This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LgLEIgozDh6ZtieL7JWKGQ61yzE.roa File: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (raw, json) Hash identifier: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws= Subject key identifier: 2E:02:C4:22:0A:33:0E:1E:99:B6:27:8B:EC:95:8A:19:0E:B5:CB:31 Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Certificate serial: 019B7D5D353EC6950F65BFFB0A1FE9F7F4A7 Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LgLEIgozDh6ZtieL7JWKGQ61yzE.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 91.200.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:3e:c6:95:0f:65:bf:fb:0a:1f:e9:f7:f4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e02c4220a330e1e99b6278bec958a190eb5cb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:d7:68:a8:c0:6d:c2:07:d6:68:0f:e1:43: e2:fa:94:22:2f:02:7c:9c:3e:f6:e9:4b:c8:72:66: 85:18:f9:9d:76:b4:c6:f8:59:b6:77:33:5d:5f:04: bc:28:16:6b:d1:0d:48:1b:c2:63:ca:f6:61:89:77: 0e:ed:d2:ea:93:61:86:0a:57:fc:44:3c:cd:9e:2d: 8a:6b:18:bb:26:21:13:7b:60:10:0a:fc:26:4c:10: 16:1c:e4:5d:f2:9d:31:18:4e:17:2b:f8:5c:3c:7f: ef:69:a3:e9:6f:0f:e4:d4:90:6c:6c:b3:a2:f8:59: 65:54:06:0d:57:cb:6e:92:92:30:06:4d:4c:1a:58: 1b:90:2d:80:5a:0c:69:8e:b7:59:4e:91:55:0a:dd: d8:ab:f4:ea:fc:78:87:90:68:8e:e0:3d:2d:34:ee: 27:f2:29:34:e4:3f:0b:0b:9b:42:3c:72:a7:d9:74: 2c:2f:ce:21:f8:45:00:24:2d:c2:2d:d5:56:5e:ad: 0e:b8:69:fb:bd:80:ca:70:a4:2a:12:fa:62:91:80: a3:6c:51:b4:ae:af:e3:30:1d:51:a9:64:99:38:38: 5e:54:f0:cc:45:9c:09:12:7f:ef:be:4a:12:90:f9: e9:fa:85:9a:6d:da:20:81:ee:69:1c:b0:3b:13:48: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:02:C4:22:0A:33:0E:1E:99:B6:27:8B:EC:95:8A:19:0E:B5:CB:31 X509v3 Authority Key Identifier: keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LgLEIgozDh6ZtieL7JWKGQ61yzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.75.0/24 Signature Algorithm: sha256WithRSAEncryption 91:e7:4d:9b:05:e9:37:15:fe:98:0f:aa:14:dd:81:17:4b:8c: f5:03:82:fd:7b:b2:a0:bd:99:a9:8d:40:f2:6e:03:fd:92:ca: 84:30:4b:ff:59:98:d6:1f:ff:9b:bf:55:6e:c8:25:ea:9e:a6: 1a:d7:8d:7c:17:95:d3:8c:42:94:c5:ec:52:d3:d5:8a:49:42: 0a:fc:61:77:ce:b9:8c:ed:d5:a1:b9:c7:6b:ec:e4:9f:03:20: 14:3b:54:69:0f:45:00:b1:b6:52:fd:87:26:b8:62:6a:c9:7d: 08:25:cf:b3:e7:0a:36:2e:95:4f:46:b5:97:51:77:cf:61:44: bd:08:0d:55:26:78:24:f1:e0:5b:d6:c3:fb:9f:4a:18:4a:6b: ba:57:a9:12:05:cc:a5:71:b5:04:a0:71:24:c7:e7:fe:81:25: a6:ba:85:b8:0b:26:52:03:6c:81:b5:b0:fe:ad:d9:ff:8e:bc: 98:fd:d4:2b:40:6e:fe:d6:02:ef:61:6e:69:41:3d:36:ff:0f: 17:de:de:61:43:e9:36:d8:99:a4:c4:d7:85:b0:a4:90:b2:7d: 62:5a:23:ba:8e:92:8a:ea:76:2f:dd:7c:3d:a5:17:01:d0:8d: d4:8c:ee:51:12:26:b8:0f:5e:51:e2:07:04:df:fb:ae:8c:99: 73:12:1c:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTU+xpUPZb/7Ch/p9/SnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj MTUxMmMwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTAyYzQyMjBhMzMwZTFlOTliNjI3OGJlYzk1OGExOTBlYjVjYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4rXaKjAbcIH1mgP4UPi+pQiLwJ8 nD726UvIcmaFGPmddrTG+Fm2dzNdXwS8KBZr0Q1IG8JjyvZhiXcO7dLqk2GGClf8 RDzNni2Kaxi7JiETe2AQCvwmTBAWHORd8p0xGE4XK/hcPH/vaaPpbw/k1JBsbLOi +FllVAYNV8tukpIwBk1MGlgbkC2AWgxpjrdZTpFVCt3Yq/Tq/HiHkGiO4D0tNO4n 8ik05D8LC5tCPHKn2XQsL84h+EUAJC3CLdVWXq0OuGn7vYDKcKQqEvpikYCjbFG0 rq/jMB1RqWSZODheVPDMRZwJEn/vvkoSkPnp+oWabdogge5pHLA7E0ghfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4CxCIKMw4embYni+yVihkOtcsxMB8GA1UdIwQY MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt MGQyMDVmYjFhZDA1LzEvTGdMRUlnb3pEaDZadGllTDdKV0tHUTYxeXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1 LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8hLMA0G CSqGSIb3DQEBCwUAA4IBAQCR502bBek3Ff6YD6oU3YEXS4z1A4L9e7KgvZmpjUDy bgP9ksqEMEv/WZjWH/+bv1VuyCXqnqYa1418F5XTjEKUxexS09WKSUIK/GF3zrmM 7dWhucdr7OSfAyAUO1RpD0UAsbZS/YcmuGJqyX0IJc+z5wo2LpVPRrWXUXfPYUS9 CA1VJngk8eBb1sP7n0oYSmu6V6kSBcylcbUEoHEkx+f+gSWmuoW4CyZSA2yBtbD+ rdn/jryY/dQrQG7+1gLvYW5pQT02/w8X3t5hQ+k22JmkxNeFsKSQsn1iWiO6jpKK 6nYv3Xw9pRcB0I3UjO5REia4D15R4gcE3/uujJlzEhx8 -----END CERTIFICATE-----Generated at Fri Jan 2 16:25:50 2026 by rpki-client