This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lu895Q0H3z16hi4crHMDzvvoyyU.roa File: lu895Q0H3z16hi4crHMDzvvoyyU.roa (raw, json) Hash identifier: mdy8woFfXV7hI1BHqJ5qhcQjAlbD1DaQkdoTOUMCmaY= Subject key identifier: 96:EF:3D:E5:0D:07:DF:3D:7A:86:2E:1C:AC:73:03:CE:FB:E8:CB:25 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13617A0AF47762EC32E1149EABE40E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lu895Q0H3z16hi4crHMDzvvoyyU.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 193.58.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:61:7a:0a:f4:77:62:ec:32:e1:14:9e:ab:e4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96ef3de50d07df3d7a862e1cac7303cefbe8cb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:21:fe:50:1e:58:ca:e6:93:1b:de:47:31: 26:23:55:cf:52:a6:78:14:a2:7c:d0:80:21:7b:fd: c3:58:b6:91:7a:36:3d:e1:0c:b1:6b:28:06:83:f3: 8b:2c:ca:ca:2b:4b:4b:10:4c:19:0c:7e:b6:cf:62: bb:73:e2:f8:3b:ba:e5:38:34:51:cc:b3:34:b0:05: 54:f6:cb:72:9a:d9:76:36:b2:94:a5:6f:cb:d0:85: 0b:5d:a8:ed:3c:ae:0a:ec:a5:ee:12:00:13:ed:c2: e9:06:9a:37:39:a0:80:85:df:b9:3f:9e:76:0a:f4: 05:89:e1:77:bf:f6:70:fb:67:0f:6f:87:99:39:42: 83:d2:36:1c:ca:06:c3:e2:26:fa:00:3c:8a:a2:1a: 07:5c:48:a3:06:19:bd:94:3b:1a:ee:b8:96:47:bb: 12:a9:b3:2d:d9:83:0d:c4:dc:22:f0:0d:89:f8:90: ce:39:8a:79:ea:a4:ee:5f:0f:9d:81:fd:99:6c:98: 47:01:5b:f7:12:49:1c:da:d2:4c:1c:ae:5a:4e:06: 31:a5:46:54:b9:4b:23:98:13:fa:13:2d:c2:e6:7a: 71:12:53:aa:a5:04:46:9a:d6:c8:7e:2d:7d:9e:f6: f0:1e:c0:85:05:ef:90:8b:0d:f3:2a:2f:f4:2a:47: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EF:3D:E5:0D:07:DF:3D:7A:86:2E:1C:AC:73:03:CE:FB:E8:CB:25 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lu895Q0H3z16hi4crHMDzvvoyyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.147.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:51:7a:e1:4e:34:5d:f5:9f:47:c9:80:4f:60:fa:04:2c:50: f5:f4:9e:65:ab:e4:2a:b7:a7:5f:5a:8b:34:74:16:6f:ec:70: bc:db:e9:68:97:03:a1:1f:2a:e9:52:14:93:a2:e4:0b:4a:74: cd:45:29:64:f8:14:89:c9:aa:47:c4:3e:e4:a3:cd:7b:26:72: fa:5c:c1:5f:82:34:1e:cc:61:cb:98:f6:e7:1d:a1:ca:94:2e: 9b:fb:32:2e:a3:2f:f2:3b:6c:e9:83:49:d0:63:b1:d3:3e:d9: 73:32:85:f3:4b:fa:80:7b:4b:e5:c2:92:c1:08:c7:7b:fb:ad: 1e:03:03:a1:67:f6:68:57:2f:c0:e0:c9:99:10:1f:a6:25:39: 9a:dc:18:98:c9:d4:40:e5:d9:97:05:c6:91:c2:54:73:a2:a3: c7:ea:b9:6e:05:9f:6f:6b:74:d0:2c:9e:d5:30:e3:3d:6c:b8: 78:8b:93:31:2f:47:3a:4a:fd:75:59:c4:c1:5f:bf:a5:02:ff: 13:0d:9a:d2:08:01:45:4d:de:36:d6:5c:b8:2a:84:df:92:60: 16:28:bd:22:41:b5:5a:db:2d:0d:3c:2f:10:05:a4:d0:80:f3: e5:4a:08:3b:f1:99:da:68:49:bf:db:44:d5:6e:d6:95:23:a1: 45:83:b1:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2F6CvR3Yuwy4RSeq+QOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmVmM2RlNTBkMDdkZjNkN2E4NjJlMWNhYzczMDNjZWZiZThjYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3wh/lAeWMrmkxveRzEmI1XPUqZ4 FKJ80IAhe/3DWLaRejY94QyxaygGg/OLLMrKK0tLEEwZDH62z2K7c+L4O7rlODRR zLM0sAVU9stymtl2NrKUpW/L0IULXajtPK4K7KXuEgAT7cLpBpo3OaCAhd+5P552 CvQFieF3v/Zw+2cPb4eZOUKD0jYcygbD4ib6ADyKohoHXEijBhm9lDsa7riWR7sS qbMt2YMNxNwi8A2J+JDOOYp56qTuXw+dgf2ZbJhHAVv3Ekkc2tJMHK5aTgYxpUZU uUsjmBP6Ey3C5npxElOqpQRGmtbIfi19nvbwHsCFBe+Qiw3zKi/0Kkd8EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbvPeUNB989eoYuHKxzA8776MslMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvbHU4OTVRMEgzejE2aGk0Y3JITUR6dnZveXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTqTMA0G CSqGSIb3DQEBCwUAA4IBAQAvUXrhTjRd9Z9HyYBPYPoELFD19J5lq+Qqt6dfWos0 dBZv7HC82+lolwOhHyrpUhSTouQLSnTNRSlk+BSJyapHxD7ko817JnL6XMFfgjQe zGHLmPbnHaHKlC6b+zIuoy/yO2zpg0nQY7HTPtlzMoXzS/qAe0vlwpLBCMd7+60e AwOhZ/ZoVy/A4MmZEB+mJTma3BiYydRA5dmXBcaRwlRzoqPH6rluBZ9va3TQLJ7V MOM9bLh4i5MxL0c6Sv11WcTBX7+lAv8TDZrSCAFFTd421ly4KoTfkmAWKL0iQbVa 2y0NPC8QBaTQgPPlSgg78ZnaaEm/20TVbtaVI6FFg7Hx -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:35 2026 by rpki-client