This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa File: LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa (raw, json) Hash identifier: ok1BqU/j817hL0rg14Y5eXLHkWWn2Jj6wQeonBm4dcs= Subject key identifier: 2C:2C:CE:B4:11:E6:59:91:F7:2C:C7:F5:F5:3B:FA:89:9D:CF:C8:00 Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Certificate serial: 019B7DCB5AF9AE551DAA3D0409C53EC65309 Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20760 IP address blocks: 193.127.0.0/16 maxlen: 24 193.201.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:f9:ae:55:1d:aa:3d:04:09:c5:3e:c6:53:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c2cceb411e65991f72cc7f5f53bfa899dcfc800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:26:a7:69:fd:c9:31:a8:b6:99:5e:ec:47: 18:62:18:15:51:4e:7c:cf:9e:79:fd:98:62:a5:33: a8:c9:3d:b7:e4:3f:5c:cc:8e:c4:ea:aa:06:e2:20: 3d:9b:9e:b1:2f:0b:6f:67:c6:39:ed:f9:0f:bd:f9: 31:3e:52:67:3b:29:e3:25:e9:3e:90:03:09:13:12: fa:e7:af:2d:8d:c4:0c:11:70:dd:c3:b0:f7:c6:bb: dc:e1:c1:96:06:d5:54:d9:c4:c8:dd:35:e7:5e:ba: c3:9a:74:7e:18:5d:cd:6e:6f:f2:c0:5e:47:b5:68: 79:ed:ef:e8:86:f3:1a:3a:55:56:84:fd:45:1c:04: b8:fd:e8:2d:c0:01:75:cf:80:51:eb:f4:64:80:2a: f8:a1:49:07:9d:4e:10:9a:75:6e:29:49:a7:b6:66: fc:8a:e9:c9:c1:50:1d:74:d0:9e:61:78:96:00:e8: f9:f5:96:b7:64:ae:5d:12:b6:01:51:b8:62:a7:eb: 3c:00:bb:f7:ef:10:3f:d5:2b:a1:bb:a2:78:56:14: b5:e6:9c:ad:c7:83:eb:bb:0f:34:e8:b3:ff:5e:ba: 2e:1d:f3:f3:70:16:d4:bb:1a:93:cb:aa:14:08:1a: 49:42:32:b4:a9:e2:97:c7:17:59:92:af:b8:3b:19: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:CE:B4:11:E6:59:91:F7:2C:C7:F5:F5:3B:FA:89:9D:CF:C8:00 X509v3 Authority Key Identifier: keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.127.0.0/16 193.201.108.0/24 Signature Algorithm: sha256WithRSAEncryption b2:70:f1:cf:df:38:9a:7d:75:12:e3:92:32:40:2b:4d:2a:13: 28:3e:65:48:63:e0:d0:cf:60:13:87:ba:a1:29:40:c1:41:40: 9f:66:e1:08:e3:72:b2:30:5a:15:77:41:d9:9a:d6:2d:b7:69: e7:8d:d1:8e:c3:7b:bb:07:4e:7a:53:eb:66:6c:fa:86:fa:d8: c5:15:4b:bb:d3:3f:e3:95:ec:b9:0c:c6:7b:de:78:dd:b0:47: 2d:03:c8:7c:67:de:dc:60:b5:68:42:dc:b8:23:71:9d:99:12: 5c:42:74:aa:c6:d3:91:8b:b2:7d:a1:c0:98:f5:c0:59:e0:86: d1:f4:d3:fe:39:af:d4:63:a9:42:13:14:39:39:fc:61:d7:08: 51:39:ad:05:4b:c2:a4:76:80:af:8c:9b:84:1c:a9:74:4d:ae: 72:9c:04:41:55:e2:9e:2b:a8:ce:9f:eb:47:67:30:50:a0:74: fa:bd:1c:41:20:8a:c1:b3:f9:26:b2:e3:09:b9:8d:22:70:32: af:fc:3f:90:24:06:c4:a7:f0:c5:33:26:d6:fd:d5:49:18:70: b3:bf:2c:ff:40:6e:e7:1f:2b:0c:e4:d4:a4:de:bf:a4:0c:34: 81:dd:1a:02:df:db:7e:0e:02:8b:5b:a5:58:4c:ff:48:9e:4e: 39:1e:74:ff -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt9y1r5rlUdqj0ECcU+xlMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4 N2UxZTEwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzJjY2ViNDExZTY1OTkxZjcyY2M3ZjVmNTNiZmE4OTlkY2ZjODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Ump2n9yTGotple7EcYYhgVUU58 z555/ZhipTOoyT235D9czI7E6qoG4iA9m56xLwtvZ8Y57fkPvfkxPlJnOynjJek+ kAMJExL6568tjcQMEXDdw7D3xrvc4cGWBtVU2cTI3TXnXrrDmnR+GF3Nbm/ywF5H tWh57e/ohvMaOlVWhP1FHAS4/egtwAF1z4BR6/RkgCr4oUkHnU4QmnVuKUmntmb8 iunJwVAddNCeYXiWAOj59Za3ZK5dErYBUbhip+s8ALv37xA/1Suhu6J4VhS15pyt x4Pruw806LP/XrouHfPzcBbUuxqTy6oUCBpJQjK0qeKXxxdZkq+4OxkCdwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFCwszrQR5lmR9yzH9fU7+omdz8gAMB8GA1UdIwQY MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt ZmZjY2EzZTFmMTdmLzEvTEN6T3RCSG1XWkgzTE1mMTlUdjZpWjNQeUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAwX8DBADB yWwwDQYJKoZIhvcNAQELBQADggEBALJw8c/fOJp9dRLjkjJAK00qEyg+ZUhj4NDP YBOHuqEpQMFBQJ9m4QjjcrIwWhV3Qdma1i23aeeN0Y7De7sHTnpT62Zs+ob62MUV S7vTP+OV7LkMxnveeN2wRy0DyHxn3txgtWhC3LgjcZ2ZElxCdKrG05GLsn2hwJj1 wFnghtH00/45r9RjqUITFDk5/GHXCFE5rQVLwqR2gK+Mm4QcqXRNrnKcBEFV4p4r qM6f60dnMFCgdPq9HEEgisGz+Say4wm5jSJwMq/8P5AkBsSn8MUzJtb91UkYcLO/ LP9AbucfKwzk1KTev6QMNIHdGgLf234OAotbpVhM/0ieTjkedP8= -----END CERTIFICATE-----Generated at Tue Jan 27 12:59:53 2026 by rpki-client