This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/LKNQgP5_Nz1DtpvyFtaUdIzEHSg.roa File: LKNQgP5_Nz1DtpvyFtaUdIzEHSg.roa (raw, json) Hash identifier: cWgBIwSO4fLo+zH/tK/lyRfB4/Jh6B8LZfkT2nzd7ts= Subject key identifier: 2C:A3:50:80:FE:7F:37:3D:43:B6:9B:F2:16:D6:94:74:8C:C4:1D:28 Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 019B7EA6F36F60FEB8237B61F0A1FE0C3E47 Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/LKNQgP5_Nz1DtpvyFtaUdIzEHSg.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215380 IP address blocks: 93.159.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f3:6f:60:fe:b8:23:7b:61:f0:a1:fe:0c:3e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca35080fe7f373d43b69bf216d694748cc41d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:4d:72:14:18:02:d5:88:e2:73:cd:76:de: aa:91:54:3c:b6:4e:55:74:5d:23:a1:03:bd:c0:06: 67:dc:f5:ba:64:5b:e3:5a:1c:fe:5b:c2:48:76:41: e5:21:07:e5:48:ab:a8:75:6b:4f:71:d9:dc:e5:c9: 12:b3:53:49:ac:a9:5a:23:0f:ae:45:5e:10:28:82: 38:af:7f:a2:29:98:bc:4d:8f:ac:be:7f:9c:f5:ef: d1:8c:a3:a1:9a:ff:5d:cb:f1:26:31:f7:83:7c:da: ba:9d:10:bc:11:32:f3:82:4d:c4:c5:b9:6a:d0:01: 62:8e:f1:97:67:0b:d4:5e:21:2b:02:b5:88:8e:a2: 43:82:20:eb:1a:23:d8:a4:82:be:10:e0:96:30:f7: c9:67:58:bc:1c:c5:f6:b1:59:63:af:92:9d:c8:12: 7e:5b:62:c0:4e:b3:97:e2:f2:e4:89:2c:52:4c:6c: 54:79:80:71:4e:5b:32:53:d4:1c:5f:73:8e:ed:0c: e1:ba:15:00:81:e3:fd:35:fa:3e:dd:66:9e:4a:29: 11:ed:b4:86:9f:76:9c:32:de:e7:4b:7d:ee:99:4a: a5:e6:d1:b0:c4:2d:6b:b1:8b:db:b5:54:30:50:c5: 94:c1:64:2a:f3:f7:2b:84:bb:a7:f7:45:18:e0:bb: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:50:80:FE:7F:37:3D:43:B6:9B:F2:16:D6:94:74:8C:C4:1D:28 X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/LKNQgP5_Nz1DtpvyFtaUdIzEHSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.178.0/24 Signature Algorithm: sha256WithRSAEncryption 43:c8:a5:19:d5:9d:8d:6e:26:1f:82:37:53:c2:82:fb:66:34: bf:34:e5:f7:9c:39:4b:56:76:2f:95:ee:ee:96:4e:15:56:4f: 51:67:4e:32:22:63:a8:8f:06:25:a0:d8:b1:14:7d:c0:50:4c: b1:c5:54:76:9e:df:9e:1e:a0:c0:fd:2c:31:7d:76:f1:1d:6a: 3d:e2:2c:2c:c9:93:42:e0:bb:72:1e:7f:66:d4:ab:9f:2f:25: 29:47:d6:a5:72:67:17:a8:72:b1:63:5c:70:2c:3c:6a:00:2d: 00:e6:28:75:cb:95:c0:50:4f:c7:95:89:9f:a0:5d:93:a5:c7: 02:4b:0b:f5:ef:33:71:92:f9:00:02:9b:f2:72:65:d0:9d:f9: 3a:88:cd:0e:ea:c4:ec:24:48:41:8e:05:13:01:10:84:b3:1c: 6f:71:a2:d2:94:7b:99:17:a4:b5:dd:7c:a8:ed:b2:00:df:31: 52:d4:a5:80:f6:6e:ab:91:31:d0:03:af:73:42:cf:83:02:99: 31:02:39:bf:8d:f2:8b:ea:c2:76:f8:c3:c7:b6:df:b9:38:28: 87:4d:52:9c:c0:79:db:7e:0b:08:ed:b7:ae:22:56:b5:8e:5e: 09:f2:1f:c4:e9:ab:f4:9c:3e:43:14:5b:b8:87:b6:18:d6:4e: 00:74:ce:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvNvYP64I3th8KH+DD5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2EzNTA4MGZlN2YzNzNkNDNiNjliZjIxNmQ2OTQ3NDhjYzQxZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf9NchQYAtWI4nPNdt6qkVQ8tk5V dF0joQO9wAZn3PW6ZFvjWhz+W8JIdkHlIQflSKuodWtPcdnc5ckSs1NJrKlaIw+u RV4QKII4r3+iKZi8TY+svn+c9e/RjKOhmv9dy/EmMfeDfNq6nRC8ETLzgk3Exblq 0AFijvGXZwvUXiErArWIjqJDgiDrGiPYpIK+EOCWMPfJZ1i8HMX2sVljr5KdyBJ+ W2LATrOX4vLkiSxSTGxUeYBxTlsyU9QcX3OO7QzhuhUAgeP9Nfo+3WaeSikR7bSG n3acMt7nS33umUql5tGwxC1rsYvbtVQwUMWUwWQq8/crhLun90UY4LtS/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyjUID+fzc9Q7ab8hbWlHSMxB0oMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvTEtOUWdQNV9OejFEdHB2eUZ0YVVkSXpFSFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ+yMA0G CSqGSIb3DQEBCwUAA4IBAQBDyKUZ1Z2NbiYfgjdTwoL7ZjS/NOX3nDlLVnYvle7u lk4VVk9RZ04yImOojwYloNixFH3AUEyxxVR2nt+eHqDA/SwxfXbxHWo94iwsyZNC 4LtyHn9m1KufLyUpR9alcmcXqHKxY1xwLDxqAC0A5ih1y5XAUE/HlYmfoF2TpccC Swv17zNxkvkAApvycmXQnfk6iM0O6sTsJEhBjgUTARCEsxxvcaLSlHuZF6S13Xyo 7bIA3zFS1KWA9m6rkTHQA69zQs+DApkxAjm/jfKL6sJ2+MPHtt+5OCiHTVKcwHnb fgsI7beuIla1jl4J8h/E6av0nD5DFFu4h7YY1k4AdM6E -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:13 2026 by rpki-client