This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/LKLzayTx02NKt4IYLkBu7eAzfMQ.roa File: LKLzayTx02NKt4IYLkBu7eAzfMQ.roa (raw, json) Hash identifier: mj+HEmIxR6MSV3YLRBJoyixi3pfyWUn/3aiy0wIfWXE= Subject key identifier: 2C:A2:F3:6B:24:F1:D3:63:4A:B7:82:18:2E:40:6E:ED:E0:33:7C:C4 Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673 Certificate serial: 019B7C805D01DCC61525D6F217C4F606731C Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/LKLzayTx02NKt4IYLkBu7eAzfMQ.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210520 IP address blocks: 62.3.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5d:01:dc:c6:15:25:d6:f2:17:c4:f6:06:73:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca2f36b24f1d3634ab782182e406eede0337cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:d5:55:6f:de:bb:26:9e:c8:79:23:b7:c1: 84:29:88:2c:ae:e9:9a:51:e4:1f:35:39:b1:6e:bd: 19:fd:32:5b:6e:28:77:a6:99:33:0e:ba:85:ff:4c: 06:61:e4:f6:ff:82:56:9c:e2:af:eb:e3:1d:c7:c0: dc:29:f2:46:76:c4:28:d1:74:bd:18:cd:24:5d:9a: dc:ad:9a:8a:b8:9b:3e:40:f0:de:3f:15:ba:e5:80: fc:89:56:f5:a2:bf:2c:6a:0b:5c:2e:f4:bc:c6:bf: ed:19:0c:aa:d1:2b:b3:4e:52:54:19:90:a9:21:8a: 12:81:3d:2a:5d:f5:89:71:45:49:88:f3:df:22:6b: 89:c7:f2:dc:c0:6a:d0:45:bc:c2:ad:f6:dd:bc:f9: ad:aa:a8:7a:52:4c:a9:fd:8a:14:5b:48:5e:a2:8f: f5:62:37:00:86:82:cf:cd:bb:9f:38:ca:7a:c8:84: 7d:a1:18:af:88:5d:49:85:d8:58:86:fc:09:68:4e: 5c:6f:0e:b4:db:61:f9:69:26:e0:71:83:b9:aa:46: bc:c6:d1:ca:0a:15:10:d3:0c:d6:53:fa:29:7e:57: fe:2b:1a:ab:c4:1d:77:df:18:4f:a2:8a:e7:d4:e8: 73:02:a6:6e:56:81:93:b2:39:f5:e2:c5:08:c9:f8: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A2:F3:6B:24:F1:D3:63:4A:B7:82:18:2E:40:6E:ED:E0:33:7C:C4 X509v3 Authority Key Identifier: keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/LKLzayTx02NKt4IYLkBu7eAzfMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.16.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:a6:e9:dc:22:ed:c4:4a:3a:9d:56:3a:04:b2:4a:9f:dd:6e: d0:d1:d7:7f:f6:ed:fc:5a:18:7b:ff:60:6e:93:8d:40:41:a4: 68:d9:10:02:6a:66:ea:ea:cf:91:0e:0f:bf:2a:ed:e6:2c:9b: c2:e3:82:b6:80:15:9f:c6:38:c0:c6:fd:5f:26:46:f3:8b:9d: 2f:1a:3d:e9:4a:b9:24:b7:fd:35:84:fc:41:69:87:d2:07:fe: 4e:55:f5:a7:9f:3d:c5:bf:51:63:08:83:d7:b2:6d:52:1a:e3: 4d:4d:e2:b0:96:af:e5:22:d8:06:40:f9:21:3d:7e:be:0a:0c: ac:87:ad:50:ae:b9:2b:fc:88:10:a5:d5:fe:28:e8:57:ed:ed: 66:0f:e4:b8:b3:1e:bf:32:ca:6e:08:8e:5a:41:bf:99:b5:56: 75:f3:a0:7f:bc:45:6f:ac:17:ed:a4:a4:cd:75:8d:84:56:d4: d6:14:6a:0d:10:73:f0:a3:88:4d:ce:c5:6e:0f:43:17:47:84: 29:25:bf:9d:13:4e:cc:b9:b1:f5:86:72:db:ac:12:c0:e3:09: 8a:1f:25:1b:c7:92:79:88:56:65:a5:f9:f8:28:14:3e:4b:eb: 08:44:a1:9f:49:d6:80:7e:a7:4e:23:72:70:c6:95:13:53:a4: b0:d1:78:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gF0B3MYVJdbyF8T2BnMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjc0ZjJjNWJlYjk5OTliODY3M2M3NjA3NDNjN2U3ZDMx Y2Q2NzMwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2EyZjM2YjI0ZjFkMzYzNGFiNzgyMTgyZTQwNmVlZGUwMzM3Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPHVVW/euyaeyHkjt8GEKYgsruma UeQfNTmxbr0Z/TJbbih3ppkzDrqF/0wGYeT2/4JWnOKv6+Mdx8DcKfJGdsQo0XS9 GM0kXZrcrZqKuJs+QPDePxW65YD8iVb1or8sagtcLvS8xr/tGQyq0SuzTlJUGZCp IYoSgT0qXfWJcUVJiPPfImuJx/LcwGrQRbzCrfbdvPmtqqh6Ukyp/YoUW0heoo/1 YjcAhoLPzbufOMp6yIR9oRiviF1JhdhYhvwJaE5cbw6022H5aSbgcYO5qka8xtHK ChUQ0wzWU/opflf+KxqrxB133xhPoorn1OhzAqZuVoGTsjn14sUIyfjsTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyi82sk8dNjSreCGC5Abu3gM3zEMB8GA1UdIwQY MBaAFEEnTyxb65mZuGc8dgdDx+fTHNZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDIt YTQ4NzUyYjgwNGM3LzEvTEtMemF5VHgwMk5LdDRJWUxrQnU3ZUF6Zk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDItYTQ4NzUyYjgwNGM3 LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMQMA0G CSqGSIb3DQEBCwUAA4IBAQAdpuncIu3ESjqdVjoEskqf3W7Q0dd/9u38Whh7/2Bu k41AQaRo2RACambq6s+RDg+/Ku3mLJvC44K2gBWfxjjAxv1fJkbzi50vGj3pSrkk t/01hPxBaYfSB/5OVfWnnz3Fv1FjCIPXsm1SGuNNTeKwlq/lItgGQPkhPX6+Cgys h61Qrrkr/IgQpdX+KOhX7e1mD+S4sx6/MspuCI5aQb+ZtVZ186B/vEVvrBftpKTN dY2EVtTWFGoNEHPwo4hNzsVuD0MXR4QpJb+dE07MubH1hnLbrBLA4wmKHyUbx5J5 iFZlpfn4KBQ+S+sIRKGfSdaAfqdOI3JwxpUTU6Sw0Xj5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client