This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/lWJEJ38LG2xnxFB2fT73IqXyIEA.roa File: lWJEJ38LG2xnxFB2fT73IqXyIEA.roa (raw, json) Hash identifier: KHwos3EmOZKUtMcSQbvFbuttFTsD5TBtKXWrJtoYgHY= Subject key identifier: 95:62:44:27:7F:0B:1B:6C:67:C4:50:76:7D:3E:F7:22:A5:F2:20:40 Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3 Certificate serial: 019B7D5CBECABF5042BCF245E3D1420A2A7C Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/lWJEJ38LG2xnxFB2fT73IqXyIEA.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59492 IP address blocks: 193.142.213.0/24 maxlen: 24 193.187.76.0/24 maxlen: 24 193.187.77.0/24 maxlen: 24 193.187.78.0/24 maxlen: 24 193.187.79.0/24 maxlen: 24 195.182.7.0/24 maxlen: 24 2001:67c:538::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:be:ca:bf:50:42:bc:f2:45:e3:d1:42:0a:2a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=956244277f0b1b6c67c450767d3ef722a5f22040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:73:7c:15:1f:f4:22:d2:6e:68:1a:3c:07: 7d:2f:a5:5b:47:1e:a6:3d:57:cf:4b:17:43:85:d7: 91:00:93:3b:01:ea:46:09:75:ec:9b:9c:18:bf:2c: ba:6d:97:c4:9b:ae:f1:61:3c:69:d3:61:01:91:71: d1:5f:2e:54:3e:e5:0a:ce:7d:d7:61:67:da:b2:13: db:3a:9a:94:de:0a:a5:bf:9a:f3:cb:59:32:64:48: ab:ac:17:59:a8:85:b0:0c:22:f5:df:c1:33:59:d3: c0:63:73:e8:61:4d:64:bd:c7:c1:36:fc:45:98:be: d8:9f:02:c1:98:c5:e0:80:7a:5d:a1:b9:e3:a5:0a: 44:1e:73:28:14:a5:43:c1:80:09:f7:33:2b:bc:c5: 00:3a:c6:e3:1a:ac:9f:91:a2:49:50:a6:68:f3:79: ab:68:fd:d1:e8:19:f4:a2:b4:e0:88:40:e8:25:cf: 34:2e:1d:91:ab:b8:20:77:dd:a0:58:1a:bc:e8:24: 32:3f:1d:37:04:01:d2:c4:52:4c:18:ab:9c:45:3e: 33:f2:62:30:69:d1:9d:e3:b5:d7:1c:00:ef:4a:88: ee:d4:11:3f:eb:40:83:7b:7a:32:db:ea:05:9a:8c: 26:b2:96:30:93:13:03:34:6b:6b:55:3b:9c:2d:c2: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:44:27:7F:0B:1B:6C:67:C4:50:76:7D:3E:F7:22:A5:F2:20:40 X509v3 Authority Key Identifier: keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/lWJEJ38LG2xnxFB2fT73IqXyIEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.213.0/24 193.187.76.0/22 195.182.7.0/24 IPv6: 2001:67c:538::/48 Signature Algorithm: sha256WithRSAEncryption 89:65:bc:f2:8a:69:b1:66:53:b3:b9:6b:00:62:03:45:81:65: 77:96:d6:1b:e3:ab:b3:8e:dc:7a:2b:ad:7f:5b:96:ad:b0:dc: ba:cd:ba:a1:5a:56:56:74:f3:b6:90:e6:ad:38:a9:cc:8d:dd: 93:fe:3a:52:d0:cb:ca:d2:ba:da:3a:f4:5d:c7:4d:0e:b9:0a: a2:40:8f:66:c7:98:55:e1:f7:fe:03:86:83:3d:5e:25:2b:1a: 59:d3:1a:43:a8:4d:16:e7:4a:1c:dc:59:1c:a3:bd:52:d6:be: 22:c5:1d:33:20:90:c3:c2:fe:de:e6:de:eb:f9:ca:b0:f5:ad: 4c:cf:97:6a:eb:ad:c2:ec:90:01:4b:b8:cf:f0:f7:36:ff:12: dc:ad:4c:b2:1f:ee:cc:41:c5:dd:f3:aa:c0:b7:ca:cf:b4:86: dd:74:f1:90:28:d9:60:0b:86:05:04:50:ef:b2:1d:d3:2b:87: 88:9b:60:e0:16:da:f2:7c:54:cb:d6:c9:33:d0:94:cd:7a:8e: 19:7f:4a:7c:4a:b1:d3:a1:68:ac:36:a8:6c:7c:80:90:ad:f9: 09:eb:67:09:0a:67:eb:8a:f0:42:cc:83:8d:8d:fa:f8:c1:8b: 5d:9b:67:a4:37:96:0e:2b:ca:e0:40:fc:0c:c3:c6:fb:db:7b: ec:5e:aa:7f -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9XL7Kv1BCvPJF49FCCip8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1 NTNiZTMwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTYyNDQyNzdmMGIxYjZjNjdjNDUwNzY3ZDNlZjcyMmE1ZjIyMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNNzfBUf9CLSbmgaPAd9L6VbRx6m PVfPSxdDhdeRAJM7AepGCXXsm5wYvyy6bZfEm67xYTxp02EBkXHRXy5UPuUKzn3X YWfashPbOpqU3gqlv5rzy1kyZEirrBdZqIWwDCL138EzWdPAY3PoYU1kvcfBNvxF mL7YnwLBmMXggHpdobnjpQpEHnMoFKVDwYAJ9zMrvMUAOsbjGqyfkaJJUKZo83mr aP3R6Bn0orTgiEDoJc80Lh2Rq7ggd92gWBq86CQyPx03BAHSxFJMGKucRT4z8mIw adGd47XXHADvSoju1BE/60CDe3oy2+oFmowmspYwkxMDNGtrVTucLcLwqQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJViRCd/CxtsZ8RQdn0+9yKl8iBAMB8GA1UdIwQY MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt NDljMDcyYTgyNTk1LzEvbFdKRUozOExHMnhueEZCMmZUNzNJcVh5SUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1 LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwY7VAwQC wbtMAwQAw7YHMA8EAgACMAkDBwAgAQZ8BTgwDQYJKoZIhvcNAQELBQADggEBAIll vPKKabFmU7O5awBiA0WBZXeW1hvjq7OO3HorrX9blq2w3LrNuqFaVlZ087aQ5q04 qcyN3ZP+OlLQy8rSuto69F3HTQ65CqJAj2bHmFXh9/4DhoM9XiUrGlnTGkOoTRbn ShzcWRyjvVLWviLFHTMgkMPC/t7m3uv5yrD1rUzPl2rrrcLskAFLuM/w9zb/Etyt TLIf7sxBxd3zqsC3ys+0ht108ZAo2WALhgUEUO+yHdMrh4ibYOAW2vJ8VMvWyTPQ lM16jhl/SnxKsdOhaKw2qGx8gJCt+QnrZwkKZ+uK8ELMg42N+vjBi12bZ6Q3lg4r yuBA/AzDxvvbe+xeqn8= -----END CERTIFICATE-----Generated at Sat Jan 3 12:48:56 2026 by rpki-client