This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/LnnTovLuI750TfHC0xewXl7THNU.roa File: LnnTovLuI750TfHC0xewXl7THNU.roa (raw, json) Hash identifier: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A= Subject key identifier: 2E:79:D3:A2:F2:EE:23:BE:74:4D:F1:C2:D3:17:B0:5E:5E:D3:1C:D5 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD878B318D747B8BF2ABFA6220A4D Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/LnnTovLuI750TfHC0xewXl7THNU.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210546 IP address blocks: 194.28.224.0/24 maxlen: 24 194.28.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d8:78:b3:18:d7:47:b8:bf:2a:bf:a6:22:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e79d3a2f2ee23be744df1c2d317b05e5ed31cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:12:bf:64:94:81:70:16:cc:89:2f:45:9a: f3:e0:ea:20:40:c9:90:8c:08:4f:87:dc:7f:80:9a: 72:a8:33:58:ba:ad:59:0b:d3:b6:07:4d:f4:4f:b1: 38:2d:35:7c:6f:82:7f:e3:c1:f7:92:80:92:bb:01: bf:67:74:1a:2b:a2:c8:02:28:41:a3:58:72:4d:ab: 8d:31:e3:cc:4f:21:c7:91:a7:5e:78:07:31:d3:35: 86:7f:d8:d3:de:72:51:78:08:26:a3:1c:67:97:e4: 89:dd:80:61:2e:cf:1c:54:e6:7c:86:35:6f:6b:95: a3:b0:30:c9:dc:2c:88:ac:f5:ee:61:24:6f:dc:c1: 5e:44:df:60:3a:fa:0d:9f:cf:8c:4c:13:78:d9:da: 36:52:3e:d8:ba:bb:19:bc:49:05:5f:89:4e:22:83: 27:31:bc:da:1f:39:fb:a3:4e:8d:3b:9e:18:d5:ff: e2:9c:b5:55:69:c5:09:1e:57:93:2c:0e:67:e0:fd: 7e:30:c1:9d:a1:6e:77:5a:cf:ea:bf:f7:6b:bc:f3: c3:40:58:ec:3c:51:3a:12:4e:3e:fa:5c:72:62:f3: bd:8f:fd:ac:2b:68:19:4d:f2:53:1b:de:ff:b5:12: 22:82:c2:14:22:de:7e:33:30:79:07:16:c3:58:1b: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:79:D3:A2:F2:EE:23:BE:74:4D:F1:C2:D3:17:B0:5E:5E:D3:1C:D5 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/LnnTovLuI750TfHC0xewXl7THNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:a9:d0:f5:4b:1e:9a:63:6b:23:84:33:e4:32:18:28:65:16: 56:4e:2a:30:31:5e:a2:24:ed:15:6a:6c:ff:c5:99:3c:af:f7: ff:48:b6:ee:52:86:cc:ba:26:04:6e:71:57:d8:a9:9f:29:7f: 61:7f:60:b6:b7:cd:7e:23:b4:ae:a3:3b:b5:25:65:78:d4:33: 84:02:fd:96:c5:3a:2e:d7:73:cb:44:66:7b:90:f1:d1:e2:8e: 09:c8:4f:07:74:ac:2a:13:85:55:20:30:65:c9:97:0f:47:6e: 03:bf:05:17:9a:28:42:d3:7e:2f:d8:5c:c7:0b:6f:89:3e:ee: d4:d8:b4:2a:76:b4:95:d9:d7:65:65:2e:80:1d:93:89:ff:48: d2:81:b4:7d:26:c4:4d:ac:9d:c5:f0:32:f6:2c:63:9b:30:8d: 02:da:1a:16:b2:02:34:6a:29:5c:9b:95:03:d1:c1:eb:0b:3d: 18:06:55:d5:63:b9:d1:32:b9:8f:1f:f7:65:dd:d8:0d:ac:50: ec:55:7d:34:57:a4:d0:19:64:79:e0:e6:ac:6b:67:ee:6b:d3: 7e:e3:91:bd:8b:21:ee:01:4e:4b:66:31:4f:dc:7c:90:4c:08: 19:b2:09:04:bd:f1:61:96:dc:41:f5:50:ad:22:23:58:24:04: 25:e1:24:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNh4sxjXR7i/Kr+mIgpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc5ZDNhMmYyZWUyM2JlNzQ0ZGYxYzJkMzE3YjA1ZTVlZDMxY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ESv2SUgXAWzIkvRZrz4OogQMmQ jAhPh9x/gJpyqDNYuq1ZC9O2B030T7E4LTV8b4J/48H3koCSuwG/Z3QaK6LIAihB o1hyTauNMePMTyHHkadeeAcx0zWGf9jT3nJReAgmoxxnl+SJ3YBhLs8cVOZ8hjVv a5WjsDDJ3CyIrPXuYSRv3MFeRN9gOvoNn8+MTBN42do2Uj7YursZvEkFX4lOIoMn MbzaHzn7o06NO54Y1f/inLVVacUJHleTLA5n4P1+MMGdoW53Ws/qv/drvPPDQFjs PFE6Ek4++lxyYvO9j/2sK2gZTfJTG97/tRIigsIUIt5+MzB5BxbDWBvHNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5506Ly7iO+dE3xwtMXsF5e0xzVMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvTG5uVG92THVJNzUwVGZIQzB4ZXdYbDdUSE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhzgMA0G CSqGSIb3DQEBCwUAA4IBAQAKqdD1Sx6aY2sjhDPkMhgoZRZWTiowMV6iJO0Vamz/ xZk8r/f/SLbuUobMuiYEbnFX2KmfKX9hf2C2t81+I7Suozu1JWV41DOEAv2WxTou 13PLRGZ7kPHR4o4JyE8HdKwqE4VVIDBlyZcPR24DvwUXmihC034v2FzHC2+JPu7U 2LQqdrSV2ddlZS6AHZOJ/0jSgbR9JsRNrJ3F8DL2LGObMI0C2hoWsgI0ailcm5UD 0cHrCz0YBlXVY7nRMrmPH/dl3dgNrFDsVX00V6TQGWR54Oasa2fua9N+45G9iyHu AU5LZjFP3HyQTAgZsgkEvfFhltxB9VCtIiNYJAQl4SSG -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:14 2026 by rpki-client