This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa File: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (raw, json) Hash identifier: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI= Subject key identifier: 96:16:62:A7:B5:2F:CD:82:9D:CC:68:99:D2:D3:EC:74:9A:05:E9:41 Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Certificate serial: 019B7BA3BABBE31586954EC6CED0907F0FDB Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa Signing time: Thu 01 Jan 2026 22:18:06 +0000 ROA not before: Thu 01 Jan 2026 22:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 195.78.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ba:bb:e3:15:86:95:4e:c6:ce:d0:90:7f:0f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Validity Not Before: Jan 1 22:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=961662a7b52fcd829dcc6899d2d3ec749a05e941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:73:58:96:6d:bc:16:85:d1:b3:ea:60:95: c9:3d:e5:39:ac:3a:da:18:23:c6:a1:89:95:80:f1: d3:60:80:b9:1f:5e:cb:3e:db:62:04:d9:25:eb:cc: f6:f0:99:a1:3a:be:10:2e:e8:70:87:b5:b6:4c:40: 37:91:71:42:41:4c:7a:93:bc:3b:3c:87:c1:8b:63: 83:a0:e5:6e:90:94:1b:5c:a1:f9:31:46:af:c9:01: 88:b4:30:6b:cf:2d:42:e6:d6:51:8c:b0:90:42:cc: 6d:41:44:db:22:d4:2c:20:75:3d:f6:c8:64:11:3b: 42:74:f8:ce:1d:3a:81:c0:c6:dc:74:69:dc:df:53: f6:cf:4a:17:62:2a:cc:b6:37:dc:67:38:dd:63:96: b6:07:c3:f4:36:f8:98:eb:73:37:45:84:ff:e4:76: dd:34:f8:fc:d4:46:07:2f:0a:76:90:6a:a3:da:f1: 79:47:e6:44:16:ab:7e:03:65:72:78:5d:97:3e:5e: ad:de:79:17:08:ef:65:7a:b0:2c:ea:1b:67:96:67: 15:c5:49:60:e5:78:bd:70:97:17:5d:42:10:60:aa: 3d:1b:00:4b:e1:84:1f:3d:49:71:5a:83:97:d9:5a: bf:a1:72:5f:93:75:58:3e:4b:f1:0a:b6:02:16:1d: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:62:A7:B5:2F:CD:82:9D:CC:68:99:D2:D3:EC:74:9A:05:E9:41 X509v3 Authority Key Identifier: keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.115.0/24 Signature Algorithm: sha256WithRSAEncryption 17:1e:0b:3a:64:c3:b3:5d:c4:d7:6d:64:b9:99:5f:a2:1d:1c: 3b:b3:25:f6:bb:f0:53:5a:b5:78:a6:8d:e3:62:5b:28:ae:11: 44:ef:9a:1e:32:6f:bc:23:92:fd:9c:d3:b1:1d:58:e8:be:f8: 20:06:a0:d1:3c:c4:05:f3:4d:3f:eb:0d:23:b4:ec:4e:88:6a: f8:4a:bd:53:c7:99:bc:f2:cd:e5:a6:f4:96:05:b0:b0:64:aa: 50:ec:03:3d:b3:72:ec:9f:2b:e1:63:88:b9:ec:69:40:f9:fc: 04:a9:44:e3:d1:7d:2c:f9:a8:9f:d4:82:7b:57:1f:d9:af:f9: 82:cd:22:fc:9e:08:2b:ae:d0:08:b8:a3:34:e8:ea:1f:b4:2c: b3:83:53:bb:20:9c:36:1b:56:ce:3b:73:86:a4:86:ed:4c:50: 4d:b8:51:f5:d6:61:3c:89:2f:bc:41:33:ca:ea:45:11:ba:7e: fa:0c:55:fa:fc:f1:b4:21:4e:de:bb:ec:42:15:7d:2d:a8:fb: c1:79:bf:ba:c7:bd:37:4f:7a:65:cf:35:4c:09:43:22:78:98: f1:73:da:01:7d:1b:76:ec:8e:4b:83:ef:19:d9:e8:0a:36:c7: 40:c0:5c:83:1d:f4:24:ed:96:0f:51:3c:1e:93:c1:1b:e1:5e: 1a:64:f1:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o7q74xWGlU7GztCQfw/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl M2U3MzMwHhcNMjYwMTAxMjIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjE2NjJhN2I1MmZjZDgyOWRjYzY4OTlkMmQzZWM3NDlhMDVlOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nVzWJZtvBaF0bPqYJXJPeU5rDra GCPGoYmVgPHTYIC5H17LPttiBNkl68z28JmhOr4QLuhwh7W2TEA3kXFCQUx6k7w7 PIfBi2ODoOVukJQbXKH5MUavyQGItDBrzy1C5tZRjLCQQsxtQUTbItQsIHU99shk ETtCdPjOHTqBwMbcdGnc31P2z0oXYirMtjfcZzjdY5a2B8P0NviY63M3RYT/5Hbd NPj81EYHLwp2kGqj2vF5R+ZEFqt+A2VyeF2XPl6t3nkXCO9lerAs6htnlmcVxUlg 5Xi9cJcXXUIQYKo9GwBL4YQfPUlxWoOX2Vq/oXJfk3VYPkvxCrYCFh3BZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYWYqe1L82CncxomdLT7HSaBelBMB8GA1UdIwQY MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt ZTg3NTEwM2ZhZjEyLzEvbGhaaXA3VXZ6WUtkekdpWjB0UHNkSm9GNlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw05zMA0G CSqGSIb3DQEBCwUAA4IBAQAXHgs6ZMOzXcTXbWS5mV+iHRw7syX2u/BTWrV4po3j YlsorhFE75oeMm+8I5L9nNOxHVjovvggBqDRPMQF800/6w0jtOxOiGr4Sr1Tx5m8 8s3lpvSWBbCwZKpQ7AM9s3LsnyvhY4i57GlA+fwEqUTj0X0s+aif1IJ7Vx/Zr/mC zSL8nggrrtAIuKM06OoftCyzg1O7IJw2G1bOO3OGpIbtTFBNuFH11mE8iS+8QTPK 6kURun76DFX6/PG0IU7eu+xCFX0tqPvBeb+6x703T3plzzVMCUMieJjxc9oBfRt2 7I5Lg+8Z2egKNsdAwFyDHfQk7ZYPUTwek8Eb4V4aZPGo -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:57 2026 by rpki-client