This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/LgLDmVKh0xf2ZimNBxMIVyJjGj8.roa File: LgLDmVKh0xf2ZimNBxMIVyJjGj8.roa (raw, json) Hash identifier: nyHkLsfhGAO1IMHGjtbS9IePSmtztG5W8H1g0UXxIt0= Subject key identifier: 2E:02:C3:99:52:A1:D3:17:F6:66:29:8D:07:13:08:57:22:63:1A:3F Certificate issuer: /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c Certificate serial: 019B7B362A23F93EFBE5967040468282FBFB Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/LgLDmVKh0xf2ZimNBxMIVyJjGj8.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48603 IP address blocks: 45.147.92.0/24 maxlen: 24 2a0f:f800::/29 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2a:23:f9:3e:fb:e5:96:70:40:46:82:82:fb:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e02c39952a1d317f666298d0713085722631a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:bb:6f:48:2c:43:9e:bb:4b:48:cd:3a:59: f7:99:bb:16:7f:38:16:a1:f8:ef:19:39:b6:10:bd: 93:25:4f:70:65:fd:c8:9b:aa:e8:af:ec:4e:fd:f2: ca:45:35:d0:ab:db:e7:cc:05:26:56:6a:88:1b:f5: 8b:da:78:5f:19:aa:d7:36:2a:a7:5d:ad:31:54:2f: 3e:28:46:95:9c:28:d7:0d:9a:a5:aa:cc:0e:37:73: 51:3e:9d:9d:87:d8:be:4d:5c:f2:9f:cd:2c:97:28: 44:f6:83:42:96:5d:23:2e:2a:d9:c1:2a:ee:d7:2e: 47:76:04:27:c4:af:33:44:d2:03:65:11:57:6d:7d: fe:48:4a:0a:83:a3:0f:97:f8:18:3c:65:ca:eb:ce: f0:32:d9:16:ba:e8:d0:9f:82:89:dc:60:66:f9:60: ca:5b:7b:9e:da:b5:67:87:c2:39:0d:e2:0a:cf:dd: a3:40:90:68:fc:d3:ab:96:60:ad:76:ab:6f:e8:65: 4a:56:2d:08:6e:5a:a7:3a:8d:b7:af:e9:41:1a:84: f9:10:6c:74:5e:bf:3b:e1:30:7e:fe:fe:ca:ad:94: 7f:29:dd:e7:e5:8d:09:a7:48:07:a6:9b:61:33:15: fe:10:27:83:a5:04:e9:25:35:be:30:50:24:1c:e6: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:02:C3:99:52:A1:D3:17:F6:66:29:8D:07:13:08:57:22:63:1A:3F X509v3 Authority Key Identifier: keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/LgLDmVKh0xf2ZimNBxMIVyJjGj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.92.0/24 IPv6: 2a0f:f800::/29 Signature Algorithm: sha256WithRSAEncryption b2:a9:f6:aa:31:08:3e:ec:ae:7b:d5:02:71:d3:04:e7:0c:1f: 3b:c3:19:2c:12:eb:8a:f7:68:db:bb:77:76:eb:94:c1:f2:4b: 90:6b:e3:05:ee:89:a1:cb:c3:a1:0e:d3:16:1a:c9:2f:e5:d2: 03:fe:ef:c9:46:e9:36:c2:5b:f8:91:73:0f:49:28:b4:88:de: da:5c:c3:7c:0a:72:6b:e1:40:69:e3:4f:06:16:5a:dc:08:9f: 58:15:59:22:7a:02:eb:d1:57:ac:e5:47:e7:00:ae:d7:de:4c: 87:a5:cb:68:9f:76:29:a8:bf:c5:1c:f0:b6:1d:cb:f7:66:b9: c0:a4:87:9a:3c:e2:2d:45:a1:ff:d0:6e:6c:52:04:86:a5:4c: 6b:56:66:23:41:1e:2a:03:0b:83:a6:57:32:0e:67:5b:ed:0a: 9d:a3:b0:35:fd:42:58:4b:2d:e7:a7:67:51:cf:1f:fa:63:35: cd:02:b0:65:9c:92:2e:db:23:96:ee:18:3a:6d:29:a5:ef:c4: 26:5e:51:8c:fa:25:5b:32:52:bc:6a:b5:72:95:d2:6e:3b:04: 5f:d0:15:2c:e8:ef:3c:03:60:4f:db:96:fa:6a:7c:7b:f9:7d: 48:cb:4c:a2:1c:96:af:9e:1a:a8:c8:f8:fc:ae:7b:58:22:f6: f3:0c:7a:cd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nioj+T775ZZwQEaCgvv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDI0YzVkMzQ0ZmI5MmJjZjRjZjZlMWU1NjlmNTFhZTQx YWE4N2MwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTAyYzM5OTUyYTFkMzE3ZjY2NjI5OGQwNzEzMDg1NzIyNjMxYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDu7b0gsQ567S0jNOln3mbsWfzgW ofjvGTm2EL2TJU9wZf3Im6ror+xO/fLKRTXQq9vnzAUmVmqIG/WL2nhfGarXNiqn Xa0xVC8+KEaVnCjXDZqlqswON3NRPp2dh9i+TVzyn80slyhE9oNCll0jLirZwSru 1y5HdgQnxK8zRNIDZRFXbX3+SEoKg6MPl/gYPGXK687wMtkWuujQn4KJ3GBm+WDK W3ue2rVnh8I5DeIKz92jQJBo/NOrlmCtdqtv6GVKVi0IblqnOo23r+lBGoT5EGx0 Xr874TB+/v7KrZR/Kd3n5Y0Jp0gHppthMxX+ECeDpQTpJTW+MFAkHOZaowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC4Cw5lSodMX9mYpjQcTCFciYxo/MB8GA1UdIwQY MBaAFH7STF00T7krz0z24eVp9RrkGqh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jOGFlNzktNmQ3Yi00Nzc2LTgwYjct NDIwNDkyY2QxYWZkLzEvTGdMRG1WS2gweGYyWmltTkJ4TUlWeUpqR2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jOGFlNzktNmQ3Yi00Nzc2LTgwYjctNDIwNDkyY2QxYWZk LzEvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZNcMA0E AgACMAcDBQMqD/gAMA0GCSqGSIb3DQEBCwUAA4IBAQCyqfaqMQg+7K571QJx0wTn DB87wxksEuuK92jbu3d265TB8kuQa+MF7omhy8OhDtMWGskv5dID/u/JRuk2wlv4 kXMPSSi0iN7aXMN8CnJr4UBp408GFlrcCJ9YFVkiegLr0Ves5UfnAK7X3kyHpcto n3YpqL/FHPC2Hcv3ZrnApIeaPOItRaH/0G5sUgSGpUxrVmYjQR4qAwuDplcyDmdb 7Qqdo7A1/UJYSy3np2dRzx/6YzXNArBlnJIu2yOW7hg6bSml78QmXlGM+iVbMlK8 arVyldJuOwRf0BUs6O88A2BP25b6anx7+X1Iy0yiHJavnhqoyPj8rntYIvbzDHrN -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:57 2026 by rpki-client