This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/LZoc3NH1xvdhaKtZh7r595LzWZA.roa File: LZoc3NH1xvdhaKtZh7r595LzWZA.roa (raw, json) Hash identifier: cnGjanwZ2hKT1myBjJDNeESOJnTd39dvObuBgiZbmh0= Subject key identifier: 2D:9A:1C:DC:D1:F5:C6:F7:61:68:AB:59:87:BA:F9:F7:92:F3:59:90 Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd Certificate serial: 019B7F835BD308F687239E5C32D120800BDB Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/LZoc3NH1xvdhaKtZh7r595LzWZA.roa Signing time: Fri 02 Jan 2026 16:21:13 +0000 ROA not before: Fri 02 Jan 2026 16:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214125 IP address blocks: 91.207.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5b:d3:08:f6:87:23:9e:5c:32:d1:20:80:0b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d9a1cdcd1f5c6f76168ab5987baf9f792f35990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:79:27:ce:8d:6a:8f:26:9e:7e:a0:aa:27: fa:9f:9b:73:20:59:01:b3:78:bf:cb:09:4e:e1:6f: 06:4a:59:cf:4c:9b:ae:3e:15:04:05:ce:6c:80:33: 49:eb:1a:c8:22:89:8d:57:2b:34:8c:a0:3c:fb:23: 78:6c:48:3a:f5:4d:18:73:00:5b:79:2f:25:5a:f2: 6f:6b:d5:2d:04:af:68:ff:5d:b0:fd:df:04:79:20: ef:4e:28:1e:ed:00:9c:2a:49:9f:12:41:bd:11:13: 43:e1:82:0b:fb:de:c8:23:16:ac:af:10:9b:56:12: ae:f9:3d:d8:18:a6:57:c0:0a:c8:6f:c1:54:89:d6: 5b:01:4e:65:c5:fa:1f:6d:27:87:a4:42:77:f7:15: 1f:b2:e2:ab:3d:38:88:e8:b1:07:0e:ad:8d:32:c8: c6:47:0a:be:ae:5e:48:6b:9e:5e:60:cc:1b:03:26: 00:8a:91:34:cb:9d:8e:2c:63:35:c3:b0:18:5f:2b: 20:a1:c2:4e:f4:26:18:8c:b6:19:a5:61:53:68:0b: e9:6f:cf:cb:c1:3a:b6:1f:0f:c8:17:f5:fa:a6:64: 64:97:a8:25:4b:25:ba:58:3e:81:35:85:32:a3:10: 9e:5c:47:e0:72:b3:7c:36:77:20:22:20:d6:81:2d: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:1C:DC:D1:F5:C6:F7:61:68:AB:59:87:BA:F9:F7:92:F3:59:90 X509v3 Authority Key Identifier: keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/LZoc3NH1xvdhaKtZh7r595LzWZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.182.0/24 Signature Algorithm: sha256WithRSAEncryption 80:29:11:cd:5f:9d:0a:76:9f:6e:d1:1e:d5:f2:1d:8d:5a:5f: d1:05:8f:ce:47:f7:6f:e7:6c:19:69:fc:9f:16:00:a1:26:8b: 58:9d:23:b5:16:e9:6e:12:62:ba:78:04:fe:2f:1e:56:a0:21: 98:88:0d:a5:c2:8e:a5:6f:4a:88:18:59:cd:07:5c:cb:72:86: 41:7f:7f:5b:2e:89:2c:9f:37:d9:33:c2:21:e9:cf:74:39:de: 53:9a:a4:e2:ad:20:95:ce:d3:29:54:ac:98:a0:93:42:95:3e: 5c:e6:a8:3b:d5:75:d7:2c:e1:0d:70:35:5c:52:75:7b:7e:4e: 32:b4:cb:68:b7:eb:65:bc:6b:67:fb:10:e5:6b:c8:b4:2d:4a: 31:ea:6d:2a:74:0c:4a:83:ed:b3:43:57:64:eb:0c:be:21:05: 03:a6:e2:a0:7a:8a:2e:1b:a3:e6:ac:da:a3:e4:74:f3:cf:2c: f7:58:e8:08:da:88:ea:f6:65:2b:d8:6b:b2:f3:b5:01:9c:49: ef:b3:bb:ee:6b:56:b3:0e:19:60:9e:71:a3:01:57:56:7d:18: 22:3d:55:96:77:99:49:54:eb:12:63:a1:04:ac:d8:af:1e:6d: 63:68:c1:12:53:5e:a1:21:38:31:63:ab:e6:d3:60:bf:b6:ec: e5:ae:16:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g1vTCPaHI55cMtEggAvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz M2EyYmQwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDlhMWNkY2QxZjVjNmY3NjE2OGFiNTk4N2JhZjlmNzkyZjM1OTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9d5J86Nao8mnn6gqif6n5tzIFkB s3i/ywlO4W8GSlnPTJuuPhUEBc5sgDNJ6xrIIomNVys0jKA8+yN4bEg69U0YcwBb eS8lWvJva9UtBK9o/12w/d8EeSDvTige7QCcKkmfEkG9ERND4YIL+97IIxasrxCb VhKu+T3YGKZXwArIb8FUidZbAU5lxfofbSeHpEJ39xUfsuKrPTiI6LEHDq2NMsjG Rwq+rl5Ia55eYMwbAyYAipE0y52OLGM1w7AYXysgocJO9CYYjLYZpWFTaAvpb8/L wTq2Hw/IF/X6pmRkl6glSyW6WD6BNYUyoxCeXEfgcrN8NncgIiDWgS1/oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2aHNzR9cb3YWirWYe6+feS81mQMB8GA1UdIwQY MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt Mjg1ZWM4ZmU4ZWM2LzEvTFpvYzNOSDF4dmRoYUt0Wmg3cjU5NUx6V1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2 LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8+2MA0G CSqGSIb3DQEBCwUAA4IBAQCAKRHNX50Kdp9u0R7V8h2NWl/RBY/OR/dv52wZafyf FgChJotYnSO1FuluEmK6eAT+Lx5WoCGYiA2lwo6lb0qIGFnNB1zLcoZBf39bLoks nzfZM8Ih6c90Od5TmqTirSCVztMpVKyYoJNClT5c5qg71XXXLOENcDVcUnV7fk4y tMtot+tlvGtn+xDla8i0LUox6m0qdAxKg+2zQ1dk6wy+IQUDpuKgeoouG6PmrNqj 5HTzzyz3WOgI2ojq9mUr2Guy87UBnEnvs7vua1azDhlgnnGjAVdWfRgiPVWWd5lJ VOsSY6EErNivHm1jaMESU16hITgxY6vm02C/tuzlrhb2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:10 2026 by rpki-client