This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/LyxBPFPVGwdZKa67QBIb89JyjNQ.roa File: LyxBPFPVGwdZKa67QBIb89JyjNQ.roa (raw, json) Hash identifier: eBJQIiapDZF64sSXw+8KWO+kBDwVv+AbJJ0TlhsdAQE= Subject key identifier: 2F:2C:41:3C:53:D5:1B:07:59:29:AE:BB:40:12:1B:F3:D2:72:8C:D4 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019C16AC360F4B43AB78B605681E27283E10 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/LyxBPFPVGwdZKa67QBIb89JyjNQ.roa Signing time: Sun 01 Feb 2026 00:48:30 +0000 ROA not before: Sun 01 Feb 2026 00:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202909 IP address blocks: 2a0a:79c0:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:16:ac:36:0f:4b:43:ab:78:b6:05:68:1e:27:28:3e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Feb 1 00:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f2c413c53d51b075929aebb40121bf3d2728cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:ea:c5:4c:6d:c3:93:04:87:34:85:3a:fa: b4:21:38:d9:39:6e:23:2b:dd:c8:d0:62:1c:49:68: 84:18:ca:a6:74:13:16:d1:f4:a0:3c:9f:ba:3b:22: d5:f2:6e:e2:97:06:37:e2:ea:bf:bc:40:fe:f0:07: 72:26:4f:18:76:de:f1:04:83:b8:d9:bd:c0:9b:b5: 0b:48:94:e4:14:bd:4b:fd:e8:c5:73:0c:e4:a6:6a: 98:56:04:a0:d4:94:a1:c0:81:5a:bf:e5:a4:8e:dd: d2:8f:9f:91:10:3e:e0:cd:b4:05:be:a6:a1:b0:d2: f9:a3:86:3b:22:c2:c4:4c:98:3c:40:30:fe:59:a1: f5:95:db:ce:32:6f:1a:21:57:ca:f3:03:9f:6a:39: 0e:7c:14:a6:c4:dc:af:c4:f1:7b:9e:21:52:b7:cb: f7:60:48:df:d8:95:fe:2d:72:bb:1f:69:60:66:55: 04:b1:a4:13:74:34:9d:97:82:af:74:63:9a:a0:d0: 86:34:ba:0a:23:04:82:17:94:5f:ec:3d:11:4e:bb: f5:7a:b3:59:a3:b2:d6:d8:2a:00:7f:8e:34:f5:73: 80:d5:db:df:bb:b9:80:42:d3:00:99:ee:db:d8:c4: a4:83:9f:a8:6d:ea:61:ad:e4:62:25:83:07:74:b8: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2C:41:3C:53:D5:1B:07:59:29:AE:BB:40:12:1B:F3:D2:72:8C:D4 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/LyxBPFPVGwdZKa67QBIb89JyjNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:1200::/40 Signature Algorithm: sha256WithRSAEncryption ca:e2:f9:81:84:9d:29:e5:ac:66:1b:01:01:38:31:68:e0:ad: c3:ad:10:99:9d:09:92:d9:ed:8d:c7:bf:a6:4e:72:a4:1b:20: 8e:a4:67:06:39:ce:e7:60:9d:22:10:4e:b3:40:03:fc:a6:4a: d0:47:ea:36:b3:bc:52:33:04:45:0e:ce:7b:e6:80:a1:fc:db: 38:e1:ae:34:87:72:03:18:21:67:cd:1b:1b:6a:26:10:36:58: 64:04:dc:f6:8b:80:27:93:57:09:40:99:61:02:3e:01:fd:b2: 2e:e9:ee:33:9c:ce:8d:11:7b:e6:23:fc:f2:40:6b:d5:b5:e8: e1:41:41:ce:1c:12:d5:83:ae:2e:f2:57:aa:85:c9:2b:14:ba: 61:83:2a:36:17:a4:79:6d:c2:1a:3b:d2:72:b1:dd:56:fd:d9: 94:de:b8:e1:d8:5f:02:c3:7b:02:45:0d:4c:6a:00:a4:69:ed: 12:06:4e:5d:55:12:32:af:88:e8:0b:71:e7:c5:de:ba:41:db: b0:dd:12:de:f6:c9:9c:9d:9d:39:ea:e2:1d:6a:e1:5b:0a:4b: d0:0d:15:c0:24:86:c5:92:44:9f:67:82:2c:51:51:aa:d9:18: ad:8f:7a:ac:4b:ab:57:f7:d2:f8:73:64:f5:c2:f1:23:38:45: 0d:29:b0:24 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZwWrDYPS0OreLYFaB4nKD4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMjAxMDA0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjJjNDEzYzUzZDUxYjA3NTkyOWFlYmI0MDEyMWJmM2QyNzI4Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp23qxUxtw5MEhzSFOvq0ITjZOW4j K93I0GIcSWiEGMqmdBMW0fSgPJ+6OyLV8m7ilwY34uq/vED+8AdyJk8Ydt7xBIO4 2b3Am7ULSJTkFL1L/ejFcwzkpmqYVgSg1JShwIFav+Wkjt3Sj5+RED7gzbQFvqah sNL5o4Y7IsLETJg8QDD+WaH1ldvOMm8aIVfK8wOfajkOfBSmxNyvxPF7niFSt8v3 YEjf2JX+LXK7H2lgZlUEsaQTdDSdl4KvdGOaoNCGNLoKIwSCF5Rf7D0RTrv1erNZ o7LW2CoAf4409XOA1dvfu7mAQtMAme7b2MSkg5+obephreRiJYMHdLgSkwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC8sQTxT1RsHWSmuu0ASG/PScozUMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvTHl4QlBGUFZHd2RaS2E2N1FCSWI4OUp5ak5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5wBIw DQYJKoZIhvcNAQELBQADggEBAMri+YGEnSnlrGYbAQE4MWjgrcOtEJmdCZLZ7Y3H v6ZOcqQbII6kZwY5zudgnSIQTrNAA/ymStBH6jazvFIzBEUOznvmgKH82zjhrjSH cgMYIWfNGxtqJhA2WGQE3PaLgCeTVwlAmWECPgH9si7p7jOczo0Re+Yj/PJAa9W1 6OFBQc4cEtWDri7yV6qFySsUumGDKjYXpHltwho70nKx3Vb92ZTeuOHYXwLDewJF DUxqAKRp7RIGTl1VEjKviOgLcefF3rpB27DdEt72yZydnTnq4h1q4VsKS9ANFcAk hsWSRJ9ngixRUarZGK2PeqxLq1f30vhzZPXC8SM4RQ0psCQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:55 2026 by rpki-client