This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa File: lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa (raw, json) Hash identifier: DrpvieBQ5necGa8UgAY1dX15pTb/xIkr2RXMaR6ga9M= Subject key identifier: 96:02:75:75:04:AC:78:32:E3:35:14:DF:34:B6:C4:7D:1D:80:31:DD Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362 Certificate serial: 019B78A30827EC72D067BBE3153DE2B635AA Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199028 IP address blocks: 81.161.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:08:27:ec:72:d0:67:bb:e3:15:3d:e2:b6:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362 Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9602757504ac7832e33514df34b6c47d1d8031dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:ce:65:f2:43:76:c4:6c:ec:3f:11:71:5b: 5c:00:08:25:af:82:c7:b2:9f:aa:bf:b2:64:c9:9a: b2:6e:65:58:49:29:26:84:f8:7f:df:bc:bb:da:cf: 7f:ae:9b:dd:da:c0:49:d9:94:3f:aa:9c:db:83:b7: cb:bb:74:82:5c:52:b5:02:47:6b:06:66:fb:90:a2: 1e:ad:e6:5d:8a:08:e0:ad:18:f9:12:b9:49:cb:a2: ce:08:f0:bd:1f:2d:f1:57:81:3b:b5:4e:18:fd:9f: b4:73:e5:07:d7:19:ac:f7:40:ba:36:37:8c:bb:c6: f9:f1:69:37:2d:67:68:04:84:5f:17:02:7a:68:f7: 62:99:bd:80:4a:aa:d1:3d:79:38:6c:8d:37:25:ee: d3:b8:c4:74:04:21:3c:db:fa:07:56:2c:02:f1:44: 54:4a:86:a5:e4:23:79:39:db:1d:c0:c7:0e:cb:53: ad:b9:21:ae:fa:d6:32:1a:ef:f1:d1:9f:75:9f:8f: 18:4e:b6:91:0f:8f:cf:86:3a:e1:b4:61:3e:92:6c: ba:6d:d8:e4:dc:17:1f:c2:f2:29:45:d5:b8:ce:46: 56:d7:03:50:45:51:83:d0:80:b1:3d:82:6b:a0:45: a1:1d:d3:64:f7:7c:a4:e7:73:c7:27:9f:1e:e9:f5: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:02:75:75:04:AC:78:32:E3:35:14:DF:34:B6:C4:7D:1D:80:31:DD X509v3 Authority Key Identifier: keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.112.0/23 Signature Algorithm: sha256WithRSAEncryption aa:0a:1a:c2:f7:ae:65:2c:79:f3:ab:69:92:69:06:cf:de:f8: 61:0b:33:15:05:ff:ea:12:08:a9:8e:3c:61:41:32:c5:d5:b8: 9b:16:ea:45:77:f2:e4:13:91:4e:ab:75:95:55:17:08:72:73: 94:e2:20:6e:b5:7f:0d:69:ea:00:55:35:c4:60:87:6f:e9:b1: 9c:08:06:6a:c8:e3:55:41:fd:73:53:ec:c3:b9:84:55:f9:1d: df:9f:ec:54:a0:e3:25:b5:7e:2c:d8:5f:c6:28:96:5f:cc:2c: 74:1a:42:9d:1f:f0:fc:5b:55:7b:73:90:09:26:9d:68:b5:48: 18:b6:a6:b9:d1:2a:56:ad:31:d3:5d:95:f2:c0:4e:64:fb:35: 58:1b:50:10:98:d3:e4:bd:a7:08:06:a7:98:5c:fe:7f:cd:05: 93:c3:7e:99:47:a9:ee:e3:99:1a:00:24:e5:8a:1f:af:27:4d: ed:4b:04:f3:3d:2c:98:50:a7:7e:71:b6:68:8e:c3:85:76:ae: 2c:b9:a0:f7:85:ef:0b:dc:31:56:bb:84:84:5e:ae:45:9c:f3: 7a:c7:3d:40:53:a4:80:72:d2:58:f3:17:8b:82:41:f9:ba:92: b8:e9:39:b4:8d:97:1f:78:ea:f4:6a:2b:22:d0:d2:a1:c1:7d: b7:e5:11:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owgn7HLQZ7vjFT3itjWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2Q0ZDQ5M2QzOTFjYTQ0NjhlNjEyY2U5MWI0N2YxYzgy ODMzNjIwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjAyNzU3NTA0YWM3ODMyZTMzNTE0ZGYzNGI2YzQ3ZDFkODAzMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJfOZfJDdsRs7D8RcVtcAAglr4LH sp+qv7JkyZqybmVYSSkmhPh/37y72s9/rpvd2sBJ2ZQ/qpzbg7fLu3SCXFK1Akdr Bmb7kKIereZdigjgrRj5ErlJy6LOCPC9Hy3xV4E7tU4Y/Z+0c+UH1xms90C6NjeM u8b58Wk3LWdoBIRfFwJ6aPdimb2ASqrRPXk4bI03Je7TuMR0BCE82/oHViwC8URU Soal5CN5OdsdwMcOy1OtuSGu+tYyGu/x0Z91n48YTraRD4/PhjrhtGE+kmy6bdjk 3BcfwvIpRdW4zkZW1wNQRVGD0ICxPYJroEWhHdNk93yk53PHJ58e6fUyXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYCdXUErHgy4zUU3zS2xH0dgDHdMB8GA1UdIwQY MBaAFAzNTUk9ORykRo5hLOkbR/HIKDNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQt NzUxMzdiMTI4NDJiLzEvbGdKMWRRU3NlRExqTlJUZk5MYkVmUjJBTWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQtNzUxMzdiMTI4NDJi LzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUaFwMA0G CSqGSIb3DQEBCwUAA4IBAQCqChrC965lLHnzq2mSaQbP3vhhCzMVBf/qEgipjjxh QTLF1bibFupFd/LkE5FOq3WVVRcIcnOU4iButX8NaeoAVTXEYIdv6bGcCAZqyONV Qf1zU+zDuYRV+R3fn+xUoOMltX4s2F/GKJZfzCx0GkKdH/D8W1V7c5AJJp1otUgY tqa50SpWrTHTXZXywE5k+zVYG1AQmNPkvacIBqeYXP5/zQWTw36ZR6nu45kaACTl ih+vJ03tSwTzPSyYUKd+cbZojsOFdq4suaD3he8L3DFWu4SEXq5FnPN6xz1AU6SA ctJY8xeLgkH5upK46Tm0jZcfeOr0aisi0NKhwX235RGb -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:10 2026 by rpki-client