This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LgR5G1xr5_W9dSRIPqmMlO7bEkc.roa File: LgR5G1xr5_W9dSRIPqmMlO7bEkc.roa (raw, json) Hash identifier: pk9K3nHA/wRuvO8sDoKzrCA9rs83WXJZOURC0KXpAGQ= Subject key identifier: 2E:04:79:1B:5C:6B:E7:F5:BD:75:24:48:3E:A9:8C:94:EE:DB:12:47 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14489CE985E249BAF4D34036922CF7 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LgR5G1xr5_W9dSRIPqmMlO7bEkc.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47418 IP address blocks: 147.45.35.0/24 maxlen: 24 193.233.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:48:9c:e9:85:e2:49:ba:f4:d3:40:36:92:2c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e04791b5c6be7f5bd7524483ea98c94eedb1247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:31:4d:e1:95:47:06:07:09:38:67:f4:87: 03:77:c7:4f:35:5e:35:22:94:fe:b5:40:52:21:2c: 75:73:17:f4:52:8c:f2:44:ab:c2:ac:f8:f7:68:c7: 79:29:39:b7:17:d9:e0:68:16:35:dd:11:32:c1:05: 52:34:96:26:61:06:7b:1f:c8:03:2c:7f:0f:15:ba: 1c:bd:35:03:c0:cc:63:a1:b3:31:01:92:49:e7:b4: 45:52:00:86:fe:50:7a:a8:3f:b5:46:33:b4:28:c4: e1:1a:cf:a4:7e:44:2f:02:12:a2:9b:44:18:68:17: 55:51:6a:44:34:b6:14:30:bb:f1:d8:f7:d0:82:cc: e0:9b:8e:55:a3:32:e9:6e:f9:16:f5:c2:2d:58:81: 96:95:e1:e4:08:22:ef:ce:f8:6d:93:c1:65:8b:3c: 93:c7:b2:a8:1f:6d:4a:c2:00:21:c9:56:e2:d5:2f: 8a:5e:b8:e9:13:23:f9:56:d0:67:53:a8:a1:57:4d: bd:1b:29:c3:2e:eb:66:e3:16:71:ee:c2:26:b2:06: 4b:35:b1:b8:be:b0:fa:58:f6:0f:44:a9:56:a0:01: d8:41:85:7a:1b:89:c2:59:53:f5:97:b9:1e:1e:48: 09:83:c6:94:9f:c1:ac:c7:6f:bc:88:46:27:4b:50: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:04:79:1B:5C:6B:E7:F5:BD:75:24:48:3E:A9:8C:94:EE:DB:12:47 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LgR5G1xr5_W9dSRIPqmMlO7bEkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.35.0/24 193.233.235.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:c6:64:a4:d2:59:ac:53:d5:8a:62:89:0a:fe:c5:b4:65:4d: a1:b8:71:23:40:7f:5f:9c:48:e5:03:df:c8:75:1f:35:d6:f9: 54:62:28:74:9d:80:85:27:c6:b5:59:cd:03:66:4c:48:75:51: 47:0e:46:d5:e4:e3:50:1c:6b:a9:aa:10:97:f3:5a:c2:69:66: 6c:e7:4c:c6:88:1e:21:2a:53:42:38:1b:7a:75:80:36:8c:da: 64:47:d4:b8:c9:9d:f1:cd:3d:8b:bd:1f:a3:b0:ff:c0:d6:19: 8b:17:f2:d5:9d:f0:5c:e3:a1:52:88:28:44:92:39:fa:d3:57: 16:8f:8e:7b:e8:21:59:66:ab:49:d1:15:d4:48:1a:b3:4e:12: 63:21:b0:e9:df:77:0f:1b:e3:d9:50:98:39:64:d7:8d:56:d8: 17:18:30:f2:24:33:42:18:84:f4:21:db:5a:ae:b6:44:c2:59: 37:c9:05:cd:d1:ee:45:1d:61:cc:fc:72:61:bf:d5:ff:02:61: ac:67:73:47:dc:ac:39:76:7b:46:fb:14:d1:08:ab:da:13:c8: 0c:e3:7f:77:f1:83:58:77:11:99:80:e3:3d:5d:b1:71:36:64: 6c:51:06:19:1c:f2:e7:74:22:dd:6d:36:57:af:83:e6:88:49: 9f:af:76:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FEic6YXiSbr000A2kiz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTA0NzkxYjVjNmJlN2Y1YmQ3NTI0NDgzZWE5OGM5NGVlZGIxMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOkxTeGVRwYHCThn9IcDd8dPNV41 IpT+tUBSISx1cxf0UozyRKvCrPj3aMd5KTm3F9ngaBY13REywQVSNJYmYQZ7H8gD LH8PFbocvTUDwMxjobMxAZJJ57RFUgCG/lB6qD+1RjO0KMThGs+kfkQvAhKim0QY aBdVUWpENLYUMLvx2PfQgszgm45VozLpbvkW9cItWIGWleHkCCLvzvhtk8FlizyT x7KoH21KwgAhyVbi1S+KXrjpEyP5VtBnU6ihV029GynDLutm4xZx7sImsgZLNbG4 vrD6WPYPRKlWoAHYQYV6G4nCWVP1l7keHkgJg8aUn8Gsx2+8iEYnS1DVoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC4EeRtca+f1vXUkSD6pjJTu2xJHMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvTGdSNUcxeHI1X1c5ZFNSSVBxbU1sTzdiRWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAky0jAwQA wenrMA0GCSqGSIb3DQEBCwUAA4IBAQAbxmSk0lmsU9WKYokK/sW0ZU2huHEjQH9f nEjlA9/IdR811vlUYih0nYCFJ8a1Wc0DZkxIdVFHDkbV5ONQHGupqhCX81rCaWZs 50zGiB4hKlNCOBt6dYA2jNpkR9S4yZ3xzT2LvR+jsP/A1hmLF/LVnfBc46FSiChE kjn601cWj4576CFZZqtJ0RXUSBqzThJjIbDp33cPG+PZUJg5ZNeNVtgXGDDyJDNC GIT0IdtarrZEwlk3yQXN0e5FHWHM/HJhv9X/AmGsZ3NH3Kw5dntG+xTRCKvaE8gM 43938YNYdxGZgOM9XbFxNmRsUQYZHPLndCLdbTZXr4PmiEmfr3aZ -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:46 2026 by rpki-client