This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LGkE0kzlEV73pMOJ8dgEbBExDGM.roa File: LGkE0kzlEV73pMOJ8dgEbBExDGM.roa (raw, json) Hash identifier: jWmREf0qRV2Xk8RfuxuWwEl0GCk7YVgHQ1F1qZDi5+k= Subject key identifier: 2C:69:04:D2:4C:E5:11:5E:F7:A4:C3:89:F1:D8:04:6C:11:31:0C:63 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB6416363A5F9C6A4AEDA6B47C31C6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LGkE0kzlEV73pMOJ8dgEbBExDGM.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200950 IP address blocks: 151.244.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:64:16:36:3a:5f:9c:6a:4a:ed:a6:b4:7c:31:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c6904d24ce5115ef7a4c389f1d8046c11310c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:a6:86:f5:dd:8e:b5:d2:5e:0a:92:54:c1: 61:79:c0:95:e4:1d:c5:f2:c6:e3:7a:ec:ff:fb:46: ef:f1:31:28:41:53:d3:68:79:56:a0:3d:db:90:79: 22:94:c6:7a:dc:44:e8:6c:88:c4:f2:dc:de:69:ec: e3:f0:d3:93:ed:af:6d:aa:94:6e:77:28:d6:bb:79: ea:0d:5e:7d:3a:db:f3:37:bc:6a:89:30:ab:f2:62: ee:9f:1d:34:58:39:5d:08:3f:c1:dc:a4:16:fe:74: a4:8e:44:b0:0d:07:ab:34:f3:fc:63:97:9c:cb:96: c6:cb:ec:19:53:81:5a:76:9f:a0:56:09:bf:87:cb: 82:18:39:51:fd:d3:d9:ac:ae:bf:fd:ec:c0:af:a9: 9c:8e:b9:6b:d6:c0:6f:14:57:d6:b3:98:35:7b:4e: c9:e0:63:42:13:90:2a:33:38:7f:24:91:ee:bb:8d: 2d:02:a2:61:6d:7b:fb:28:93:06:1f:53:a6:ca:1b: 3b:48:e3:e5:69:0b:40:be:9a:f8:f4:a8:52:f8:b3: 99:24:54:e7:59:ef:85:88:6d:fd:1b:07:4e:6c:39: dc:bf:c9:98:76:26:c4:78:cd:2f:b5:a6:79:c2:dd: 0c:3a:be:61:a0:68:58:56:db:f2:93:5d:c1:00:77: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:69:04:D2:4C:E5:11:5E:F7:A4:C3:89:F1:D8:04:6C:11:31:0C:63 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LGkE0kzlEV73pMOJ8dgEbBExDGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.142.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:f1:4b:de:47:99:cd:d7:76:ce:9f:06:b7:87:a9:e6:7f:bd: 1c:5a:7e:c0:89:f5:7b:2b:7b:29:81:d1:e8:d8:90:9b:39:db: 20:55:6a:dd:db:e4:e5:c2:0b:7c:b9:8a:49:3c:53:ce:01:f8: 44:25:78:74:de:a7:c8:7e:e2:ac:06:7e:b4:24:e4:69:86:91: e8:13:37:ae:2a:68:e3:2f:69:13:d3:6f:fc:7c:b7:f7:7d:72: e1:0c:bc:8d:6f:a2:6e:94:ca:c5:4d:f4:46:f2:b2:d8:0d:29: ea:29:58:0a:66:03:1f:8d:9a:f7:6f:d9:84:1f:91:70:36:b3: d6:6c:fc:9f:38:47:ff:7f:2f:7a:71:f2:2d:21:9f:55:67:d6: 47:59:91:18:e2:0b:65:d6:eb:f2:11:e0:04:56:56:ae:b0:49: 2c:66:b0:32:ba:2f:10:fe:34:97:87:0e:cb:81:a6:83:f8:60: b1:57:59:49:62:06:1d:37:7e:fc:9e:a5:a1:58:e3:d3:8b:29: 74:0c:4d:25:d4:4e:8f:9f:39:8a:da:7e:a8:56:1a:86:67:10: 3e:2d:d8:94:4b:22:14:ef:f5:7b:81:1a:6c:73:62:59:f8:51: 0e:e4:61:cd:c6:30:d7:f3:9d:3a:9c:34:8d:19:2e:89:eb:84: d8:bc:da:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2QWNjpfnGpK7aa0fDHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzY5MDRkMjRjZTUxMTVlZjdhNGMzODlmMWQ4MDQ2YzExMzEwYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD+mhvXdjrXSXgqSVMFhecCV5B3F 8sbjeuz/+0bv8TEoQVPTaHlWoD3bkHkilMZ63ETobIjE8tzeaezj8NOT7a9tqpRu dyjWu3nqDV59OtvzN7xqiTCr8mLunx00WDldCD/B3KQW/nSkjkSwDQerNPP8Y5ec y5bGy+wZU4Fadp+gVgm/h8uCGDlR/dPZrK6//ezAr6mcjrlr1sBvFFfWs5g1e07J 4GNCE5AqMzh/JJHuu40tAqJhbXv7KJMGH1Omyhs7SOPlaQtAvpr49KhS+LOZJFTn We+FiG39GwdObDncv8mYdibEeM0vtaZ5wt0MOr5hoGhYVtvyk13BAHdRnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCxpBNJM5RFe96TDifHYBGwRMQxjMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTEdrRTBremxFVjczcE1PSjhkZ0ViQkV4REdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/SOMA0G CSqGSIb3DQEBCwUAA4IBAQAs8UveR5nN13bOnwa3h6nmf70cWn7AifV7K3spgdHo 2JCbOdsgVWrd2+Tlwgt8uYpJPFPOAfhEJXh03qfIfuKsBn60JORphpHoEzeuKmjj L2kT02/8fLf3fXLhDLyNb6JulMrFTfRG8rLYDSnqKVgKZgMfjZr3b9mEH5FwNrPW bPyfOEf/fy96cfItIZ9VZ9ZHWZEY4gtl1uvyEeAEVlausEksZrAyui8Q/jSXhw7L gaaD+GCxV1lJYgYdN378nqWhWOPTiyl0DE0l1E6PnzmK2n6oVhqGZxA+LdiUSyIU 7/V7gRpsc2JZ+FEO5GHNxjDX8506nDSNGS6J64TYvNoJ -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:28 2026 by rpki-client