This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/lccfsoW3vR6R_hPtm9uXpAiVavE.roa
File: lccfsoW3vR6R_hPtm9uXpAiVavE.roa (raw, json)
Hash identifier: 6tcCfZjYESMQ8pyCtnpM2RFHSDWt8Iyew4zedOU08ls=
Subject key identifier: 95:C7:1F:B2:85:B7:BD:1E:91:FE:13:ED:9B:DB:97:A4:08:95:6A:F1
Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial: 019B7BA432C4C13CAEDA2FE7A1AF506F02A6
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/lccfsoW3vR6R_hPtm9uXpAiVavE.roa
Signing time: Thu 01 Jan 2026 22:18:37 +0000
ROA not before: Thu 01 Jan 2026 22:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 149.205.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:32:c4:c1:3c:ae:da:2f:e7:a1:af:50:6f:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Validity
Not Before: Jan 1 22:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95c71fb285b7bd1e91fe13ed9bdb97a408956af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:71:86:54:63:69:b8:94:73:f3:03:a5:d7:
c2:7c:b3:ca:39:7d:d1:67:59:d0:87:4f:c8:58:bd:
89:3c:33:c7:c2:a2:43:c1:54:34:b6:bf:a5:11:a0:
23:54:4c:f8:fe:e5:71:9a:db:60:bf:43:81:d8:d7:
fd:9d:14:da:2f:f7:ac:e4:32:bd:00:b5:65:43:2f:
66:da:35:f2:dc:01:5e:c9:25:7c:a8:48:4c:d9:8d:
cb:a4:6e:45:6b:5b:ac:a2:f2:84:f9:8f:ed:a4:7c:
fd:78:c5:ee:e9:9d:51:2f:33:e0:2a:4e:76:81:d1:
13:61:55:f8:60:3e:b7:c7:82:15:ac:fb:5b:ef:e7:
a3:93:a2:c7:d5:d2:de:37:1a:bf:45:cf:c0:61:c2:
c3:b2:96:04:18:e5:96:9c:52:ee:ff:3d:95:24:9f:
95:b2:25:a3:da:20:b1:ed:c9:46:c8:54:98:ce:2c:
38:f5:3c:de:76:54:61:9d:bd:14:16:cf:d0:4b:a2:
ef:76:bb:33:82:7a:96:58:e4:70:d1:e4:6f:79:59:
48:03:44:f0:c3:84:ec:c5:55:1a:51:4c:1a:93:94:
ec:0d:95:ee:0e:3c:52:af:87:8b:14:27:07:9c:40:
21:60:5b:67:76:aa:3d:4a:cd:d4:25:e3:73:28:6c:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:1F:B2:85:B7:BD:1E:91:FE:13:ED:9B:DB:97:A4:08:95:6A:F1
X509v3 Authority Key Identifier:
keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/lccfsoW3vR6R_hPtm9uXpAiVavE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:d4:8b:bb:54:d4:15:24:7b:67:f9:48:cd:36:9e:32:3b:a1:
17:6f:1f:ee:2f:ef:26:1a:f5:3c:0e:e2:b0:bc:63:49:8e:36:
b3:1c:13:55:14:b5:13:f6:7c:cb:93:cc:e9:c2:12:5c:d8:f1:
ee:13:d3:79:43:45:bf:f2:36:25:2d:a1:af:57:ac:6b:0c:02:
d9:41:ef:46:b5:f9:ad:9c:72:62:dd:8c:42:51:52:41:8c:44:
8b:5a:4d:2a:df:83:81:e7:1b:f5:74:e1:de:61:5b:4f:ee:d2:
b4:f0:8d:8b:54:b5:34:ea:ff:24:49:44:4a:6e:cc:fc:49:87:
cf:8c:17:e8:65:2d:b9:ec:8f:cd:06:2c:6e:37:eb:97:98:78:
4b:c1:3b:47:45:83:37:12:90:af:73:c6:5e:5f:c2:9a:33:9e:
65:ad:1b:2a:da:82:f8:56:f2:5a:a1:4e:a7:04:dc:d1:8b:e6:
1c:b4:9f:b5:5d:70:53:e6:53:9d:fa:eb:ca:5a:3b:79:8b:9d:
da:e7:f3:8c:16:d3:27:95:55:1e:0e:dc:c6:10:b9:c4:75:fa:
f6:66:d3:3c:92:15:55:fe:81:50:a6:82:1a:81:f6:0b:ec:be:
6f:6f:60:6f:91:a7:c1:27:1f:b1:30:d9:6d:92:3d:c8:de:94:
f1:27:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:25:37 2026 by rpki-client