This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/LStG3MZHjClQlcvMSArKJ1HBwFQ.roa File: LStG3MZHjClQlcvMSArKJ1HBwFQ.roa (raw, json) Hash identifier: Bj6S9j6Jh7TL/tfR7BKsQeDq2b9zngVPJSvc5OTYm+o= Subject key identifier: 2D:2B:46:DC:C6:47:8C:29:50:95:CB:CC:48:0A:CA:27:51:C1:C0:54 Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c Certificate serial: 019B797EC47EA2FB5946806FE26EB0E25AEB Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/LStG3MZHjClQlcvMSArKJ1HBwFQ.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198611 IP address blocks: 91.240.131.0/24 maxlen: 24 2a0c:44c0:1::/48 maxlen: 48 2a0c:44c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c4:7e:a2:fb:59:46:80:6f:e2:6e:b0:e2:5a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d2b46dcc6478c295095cbcc480aca2751c1c054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:35:b9:d4:e0:bb:c2:fa:57:57:60:1c:b5: 65:5b:a9:5c:52:5a:65:00:a0:54:64:0a:79:49:b1: 77:b4:bc:0c:e2:7d:69:95:20:df:97:42:64:d0:a7: 62:7e:50:f2:4c:c0:d2:69:2a:b0:df:f3:a9:9f:c1: 3b:a0:0e:5f:45:16:72:cb:87:80:93:a0:2d:8b:67: f6:32:28:a4:5f:44:31:87:48:69:7b:e9:f4:eb:cd: 81:51:ea:05:05:34:ee:b7:91:4d:62:2b:8f:91:89: 0c:ee:02:d2:0b:26:fc:ec:3a:2c:ca:f4:23:68:72: cc:5c:d5:69:d4:74:64:56:a1:3b:37:c9:e0:c0:1d: 28:af:83:8a:a0:3c:56:84:1f:36:9e:1c:54:2f:d5: 0a:6c:37:4e:e1:8c:38:96:55:d3:e0:45:67:9b:7e: 1a:d3:46:37:ea:3c:1e:1e:80:43:a1:e8:0c:f0:a2: 57:5b:52:95:32:0f:94:18:aa:24:3e:30:38:dd:55: a9:c3:73:ea:17:ce:bd:72:3c:2a:bb:60:bf:b9:cb: 66:d8:82:89:c7:f0:d2:f2:67:13:03:e3:f7:ea:c3: 72:b5:57:14:43:63:8a:75:bd:f8:ed:6b:cb:43:45: 87:e8:1d:7b:e7:ed:cb:86:2f:c2:8e:a2:26:38:46: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2B:46:DC:C6:47:8C:29:50:95:CB:CC:48:0A:CA:27:51:C1:C0:54 X509v3 Authority Key Identifier: keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/LStG3MZHjClQlcvMSArKJ1HBwFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.131.0/24 IPv6: 2a0c:44c0:1::-2a0c:44c0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 86:e9:3d:fd:cd:a6:2a:7d:07:37:8c:ed:5f:b9:35:53:bb:0a: 15:83:f0:df:72:20:3a:63:92:74:9e:8b:43:fb:d9:6a:60:1b: 79:1a:0b:3d:ae:55:e1:8d:dd:44:56:79:50:1c:9c:02:71:56: 0e:76:5d:f4:62:48:9a:63:a4:69:a5:05:d8:6a:ba:fc:bd:44: 40:56:27:2e:32:19:d2:9e:cf:2e:b4:9d:51:11:ab:9a:54:2e: 28:74:60:90:1c:ae:db:13:9a:a4:b8:bb:d2:f0:ff:9f:6e:8b: 22:31:03:f1:93:e0:51:18:6e:ed:25:11:6e:1a:c0:2f:1f:19: 61:ef:13:2b:46:fd:c1:50:2f:7c:e4:23:c5:a2:17:58:ae:d4: 99:55:3b:2b:06:64:38:c7:2e:2d:1a:74:2d:0b:de:03:69:5c: 14:4a:4d:09:e0:34:4c:a2:b8:ca:1b:42:14:f8:63:90:1e:a2: 7c:a7:51:02:39:39:ee:6c:83:72:66:ab:4b:6d:68:ac:ab:4e: 50:08:24:5c:14:10:f8:18:16:6a:03:3d:c1:c1:e0:df:16:c3: e6:f5:39:10:96:5d:c3:37:b8:eb:6d:9c:1b:10:44:a5:6e:d0: 5f:d1:0a:94:b5:9b:cd:aa:ee:8a:21:23:6d:da:db:93:c3:f9: 78:3f:da:c8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fsR+ovtZRoBv4m6w4lrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOGI3Y2E0MWY0MDA4MjI5MGNhOGFlZmRlYzRiZDI5N2Qz YWVjMGMwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDJiNDZkY2M2NDc4YzI5NTA5NWNiY2M0ODBhY2EyNzUxYzFjMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC01udTgu8L6V1dgHLVlW6lcUlpl AKBUZAp5SbF3tLwM4n1plSDfl0Jk0KdiflDyTMDSaSqw3/Opn8E7oA5fRRZyy4eA k6Ati2f2MiikX0Qxh0hpe+n0682BUeoFBTTut5FNYiuPkYkM7gLSCyb87DosyvQj aHLMXNVp1HRkVqE7N8ngwB0or4OKoDxWhB82nhxUL9UKbDdO4Yw4llXT4EVnm34a 00Y36jweHoBDoegM8KJXW1KVMg+UGKokPjA43VWpw3PqF869cjwqu2C/uctm2IKJ x/DS8mcTA+P36sNytVcUQ2OKdb347WvLQ0WH6B175+3Lhi/CjqImOEY0mQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC0rRtzGR4wpUJXLzEgKyidRwcBUMB8GA1UdIwQY MBaAFPOLfKQfQAgikMqK797EvSl9OuwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMt YTNjYTIxMTIyNjhiLzEvTFN0RzNNWkhqQ2xRbGN2TVNBcktKMUhCd0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMtYTNjYTIxMTIyNjhi LzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAW/CDMBoE AgACMBQwEgMHACoMRMAAAQMHACoMRMAAAjANBgkqhkiG9w0BAQsFAAOCAQEAhuk9 /c2mKn0HN4ztX7k1U7sKFYPw33IgOmOSdJ6LQ/vZamAbeRoLPa5V4Y3dRFZ5UByc AnFWDnZd9GJImmOkaaUF2Gq6/L1EQFYnLjIZ0p7PLrSdURGrmlQuKHRgkByu2xOa pLi70vD/n26LIjED8ZPgURhu7SURbhrALx8ZYe8TK0b9wVAvfOQjxaIXWK7UmVU7 KwZkOMcuLRp0LQveA2lcFEpNCeA0TKK4yhtCFPhjkB6ifKdRAjk57myDcmarS21o rKtOUAgkXBQQ+BgWagM9wcHg3xbD5vU5EJZdwze4622cGxBEpW7QX9EKlLWbzaru iiEjbdrbk8P5eD/ayA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:28 2026 by rpki-client