41:3a:6a:08:f7:ca:5d:11:2a:87:07:09:4d: 0b:dd:e9:61:5f:4d:cc:61:e8:05:fc:bb:1a:f5:3f:a5:75:b4: 9c:3d:85:1f:63:22:5f:ed:1d:7f:93:7e:f7:27:a2:38:51:57: 7a:e6:7f:50:7e:f5:c2:d5:c4:4f:b7:9b:75:64:0c:5a:24:d0: bf:5e:e2:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pR4uw9w5OhqlkPKMcKt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjkwZmQ2MmJjYzBmZTkyOWRhZTUzMDM2ZmM1NWU1MTFj NTRiNDUwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmM5MDg3NzA0NWIxZjMzMTkxMTYyYzY0Y2Q5NzY1MzRjZTk3MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyNquI6siYfmvR80ORGzQo3jfE6h YsDomwCj13gr12i0yY+QfMPnL+T9Fo1oxtuywr/kSOmdn4cKpG4pYoNd449RPFfW 6yb/DWTsu+nNGPVWZFXbNIZvFLxGH5lWXCWfghfd3lUEzNHjIQowbmjNIaxnRKjx dO1tNmAUtkO3dS63rWlKJ94hKQnbto1/NI2T9dB32GdkV4skQXySsdOHyywaJFGK FxX/TIJ2LIZSsRztXCX1L6d2xIy4olPstMfatYBuJXuNNAJg2kD5zxhWb+8i2xCK 36DIbDDvwzi2HHUIQXvVRf+a3nMHT/mcupm9CZm8bUtDeZjsBVAMyzk9FwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJbJCHcEWx8zGRFixkzZdlNM6XFXMB8GA1UdIwQY MBaAFFy5D9YrzA/pKdrlMDb8VeURxUtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUt OTUxMzVkYWY1MTQ3LzEvbHNrSWR3UmJIek1aRVdMR1RObDJVMHpwY1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUtOTUxMzVkYWY1MTQ3 LzEvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSzMAwQA vPHQMA0GCSqGSIb3DQEBCwUAA4IBAQCq/y55sEnasgXdOWqQon5sFkmx2sYzzyRG BOXw5Fj0k3IWD7mfgtl4TWw6Dr6xP3kejPI9Y7cS3S8P+35zSKk2UOxTntRNRZLW MuW92R9Lmw/pJDVv1Ofk7VQ0SsLdwasbjZcsuX3pad8FtOiaFOxU/BiPWFgOkl5M gZmDRBt+5v0ftbDiqlF1IWZF48F1sjBaOAhKiM0l0nuyxBknOYut7NFuIJWhUHH1 5HIxhuvMO3hRAYZbUvBfIkE6agj3yl0RKocHCU0L3elhX03MYegF/Lsa9T+ldbSc PYUfYyJf7R1/k373J6I4UVd65n9QfvXC1cRPt5t1ZAxaJNC/XuJj -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:36 2026 by rpki-client