This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LkWNwlGYzLNCuwwVB4R7dnbEDvY.roa File: LkWNwlGYzLNCuwwVB4R7dnbEDvY.roa (raw, json) Hash identifier: tAJkr5ey1/KV29zvFZYHgVDQfdibzMs8GwDdIYDD/G0= Subject key identifier: 2E:45:8D:C2:51:98:CC:B3:42:BB:0C:15:07:84:7B:76:76:C4:0E:F6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9845311CFA3EFDF73FFE1B0BD1E8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LkWNwlGYzLNCuwwVB4R7dnbEDvY.roa Signing time: Fri 02 Jan 2026 08:20:53 +0000 ROA not before: Fri 02 Jan 2026 08:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214668 IP address blocks: 151.241.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:98:45:31:1c:fa:3e:fd:f7:3f:fe:1b:0b:d1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e458dc25198ccb342bb0c1507847b7676c40ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:cf:88:ab:72:55:a9:de:6b:e9:f8:20:c9: e7:ea:3a:8d:a4:31:25:4c:fa:70:f5:51:be:c9:b3: 36:ca:ee:e4:a9:9a:7d:c1:ef:79:69:b4:07:b7:c6: 94:14:a3:b3:e4:81:cd:ad:89:0f:3b:5a:2e:b9:df: 82:f8:a5:c1:0d:6f:3c:10:1b:a4:1d:62:6b:df:73: f3:d3:a7:11:a4:15:c0:f8:f2:db:1c:cf:05:b1:f0: 50:b5:72:9b:09:88:2f:c7:4e:68:56:58:ac:45:70: aa:c6:b7:cf:f3:f2:4e:b3:28:da:df:30:02:5f:20: 37:7d:cd:f6:69:dd:7a:fd:f1:bc:6f:19:fa:ed:43: 70:7c:ed:7c:3c:1f:47:53:36:a7:d3:e1:0f:4a:a2: b4:95:0f:eb:06:08:dc:28:06:eb:39:46:bc:fc:1d: 7f:98:cb:36:bc:15:cc:47:a5:08:e7:dc:af:80:b3: b9:30:fe:ee:80:be:8d:10:2f:ea:97:66:4a:11:ae: d9:04:b9:97:67:42:88:0a:c7:ab:28:7c:6f:b7:a3: 56:27:ef:f7:6d:0c:ee:d3:89:a0:a7:cd:59:ca:d0: 66:14:d2:0b:8e:a0:03:ba:19:0a:32:e1:0c:67:58: a1:c2:98:ea:fb:32:05:d8:07:0b:18:81:7c:ad:d2: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:8D:C2:51:98:CC:B3:42:BB:0C:15:07:84:7B:76:76:C4:0E:F6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LkWNwlGYzLNCuwwVB4R7dnbEDvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.16.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:77:95:aa:d3:e0:f5:ce:bb:8d:4a:28:30:7e:db:c8:dd:16: 5c:5a:a5:32:f4:f9:89:f6:76:69:27:62:d7:89:2e:a3:85:04: 92:bc:74:1a:31:00:74:e0:bf:8b:b1:70:94:9b:30:a1:50:28: 47:ce:2b:cb:ca:b0:c6:67:17:03:74:b3:b0:dd:fd:5e:83:ed: 95:2c:b4:53:8f:01:2c:a9:94:59:83:bd:db:92:78:66:da:de: 7e:8d:02:72:7f:99:de:66:f1:0b:b9:dd:fa:44:f5:06:07:e2: b7:bf:a9:c8:e2:72:e9:b2:63:cf:9f:e5:a2:03:a3:f2:0a:32: 48:15:18:5c:07:0b:e3:9d:45:cd:71:e1:96:73:6a:40:aa:35: 33:a7:7e:fd:47:43:2d:85:4a:f5:46:fd:ec:c2:53:8d:40:2e: f7:9d:2e:ce:05:78:df:06:36:0c:6c:6a:6e:c2:ed:9a:73:92: ae:0e:d1:61:47:84:11:29:f6:6c:46:c8:6f:85:4b:35:a2:7f: 83:3e:ea:53:11:c1:22:0d:3a:f1:4a:e2:49:34:39:4a:a0:94: 30:97:95:a8:20:dd:f2:5a:df:bb:2c:6a:77:1e:a7:da:e4:3f: 85:26:c7:20:75:07:c0:9c:b8:53:b8:69:97:45:dd:16:f2:04: 02:ff:b5:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5hFMRz6Pv33P/4bC9HoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQ1OGRjMjUxOThjY2IzNDJiYjBjMTUwNzg0N2I3Njc2YzQwZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwubPiKtyVanea+n4IMnn6jqNpDEl TPpw9VG+ybM2yu7kqZp9we95abQHt8aUFKOz5IHNrYkPO1ouud+C+KXBDW88EBuk HWJr33Pz06cRpBXA+PLbHM8FsfBQtXKbCYgvx05oVlisRXCqxrfP8/JOsyja3zAC XyA3fc32ad16/fG8bxn67UNwfO18PB9HUzan0+EPSqK0lQ/rBgjcKAbrOUa8/B1/ mMs2vBXMR6UI59yvgLO5MP7ugL6NEC/ql2ZKEa7ZBLmXZ0KICserKHxvt6NWJ+/3 bQzu04mgp81ZytBmFNILjqADuhkKMuEMZ1ihwpjq+zIF2AcLGIF8rdLVjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5FjcJRmMyzQrsMFQeEe3Z2xA72MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTGtXTndsR1l6TE5DdXd3VkI0UjdkbmJFRHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/EQMA0G CSqGSIb3DQEBCwUAA4IBAQAPd5Wq0+D1zruNSigwftvI3RZcWqUy9PmJ9nZpJ2LX iS6jhQSSvHQaMQB04L+LsXCUmzChUChHzivLyrDGZxcDdLOw3f1eg+2VLLRTjwEs qZRZg73bknhm2t5+jQJyf5neZvELud36RPUGB+K3v6nI4nLpsmPPn+WiA6PyCjJI FRhcBwvjnUXNceGWc2pAqjUzp379R0MthUr1Rv3swlONQC73nS7OBXjfBjYMbGpu wu2ac5KuDtFhR4QRKfZsRshvhUs1on+DPupTEcEiDTrxSuJJNDlKoJQwl5WoIN3y Wt+7LGp3Hqfa5D+FJscgdQfAnLhTuGmXRd0W8gQC/7VM -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:28 2026 by rpki-client