This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/lx-y9PtQp55g9e257pFIFA6PrMk.roa File: lx-y9PtQp55g9e257pFIFA6PrMk.roa (raw, json) Hash identifier: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8= Subject key identifier: 97:1F:B2:F4:FB:50:A7:9E:60:F5:ED:B9:EE:91:48:14:0E:8F:AC:C9 Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Certificate serial: 019B7F85390AE1CEE3A53CF6F7A1D409204E Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/lx-y9PtQp55g9e257pFIFA6PrMk.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49539 IP address blocks: 212.106.73.0/24 maxlen: 24 217.78.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:39:0a:e1:ce:e3:a5:3c:f6:f7:a1:d4:09:20:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=971fb2f4fb50a79e60f5edb9ee9148140e8facc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:33:82:80:33:f4:8e:37:33:76:1d:49:b5: 63:dc:0d:3e:28:59:f6:fd:f1:58:94:73:34:9e:85: f3:ae:5c:7b:af:be:37:a1:46:c3:dd:9e:a7:6f:b2: a4:ce:c2:fd:1b:8c:6d:7c:4b:ad:6c:32:03:67:b1: 2b:eb:61:8a:d5:98:08:34:4b:63:8a:cf:d5:45:b6: f1:f6:41:bb:f1:5d:99:41:56:c3:a0:5c:50:b9:2e: e1:df:ff:de:58:54:18:ec:0a:2d:ce:f6:bb:1a:bc: 28:dd:51:5a:cf:53:27:0c:50:9f:ea:d1:86:52:c6: 20:e8:6f:5f:74:0c:49:80:78:fa:9c:cf:10:5e:de: 50:34:34:98:60:cf:d2:f3:e6:fa:b4:0c:66:f4:7f: a5:92:dd:1f:52:0b:e1:11:2c:32:99:56:30:a0:fd: 27:d5:bc:34:0e:8f:69:ad:23:00:eb:d8:7b:42:ec: bb:33:d7:31:01:70:7e:1e:a3:28:e5:be:4e:97:b9: 6e:e3:3b:40:47:54:23:99:8b:e7:e7:a6:ee:29:9f: 6b:f2:b9:3c:51:1f:c1:d1:0a:c6:d9:c0:ce:cd:fc: 18:3c:7f:23:d0:52:cf:df:20:f1:cc:26:07:28:f6: 80:62:63:c3:bf:e2:81:29:0f:57:2b:ff:88:a9:a5: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1F:B2:F4:FB:50:A7:9E:60:F5:ED:B9:EE:91:48:14:0E:8F:AC:C9 X509v3 Authority Key Identifier: keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/lx-y9PtQp55g9e257pFIFA6PrMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.106.73.0/24 217.78.56.0/24 Signature Algorithm: sha256WithRSAEncryption 58:2c:c7:eb:84:24:09:3a:a9:3b:33:fe:19:6b:4f:4a:4d:fd: 6c:ef:00:32:be:15:94:06:55:07:e9:f0:10:51:79:0f:66:be: b5:4a:63:a2:ee:85:da:25:73:46:2d:4a:68:bb:b9:87:70:18: a4:24:05:bb:0e:18:56:9a:d5:61:31:1f:e2:9b:3d:a5:56:a2: 6a:fd:8e:b0:33:86:57:d3:f2:f1:b6:de:af:85:2e:77:99:f2: 6d:68:4d:5d:8d:bc:94:bf:5d:5c:f6:66:cc:b4:27:42:68:7c: 8e:36:7c:b1:25:6e:3e:cb:a3:48:76:99:2a:ac:60:4b:06:89: ab:8d:ab:0a:ee:34:b1:87:61:7a:00:16:ef:f2:0f:11:a3:b0: 70:36:ca:f8:85:e8:73:36:e5:48:6b:ee:15:e6:2e:6c:0d:d9: 4c:10:c2:81:a6:bc:f9:dc:f9:32:99:18:90:19:e6:b9:33:a4: f2:65:de:6a:c3:5b:bb:c8:01:32:73:c9:89:8b:c3:75:4b:07: e2:06:3e:61:f1:8a:79:33:bc:c0:f8:7c:6a:0b:99:d0:28:82: 77:27:14:0e:5e:f3:1d:07:7b:b3:ac:fb:a9:f0:a1:eb:38:1c: b1:66:7c:c5:3b:45:3f:0a:d0:ae:9c:17:76:55:f5:9b:91:72: 35:41:73:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hTkK4c7jpTz296HUCSBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2E2MzNlZjJjMDgyNTFhNTg2MDM1NjJlNTZhYTZlZmE5 M2VjMjUwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzFmYjJmNGZiNTBhNzllNjBmNWVkYjllZTkxNDgxNDBlOGZhY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO0zgoAz9I43M3YdSbVj3A0+KFn2 /fFYlHM0noXzrlx7r743oUbD3Z6nb7KkzsL9G4xtfEutbDIDZ7Er62GK1ZgINEtj is/VRbbx9kG78V2ZQVbDoFxQuS7h3//eWFQY7Aotzva7Grwo3VFaz1MnDFCf6tGG UsYg6G9fdAxJgHj6nM8QXt5QNDSYYM/S8+b6tAxm9H+lkt0fUgvhESwymVYwoP0n 1bw0Do9prSMA69h7Quy7M9cxAXB+HqMo5b5Ol7lu4ztAR1QjmYvn56buKZ9r8rk8 UR/B0QrG2cDOzfwYPH8j0FLP3yDxzCYHKPaAYmPDv+KBKQ9XK/+IqaVXsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJcfsvT7UKeeYPXtue6RSBQOj6zJMB8GA1UdIwQY MBaAFOw6Yz7ywIJRpYYDVi5Wqm76k+wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUt ZjdjMmMyYTkxYmMyLzEvbHgteTlQdFFwNTVnOWUyNTdwRklGQTZQck1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUtZjdjMmMyYTkxYmMy LzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1GpJAwQA 2U44MA0GCSqGSIb3DQEBCwUAA4IBAQBYLMfrhCQJOqk7M/4Za09KTf1s7wAyvhWU BlUH6fAQUXkPZr61SmOi7oXaJXNGLUpou7mHcBikJAW7DhhWmtVhMR/imz2lVqJq /Y6wM4ZX0/Lxtt6vhS53mfJtaE1djbyUv11c9mbMtCdCaHyONnyxJW4+y6NIdpkq rGBLBomrjasK7jSxh2F6ABbv8g8Ro7BwNsr4hehzNuVIa+4V5i5sDdlMEMKBprz5 3PkymRiQGea5M6TyZd5qw1u7yAEyc8mJi8N1SwfiBj5h8Yp5M7zA+HxqC5nQKIJ3 JxQOXvMdB3uzrPup8KHrOByxZnzFO0U/CtCunBd2VfWbkXI1QXPm -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client