This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/LYSUx4SMBcbGx0lrMelOBoIjRXY.roa File: LYSUx4SMBcbGx0lrMelOBoIjRXY.roa (raw, json) Hash identifier: iufH3SnKKEFM6xvywdqZRBnEAvhiQJCFx10ZIhfElHs= Subject key identifier: 2D:84:94:C7:84:8C:05:C6:C6:C7:49:6B:31:E9:4E:06:82:23:45:76 Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Certificate serial: 019B79ED5BEB65596BE68BFF3F1074E460F5 Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/LYSUx4SMBcbGx0lrMelOBoIjRXY.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207192 IP address blocks: 185.161.48.0/22 maxlen: 22 185.161.50.0/24 maxlen: 24 185.161.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:eb:65:59:6b:e6:8b:ff:3f:10:74:e4:60:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8494c7848c05c6c6c7496b31e94e0682234576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:15:46:40:34:b8:7c:5c:dd:1e:35:d8:bc: 4f:fa:5d:51:ce:63:1b:fd:aa:cb:0c:1e:78:d4:ca: 53:10:02:f6:52:72:ee:df:fb:35:5a:58:38:fb:a7: 0b:d4:72:08:c0:19:1b:8b:8a:f8:42:c1:b5:04:9e: 21:0c:d9:66:d3:84:54:69:93:a4:6b:92:7c:d9:72: 44:4c:19:23:82:ec:c3:7c:17:d4:46:ad:39:38:ac: 6a:7d:75:8e:1f:82:a2:43:a6:a4:98:cf:21:5c:39: 9a:e1:f0:42:a4:54:dc:1f:8b:90:5b:8e:0c:b0:09: e1:7b:ce:8c:4c:f4:be:22:21:4e:e4:5e:ea:2d:59: 9c:0b:e5:d8:a7:7f:11:89:2f:71:39:a4:3c:ac:cd: 7b:28:38:bd:96:d8:b7:23:c7:a6:86:8c:6e:31:63: 58:09:54:3c:47:5b:ce:23:44:8e:2a:c1:63:86:3a: 90:22:7e:e6:41:7b:a5:4b:c5:b9:03:e9:60:0e:4d: 6f:c6:05:3d:f0:7f:83:54:22:85:7e:a1:8d:fd:f9: 5b:76:a9:77:36:9d:78:d0:27:b9:38:b5:8a:a3:7a: a0:6c:ab:fc:67:43:8f:fe:00:8d:80:4f:4e:29:ee: 05:e3:b2:bf:14:06:dd:4f:84:32:16:d0:ca:4a:db: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:94:C7:84:8C:05:C6:C6:C7:49:6B:31:E9:4E:06:82:23:45:76 X509v3 Authority Key Identifier: keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/LYSUx4SMBcbGx0lrMelOBoIjRXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.48.0/22 Signature Algorithm: sha256WithRSAEncryption 55:2f:da:3d:26:58:3f:94:08:5a:07:bb:f6:cc:40:9d:46:04: c4:f9:05:e2:6d:ea:99:d1:da:62:fc:0b:26:8e:ae:e4:c5:9b: ae:a3:db:6b:1c:df:d5:b0:e8:8a:7d:95:6a:60:ff:9e:94:cb: 12:32:7b:f4:b4:ba:26:97:fa:93:ac:42:9d:4e:cf:50:22:82: f5:e8:fe:9f:db:16:2e:7c:e8:7c:b2:bc:ca:74:59:5e:a2:88: 35:5f:a0:c0:6d:f6:e5:3d:c9:37:2d:20:98:78:c0:d1:9a:fd: fe:bb:bb:ce:ce:ce:4e:62:98:6a:e8:ab:e1:85:28:b6:8c:70: 83:42:6d:7b:03:f9:c0:02:48:3d:07:b0:26:ba:15:09:a3:24: 72:d3:74:20:ac:0a:a6:62:42:39:de:34:a5:25:d3:6b:43:10: 4d:db:3c:8b:ab:dc:6f:25:2e:25:85:8e:21:23:b3:df:4b:05: d8:26:f8:62:f4:c6:85:d8:89:4d:76:07:49:46:70:46:25:eb: da:d5:2e:fa:70:b0:a9:20:b0:de:27:37:1b:0b:26:0a:ec:4e: 1d:50:31:ee:f5:05:d2:6a:bc:33:75:07:9d:d4:a6:a1:d0:be: b0:6e:9f:3c:51:fc:ec:3b:b2:1f:7b:ad:1c:40:e4:49:c3:8d: e6:a0:1f:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VvrZVlr5ov/PxB05GD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw YThkMTEwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDg0OTRjNzg0OGMwNWM2YzZjNzQ5NmIzMWU5NGUwNjgyMjM0NTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfoVRkA0uHxc3R412LxP+l1RzmMb /arLDB541MpTEAL2UnLu3/s1Wlg4+6cL1HIIwBkbi4r4QsG1BJ4hDNlm04RUaZOk a5J82XJETBkjguzDfBfURq05OKxqfXWOH4KiQ6akmM8hXDma4fBCpFTcH4uQW44M sAnhe86MTPS+IiFO5F7qLVmcC+XYp38RiS9xOaQ8rM17KDi9lti3I8emhoxuMWNY CVQ8R1vOI0SOKsFjhjqQIn7mQXulS8W5A+lgDk1vxgU98H+DVCKFfqGN/flbdql3 Np140Ce5OLWKo3qgbKv8Z0OP/gCNgE9OKe4F47K/FAbdT4QyFtDKStuaBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2ElMeEjAXGxsdJazHpTgaCI0V2MB8GA1UdIwQY MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt Y2JlYzQzZmQ5MmExLzEvTFlTVXg0U01CY2JHeDBsck1lbE9Cb0lqUlhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaEwMA0G CSqGSIb3DQEBCwUAA4IBAQBVL9o9Jlg/lAhaB7v2zECdRgTE+QXibeqZ0dpi/Asm jq7kxZuuo9trHN/VsOiKfZVqYP+elMsSMnv0tLoml/qTrEKdTs9QIoL16P6f2xYu fOh8srzKdFleoog1X6DAbfblPck3LSCYeMDRmv3+u7vOzs5OYphq6KvhhSi2jHCD Qm17A/nAAkg9B7AmuhUJoyRy03QgrAqmYkI53jSlJdNrQxBN2zyLq9xvJS4lhY4h I7PfSwXYJvhi9MaF2IlNdgdJRnBGJeva1S76cLCpILDeJzcbCyYK7E4dUDHu9QXS arwzdQed1Kah0L6wbp88UfzsO7Ife60cQORJw43moB+w -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:51 2026 by rpki-client