This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LZJptrqByyRVN5I-1d313-ovSg0.roa File: LZJptrqByyRVN5I-1d313-ovSg0.roa (raw, json) Hash identifier: woaDsTShO7j6tVSjZ3DIPcOFpjMcazzIgvjQSYqyykk= Subject key identifier: 2D:92:69:B6:BA:81:CB:24:55:37:92:3E:D5:DD:F5:DF:EA:2F:4A:0D Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8C58DBCD3630E5C46AFC924F0517 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LZJptrqByyRVN5I-1d313-ovSg0.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199230 IP address blocks: 151.237.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8c:58:db:cd:36:30:e5:c4:6a:fc:92:4f:05:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d9269b6ba81cb245537923ed5ddf5dfea2f4a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:34:b3:a0:e0:2e:2a:f7:9e:eb:cd:c0:25: 99:1e:bc:ea:73:cf:a9:a5:f8:ed:dd:51:7c:8d:7a: 59:93:17:5c:40:e8:d8:0c:59:53:f2:9c:33:28:bd: 81:b6:10:6d:24:1f:bc:ed:14:6e:3a:e3:fd:61:70: 2a:02:dc:80:b2:93:ea:55:9e:a8:18:2d:13:2d:0d: b6:97:f6:73:f7:1b:6f:39:99:82:7c:a2:18:c7:65: d6:c0:02:1a:03:56:a8:01:49:81:cd:9e:f6:1c:d8: a6:31:e4:81:8f:2f:f0:95:a0:7e:6b:89:38:b7:5d: 03:04:f2:12:e7:7a:73:d4:62:cf:84:5f:40:cd:26: a5:35:d3:0e:63:00:5c:be:4d:ae:29:6a:81:8f:36: 12:61:76:fc:b8:42:24:fc:97:dd:81:e2:81:df:bb: d3:4d:b5:8e:bb:b8:84:c5:24:9e:c2:c9:c5:d3:af: f3:40:2f:58:f3:4c:fd:82:5b:23:f2:58:7e:9a:be: a5:a7:fd:f0:71:a7:0f:13:25:e3:8b:ca:ed:11:47: a7:da:f1:e4:f5:cf:76:d2:1c:83:a7:91:e1:04:66: 17:1d:ed:5a:dd:ab:10:a7:7a:ed:ea:83:30:94:ba: fb:f9:13:5a:da:ee:d3:32:b9:38:7c:3c:69:08:d8: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:92:69:B6:BA:81:CB:24:55:37:92:3E:D5:DD:F5:DF:EA:2F:4A:0D X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LZJptrqByyRVN5I-1d313-ovSg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.129.0/24 Signature Algorithm: sha256WithRSAEncryption ab:ab:d9:77:d8:ec:ab:f6:08:79:26:49:a9:a6:39:34:9f:8c: 7f:c7:19:36:5b:e9:8a:ae:17:21:6f:f1:88:03:e5:0b:13:9c: 61:8c:33:2d:82:42:50:7a:58:08:0a:de:ab:57:11:b1:d9:c7: 97:1e:fa:e1:3d:3d:22:a7:c4:44:56:5b:22:16:3e:9a:26:5e: 2e:fb:7a:e1:ca:56:f5:c5:e8:91:ae:90:0f:aa:9f:58:53:2b: 9b:62:84:bf:68:b2:35:ff:57:f2:06:2c:0d:49:7f:e0:38:ba: 13:f5:00:88:b6:3c:a2:84:d2:87:cc:b2:9e:a5:04:55:4f:f6: 5d:27:e2:29:85:c1:17:15:89:5d:16:ef:5d:ec:c8:f1:3b:f4: cb:a8:cc:cc:20:be:3f:ab:b8:1b:75:67:9a:0b:8c:b4:5e:1e: 13:dd:39:16:13:e9:4e:7f:91:27:d1:a7:1e:d5:48:b1:58:74: cf:6a:79:2a:94:29:60:3b:58:ad:bc:37:c5:fa:2d:4e:4f:cf: db:42:84:de:a1:d5:9d:f7:fa:e5:c1:97:f3:1e:1a:90:8b:5c: 11:d8:32:39:95:9c:c5:82:9e:93:b3:b4:23:de:c1:89:92:41: 54:a4:26:3e:18:95:39:61:fe:be:b2:3b:4d:2d:6a:a2:54:41: 1f:21:18:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YxY2802MOXEavySTwUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkyNjliNmJhODFjYjI0NTUzNzkyM2VkNWRkZjVkZmVhMmY0YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB40s6DgLir3nuvNwCWZHrzqc8+p pfjt3VF8jXpZkxdcQOjYDFlT8pwzKL2BthBtJB+87RRuOuP9YXAqAtyAspPqVZ6o GC0TLQ22l/Zz9xtvOZmCfKIYx2XWwAIaA1aoAUmBzZ72HNimMeSBjy/wlaB+a4k4 t10DBPIS53pz1GLPhF9AzSalNdMOYwBcvk2uKWqBjzYSYXb8uEIk/JfdgeKB37vT TbWOu7iExSSewsnF06/zQC9Y80z9glsj8lh+mr6lp/3wcacPEyXji8rtEUen2vHk 9c920hyDp5HhBGYXHe1a3asQp3rt6oMwlLr7+RNa2u7TMrk4fDxpCNga0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2Saba6gcskVTeSPtXd9d/qL0oNMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvTFpKcHRycUJ5eVJWTjVJLTFkMzEzLW92U2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+2BMA0G CSqGSIb3DQEBCwUAA4IBAQCrq9l32Oyr9gh5Jkmppjk0n4x/xxk2W+mKrhchb/GI A+ULE5xhjDMtgkJQelgICt6rVxGx2ceXHvrhPT0ip8REVlsiFj6aJl4u+3rhylb1 xeiRrpAPqp9YUyubYoS/aLI1/1fyBiwNSX/gOLoT9QCItjyihNKHzLKepQRVT/Zd J+IphcEXFYldFu9d7MjxO/TLqMzMIL4/q7gbdWeaC4y0Xh4T3TkWE+lOf5En0ace 1UixWHTPankqlClgO1itvDfF+i1OT8/bQoTeodWd9/rlwZfzHhqQi1wR2DI5lZzF gp6Ts7Qj3sGJkkFUpCY+GJU5Yf6+sjtNLWqiVEEfIRh6 -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:44 2026 by rpki-client