This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lv7qdYp1G5t7UtIf0YYxMpM3WCA.roa File: Lv7qdYp1G5t7UtIf0YYxMpM3WCA.roa (raw, json) Hash identifier: lJr9ESMwwdWJLKrp3pEHHP+JJzxvNwISrHpCC4JccHs= Subject key identifier: 2E:FE:EA:75:8A:75:1B:9B:7B:52:D2:1F:D1:86:31:32:93:37:58:20 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019C1CA6F95155AAAD9C66844F7D8942264D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lv7qdYp1G5t7UtIf0YYxMpM3WCA.roa Signing time: Mon 02 Feb 2026 04:40:30 +0000 ROA not before: Mon 02 Feb 2026 04:40:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 89.125.37.0/24 maxlen: 24 89.125.48.0/24 maxlen: 24 89.125.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:a6:f9:51:55:aa:ad:9c:66:84:4f:7d:89:42:26:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Feb 2 04:40:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2efeea758a751b9b7b52d21fd186313293375820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:5e:6b:df:7c:c8:d7:91:bd:ef:50:d1:83: 87:38:bf:81:12:60:d1:de:04:85:b9:25:c4:61:ab: b8:1c:88:58:60:1c:44:71:08:b0:3a:4f:bf:b9:74: 29:2e:b9:d7:71:2f:c3:01:80:be:73:e6:38:1a:c1: 34:2a:75:fe:36:e5:3f:33:34:15:73:9b:4a:d3:52: f8:59:58:2e:f4:22:1c:77:03:ea:2e:c0:3b:52:e5: c8:29:ae:18:12:35:39:6a:21:e4:f4:49:44:39:67: 7b:c3:7a:9c:70:c3:67:92:d8:43:60:4b:a8:9f:e8: 4b:a1:c7:98:e0:03:d9:5f:e0:f1:30:04:eb:0e:7b: d6:f4:07:bf:9e:2a:d5:f7:7a:e1:ff:59:c4:8c:18: 65:b2:7e:81:0b:31:e4:b1:07:1f:ab:fb:20:96:1a: 4d:17:58:e7:db:8d:12:54:55:5c:fb:bd:7c:a3:86: 61:75:4a:1a:8a:0d:56:a5:67:e9:a6:01:02:d1:a8: 75:d0:1f:2d:aa:14:75:dd:b1:d1:9d:aa:cb:18:a0: d9:0f:6f:ae:46:83:f3:be:90:6e:da:25:77:23:64: cf:fc:fa:55:b0:75:f0:13:5d:f3:45:7a:d5:5a:02: 5a:40:6e:5a:45:b6:0b:55:78:e7:8f:4a:3b:38:d2: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:EA:75:8A:75:1B:9B:7B:52:D2:1F:D1:86:31:32:93:37:58:20 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lv7qdYp1G5t7UtIf0YYxMpM3WCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.37.0/24 89.125.48.0/24 89.125.171.0/24 Signature Algorithm: sha256WithRSAEncryption 21:86:64:5b:50:ef:63:8e:f7:47:8e:86:e5:e8:01:fe:ff:87: 65:18:46:3c:bc:9f:7b:d5:c0:5c:30:5d:44:bd:92:8a:53:04: 72:4e:40:23:1b:2b:99:26:82:97:08:88:94:e3:b9:e2:83:0e: 0f:6b:5c:1c:5b:29:9a:3d:6c:38:c9:de:3d:fc:64:a8:23:28: 70:d4:6c:9d:b4:73:54:9c:0b:b7:93:6a:84:31:1c:26:a4:5c: 28:11:43:b8:c0:1b:4b:2a:23:2d:d4:c9:b7:f1:8f:b2:a4:f5: e1:8b:80:34:cd:b3:ab:cb:93:7f:28:2e:57:67:9f:bb:aa:9d: db:d8:7a:c2:3f:5a:51:90:2c:0a:d1:85:0a:ad:82:67:c9:f9: b9:81:1b:00:60:ca:bb:f2:0a:e2:aa:01:67:84:25:27:bc:ec: 7c:66:f5:f8:44:6f:f0:c9:04:2f:66:ad:5e:90:1e:b1:7c:15: 61:07:7e:e6:61:4d:dd:b5:13:66:a2:c0:bc:57:b5:c4:66:48: 74:02:73:af:e8:0d:a1:5d:a7:fa:73:61:ae:42:f1:e5:2c:4b: a1:e1:70:2a:57:7f:6d:e3:34:47:a2:4a:35:59:d9:c4:7a:35: 9c:1f:22:8a:db:4f:3f:64:f8:37:08:97:94:58:97:c5:38:19: 5f:91:33:28 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwcpvlRVaqtnGaET32JQiZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMjAyMDQ0MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWZlZWE3NThhNzUxYjliN2I1MmQyMWZkMTg2MzEzMjkzMzc1ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBhea998yNeRve9Q0YOHOL+BEmDR 3gSFuSXEYau4HIhYYBxEcQiwOk+/uXQpLrnXcS/DAYC+c+Y4GsE0KnX+NuU/MzQV c5tK01L4WVgu9CIcdwPqLsA7UuXIKa4YEjU5aiHk9ElEOWd7w3qccMNnkthDYEuo n+hLoceY4APZX+DxMATrDnvW9Ae/nirV93rh/1nEjBhlsn6BCzHksQcfq/sglhpN F1jn240SVFVc+718o4ZhdUoaig1WpWfppgEC0ah10B8tqhR13bHRnarLGKDZD2+u RoPzvpBu2iV3I2TP/PpVsHXwE13zRXrVWgJaQG5aRbYLVXjnj0o7ONLpBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC7+6nWKdRube1LSH9GGMTKTN1ggMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTHY3cWRZcDFHNXQ3VXRJZjBZWXhNcE0zV0NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWX0lAwQA WX0wAwQAWX2rMA0GCSqGSIb3DQEBCwUAA4IBAQAhhmRbUO9jjvdHjobl6AH+/4dl GEY8vJ971cBcMF1EvZKKUwRyTkAjGyuZJoKXCIiU47nigw4Pa1wcWymaPWw4yd49 /GSoIyhw1GydtHNUnAu3k2qEMRwmpFwoEUO4wBtLKiMt1Mm38Y+ypPXhi4A0zbOr y5N/KC5XZ5+7qp3b2HrCP1pRkCwK0YUKrYJnyfm5gRsAYMq78griqgFnhCUnvOx8 ZvX4RG/wyQQvZq1ekB6xfBVhB37mYU3dtRNmosC8V7XEZkh0AnOv6A2hXaf6c2Gu QvHlLEuh4XAqV39t4zRHoko1WdnEejWcHyKK208/ZPg3CJeUWJfFOBlfkTMo -----END CERTIFICATE-----Generated at Tue Feb 3 00:01:24 2026 by rpki-client