This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa File: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (raw, json) Hash identifier: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ= Subject key identifier: 2D:97:32:3E:AE:60:71:59:82:64:93:6C:99:43:E7:E5:5C:02:58:A4 Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Certificate serial: 019B79EC68D103914B5377BAA92B0B5728CD Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa Signing time: Thu 01 Jan 2026 14:18:15 +0000 ROA not before: Thu 01 Jan 2026 14:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48882 IP address blocks: 91.224.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:68:d1:03:91:4b:53:77:ba:a9:2b:0b:57:28:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d97323eae6071598264936c9943e7e55c0258a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:22:ea:0b:5d:6c:d9:c1:ee:2b:b0:aa:9f: cb:ad:d3:72:68:dc:b1:c1:8d:21:14:e1:9c:c8:38: b6:74:bb:cc:98:c7:e2:59:70:66:fd:c6:5f:cb:7f: fe:30:a6:6e:4f:2b:1c:e2:3f:a7:61:ae:1e:9e:96: 2f:5d:d9:19:06:0a:92:d3:47:3b:d3:90:14:39:22: 62:ad:bb:fa:12:55:e7:04:fa:8f:47:10:a6:75:ad: b7:c7:e0:3e:1e:b2:f2:f2:ea:17:be:5b:f7:7a:c2: 1c:cf:58:10:9d:0e:29:8f:c9:db:fe:41:0b:34:78: 45:9e:b9:ce:c9:5a:14:cc:4b:8c:26:78:99:43:6b: 06:77:6a:d7:4b:e2:9a:4f:ec:d2:bb:24:93:04:ef: 33:bf:51:fb:a2:ef:92:5a:10:1d:fd:54:f2:8d:14: de:65:b5:38:3b:2e:6f:e3:f6:f2:69:cd:bf:6f:1a: ec:f2:4c:54:6e:20:57:8c:6b:66:3a:a4:23:76:70: e9:82:15:62:2e:08:6f:2d:b7:bc:44:07:58:98:43: a0:4b:cb:f0:69:ec:19:9e:0c:4d:ef:27:8c:ad:75: a0:be:7c:fd:0c:b7:e1:32:76:35:27:17:fd:8f:76: e3:83:1c:d2:64:2e:33:30:b9:24:36:6d:a8:ff:28: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:97:32:3E:AE:60:71:59:82:64:93:6C:99:43:E7:E5:5C:02:58:A4 X509v3 Authority Key Identifier: keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.113.0/24 Signature Algorithm: sha256WithRSAEncryption 25:21:79:89:72:58:69:96:4b:a1:89:df:5f:51:6e:b3:c1:5a: f8:83:19:86:d4:91:93:e1:d4:88:a8:97:cd:51:fe:4e:b3:8b: 19:fa:2a:c9:39:ec:df:4b:74:32:41:a8:27:60:9e:83:5e:78: 00:2f:10:24:23:3d:4f:5a:c6:19:9f:77:e6:ad:73:99:d9:da: 9a:f4:5e:e4:97:65:bd:e6:94:83:ff:9d:d6:39:e2:17:b5:6a: b9:38:4f:79:c1:6f:06:9f:68:e6:2a:2a:4d:3a:79:bc:19:7f: 33:f8:62:c9:7f:0b:74:4f:b4:df:ed:2f:c3:c1:cd:c0:8e:2d: bc:14:9d:16:37:7f:76:38:bb:0f:8f:1c:dc:22:84:fd:26:b0: c3:e5:17:48:da:2b:e4:0d:fd:f3:10:19:1d:2e:a1:23:0e:be: 2d:aa:e1:a0:cb:52:e6:27:92:9d:c1:0f:b3:07:b1:e3:89:48: 05:37:c5:60:f8:61:0d:fd:80:9c:37:dd:18:06:c5:bf:09:03: 25:c8:f6:ec:dd:3e:a2:5c:d0:67:6e:76:6e:18:89:45:e1:53: 66:84:a3:df:b1:ff:b0:79:c8:a5:73:69:83:80:19:f1:6a:dd: 0f:bd:e1:6c:82:7d:2f:54:68:28:2b:50:b9:5b:25:a6:0b:0e: 19:e8:f0:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GjRA5FLU3e6qSsLVyjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYxNDJjZTMyOTBhYjY3ODZkM2QzMGYyNmI1ZTQxZmQ2 ODRkZGUwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDk3MzIzZWFlNjA3MTU5ODI2NDkzNmM5OTQzZTdlNTVjMDI1OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGIi6gtdbNnB7iuwqp/LrdNyaNyx wY0hFOGcyDi2dLvMmMfiWXBm/cZfy3/+MKZuTysc4j+nYa4enpYvXdkZBgqS00c7 05AUOSJirbv6ElXnBPqPRxCmda23x+A+HrLy8uoXvlv3esIcz1gQnQ4pj8nb/kEL NHhFnrnOyVoUzEuMJniZQ2sGd2rXS+KaT+zSuySTBO8zv1H7ou+SWhAd/VTyjRTe ZbU4Oy5v4/byac2/bxrs8kxUbiBXjGtmOqQjdnDpghViLghvLbe8RAdYmEOgS8vw aewZngxN7yeMrXWgvnz9DLfhMnY1Jxf9j3bjgxzSZC4zMLkkNm2o/yg5XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2XMj6uYHFZgmSTbJlD5+VcAlikMB8GA1UdIwQY MBaAFDZGFCzjKQq2eG09MPJrXkH9aE3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTct ZDMwODU0MmExZDg2LzEvTFpjeVBxNWdjVm1DWkpOc21VUG41VndDV0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTctZDMwODU0MmExZDg2 LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+BxMA0G CSqGSIb3DQEBCwUAA4IBAQAlIXmJclhplkuhid9fUW6zwVr4gxmG1JGT4dSIqJfN Uf5Os4sZ+irJOezfS3QyQagnYJ6DXngALxAkIz1PWsYZn3fmrXOZ2dqa9F7kl2W9 5pSD/53WOeIXtWq5OE95wW8Gn2jmKipNOnm8GX8z+GLJfwt0T7Tf7S/Dwc3Aji28 FJ0WN392OLsPjxzcIoT9JrDD5RdI2ivkDf3zEBkdLqEjDr4tquGgy1LmJ5KdwQ+z B7HjiUgFN8Vg+GEN/YCcN90YBsW/CQMlyPbs3T6iXNBnbnZuGIlF4VNmhKPfsf+w ecilc2mDgBnxat0PveFsgn0vVGgoK1C5WyWmCw4Z6PAJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:28 2026 by rpki-client