This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/lvr-gkD4e7tEUFUKpupnPeoD9GU.roa
File: lvr-gkD4e7tEUFUKpupnPeoD9GU.roa (raw, json)
Hash identifier: AfGT0Bko2pZweYtrAj4Xy01tlGQyHYSHTcen14DfeCQ=
Subject key identifier: 96:FA:FE:82:40:F8:7B:BB:44:50:55:0A:A6:EA:67:3D:EA:03:F4:65
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019B7A5AE4578F5FFE2D686EE803C9FE8407
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/lvr-gkD4e7tEUFUKpupnPeoD9GU.roa
Signing time: Thu 01 Jan 2026 16:18:55 +0000
ROA not before: Thu 01 Jan 2026 16:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25386
IP address blocks: 62.80.160.0/19 maxlen: 20
185.117.240.0/22 maxlen: 23
2a06:9000::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:e4:57:8f:5f:fe:2d:68:6e:e8:03:c9:fe:84:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jan 1 16:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96fafe8240f87bbb4450550aa6ea673dea03f465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:f9:c1:3d:56:7f:30:d3:80:e8:aa:8e:d8:
58:3b:52:70:6b:3d:55:e9:e4:d2:2f:8a:1f:78:f6:
c4:86:84:7a:1f:53:8e:80:98:75:ce:31:aa:1e:5b:
66:c3:0e:f5:28:69:3f:59:0e:a7:5c:c4:2b:2b:69:
dc:ef:1f:a3:2c:2f:00:91:77:f5:f8:7b:71:f9:e0:
39:9b:3f:0e:a3:3e:49:9f:c5:d4:94:bf:ed:b6:e6:
7a:68:15:60:9d:7a:18:03:7e:8b:3b:d0:83:69:d3:
e1:38:27:fb:a4:56:4b:ff:0d:fe:e6:60:ca:f8:a2:
88:57:15:cf:6c:ff:dd:06:f8:fe:ef:7a:63:57:b8:
6d:fc:00:e6:00:ed:98:fb:67:84:47:a5:ef:f1:b1:
2c:2f:fb:26:c8:32:d6:3b:79:e7:a0:48:e6:3d:3d:
4c:18:d8:af:c9:90:21:fd:48:19:af:b8:3f:0e:0d:
35:0c:7f:ca:7c:85:37:ef:93:45:15:eb:47:2c:66:
f1:05:d3:50:5d:8b:c1:df:ea:ed:59:6a:12:66:1c:
2e:a9:58:2f:b9:57:0f:22:ee:4c:90:86:ed:b3:b2:
d1:21:fb:2d:09:a6:2c:0f:21:b7:01:fa:e6:0e:d2:
b2:5d:a2:fb:46:3f:5a:22:71:39:86:18:76:09:d2:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:FE:82:40:F8:7B:BB:44:50:55:0A:A6:EA:67:3D:EA:03:F4:65
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/lvr-gkD4e7tEUFUKpupnPeoD9GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
Signature Algorithm: sha256WithRSAEncryption
89:b0:1d:16:a8:9b:38:5a:69:6b:41:1b:5c:b2:b9:ec:05:c8:
db:77:c3:a2:70:d1:6e:98:09:e7:ec:38:78:d6:62:d7:ad:8b:
1c:6b:44:0f:55:26:51:8d:d9:a0:cd:63:44:41:72:0b:e7:78:
ba:99:2f:31:75:00:84:ca:e9:16:e3:ac:f7:22:ec:06:7f:79:
88:83:87:08:40:b1:04:0b:84:dd:eb:28:20:8d:8b:b2:d5:ab:
79:c0:00:8a:86:f1:19:ad:d5:26:d7:67:e1:2f:fc:a7:68:16:
a3:e9:76:8f:e7:32:1c:0b:55:e8:21:60:90:ee:5e:51:50:ac:
e8:2a:28:50:03:42:88:d1:9a:dd:67:b0:a3:09:00:cf:1a:bc:
e4:e1:d6:e0:58:00:02:35:7f:cd:eb:d8:91:d5:c3:47:31:a5:
6a:08:dc:b4:0b:fa:0f:1e:a9:32:a0:8e:52:b0:6a:93:cc:47:
5d:13:60:9f:05:04:ff:8b:67:f1:e4:cd:87:17:52:75:d9:07:
f4:ba:02:f1:ef:6b:57:a4:6c:be:fa:9d:d4:48:6d:6e:fb:24:
5e:91:37:9a:f1:68:b4:a3:f5:64:5a:81:b6:56:c3:53:d3:02:
79:9b:52:a6:61:5d:a4:8a:be:66:60:5c:fa:e2:e4:64:12:7c:
7e:62:40:ed
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt6WuRXj1/+LWhu6APJ/oQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh
YmYxMDUwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmZhZmU4MjQwZjg3YmJiNDQ1MDU1MGFhNmVhNjczZGVhMDNmNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpn5wT1WfzDTgOiqjthYO1Jwaz1V
6eTSL4ofePbEhoR6H1OOgJh1zjGqHltmww71KGk/WQ6nXMQrK2nc7x+jLC8AkXf1
+Htx+eA5mz8Ooz5Jn8XUlL/ttuZ6aBVgnXoYA36LO9CDadPhOCf7pFZL/w3+5mDK
+KKIVxXPbP/dBvj+73pjV7ht/ADmAO2Y+2eER6Xv8bEsL/smyDLWO3nnoEjmPT1M
GNivyZAh/UgZr7g/Dg01DH/KfIU375NFFetHLGbxBdNQXYvB3+rtWWoSZhwuqVgv
uVcPIu5MkIbts7LRIfstCaYsDyG3AfrmDtKyXaL7Rj9aInE5hhh2CdJ+RwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJb6/oJA+Hu7RFBVCqbqZz3qA/RlMB8GA1UdIwQY
MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt
MWQzMWExOTYwMTQ3LzEvbHZyLWdrRDRlN3RFVUZVS3B1cG5QZW9EOUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3
LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPlCgAwQC
uXXwMA0EAgACMAcDBQMqBpAAMA0GCSqGSIb3DQEBCwUAA4IBAQCJsB0WqJs4Wmlr
QRtcsrnsBcjbd8OicNFumAnn7Dh41mLXrYsca0QPVSZRjdmgzWNEQXIL53i6mS8x
dQCEyukW46z3IuwGf3mIg4cIQLEEC4Td6yggjYuy1at5wACKhvEZrdUm12fhL/yn
aBaj6XaP5zIcC1XoIWCQ7l5RUKzoKihQA0KI0ZrdZ7CjCQDPGrzk4dbgWAACNX/N
69iR1cNHMaVqCNy0C/oPHqkyoI5SsGqTzEddE2CfBQT/i2fx5M2HF1J12Qf0ugLx
72tXpGy++p3USG1u+yRekTea8Wi0o/VkWoG2VsNT0wJ5m1KmYV2kir5mYFz64uRk
Enx+YkDt
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:35 2026 by rpki-client