This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/LNCbK6oFpSX7VrazVm0NKmkZQwE.roa File: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (raw, json) Hash identifier: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk= Subject key identifier: 2C:D0:9B:2B:AA:05:A5:25:FB:56:B6:B3:56:6D:0D:2A:69:19:43:01 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019B7CEDC260481D97A9255390B4385084A3 Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/LNCbK6oFpSX7VrazVm0NKmkZQwE.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214743 IP address blocks: 91.198.23.0/24 maxlen: 24 176.111.37.0/24 maxlen: 24 176.111.38.0/24 maxlen: 24 176.111.39.0/24 maxlen: 24 193.105.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c2:60:48:1d:97:a9:25:53:90:b4:38:50:84:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd09b2baa05a525fb56b6b3566d0d2a69194301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:8a:f9:02:d0:d8:41:71:72:52:ab:36:9a: ef:79:b2:b8:e9:9b:d7:df:be:66:b5:90:1f:b0:10: 6b:7b:2c:6d:68:0b:de:0c:55:5b:e5:bf:cf:71:86: 57:e1:8b:ad:09:95:50:c9:72:1a:76:b2:d9:e9:77: ce:b7:4b:14:83:28:59:40:ed:74:4e:8c:26:39:f5: 6b:d4:7b:cf:39:2f:f2:b4:40:ab:ee:2d:7d:84:93: 76:1d:9e:8c:db:77:7c:0e:84:97:7e:2e:03:37:15: 04:6a:fd:00:a7:08:7e:2a:67:3e:62:9b:6e:42:13: 23:d7:13:e7:0e:f0:a7:36:37:64:f2:4d:32:0f:8f: 72:f6:cb:d8:d6:96:c1:33:a0:dc:8e:50:dc:ad:3b: 5d:68:38:28:85:fe:8b:0b:e5:7b:52:ce:d2:d0:5b: 37:d9:0d:f6:3b:03:cd:8f:67:33:44:1f:aa:91:f0: e4:38:5c:bf:a7:c9:33:24:3d:1c:fa:6d:c9:ff:8f: 22:ff:eb:5f:10:30:9a:b9:d8:bd:12:c0:7a:54:b6: fa:42:98:80:4a:e4:b8:a6:d7:f4:c4:c7:03:8c:a4: de:bf:8d:69:a3:cc:68:d4:d0:31:fe:8a:d3:44:4c: 35:9e:46:24:57:e3:84:14:de:25:97:51:31:44:6d: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D0:9B:2B:AA:05:A5:25:FB:56:B6:B3:56:6D:0D:2A:69:19:43:01 X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/LNCbK6oFpSX7VrazVm0NKmkZQwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.23.0/24 176.111.37.0-176.111.39.255 193.105.241.0/24 Signature Algorithm: sha256WithRSAEncryption 32:bc:65:4f:dd:9c:99:58:86:07:42:16:b2:36:09:29:1d:96: ed:9a:68:2f:f6:eb:48:cc:6e:4a:f4:82:36:ed:ec:4a:be:c2: 76:58:67:bd:91:ad:02:9b:a4:4e:fa:59:a2:c2:0a:80:01:09: b6:fc:cf:af:2d:20:14:34:fa:9e:92:e3:fe:e6:ae:a6:4a:77: 7b:d0:5d:72:55:d4:9c:bc:91:6e:28:34:77:db:1b:6a:92:63: 59:16:3e:fe:73:fe:70:dc:aa:1b:3b:bd:e9:21:1b:3a:c3:b1: 72:d6:5a:8a:5c:91:33:42:de:36:a0:fd:f3:bc:58:db:76:f2: be:c7:7f:09:9e:a2:17:37:c8:f6:87:3c:9d:5e:94:7a:ff:48: fc:25:4a:f3:b8:f8:92:8d:1f:38:34:3a:3d:62:aa:78:86:12: 60:3e:30:4b:ed:bb:9b:c9:5d:fe:46:eb:79:46:4f:7e:a6:fd: b6:4d:b6:c9:95:2a:1d:e0:08:bf:29:a1:d7:ca:6c:04:eb:b5: 8a:fb:df:c5:74:61:e5:36:a2:66:2a:01:06:69:49:7f:09:e9: 73:06:db:0f:38:c9:fc:c4:68:38:b4:ee:35:dd:1d:9f:df:14: a1:33:7f:8d:81:53:a9:73:e1:55:bf:eb:a4:a3:09:61:10:b0: 00:a3:72:ac -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87cJgSB2XqSVTkLQ4UISjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2QwOWIyYmFhMDVhNTI1ZmI1NmI2YjM1NjZkMGQyYTY5MTk0MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdSK+QLQ2EFxclKrNprvebK46ZvX 375mtZAfsBBreyxtaAveDFVb5b/PcYZX4YutCZVQyXIadrLZ6XfOt0sUgyhZQO10 TowmOfVr1HvPOS/ytECr7i19hJN2HZ6M23d8DoSXfi4DNxUEav0Apwh+Kmc+Yptu QhMj1xPnDvCnNjdk8k0yD49y9svY1pbBM6DcjlDcrTtdaDgohf6LC+V7Us7S0Fs3 2Q32OwPNj2czRB+qkfDkOFy/p8kzJD0c+m3J/48i/+tfEDCaudi9EsB6VLb6QpiA SuS4ptf0xMcDjKTev41po8xo1NAx/orTREw1nkYkV+OEFN4ll1ExRG2TtQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCzQmyuqBaUl+1a2s1ZtDSppGUMBMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvTE5DYks2b0ZwU1g3VnJhelZtME5LbWtaUXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAW8YXMAwD BACwbyUDBAOwbyADBADBafEwDQYJKoZIhvcNAQELBQADggEBADK8ZU/dnJlYhgdC FrI2CSkdlu2aaC/260jMbkr0gjbt7Eq+wnZYZ72RrQKbpE76WaLCCoABCbb8z68t IBQ0+p6S4/7mrqZKd3vQXXJV1Jy8kW4oNHfbG2qSY1kWPv5z/nDcqhs7vekhGzrD sXLWWopckTNC3jag/fO8WNt28r7Hfwmeohc3yPaHPJ1elHr/SPwlSvO4+JKNHzg0 Oj1iqniGEmA+MEvtu5vJXf5G63lGT36m/bZNtsmVKh3gCL8podfKbATrtYr738V0 YeU2omYqAQZpSX8J6XMG2w84yfzEaDi07jXdHZ/fFKEzf42BU6lz4VW/66SjCWEQ sACjcqw= -----END CERTIFICATE-----Generated at Mon Jan 12 16:18:10 2026 by rpki-client