This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/LKLutE-uCKR41ay5iaoVFawv-Gs.roa File: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (raw, json) Hash identifier: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs= Subject key identifier: 2C:A2:EE:B4:4F:AE:08:A4:78:D5:AC:B9:89:AA:15:15:AC:2F:F8:6B Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B797F0A5D6F7358014D2C17A486BDAAA6 Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/LKLutE-uCKR41ay5iaoVFawv-Gs.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5761 IP address blocks: 193.46.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0a:5d:6f:73:58:01:4d:2c:17:a4:86:bd:aa:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca2eeb44fae08a478d5acb989aa1515ac2ff86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:3d:f7:61:9b:71:e2:df:24:45:fe:a3:d7: 06:3b:33:3b:a3:5e:6c:c8:ed:4a:6c:d1:a6:9f:a1: 6c:71:67:24:69:5d:f2:2d:86:8a:8a:97:70:c1:2e: 15:5f:45:82:14:ae:30:8d:ac:6b:4a:54:53:f4:35: ae:2d:a9:2e:b1:c0:02:c2:ff:60:96:e3:d2:27:60: 05:ce:ab:77:65:d7:28:a6:75:17:6b:16:65:7f:46: 04:ad:9f:57:39:52:c3:87:fd:5e:68:b7:6b:ee:0b: 11:c6:ad:8b:06:a0:4b:8f:d6:bb:61:dd:c8:41:77: 44:ae:6c:28:d4:0c:67:e6:65:56:ba:1c:02:6c:02: 57:d6:63:59:03:4c:46:2e:51:b1:c0:7a:db:3d:ab: 25:1c:3a:92:d7:4a:a7:45:ba:fa:a2:62:e2:ca:b5: 49:7d:e1:23:aa:46:41:dc:9c:4e:5e:ca:86:66:86: 4f:a0:35:74:f8:6a:c9:33:38:d7:32:89:3a:f0:27: d5:4a:56:8d:9d:39:c7:2e:1f:bf:e8:37:75:2b:f6: 13:07:c5:b0:8d:92:76:8d:34:96:73:ee:8c:79:7f: a8:2a:3f:ba:bf:0f:1b:0f:62:01:14:cc:fd:41:98: a6:05:09:d8:82:11:43:76:e5:19:e8:65:30:fb:bd: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A2:EE:B4:4F:AE:08:A4:78:D5:AC:B9:89:AA:15:15:AC:2F:F8:6B X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/LKLutE-uCKR41ay5iaoVFawv-Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.249.0/24 Signature Algorithm: sha256WithRSAEncryption 31:df:e1:77:ae:88:92:c7:79:cc:c0:2c:89:3e:57:66:7d:6e: 26:3c:59:0e:9a:59:9a:64:a8:f3:15:ba:dd:4a:9a:ea:75:51: d0:a2:a4:fe:9a:65:63:0a:70:e3:2e:5d:03:05:9d:6b:20:5f: 71:90:2a:f5:1e:27:4e:e0:d2:87:4f:fa:66:c7:1e:bb:31:11: 9d:05:e5:a3:bf:62:46:79:a0:45:0a:0e:e5:9c:10:cf:47:f5: 0e:b5:ff:ae:db:3b:51:05:c9:b2:ea:69:2b:1c:5f:9f:da:35: fe:1a:3a:46:e5:ca:b2:0e:be:aa:9c:ad:bd:d2:0e:89:f3:97: 6e:03:14:cd:49:85:2a:1b:60:28:46:e3:63:7e:9f:f5:fa:68: 6b:03:eb:05:32:8c:3b:78:ee:be:36:cd:c0:de:35:ff:27:d5: f9:46:c3:9a:01:40:7c:1c:89:30:80:45:da:c5:07:49:9a:8d: 43:99:b6:95:10:60:52:8b:23:f3:b2:76:a2:74:3e:99:51:d2: bf:95:0b:a3:aa:bf:5f:25:15:28:e2:58:b6:02:81:27:48:17: 5e:33:43:82:6b:ce:21:8b:6f:c4:fd:d3:e0:8b:58:51:1f:36: 36:13:be:50:ea:80:f9:e4:84:5b:7a:81:81:a6:ab:b3:31:99: 6c:f0:1d:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwpdb3NYAU0sF6SGvaqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2EyZWViNDRmYWUwOGE0NzhkNWFjYjk4OWFhMTUxNWFjMmZmODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXE992GbceLfJEX+o9cGOzM7o15s yO1KbNGmn6FscWckaV3yLYaKipdwwS4VX0WCFK4wjaxrSlRT9DWuLakuscACwv9g luPSJ2AFzqt3ZdcopnUXaxZlf0YErZ9XOVLDh/1eaLdr7gsRxq2LBqBLj9a7Yd3I QXdErmwo1Axn5mVWuhwCbAJX1mNZA0xGLlGxwHrbPaslHDqS10qnRbr6omLiyrVJ feEjqkZB3JxOXsqGZoZPoDV0+GrJMzjXMok68CfVSlaNnTnHLh+/6Dd1K/YTB8Ww jZJ2jTSWc+6MeX+oKj+6vw8bD2IBFMz9QZimBQnYghFDduUZ6GUw+71zZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyi7rRPrgikeNWsuYmqFRWsL/hrMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvTEtMdXRFLXVDS1I0MWF5NWlhb1ZGYXd2LUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS75MA0G CSqGSIb3DQEBCwUAA4IBAQAx3+F3roiSx3nMwCyJPldmfW4mPFkOmlmaZKjzFbrd SprqdVHQoqT+mmVjCnDjLl0DBZ1rIF9xkCr1HidO4NKHT/pmxx67MRGdBeWjv2JG eaBFCg7lnBDPR/UOtf+u2ztRBcmy6mkrHF+f2jX+GjpG5cqyDr6qnK290g6J85du AxTNSYUqG2AoRuNjfp/1+mhrA+sFMow7eO6+Ns3A3jX/J9X5RsOaAUB8HIkwgEXa xQdJmo1DmbaVEGBSiyPzsnaidD6ZUdK/lQujqr9fJRUo4li2AoEnSBdeM0OCa84h i2/E/dPgi1hRHzY2E75Q6oD55IRbeoGBpquzMZls8B0f -----END CERTIFICATE-----Generated at Sun Jan 18 17:55:45 2026 by rpki-client