This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/LCf-Tegx0fZiipUoAGLWioHn_mQ.roa File: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (raw, json) Hash identifier: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ= Subject key identifier: 2C:27:FE:4D:E8:31:D1:F6:62:8A:95:28:00:62:D6:8A:81:E7:FE:64 Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Certificate serial: 019B7BA4D13A7632F4F59830215B746B2608 Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/LCf-Tegx0fZiipUoAGLWioHn_mQ.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41706 IP address blocks: 91.142.135.0/24 maxlen: 24 193.30.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d1:3a:76:32:f4:f5:98:30:21:5b:74:6b:26:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c27fe4de831d1f6628a95280062d68a81e7fe64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:36:65:f5:01:f6:84:52:f9:dd:f1:d0:4b: 88:d9:64:50:e1:4f:60:d0:93:c4:f9:1a:d4:43:c0: bf:31:04:36:c8:d7:64:e7:dd:0d:5a:37:0e:4f:dd: 54:0f:33:9f:53:61:b1:5e:2e:13:48:6f:c6:02:55: a8:d7:89:b3:db:b2:af:98:5b:36:32:db:4e:e5:25: ab:43:34:b1:b4:87:80:d9:3c:33:5f:e2:17:c5:54: b9:cd:cd:96:89:ea:d2:40:b3:36:a6:0b:cd:ff:7f: c8:ce:33:f3:a4:52:5d:a3:0e:32:27:98:ef:4b:f7: 44:8e:a3:e6:be:71:8c:99:29:23:bf:a2:98:d5:2b: fb:9a:bc:fe:ed:de:3e:41:9c:89:6d:a6:f7:86:53: 40:2b:9a:d0:d2:8b:62:4c:1a:5f:6c:5d:2f:4b:e8: d0:69:af:8f:d1:2f:14:36:3a:c6:ff:1c:6c:5b:f3: 41:8e:db:7f:2b:97:68:37:ba:e6:30:aa:ed:1e:44: 5f:ce:4d:d2:9b:58:0c:3c:49:9d:71:e7:74:fb:3b: 16:ad:05:f6:76:57:96:22:e4:b5:1a:61:cf:4b:9f: 39:a1:b0:7d:54:73:ac:b7:ad:37:6e:f0:89:a5:44: b9:4a:e9:40:00:34:37:09:09:c9:13:62:a4:5e:a9: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:27:FE:4D:E8:31:D1:F6:62:8A:95:28:00:62:D6:8A:81:E7:FE:64 X509v3 Authority Key Identifier: keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/LCf-Tegx0fZiipUoAGLWioHn_mQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.135.0/24 193.30.236.0/22 Signature Algorithm: sha256WithRSAEncryption 21:1b:6d:ce:54:88:0f:45:6d:8a:55:9a:23:52:57:56:91:6c: 64:a7:1b:d6:33:0f:93:d7:e1:bb:43:38:cf:be:60:8b:de:f2: 48:1b:f4:8a:86:ad:d5:36:4f:24:5d:9b:e0:e9:e6:9b:8a:d0: fc:21:6f:58:9a:e7:62:ef:1e:10:5e:f6:37:e8:50:31:46:b4: ed:20:49:f3:ef:99:2e:20:37:f9:07:eb:fe:17:7e:02:78:89: f6:6d:29:a5:98:e5:ee:84:df:ac:30:c3:5d:1b:ea:08:59:47: ae:98:c5:12:a7:e8:df:ae:2d:fb:d9:97:38:3b:27:86:09:bc: fa:06:05:2d:79:fb:77:54:8c:f5:8e:70:03:3f:a4:d6:90:c9: f1:37:fa:d0:0a:b0:ec:2d:d5:b4:08:06:b5:bf:c1:0b:fe:f5: ea:57:ca:e8:e7:dd:4f:72:28:fa:6f:4c:e6:75:4f:d8:38:a5: ab:ff:ae:73:cc:41:56:60:93:22:1d:8a:46:90:4a:0d:04:8b: 16:86:7e:dd:a2:fa:24:70:f4:6b:07:ae:3a:0d:5b:2c:94:10: 38:12:45:fd:7b:5b:6b:da:5b:7e:1f:8f:67:aa:29:4d:92:22: fb:f6:95:91:86:93:e4:88:f2:60:31:bf:fe:bb:14:ad:fd:9c: a2:fb:23:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pNE6djL09ZgwIVt0ayYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2 Y2U0MTIwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzI3ZmU0ZGU4MzFkMWY2NjI4YTk1MjgwMDYyZDY4YTgxZTdmZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn42ZfUB9oRS+d3x0EuI2WRQ4U9g 0JPE+RrUQ8C/MQQ2yNdk590NWjcOT91UDzOfU2GxXi4TSG/GAlWo14mz27KvmFs2 MttO5SWrQzSxtIeA2TwzX+IXxVS5zc2WierSQLM2pgvN/3/IzjPzpFJdow4yJ5jv S/dEjqPmvnGMmSkjv6KY1Sv7mrz+7d4+QZyJbab3hlNAK5rQ0otiTBpfbF0vS+jQ aa+P0S8UNjrG/xxsW/NBjtt/K5doN7rmMKrtHkRfzk3Sm1gMPEmdced0+zsWrQX2 dleWIuS1GmHPS585obB9VHOst603bvCJpUS5SulAADQ3CQnJE2KkXqluwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCwn/k3oMdH2YoqVKABi1oqB5/5kMB8GA1UdIwQY MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt ZDdjMzZlMTVjZjBlLzEvTENmLVRlZ3gwZlppaXBVb0FHTFdpb0huX21RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW46HAwQC wR7sMA0GCSqGSIb3DQEBCwUAA4IBAQAhG23OVIgPRW2KVZojUldWkWxkpxvWMw+T 1+G7QzjPvmCL3vJIG/SKhq3VNk8kXZvg6eabitD8IW9Ymudi7x4QXvY36FAxRrTt IEnz75kuIDf5B+v+F34CeIn2bSmlmOXuhN+sMMNdG+oIWUeumMUSp+jfri372Zc4 OyeGCbz6BgUteft3VIz1jnADP6TWkMnxN/rQCrDsLdW0CAa1v8EL/vXqV8ro591P cij6b0zmdU/YOKWr/65zzEFWYJMiHYpGkEoNBIsWhn7dovokcPRrB646DVsslBA4 EkX9e1tr2lt+H49nqilNkiL79pWRhpPkiPJgMb/+uxSt/Zyi+yPj -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:07 2026 by rpki-client