This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LgEr39UTlg2T4RF4emVTW40CPHo.roa File: LgEr39UTlg2T4RF4emVTW40CPHo.roa (raw, json) Hash identifier: b6wH0cLyUteT7rH5Cwbj6reUELctlWKdlhCz8VVwYHA= Subject key identifier: 2E:01:2B:DF:D5:13:96:0D:93:E1:11:78:7A:65:53:5B:8D:02:3C:7A Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019C562CF547A986822A7A239E92582B338E Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LgEr39UTlg2T4RF4emVTW40CPHo.roa Signing time: Fri 13 Feb 2026 08:45:12 +0000 ROA not before: Fri 13 Feb 2026 08:45:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 86.110.34.0/24 maxlen: 24 86.110.58.0/24 maxlen: 24 86.110.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:56:2c:f5:47:a9:86:82:2a:7a:23:9e:92:58:2b:33:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Feb 13 08:45:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e012bdfd513960d93e111787a65535b8d023c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:b4:29:27:f7:90:c1:db:f9:e3:24:bd:79: ee:34:d2:16:c7:6c:20:87:3f:5a:19:6f:27:d7:85: ac:a5:2a:b4:cf:eb:19:5b:bb:a6:fc:d8:20:4b:3b: 44:62:a4:fa:c2:1c:aa:7e:c4:cc:b2:4d:3a:57:cb: 18:37:61:20:b8:89:26:fd:2a:e7:ab:1b:77:7f:17: c2:2e:d2:49:69:7c:47:14:2a:7a:a2:63:fe:2e:6b: 27:12:32:62:1f:b6:82:23:c7:f9:20:ff:7a:a4:46: 35:26:df:ab:d1:7a:a0:5b:81:5b:f5:8d:f4:10:b5: 70:7d:ee:43:ba:68:8b:bc:57:f0:7f:3d:18:32:19: ee:23:64:36:00:6f:ab:11:8a:65:5f:13:95:57:26: 20:fb:30:52:86:3b:aa:5d:0d:42:99:7b:60:37:13: 5e:8f:f2:a8:f6:e8:15:0f:e2:80:83:c5:4d:24:c9: e2:85:63:79:67:c3:04:1d:17:fa:9a:eb:0a:18:0d: e8:33:f3:32:30:34:e7:73:86:e1:18:f6:e8:2c:7c: 5e:ea:70:1c:e5:8b:cc:72:ce:86:94:ba:16:80:fe: 22:d8:e4:c4:df:56:23:d8:dd:8a:07:f1:95:ef:3f: 3d:f5:18:a5:f6:c8:68:e8:e0:66:62:99:a6:54:9f: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:2B:DF:D5:13:96:0D:93:E1:11:78:7A:65:53:5B:8D:02:3C:7A X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LgEr39UTlg2T4RF4emVTW40CPHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.34.0/24 86.110.58.0/24 86.110.63.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:9e:92:aa:d9:75:cc:bc:fb:1e:3a:08:f9:0c:11:3e:56:87: 96:b9:6e:b3:9e:70:d1:d2:b4:de:cd:ea:04:e0:69:f3:af:6e: 0e:0d:82:75:bd:87:80:2e:aa:93:c0:0b:0d:08:27:ed:72:f0: 73:f1:ff:c1:89:ea:da:3b:0c:a5:fb:4f:10:da:fa:31:ee:82: a7:d6:7e:0e:4e:31:6d:35:43:bc:c1:6c:11:ec:e8:22:f7:90: cf:d5:26:f3:2f:b2:fc:7f:6c:33:e9:12:3b:ad:4b:a2:c2:24: 38:3f:51:64:5c:c1:b9:6a:19:f1:ba:86:6b:b0:87:09:8a:1a: b2:ba:e3:29:a8:ad:f0:f9:89:8a:18:f5:ce:0f:31:4a:66:9e: 28:a1:15:79:33:92:fb:ab:ed:b7:37:bc:4d:97:a5:1e:8c:10: 53:bc:c7:18:60:b7:20:22:c7:90:e9:cb:39:a3:df:15:26:71: 9b:e6:97:d1:ce:6e:3a:a7:79:54:d9:06:4e:b9:41:e7:1b:d0: e9:6b:4e:ae:c2:b5:29:48:bc:f9:11:07:93:d6:ae:02:d9:40: 48:45:40:60:e4:13:44:39:11:7a:40:10:fe:03:a6:51:a4:b4: 9c:48:95:dc:d9:11:82:88:43:f7:e0:e6:19:71:e3:62:35:3a: 8a:39:94:53 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZxWLPVHqYaCKnojnpJYKzOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMjEzMDg0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTAxMmJkZmQ1MTM5NjBkOTNlMTExNzg3YTY1NTM1YjhkMDIzYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJW0KSf3kMHb+eMkvXnuNNIWx2wg hz9aGW8n14WspSq0z+sZW7um/NggSztEYqT6whyqfsTMsk06V8sYN2EguIkm/Srn qxt3fxfCLtJJaXxHFCp6omP+LmsnEjJiH7aCI8f5IP96pEY1Jt+r0XqgW4Fb9Y30 ELVwfe5DumiLvFfwfz0YMhnuI2Q2AG+rEYplXxOVVyYg+zBShjuqXQ1CmXtgNxNe j/Ko9ugVD+KAg8VNJMnihWN5Z8MEHRf6musKGA3oM/MyMDTnc4bhGPboLHxe6nAc 5YvMcs6GlLoWgP4i2OTE31Yj2N2KB/GV7z899Ril9sho6OBmYpmmVJ/Z4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC4BK9/VE5YNk+EReHplU1uNAjx6MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvTGdFcjM5VVRsZzJUNFJGNGVtVlRXNDBDUEhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVm4iAwQA Vm46AwQAVm4/MA0GCSqGSIb3DQEBCwUAA4IBAQAanpKq2XXMvPseOgj5DBE+VoeW uW6znnDR0rTezeoE4Gnzr24ODYJ1vYeALqqTwAsNCCftcvBz8f/BieraOwyl+08Q 2vox7oKn1n4OTjFtNUO8wWwR7Ogi95DP1SbzL7L8f2wz6RI7rUuiwiQ4P1FkXMG5 ahnxuoZrsIcJihqyuuMpqK3w+YmKGPXODzFKZp4ooRV5M5L7q+23N7xNl6UejBBT vMcYYLcgIseQ6cs5o98VJnGb5pfRzm46p3lU2QZOuUHnG9Dpa06uwrUpSLz5EQeT 1q4C2UBIRUBg5BNEORF6QBD+A6ZRpLScSJXc2RGCiEP34OYZceNiNTqKOZRT -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:13 2026 by rpki-client