This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa File: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (raw, json) Hash identifier: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA= Subject key identifier: 95:C1:4C:2C:12:78:42:C9:B6:A5:0E:95:50:3D:D1:62:2D:CC:4A:AC Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019B7F83DD02C786ECBB17A5D8DE3385395F Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 94.237.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:dd:02:c7:86:ec:bb:17:a5:d8:de:33:85:39:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95c14c2c127842c9b6a50e95503dd1622dcc4aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:bf:90:41:a8:95:4e:43:d8:a9:0a:6d:da: df:5c:a8:55:ba:6c:4c:c1:a9:73:66:3e:cf:74:db: 29:e1:4f:a4:bc:1c:d5:6c:7c:7b:12:fb:55:7b:d3: d1:e4:3f:a3:a1:4d:aa:37:d1:ac:2e:bf:07:e2:db: e3:b8:70:5f:f8:19:3a:cf:cd:c3:da:4b:cd:98:e3: 06:14:74:15:6c:a4:54:9a:1b:4a:fa:c3:ce:9c:7d: 34:14:90:2e:0a:8c:4d:6a:98:f1:b6:74:7c:ab:f4: 47:db:db:5c:31:e8:49:4e:92:c1:ea:1a:86:0c:99: 6b:c4:85:26:de:90:4d:23:a8:14:8d:23:cd:ec:f5: e0:fd:1e:fc:1f:cc:34:ee:ef:49:97:9d:56:ea:d7: 2e:c4:de:80:45:6f:fa:a6:cd:1b:0f:86:0f:ee:c3: 19:b9:87:8a:99:28:0d:20:9e:2a:b7:8f:56:a2:6b: 79:c0:41:6b:96:7a:e4:d8:c6:db:79:22:0c:b3:63: db:49:f3:f4:24:26:1a:6c:a6:09:d3:6b:19:15:5c: 55:9e:28:58:96:bc:74:d6:eb:dd:fd:0f:31:ae:d8: 3c:60:ef:4e:83:d8:39:fd:8d:0e:f8:e6:0a:c0:5f: 8e:a0:4b:c7:8c:76:4f:19:e0:9d:62:18:89:83:a7: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:4C:2C:12:78:42:C9:B6:A5:0E:95:50:3D:D1:62:2D:CC:4A:AC X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.237.127.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:56:30:c9:f4:de:6c:5a:fa:59:9f:72:0d:ac:68:bb:5e:06: 9b:0a:58:6f:2e:8b:50:82:5b:11:b8:2e:3c:84:b9:46:5d:54: 6c:7f:aa:93:4a:77:9b:9a:f7:2c:d0:5f:04:14:a7:97:50:92: 97:fd:45:bc:35:95:28:18:ab:16:05:59:59:d0:df:ab:4a:3d: 39:bb:03:06:8c:86:1a:1c:dd:d0:7f:1a:d2:8b:8f:11:ab:ba: b6:8f:41:8a:e6:a2:d0:fb:c8:ec:3e:19:9c:33:e2:37:81:83: d9:2f:ec:f0:fc:36:3e:67:38:f3:0a:2d:1e:22:f5:07:13:d9: d1:f1:31:73:a2:8d:4a:b2:5f:47:c6:aa:ae:c5:5b:ee:83:8e: a2:05:af:42:61:a1:6f:51:59:eb:b1:e9:ef:16:57:1e:78:af: 57:ff:d6:fc:f1:00:a0:72:0a:b3:62:0b:15:70:f3:48:b0:09: f1:52:ae:63:23:fa:02:14:f0:ae:0f:59:52:1c:0c:d0:04:37: 13:04:56:a7:a2:3e:db:02:b0:f4:f0:ad:25:f4:87:e3:34:e1: 6d:23:a0:07:8c:9c:72:88:d5:b7:cb:bc:68:3f:5d:46:79:7a: 6d:11:d3:77:1d:95:b2:a2:be:d5:19:2d:24:be:d4:9a:70:77: 96:2e:05:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g90Cx4bsuxel2N4zhTlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWMxNGMyYzEyNzg0MmM5YjZhNTBlOTU1MDNkZDE2MjJkY2M0YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurO/kEGolU5D2KkKbdrfXKhVumxM walzZj7PdNsp4U+kvBzVbHx7EvtVe9PR5D+joU2qN9GsLr8H4tvjuHBf+Bk6z83D 2kvNmOMGFHQVbKRUmhtK+sPOnH00FJAuCoxNapjxtnR8q/RH29tcMehJTpLB6hqG DJlrxIUm3pBNI6gUjSPN7PXg/R78H8w07u9Jl51W6tcuxN6ARW/6ps0bD4YP7sMZ uYeKmSgNIJ4qt49Womt5wEFrlnrk2MbbeSIMs2PbSfP0JCYabKYJ02sZFVxVnihY lrx01uvd/Q8xrtg8YO9Og9g5/Y0O+OYKwF+OoEvHjHZPGeCdYhiJg6chsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXBTCwSeELJtqUOlVA90WItzEqsMB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvbGNGTUxCSjRRc20ycFE2VlVEM1JZaTNNU3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXu1/MA0G CSqGSIb3DQEBCwUAA4IBAQCKVjDJ9N5sWvpZn3INrGi7XgabClhvLotQglsRuC48 hLlGXVRsf6qTSnebmvcs0F8EFKeXUJKX/UW8NZUoGKsWBVlZ0N+rSj05uwMGjIYa HN3QfxrSi48Rq7q2j0GK5qLQ+8jsPhmcM+I3gYPZL+zw/DY+ZzjzCi0eIvUHE9nR 8TFzoo1Ksl9HxqquxVvug46iBa9CYaFvUVnrsenvFlceeK9X/9b88QCgcgqzYgsV cPNIsAnxUq5jI/oCFPCuD1lSHAzQBDcTBFanoj7bArD08K0l9IfjNOFtI6AHjJxy iNW3y7xoP11GeXptEdN3HZWyor7VGS0kvtSacHeWLgWt -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:54 2026 by rpki-client