This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lVGruLFWWvTOZy3AIHzEN0WZYRg.roa File: lVGruLFWWvTOZy3AIHzEN0WZYRg.roa (raw, json) Hash identifier: bUwc9DGBp7aIzkykfq80gEADJcqxavt8Dk1SHfCnpGc= Subject key identifier: 95:51:AB:B8:B1:56:5A:F4:CE:67:2D:C0:20:7C:C4:37:45:99:61:18 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DFF5C4893250A2778BEBBB880C95 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lVGruLFWWvTOZy3AIHzEN0WZYRg.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 37.139.130.0/24 maxlen: 24 45.149.243.0/24 maxlen: 24 79.110.61.0/24 maxlen: 24 85.217.144.0/23 maxlen: 24 185.225.74.0/23 maxlen: 24 193.149.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:df:f5:c4:89:32:50:a2:77:8b:eb:bb:88:0c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9551abb8b1565af4ce672dc0207cc43745996118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:5b:75:5f:98:c5:27:be:ee:a2:3e:a8:2a: 86:a3:97:0c:cd:1d:08:cc:cc:c3:b4:e0:59:3c:81: dd:0d:af:33:94:29:ff:2c:14:66:69:87:96:fd:ec: 61:47:40:09:22:29:86:bf:ab:0d:e2:1f:b7:37:a4: 86:df:fa:19:1d:2c:d7:69:a0:cb:a6:de:5b:84:f5: 31:a7:64:c8:b6:55:db:ac:1c:93:8b:ba:e1:e6:9e: 97:32:be:07:84:97:bf:35:d3:5d:a4:d0:1b:fa:f7: dc:f5:a1:93:d3:1b:75:84:9a:be:f5:e4:69:93:9a: 5b:bb:a8:44:d5:5a:f0:af:7d:b5:ee:c1:4f:fb:86: 95:9b:46:c5:61:1e:b7:ca:ef:0d:46:66:7b:09:7a: 6c:35:fc:61:f8:a9:c4:7f:c0:b7:bb:52:5b:98:fd: 9d:78:f7:8d:c2:2b:0e:0b:22:06:5b:92:fb:d3:43: 65:e1:92:a2:28:96:b1:54:ca:7e:0c:2c:a2:5c:fd: f4:56:16:34:b6:82:ee:19:20:e1:86:42:27:80:d1: 61:e4:da:c1:38:a5:23:41:3d:ef:0b:ff:5e:ac:b4: 06:36:ba:a4:0f:08:6b:a5:84:0d:83:cb:15:14:33: 32:2b:49:3a:c0:df:2c:2c:91:cd:ac:d3:71:26:59: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:AB:B8:B1:56:5A:F4:CE:67:2D:C0:20:7C:C4:37:45:99:61:18 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lVGruLFWWvTOZy3AIHzEN0WZYRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.130.0/24 45.149.243.0/24 79.110.61.0/24 85.217.144.0/23 185.225.74.0/23 193.149.28.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:4f:b6:af:94:66:1d:2a:41:ad:b7:e7:a6:e4:1f:56:26:f6: 4a:93:cd:44:75:a9:32:71:ca:bc:1e:65:84:a6:4e:45:e5:31: d8:37:75:de:56:93:ec:86:d8:66:da:86:73:4c:88:3a:ab:d4: f4:82:ad:20:dc:fa:ff:b6:06:85:b4:7a:2a:d6:b1:54:c6:b3: d8:57:63:be:06:d5:d3:bf:9a:8e:ff:97:97:71:8b:59:79:fd: 56:8b:37:35:59:4e:54:fb:bb:26:9d:da:3b:87:76:ca:5e:db: 16:f7:97:b6:65:b9:88:e3:1a:26:a3:73:2c:64:eb:77:9a:37: d9:a9:be:eb:4e:86:3b:a9:02:b3:e0:ad:17:62:cb:d2:a3:fc: d6:60:53:fe:83:f5:f2:6f:43:c8:56:c3:a3:ae:e4:fc:ae:61: b8:d8:fd:17:b6:23:2b:1f:ef:87:5c:f2:0c:14:85:24:12:8f: a1:03:51:e1:78:81:12:26:96:e4:26:ea:a4:6f:e1:8d:e8:17: 90:2b:7e:03:84:67:f3:1e:80:6a:1a:ce:c1:b5:b6:cd:ad:c8: 36:88:79:75:89:3c:4c:45:a7:04:39:54:e3:de:91:29:dd:a2: 55:17:43:bd:13:52:55:12:2f:1e:2a:a8:55:ec:45:4a:f1:dd: 87:71:c9:0a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4ot/1xIkyUKJ3i+u7iAyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTUxYWJiOGIxNTY1YWY0Y2U2NzJkYzAyMDdjYzQzNzQ1OTk2MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRRbdV+YxSe+7qI+qCqGo5cMzR0I zMzDtOBZPIHdDa8zlCn/LBRmaYeW/exhR0AJIimGv6sN4h+3N6SG3/oZHSzXaaDL pt5bhPUxp2TItlXbrByTi7rh5p6XMr4HhJe/NdNdpNAb+vfc9aGT0xt1hJq+9eRp k5pbu6hE1Vrwr3217sFP+4aVm0bFYR63yu8NRmZ7CXpsNfxh+KnEf8C3u1JbmP2d ePeNwisOCyIGW5L700Nl4ZKiKJaxVMp+DCyiXP30VhY0toLuGSDhhkIngNFh5NrB OKUjQT3vC/9erLQGNrqkDwhrpYQNg8sVFDMyK0k6wN8sLJHNrNNxJlnvmwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJVRq7ixVlr0zmctwCB8xDdFmWEYMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbFZHcnVMRldXdlRPWnkzQUlIekVOMFdaWVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJYuCAwQA LZXzAwQAT249AwQBVdmQAwQBueFKAwQCwZUcMA0GCSqGSIb3DQEBCwUAA4IBAQAP T7avlGYdKkGtt+em5B9WJvZKk81Edakyccq8HmWEpk5F5THYN3XeVpPshthm2oZz TIg6q9T0gq0g3Pr/tgaFtHoq1rFUxrPYV2O+BtXTv5qO/5eXcYtZef1Wizc1WU5U +7smndo7h3bKXtsW95e2ZbmI4xomo3MsZOt3mjfZqb7rToY7qQKz4K0XYsvSo/zW YFP+g/Xyb0PIVsOjruT8rmG42P0XtiMrH++HXPIMFIUkEo+hA1HheIESJpbkJuqk b+GN6BeQK34DhGfzHoBqGs7BtbbNrcg2iHl1iTxMRacEOVTj3pEp3aJVF0O9E1JV Ei8eKqhV7EVK8d2HcckK -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:04 2026 by rpki-client