This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/lsrjMA86eRQxhGEgie-FVkLeiRM.roa File: lsrjMA86eRQxhGEgie-FVkLeiRM.roa (raw, json) Hash identifier: F6hSSs8gy1aleZ2DoCsRSqj6enBfgmEx5l9tec+wl2w= Subject key identifier: 96:CA:E3:30:0F:3A:79:14:31:84:61:20:89:EF:85:56:42:DE:89:13 Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f Certificate serial: 019B7759384B6EDAA7E4B682E7D93CC0B7D8 Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/lsrjMA86eRQxhGEgie-FVkLeiRM.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25297 IP address blocks: 195.234.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:38:4b:6e:da:a7:e4:b6:82:e7:d9:3c:c0:b7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96cae3300f3a79143184612089ef855642de8913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:63:0f:8d:9b:b6:41:de:3a:f5:7c:1e:83: 09:79:d1:5e:e8:20:ff:02:f0:9e:db:30:ce:ca:ea: 0c:f4:f7:9e:e6:f3:15:a2:40:04:f2:3b:65:ae:fa: 9f:1f:2a:81:16:95:f8:ec:d5:97:e2:af:60:dd:10: bd:7e:e0:33:13:b9:fe:19:06:97:c3:1a:e3:ee:a7: b6:d4:2a:86:fd:1a:67:78:58:52:5e:29:c3:4a:b0: de:5e:2e:98:29:1c:c3:7a:6f:8b:cd:2e:fb:82:7c: f3:41:73:17:3c:53:a1:50:82:4f:3f:b0:cb:dd:39: 80:ed:0d:c4:cf:6a:bc:e1:35:c5:bf:0e:b3:68:1e: 34:0d:bf:99:21:fc:e4:e6:30:d7:be:4f:7b:66:02: 75:31:64:45:53:39:1f:9a:f8:01:88:da:c2:0e:f1: fd:38:43:34:27:77:4d:45:db:7c:e8:70:e8:f7:34: a8:8e:0a:e0:4c:b0:b8:24:3f:0b:67:0c:cf:a6:9a: d7:f6:c7:3d:d2:36:79:28:44:e6:6c:4f:59:ec:d4: 76:d4:e3:5f:65:42:fa:27:a2:67:4d:57:43:4c:94: 8b:05:eb:f6:f2:8f:9c:32:22:8d:20:8f:99:95:5d: 3a:56:d4:c2:59:46:d6:49:72:e1:b0:43:ac:0e:ec: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:E3:30:0F:3A:79:14:31:84:61:20:89:EF:85:56:42:DE:89:13 X509v3 Authority Key Identifier: keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/lsrjMA86eRQxhGEgie-FVkLeiRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.167.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e1:e6:4c:01:40:c8:a2:ca:a6:70:67:57:3f:c6:52:b1:3a: e3:76:0d:48:9a:63:4e:d9:24:86:58:9d:4a:92:5e:d7:80:4f: bf:ac:b3:66:ce:97:63:2c:be:4f:d9:18:6f:1a:12:4a:17:52: eb:c5:a4:80:e3:9e:7c:7e:44:68:5d:da:b4:cb:88:63:6a:9b: c5:8d:c0:24:18:b4:9d:4b:e9:50:9e:13:51:11:e2:93:c2:02: 8d:61:f8:67:82:72:48:d9:0a:5a:ea:ca:1c:f8:ae:bd:7f:2a: e1:ee:2c:16:0c:2e:5d:1f:7c:df:dc:51:4d:c2:5f:33:db:8f: b7:18:5e:9e:7d:9d:dd:12:e6:93:68:1e:64:6c:ba:01:8c:c9: e4:ef:98:61:32:0f:4c:ab:88:d6:f0:48:16:4b:30:7d:70:cf: 5e:c0:62:8d:d3:a8:76:cf:d6:31:8c:4e:7b:12:61:25:5c:b9: 56:4c:9a:e5:31:b3:97:e2:fd:d0:3d:18:3e:8e:90:0b:49:c6: 57:75:05:cd:28:ac:d4:58:73:87:34:f0:3f:a3:a9:6d:e1:c0: 82:22:2f:11:1a:a1:b8:d8:b3:a3:1b:6a:e1:94:77:1f:6d:56: f6:f4:44:26:11:a8:57:0b:7f:ff:ae:9d:77:de:b6:b2:fe:13: 2b:50:b0:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WThLbtqn5LaC59k8wLfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl MDAxOWYwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmNhZTMzMDBmM2E3OTE0MzE4NDYxMjA4OWVmODU1NjQyZGU4OTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9jD42btkHeOvV8HoMJedFe6CD/ AvCe2zDOyuoM9Pee5vMVokAE8jtlrvqfHyqBFpX47NWX4q9g3RC9fuAzE7n+GQaX wxrj7qe21CqG/RpneFhSXinDSrDeXi6YKRzDem+LzS77gnzzQXMXPFOhUIJPP7DL 3TmA7Q3Ez2q84TXFvw6zaB40Db+ZIfzk5jDXvk97ZgJ1MWRFUzkfmvgBiNrCDvH9 OEM0J3dNRdt86HDo9zSojgrgTLC4JD8LZwzPpprX9sc90jZ5KETmbE9Z7NR21ONf ZUL6J6JnTVdDTJSLBev28o+cMiKNII+ZlV06VtTCWUbWSXLhsEOsDuxzkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbK4zAPOnkUMYRhIInvhVZC3okTMB8GA1UdIwQY MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt ZmFhYjljYWUxZTgxLzEvbHNyak1BODZlUlF4aEdFZ2llLUZWa0xlaVJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qnMA0G CSqGSIb3DQEBCwUAA4IBAQAm4eZMAUDIosqmcGdXP8ZSsTrjdg1ImmNO2SSGWJ1K kl7XgE+/rLNmzpdjLL5P2RhvGhJKF1LrxaSA4558fkRoXdq0y4hjapvFjcAkGLSd S+lQnhNREeKTwgKNYfhngnJI2Qpa6soc+K69fyrh7iwWDC5dH3zf3FFNwl8z24+3 GF6efZ3dEuaTaB5kbLoBjMnk75hhMg9Mq4jW8EgWSzB9cM9ewGKN06h2z9YxjE57 EmElXLlWTJrlMbOX4v3QPRg+jpALScZXdQXNKKzUWHOHNPA/o6lt4cCCIi8RGqG4 2LOjG2rhlHcfbVb29EQmEahXC3//rp133ray/hMrULAc -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:52 2026 by rpki-client