This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/lyUxPH3p1gyRR8v9TM54AekVNQY.roa File: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (raw, json) Hash identifier: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8= Subject key identifier: 97:25:31:3C:7D:E9:D6:0C:91:47:CB:FD:4C:CE:78:01:E9:15:35:06 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9E6F0BB39EF7FBAE515398850B39 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/lyUxPH3p1gyRR8v9TM54AekVNQY.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206106 IP address blocks: 147.234.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9e:6f:0b:b3:9e:f7:fb:ae:51:53:98:85:0b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9725313c7de9d60c9147cbfd4cce7801e9153506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:b2:5e:cc:35:f0:03:f4:5e:8c:f5:3e:ef: 35:c5:76:07:52:04:dd:58:79:6d:df:82:c1:d9:0a: 7c:e9:5b:39:a5:5c:35:ff:13:5d:62:14:7e:bc:eb: 88:d8:62:f2:2e:0f:54:f9:1d:a0:8d:e7:39:26:12: 41:b5:9b:71:b0:c9:2c:02:bf:9f:de:67:71:33:3b: 1e:30:78:d5:77:9a:a3:da:b3:3e:9a:6d:26:f9:7a: b3:33:90:a7:a6:e7:d8:0b:e4:c7:8e:01:fd:5b:91: 47:4c:3a:52:a8:a3:c2:4d:29:75:2e:2e:da:1d:c4: 82:ff:e7:2a:0a:d4:fd:fd:53:b1:32:e1:54:72:43: ca:c8:79:7e:5a:81:ed:6f:21:d7:d6:9a:ff:bf:b5: ba:1c:05:3f:2f:4b:5b:3e:0e:81:b0:25:fa:4d:f3: 94:36:d3:d8:74:2f:7f:5e:71:19:91:c7:87:26:ea: 09:be:3c:f2:68:c3:83:4d:cd:05:35:03:eb:b2:f9: 9c:0c:df:36:c5:fc:c9:19:64:3f:0e:43:e9:a2:3f: a7:dc:d1:37:1a:d7:b1:9c:2f:85:29:7f:d1:e1:b0: 09:4c:f2:3b:bd:4b:37:1c:1c:b0:ea:79:ac:1c:2c: b1:76:6c:b5:2a:2d:00:15:0f:c3:68:ca:de:55:16: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:31:3C:7D:E9:D6:0C:91:47:CB:FD:4C:CE:78:01:E9:15:35:06 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/lyUxPH3p1gyRR8v9TM54AekVNQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.52.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:29:ca:66:68:06:3a:61:e9:ec:6c:a1:d5:8e:8a:b7:3d:2c: d3:2a:58:e2:a0:39:9b:4b:49:6c:1a:86:cf:b3:f6:de:cb:b7: 29:52:ff:58:47:37:1b:05:6e:e7:45:6a:2a:9c:3a:88:72:33: ef:31:ef:0c:06:96:26:6b:b1:8a:6b:30:d8:73:58:6c:9f:29: fd:60:a8:f7:de:6f:a6:22:f4:8c:60:59:ed:af:f0:af:4c:5c: 10:a9:1e:21:9c:48:d2:4a:3b:b7:1a:83:3b:cd:47:ec:98:db: ea:10:73:88:fc:e4:ae:a9:de:3e:b2:63:24:08:2a:f6:9c:85: 76:ab:98:5c:7a:1d:08:0b:f7:cd:bd:29:32:a3:d4:ce:df:07: e8:b5:5b:7e:21:5b:aa:ef:5c:fa:a0:f2:7c:6b:de:f0:bc:2f: 54:58:4e:41:67:9d:c8:92:79:34:c9:a4:83:38:7b:1d:75:3c: ca:db:92:cf:e9:ad:0b:36:d1:83:2b:89:5d:44:38:96:46:6b: 51:e0:fc:20:6e:77:6e:b0:be:b0:2e:67:02:1d:61:6f:a6:87: 8e:0f:3f:9f:65:e8:66:8d:ff:65:5f:c3:09:31:fb:7d:dc:61: b2:2c:65:ce:64:06:50:2c:6e:c3:c5:fc:53:d4:73:8b:34:44: c3:27:2b:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z5vC7Oe9/uuUVOYhQs5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzI1MzEzYzdkZTlkNjBjOTE0N2NiZmQ0Y2NlNzgwMWU5MTUzNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoyyXsw18AP0Xoz1Pu81xXYHUgTd WHlt34LB2Qp86Vs5pVw1/xNdYhR+vOuI2GLyLg9U+R2gjec5JhJBtZtxsMksAr+f 3mdxMzseMHjVd5qj2rM+mm0m+XqzM5CnpufYC+THjgH9W5FHTDpSqKPCTSl1Li7a HcSC/+cqCtT9/VOxMuFUckPKyHl+WoHtbyHX1pr/v7W6HAU/L0tbPg6BsCX6TfOU NtPYdC9/XnEZkceHJuoJvjzyaMODTc0FNQPrsvmcDN82xfzJGWQ/DkPpoj+n3NE3 GtexnC+FKX/R4bAJTPI7vUs3HByw6nmsHCyxdmy1Ki0AFQ/DaMreVRaQzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJclMTx96dYMkUfL/UzOeAHpFTUGMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvbHlVeFBIM3AxZ3lSUjh2OVRNNTRBZWtWTlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+o0MA0G CSqGSIb3DQEBCwUAA4IBAQCeKcpmaAY6YensbKHVjoq3PSzTKljioDmbS0lsGobP s/bey7cpUv9YRzcbBW7nRWoqnDqIcjPvMe8MBpYma7GKazDYc1hsnyn9YKj33m+m IvSMYFntr/CvTFwQqR4hnEjSSju3GoM7zUfsmNvqEHOI/OSuqd4+smMkCCr2nIV2 q5hceh0IC/fNvSkyo9TO3wfotVt+IVuq71z6oPJ8a97wvC9UWE5BZ53Iknk0yaSD OHsddTzK25LP6a0LNtGDK4ldRDiWRmtR4PwgbndusL6wLmcCHWFvpoeODz+fZehm jf9lX8MJMft93GGyLGXOZAZQLG7DxfxT1HOLNETDJyt/ -----END CERTIFICATE-----Generated at Mon Jan 26 23:46:10 2026 by rpki-client