This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LWCzpsutFtedFRNSGG186RXis1c.roa File: LWCzpsutFtedFRNSGG186RXis1c.roa (raw, json) Hash identifier: mciASjdMTzUpHI1c+0Wt2vY5vVghvFUoxfxEnv9VVcc= Subject key identifier: 2D:60:B3:A6:CB:AD:16:D7:9D:15:13:52:18:6D:7C:E9:15:E2:B3:57 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC62A394ED0BC93CB165B4EC0050BE Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LWCzpsutFtedFRNSGG186RXis1c.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40950 IP address blocks: 144.31.28.0/24 maxlen: 24 150.241.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:62:a3:94:ed:0b:c9:3c:b1:65:b4:ec:00:50:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d60b3a6cbad16d79d151352186d7ce915e2b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:e4:f3:c7:83:16:a4:6d:de:24:f3:5d:95: 39:0c:4d:9b:fb:aa:c0:90:4f:ea:d0:de:4b:8f:8b: f3:53:22:c6:46:ac:54:40:cd:e6:a0:90:7a:a8:62: cd:f2:26:57:da:78:70:92:20:7a:90:bf:74:f2:40: 07:4c:47:f4:7f:ab:30:5e:d3:fb:a2:9d:16:76:34: c7:c8:d4:09:ba:e6:44:bf:28:c4:20:60:5a:60:e8: fc:1f:30:cf:3e:ba:6f:02:35:d7:7f:b5:4b:07:a4: 6a:2a:18:21:59:9d:64:e0:7f:4b:01:5a:60:81:ac: 0c:37:11:bc:5b:0a:0a:47:24:a0:93:36:90:a3:06: 2b:1e:e9:b6:fe:63:9a:6d:a9:ba:34:d9:04:73:2f: 57:75:87:71:4e:d6:3f:f7:ca:12:c5:68:2b:7a:4c: 07:b4:02:c8:36:72:93:96:9e:3d:4a:c2:56:b5:16: 4c:97:38:01:80:5b:36:a9:03:64:3c:54:1b:98:ba: a3:a4:4f:e3:9b:6c:a2:cb:91:2f:f3:25:0c:ad:2a: 70:f3:a5:18:ac:16:9e:24:00:60:46:9a:fc:12:9a: 4b:07:e3:be:62:77:42:e3:19:09:0d:d1:93:2a:43: dc:a9:d7:0b:63:2b:3d:1f:ac:38:19:5c:8e:ca:db: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:B3:A6:CB:AD:16:D7:9D:15:13:52:18:6D:7C:E9:15:E2:B3:57 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LWCzpsutFtedFRNSGG186RXis1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.28.0/24 150.241.87.0/24 Signature Algorithm: sha256WithRSAEncryption 48:45:bf:f4:b6:eb:3b:b0:3f:f6:85:61:79:07:54:e7:ad:c9: 96:bb:8d:ce:c7:b8:06:ef:d2:c8:9c:44:34:74:1f:f8:1b:5e: 53:4e:1b:75:d7:a4:7f:4a:41:06:cb:a3:ee:0a:6c:fe:fc:c6: 5c:e7:e8:a2:cd:71:d7:b4:90:45:83:b6:b7:b5:8c:3b:9a:d9: 9a:73:dc:64:fb:25:de:59:9f:23:9a:c1:a4:a8:59:98:a4:a4: 0d:e0:08:5a:b8:e3:b8:eb:26:3d:48:f3:57:e5:7a:34:7a:62: af:94:fe:c4:b3:52:2d:f6:63:c5:80:8a:41:a6:b1:09:40:eb: f8:85:13:b2:bd:9e:04:2f:e6:dd:15:3c:4c:45:39:99:b2:c4: 15:a5:49:4c:f3:2f:93:11:b9:2c:71:1f:4f:7b:cc:31:67:77: 8a:86:99:bf:c6:bd:b9:e0:43:6d:d9:b2:2e:a2:ad:8b:81:da: 73:63:a8:b8:0e:b3:cf:09:5c:95:6d:2d:36:95:3d:51:b5:4a: f0:e5:e8:b9:be:2d:24:53:70:17:05:ba:dd:9b:48:a1:55:5c: 7e:83:39:ab:4b:d9:8f:53:2e:8a:97:58:b6:51:9a:c3:49:11: 9a:bb:79:d8:df:d7:d4:55:9d:06:dd:e7:c9:6e:88:af:ce:00: fc:dd:0f:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57GKjlO0LyTyxZbTsAFC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDYwYjNhNmNiYWQxNmQ3OWQxNTEzNTIxODZkN2NlOTE1ZTJiMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYrk88eDFqRt3iTzXZU5DE2b+6rA kE/q0N5Lj4vzUyLGRqxUQM3moJB6qGLN8iZX2nhwkiB6kL908kAHTEf0f6swXtP7 op0WdjTHyNQJuuZEvyjEIGBaYOj8HzDPPrpvAjXXf7VLB6RqKhghWZ1k4H9LAVpg gawMNxG8WwoKRySgkzaQowYrHum2/mOabam6NNkEcy9XdYdxTtY/98oSxWgrekwH tALINnKTlp49SsJWtRZMlzgBgFs2qQNkPFQbmLqjpE/jm2yiy5Ev8yUMrSpw86UY rBaeJABgRpr8EppLB+O+YndC4xkJDdGTKkPcqdcLYys9H6w4GVyOytu79wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC1gs6bLrRbXnRUTUhhtfOkV4rNXMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTFdDenBzdXRGdGVkRlJOU0dHMTg2UlhpczFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkB8cAwQA lvFXMA0GCSqGSIb3DQEBCwUAA4IBAQBIRb/0tus7sD/2hWF5B1TnrcmWu43Ox7gG 79LInEQ0dB/4G15TTht116R/SkEGy6PuCmz+/MZc5+iizXHXtJBFg7a3tYw7mtma c9xk+yXeWZ8jmsGkqFmYpKQN4AhauOO46yY9SPNX5Xo0emKvlP7Es1It9mPFgIpB prEJQOv4hROyvZ4EL+bdFTxMRTmZssQVpUlM8y+TEbkscR9Pe8wxZ3eKhpm/xr25 4ENt2bIuoq2LgdpzY6i4DrPPCVyVbS02lT1RtUrw5ei5vi0kU3AXBbrdm0ihVVx+ gzmrS9mPUy6Kl1i2UZrDSRGau3nY39fUVZ0G3efJboivzgD83Q8v -----END CERTIFICATE-----Generated at Sun Jan 11 12:24:10 2026 by rpki-client