This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LKOCMzEeDxcuHTMbuBbbRB1fMzU.roa File: LKOCMzEeDxcuHTMbuBbbRB1fMzU.roa (raw, json) Hash identifier: gGzPgtBNWgVBz9sRALDqg5Jb5hr8ZoTTn+sPB1DpTdQ= Subject key identifier: 2C:A3:82:33:31:1E:0F:17:2E:1D:33:1B:B8:16:DB:44:1D:5F:33:35 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA561C752C654F01F5E5EA1DAB8D83B Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LKOCMzEeDxcuHTMbuBbbRB1fMzU.roa Signing time: Thu 01 Jan 2026 22:19:54 +0000 ROA not before: Thu 01 Jan 2026 22:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211922 IP address blocks: 45.93.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:61:c7:52:c6:54:f0:1f:5e:5e:a1:da:b8:d8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca38233311e0f172e1d331bb816db441d5f3335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:61:8d:0f:68:10:aa:30:e0:72:4f:a4:c8:4c: a7:e4:25:ae:ed:90:ff:8d:d1:93:ea:37:e8:3f:4d: b2:ae:0c:d3:92:a6:7a:15:18:63:27:b0:a9:08:3e: e0:3f:01:e4:c9:6c:fd:19:df:98:15:7c:2e:39:1d: cc:0a:e2:66:c7:0a:7e:8c:14:78:76:57:3b:4e:90: e6:b7:f8:37:2f:1c:95:e7:0f:4c:ae:21:ce:c3:65: b4:a8:3c:0d:9b:99:26:6f:f1:68:e9:3e:25:2d:66: 7b:67:4d:40:81:1b:c5:35:fe:e1:66:71:cc:cb:e5: 9e:91:31:2d:65:32:ce:7e:48:f2:95:6c:ca:ae:16: bb:db:a9:04:73:66:04:93:6a:a3:54:9a:31:4d:60: 54:63:35:56:f4:50:cd:a2:92:20:bb:52:9a:5d:d0: 2a:0a:c7:17:b9:63:bb:97:bc:5e:55:08:f7:66:bf: 9c:a9:17:11:3e:3c:f6:b7:51:14:0b:46:09:58:e3: 8a:96:d7:4d:a9:6d:de:d4:35:2e:96:53:58:25:51: 67:67:61:a0:4c:ff:57:e4:9d:81:22:fb:ca:6a:7d: d1:4b:33:f1:15:62:d6:4d:8c:5c:3e:c5:36:87:be: 3b:02:22:83:dc:83:a3:ce:a0:32:1b:74:f9:54:9d: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:82:33:31:1E:0F:17:2E:1D:33:1B:B8:16:DB:44:1D:5F:33:35 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LKOCMzEeDxcuHTMbuBbbRB1fMzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.166.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:f4:89:22:84:5f:ca:ba:c6:1e:51:e0:14:8b:04:19:7b:de: 72:2e:73:66:20:d5:5a:92:65:b4:23:18:ec:e3:8d:9f:ef:8e: ca:5f:a7:37:b7:64:73:41:97:44:8d:e8:0f:4f:29:36:03:56: b9:f0:4f:8b:4c:01:2a:52:cb:71:9c:a4:17:03:f7:6e:ab:fa: 81:b9:12:73:43:77:8e:e4:2a:1e:59:53:e8:cc:64:3a:6c:72: 1e:c1:23:a5:ae:6a:2f:be:b2:57:dc:d4:8d:f7:30:d6:cc:54: 38:9e:e5:e7:14:86:cb:f9:ae:19:40:0a:ea:be:c0:bf:8e:16: 0f:53:3c:b9:fa:63:6b:ec:46:15:86:7c:95:ab:06:3b:20:51: 22:09:77:db:17:6b:e7:e2:82:b9:54:83:1b:53:4d:b2:dc:7c: 26:3c:f1:52:27:b5:31:5e:5d:23:e5:72:d4:e4:88:51:16:74: de:70:2f:ac:4a:df:cc:86:df:39:b9:11:01:bf:93:c0:45:60: 30:88:f7:88:5a:fa:5f:a9:ba:1e:5b:4d:64:a4:c1:6a:c7:f5: 83:0b:e0:dc:83:24:8a:f6:85:3d:22:f7:7c:25:6f:ff:46:d5: fa:47:68:3c:bd:06:56:8f:21:7f:46:e4:14:85:fd:83:15:b3: fa:87:54:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pWHHUsZU8B9eXqHauNg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2EzODIzMzMxMWUwZjE3MmUxZDMzMWJiODE2ZGI0NDFkNWYzMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mGND2gQqjDgck+kyEyn5CWu7ZD/ jdGT6jfoP02yrgzTkqZ6FRhjJ7CpCD7gPwHkyWz9Gd+YFXwuOR3MCuJmxwp+jBR4 dlc7TpDmt/g3LxyV5w9MriHOw2W0qDwNm5kmb/Fo6T4lLWZ7Z01AgRvFNf7hZnHM y+WekTEtZTLOfkjylWzKrha726kEc2YEk2qjVJoxTWBUYzVW9FDNopIgu1KaXdAq CscXuWO7l7xeVQj3Zr+cqRcRPjz2t1EUC0YJWOOKltdNqW3e1DUullNYJVFnZ2Gg TP9X5J2BIvvKan3RSzPxFWLWTYxcPsU2h747AiKD3IOjzqAyG3T5VJ3I3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyjgjMxHg8XLh0zG7gW20QdXzM1MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvTEtPQ016RWVEeGN1SFRNYnVCYmJSQjFmTXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV2mMA0G CSqGSIb3DQEBCwUAA4IBAQAs9IkihF/KusYeUeAUiwQZe95yLnNmINVakmW0Ixjs 442f747KX6c3t2RzQZdEjegPTyk2A1a58E+LTAEqUstxnKQXA/duq/qBuRJzQ3eO 5CoeWVPozGQ6bHIewSOlrmovvrJX3NSN9zDWzFQ4nuXnFIbL+a4ZQArqvsC/jhYP Uzy5+mNr7EYVhnyVqwY7IFEiCXfbF2vn4oK5VIMbU02y3HwmPPFSJ7UxXl0j5XLU 5IhRFnTecC+sSt/Mht85uREBv5PARWAwiPeIWvpfqboeW01kpMFqx/WDC+DcgySK 9oU9Ivd8JW//RtX6R2g8vQZWjyF/RuQUhf2DFbP6h1SN -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:55 2026 by rpki-client