This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/LUqVoC445OwuMDQ02JnxJokVy0c.roa File: LUqVoC445OwuMDQ02JnxJokVy0c.roa (raw, json) Hash identifier: sTwGxPhTJ/H24QIf8MGKPbk8zrx1fr0jAaNaXKcuA+U= Subject key identifier: 2D:4A:95:A0:2E:38:E4:EC:2E:30:34:34:D8:99:F1:26:89:15:CB:47 Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Certificate serial: 019B7FF247F4F027E72FEC38834E7255091B Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/LUqVoC445OwuMDQ02JnxJokVy0c.roa Signing time: Fri 02 Jan 2026 18:22:23 +0000 ROA not before: Fri 02 Jan 2026 18:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204779 IP address blocks: 46.254.212.0/22 maxlen: 22 185.185.168.0/22 maxlen: 22 2a0b:5c80::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:47:f4:f0:27:e7:2f:ec:38:83:4e:72:55:09:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Validity Not Before: Jan 2 18:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d4a95a02e38e4ec2e303434d899f1268915cb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:1f:c7:53:fe:be:22:30:86:da:ad:5a:f0: 84:4a:69:7b:f6:c8:f4:d5:bc:02:78:22:d4:2a:4a: 5a:d1:50:39:f4:3f:b9:2f:df:31:4b:94:b4:cd:bd: a6:28:ff:5c:fc:49:11:15:2a:35:f2:8a:cd:db:78: fc:01:a4:e7:c2:ae:8a:a3:84:22:03:0f:35:20:f4: f9:3a:bf:21:98:df:f7:7a:7a:94:42:58:74:06:6e: e9:9e:8d:42:09:4c:15:a5:dc:06:fb:96:1b:1e:f2: bb:6e:85:8f:86:69:8f:9a:24:b3:52:39:dd:a0:45: 49:26:11:4a:93:e4:7c:1a:8e:af:73:b3:7c:f3:0b: d3:8d:c2:9d:b5:82:e3:83:30:63:3f:7f:ab:6b:cd: e9:f9:c6:f6:61:d9:4e:5a:7d:86:48:1d:8e:02:ed: be:db:93:d2:b4:25:e1:17:5f:0e:65:b6:4a:7e:b5: 27:be:91:4c:6c:af:f4:38:31:40:da:19:d9:e8:71: 5b:cc:92:95:1f:99:70:a2:04:39:e4:cf:06:df:c4: d8:f2:82:79:de:2a:63:86:fa:ac:6e:0a:7b:26:87: de:01:4f:41:ef:8b:c9:33:7b:e2:2b:eb:72:bb:98: 63:18:92:c5:f0:e5:32:8e:c1:04:7d:49:cf:d4:41: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:95:A0:2E:38:E4:EC:2E:30:34:34:D8:99:F1:26:89:15:CB:47 X509v3 Authority Key Identifier: keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/LUqVoC445OwuMDQ02JnxJokVy0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.212.0/22 185.185.168.0/22 IPv6: 2a0b:5c80::/29 Signature Algorithm: sha256WithRSAEncryption 53:14:0b:09:61:c3:06:3b:a8:04:47:69:39:3c:ac:6f:16:9b: 53:fe:22:c3:81:88:eb:f1:f6:af:c0:b1:73:07:8d:77:c7:4a: 85:d6:7d:de:91:8b:1e:93:2c:d7:5b:37:e6:8e:66:9d:6c:87: b0:5a:17:66:81:08:73:a2:48:1c:78:0e:24:ef:4d:e2:3b:8e: 1d:ca:13:5d:67:27:d6:2f:0f:0e:30:51:24:98:9d:02:4f:ab: ef:bd:3d:8c:0f:a4:96:b2:67:44:6a:07:4e:25:22:a4:93:e9: 4b:03:52:4a:c3:98:d8:93:c6:66:8f:c8:53:66:96:63:36:02: 00:4a:79:88:10:03:8c:8e:6c:8e:a3:c8:40:16:e6:4f:fe:c8: 0a:8a:eb:9d:3a:54:85:6d:d4:c2:1d:cb:b5:a1:b1:3e:d8:fd: 72:2e:39:99:3d:6a:49:cb:e0:2f:7d:ca:53:83:be:ba:39:2e: 0f:9e:dc:a7:d5:55:02:92:d0:13:d8:9f:97:c3:5e:3c:c0:0e: f3:92:97:9a:af:28:e9:05:1c:97:2b:fc:d8:b1:51:8f:76:06: f0:d2:3c:2a:ae:f0:13:b8:20:9c:fc:f3:b4:66:7e:b6:26:4a: cf:f7:39:b7:ce:f4:ef:70:14:65:a2:86:e1:5a:cb:7b:cb:7c: cc:e2:a5:29 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8kf08CfnL+w4g05yVQkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw ZjU0YzYwHhcNMjYwMTAyMTgyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDRhOTVhMDJlMzhlNGVjMmUzMDM0MzRkODk5ZjEyNjg5MTVjYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIsfx1P+viIwhtqtWvCESml79sj0 1bwCeCLUKkpa0VA59D+5L98xS5S0zb2mKP9c/EkRFSo18orN23j8AaTnwq6Ko4Qi Aw81IPT5Or8hmN/3enqUQlh0Bm7pno1CCUwVpdwG+5YbHvK7boWPhmmPmiSzUjnd oEVJJhFKk+R8Go6vc7N88wvTjcKdtYLjgzBjP3+ra83p+cb2YdlOWn2GSB2OAu2+ 25PStCXhF18OZbZKfrUnvpFMbK/0ODFA2hnZ6HFbzJKVH5lwogQ55M8G38TY8oJ5 3ipjhvqsbgp7JofeAU9B74vJM3viK+tyu5hjGJLF8OUyjsEEfUnP1EEsyQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC1KlaAuOOTsLjA0NNiZ8SaJFctHMB8GA1UdIwQY MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct MTBjNzUwYzZlMzUxLzEvTFVxVm9DNDQ1T3d1TURRMDJKbnhKb2tWeTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLv7UAwQC ubmoMA0EAgACMAcDBQMqC1yAMA0GCSqGSIb3DQEBCwUAA4IBAQBTFAsJYcMGO6gE R2k5PKxvFptT/iLDgYjr8favwLFzB413x0qF1n3ekYsekyzXWzfmjmadbIewWhdm gQhzokgceA4k703iO44dyhNdZyfWLw8OMFEkmJ0CT6vvvT2MD6SWsmdEagdOJSKk k+lLA1JKw5jYk8Zmj8hTZpZjNgIASnmIEAOMjmyOo8hAFuZP/sgKiuudOlSFbdTC Hcu1obE+2P1yLjmZPWpJy+AvfcpTg766OS4Pntyn1VUCktAT2J+Xw148wA7zkpea ryjpBRyXK/zYsVGPdgbw0jwqrvATuCCc/PO0Zn62JkrP9zm3zvTvcBRloobhWst7 y3zM4qUp -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:42 2026 by rpki-client