This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/LcqefA0kElh8JewV5kCSLGG-J5k.roa File: LcqefA0kElh8JewV5kCSLGG-J5k.roa (raw, json) Hash identifier: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ= Subject key identifier: 2D:CA:9E:7C:0D:24:12:58:7C:25:EC:15:E6:40:92:2C:61:BE:27:99 Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a Certificate serial: 019B7910E51ACBDEA7F6FDDE6165E9F7DD9A Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/LcqefA0kElh8JewV5kCSLGG-J5k.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12993 IP address blocks: 194.152.32.0/23 maxlen: 23 195.216.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e5:1a:cb:de:a7:f6:fd:de:61:65:e9:f7:dd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dca9e7c0d2412587c25ec15e640922c61be2799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:9a:65:65:2c:b9:5c:9d:11:01:13:0b:91: 6a:89:67:3a:91:75:9c:3d:f3:a9:85:4d:cf:20:30: 8a:d2:2a:82:c3:08:37:c4:aa:a5:2c:85:08:08:4d: 79:f2:5f:87:53:57:a3:1a:ce:2e:16:fd:8e:90:7c: 6f:57:47:42:69:5a:5e:1e:5d:f7:2e:04:0f:7c:08: 13:7a:4d:cc:8d:8b:28:92:d0:bb:a4:c0:c5:57:ed: 4f:6d:4a:f6:53:62:1e:c5:e4:84:f6:2d:af:3b:d6: d1:c8:2a:92:13:ac:f7:3b:c5:f3:3e:d8:f3:24:23: 53:37:fb:e7:26:66:2a:3d:bb:46:f8:b7:d0:25:6e: 5e:23:88:b6:cf:ad:8c:5e:ee:51:c9:ac:c9:4d:7b: 73:25:62:54:cf:26:7f:e7:04:0a:6b:e7:ee:b6:0f: 3e:dd:75:af:b6:6d:7f:ec:49:e7:9e:c1:d5:b2:9e: ca:47:2b:ec:01:bf:05:8d:4e:91:85:7c:bc:f7:8e: ec:24:c8:b1:18:3d:2f:95:30:c8:cd:d8:7b:17:e1: 30:f9:f7:c7:bd:94:c7:a3:9c:cf:ae:99:9c:7f:32: 02:1d:c9:71:4c:0e:9d:86:5e:f3:6c:25:5a:51:f7: a2:00:53:b4:a4:2b:58:d1:45:61:77:58:ce:cd:25: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:9E:7C:0D:24:12:58:7C:25:EC:15:E6:40:92:2C:61:BE:27:99 X509v3 Authority Key Identifier: keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/LcqefA0kElh8JewV5kCSLGG-J5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.32.0/23 195.216.236.0/24 Signature Algorithm: sha256WithRSAEncryption 42:74:be:f8:0d:09:29:c6:1e:c7:c2:3c:31:7d:6c:cb:f1:e6: 22:43:b0:ec:cc:e3:05:91:1a:b4:c5:6c:05:02:9c:35:59:fd: 71:05:82:17:b4:c3:06:9c:20:f0:23:20:bf:0a:42:ec:75:10: 43:1b:7f:51:3e:dd:77:a6:c6:84:9b:d8:64:75:9e:43:ed:b7: c6:6f:3f:1c:67:a4:dc:2d:85:2f:6d:c1:96:12:ab:4d:4c:08: 8d:1c:00:c3:75:46:4c:65:98:ea:2e:15:b3:56:58:1d:9d:68: 88:eb:a8:4c:f6:a4:b6:d0:da:da:17:5d:fe:70:b8:c6:10:78: 8e:f0:61:5e:70:ea:8d:46:e0:cb:c6:aa:4e:b3:1c:16:05:bc: b4:23:70:30:84:1b:ce:7e:2e:ec:b1:83:4b:eb:5c:15:92:ce: 81:ba:43:eb:63:55:d5:e7:c4:15:b5:0a:b2:80:63:4d:c3:3c: 40:96:7d:78:7c:c8:f3:d5:25:2e:f9:15:1e:b4:ac:3f:b5:cd: be:d5:49:8f:00:ed:41:13:2d:c1:73:6c:a8:43:88:36:ce:42: c2:5a:c1:68:0d:dc:15:d4:85:07:b4:74:4b:7a:ee:cd:bb:9f: c4:28:b9:93:2f:a6:d0:ff:83:e3:7f:ff:c0:d4:98:1a:b5:88: a9:43:4e:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EOUay96n9v3eYWXp992aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw OGJiNWEwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGNhOWU3YzBkMjQxMjU4N2MyNWVjMTVlNjQwOTIyYzYxYmUyNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5uaZWUsuVydEQETC5FqiWc6kXWc PfOphU3PIDCK0iqCwwg3xKqlLIUICE158l+HU1ejGs4uFv2OkHxvV0dCaVpeHl33 LgQPfAgTek3MjYsoktC7pMDFV+1PbUr2U2IexeSE9i2vO9bRyCqSE6z3O8XzPtjz JCNTN/vnJmYqPbtG+LfQJW5eI4i2z62MXu5RyazJTXtzJWJUzyZ/5wQKa+futg8+ 3XWvtm1/7EnnnsHVsp7KRyvsAb8FjU6RhXy8947sJMixGD0vlTDIzdh7F+Ew+ffH vZTHo5zPrpmcfzICHclxTA6dhl7zbCVaUfeiAFO0pCtY0UVhd1jOzSXU2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC3KnnwNJBJYfCXsFeZAkixhvieZMB8GA1UdIwQY MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt Nzg3YjliNTg0YzJkLzEvTGNxZWZBMGtFbGg4SmV3VjVrQ1NMR0ctSjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwpggAwQA w9jsMA0GCSqGSIb3DQEBCwUAA4IBAQBCdL74DQkpxh7HwjwxfWzL8eYiQ7DszOMF kRq0xWwFApw1Wf1xBYIXtMMGnCDwIyC/CkLsdRBDG39RPt13psaEm9hkdZ5D7bfG bz8cZ6TcLYUvbcGWEqtNTAiNHADDdUZMZZjqLhWzVlgdnWiI66hM9qS20NraF13+ cLjGEHiO8GFecOqNRuDLxqpOsxwWBby0I3AwhBvOfi7ssYNL61wVks6BukPrY1XV 58QVtQqygGNNwzxAln14fMjz1SUu+RUetKw/tc2+1UmPAO1BEy3Bc2yoQ4g2zkLC WsFoDdwV1IUHtHRLeu7Nu5/EKLmTL6bQ/4Pjf//A1JgatYipQ06s -----END CERTIFICATE-----Generated at Mon Jan 12 03:10:30 2026 by rpki-client