This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/lr69ZnSsfxxuk1vODKFRiBaL2To.roa File: lr69ZnSsfxxuk1vODKFRiBaL2To.roa (raw, json) Hash identifier: 37NPtx8graaK5aNHzHeeZP1iUIdHIbfvmo4GsLdMi0s= Subject key identifier: 96:BE:BD:66:74:AC:7F:1C:6E:93:5B:CE:0C:A1:51:88:16:8B:D9:3A Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019C086915AA3DEC61E72B1BC78B1A52A077 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/lr69ZnSsfxxuk1vODKFRiBaL2To.roa Signing time: Thu 29 Jan 2026 06:20:30 +0000 ROA not before: Thu 29 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 213.182.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:69:15:aa:3d:ec:61:e7:2b:1b:c7:8b:1a:52:a0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 29 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96bebd6674ac7f1c6e935bce0ca15188168bd93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:c6:07:19:a2:d1:9b:a9:74:11:0e:b9:ea: c8:4d:32:ef:80:96:11:6d:bf:77:4b:2f:b5:d5:ba: 99:d2:76:92:61:aa:a4:88:a9:2a:7d:7f:38:9f:77: 4a:97:56:72:b1:36:27:19:e2:41:2c:67:31:52:08: ab:5b:c3:07:f1:f3:87:d9:e7:f0:45:4d:70:e3:89: 78:b6:2e:88:61:25:40:9f:bb:6b:8e:df:d9:2b:37: a4:70:d2:0b:97:b9:e7:12:d3:a7:29:77:1f:04:23: d2:9d:25:12:a0:92:13:8d:f9:0d:10:7d:34:3a:71: ec:af:0e:05:42:4f:64:40:f7:23:34:36:e2:96:16: 99:6c:53:bd:00:68:f0:65:68:b1:f1:24:8d:2e:3c: be:62:b3:1c:ff:0a:4d:44:73:12:bd:bf:d6:67:54: 7f:12:26:72:72:b6:93:1d:95:c4:2d:28:6f:ec:b5: c4:ce:9c:ef:01:36:3d:53:88:e2:f6:98:ea:d7:10: c6:cb:55:01:0e:61:83:a0:06:d4:09:73:2f:dd:56: 98:2e:35:7e:92:94:36:0d:b2:0c:64:2c:23:89:f5: 3e:e9:57:5c:42:72:73:4e:de:3a:18:bd:1c:4b:16: 76:7a:cd:df:0d:92:99:c1:5b:9a:3d:bb:75:2f:2a: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:BD:66:74:AC:7F:1C:6E:93:5B:CE:0C:A1:51:88:16:8B:D9:3A X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/lr69ZnSsfxxuk1vODKFRiBaL2To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.182.202.0/24 Signature Algorithm: sha256WithRSAEncryption 44:10:21:73:ac:27:88:4a:06:7d:2c:4b:1d:b5:ca:79:8f:ef: 49:9c:50:c6:e9:9a:75:db:b9:19:5c:25:81:38:5d:29:d3:fe: 1c:9f:5c:cc:14:89:e2:74:3c:d7:9a:27:60:52:3b:27:25:7c: a1:0d:dc:aa:3d:9c:14:92:27:ed:87:8e:c4:22:11:d4:6c:34: 3e:8e:b7:bd:93:52:2a:2e:fa:c9:82:26:ee:75:21:7d:a9:b6: cd:2e:a1:9d:ee:56:4e:9a:ec:64:dc:d2:61:e1:52:56:7e:3d: 45:9c:87:8f:5a:c4:18:21:16:4e:bf:34:45:1a:19:f8:78:fc: 71:85:a2:8b:ec:19:14:b0:77:2b:37:0a:f5:99:40:d6:e6:83: bc:58:48:ac:a7:f6:e9:fc:47:a0:8d:4e:82:0a:a0:30:74:80: 53:86:58:7b:df:b8:60:97:85:58:a0:b6:ad:fc:74:eb:91:70: eb:b8:68:10:e0:7c:0f:4e:1b:51:ec:3f:f1:23:43:19:1f:36: a7:2c:42:b1:b7:4a:e7:3c:8d:9e:19:3f:90:6b:8c:54:31:11: 8d:b5:7c:27:51:f0:8a:2c:6e:fb:26:fa:49:89:3b:0f:63:d0: a4:22:9c:50:29:fd:51:55:ab:27:51:a8:7e:18:af:92:e2:35: 7f:3e:cb:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwIaRWqPexh5ysbx4saUqB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTI5MDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmJlYmQ2Njc0YWM3ZjFjNmU5MzViY2UwY2ExNTE4ODE2OGJkOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzHGBxmi0ZupdBEOuerITTLvgJYR bb93Sy+11bqZ0naSYaqkiKkqfX84n3dKl1ZysTYnGeJBLGcxUgirW8MH8fOH2efw RU1w44l4ti6IYSVAn7trjt/ZKzekcNILl7nnEtOnKXcfBCPSnSUSoJITjfkNEH00 OnHsrw4FQk9kQPcjNDbilhaZbFO9AGjwZWix8SSNLjy+YrMc/wpNRHMSvb/WZ1R/ EiZycraTHZXELShv7LXEzpzvATY9U4ji9pjq1xDGy1UBDmGDoAbUCXMv3VaYLjV+ kpQ2DbIMZCwjifU+6VdcQnJzTt46GL0cSxZ2es3fDZKZwVuaPbt1LyrPhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJa+vWZ0rH8cbpNbzgyhUYgWi9k6MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvbHI2OVpuU3NmeHh1azF2T0RLRlJpQmFMMlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bbKMA0G CSqGSIb3DQEBCwUAA4IBAQBEECFzrCeISgZ9LEsdtcp5j+9JnFDG6Zp127kZXCWB OF0p0/4cn1zMFInidDzXmidgUjsnJXyhDdyqPZwUkifth47EIhHUbDQ+jre9k1Iq LvrJgibudSF9qbbNLqGd7lZOmuxk3NJh4VJWfj1FnIePWsQYIRZOvzRFGhn4ePxx haKL7BkUsHcrNwr1mUDW5oO8WEisp/bp/EegjU6CCqAwdIBThlh737hgl4VYoLat /HTrkXDruGgQ4HwPThtR7D/xI0MZHzanLEKxt0rnPI2eGT+Qa4xUMRGNtXwnUfCK LG77JvpJiTsPY9CkIpxQKf1RVasnUah+GK+S4jV/PsvN -----END CERTIFICATE-----Generated at Fri Jan 30 08:39:50 2026 by rpki-client