This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/lzqB-_xRsBzlfZC3i-581O0TRPA.roa File: lzqB-_xRsBzlfZC3i-581O0TRPA.roa (raw, json) Hash identifier: p6cjxCw0yBX+JOEsw/uKDi48tVNBgWuDysGJUIAaJS8= Subject key identifier: 97:3A:81:FB:FC:51:B0:1C:E5:7D:90:B7:8B:EE:7C:D4:ED:13:44:F0 Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946 Certificate serial: 019B7C1280D5788401B34D20FC2F003887C9 Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/lzqB-_xRsBzlfZC3i-581O0TRPA.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59620 IP address blocks: 185.165.96.0/24 maxlen: 24 185.165.97.0/24 maxlen: 24 185.165.98.0/24 maxlen: 24 185.165.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:80:d5:78:84:01:b3:4d:20:fc:2f:00:38:87:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946 Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=973a81fbfc51b01ce57d90b78bee7cd4ed1344f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:18:fe:f2:65:a2:1e:e7:08:7a:d3:3f:67: d2:9b:0d:d0:44:fe:af:0e:58:0b:c9:8c:56:f1:dd: 69:87:6f:a0:07:16:91:dd:37:db:b8:15:1f:84:2b: c8:eb:5e:e6:f7:05:47:57:52:75:74:ee:5a:45:a8: 24:ee:76:88:e1:a1:aa:4e:af:8a:13:9d:e2:fc:e3: f0:db:3b:ec:0b:24:b5:a8:94:b2:09:50:ff:ec:96: b1:b2:aa:39:48:24:8a:cc:b6:dc:a0:9e:ed:27:40: 77:95:38:1b:a7:1d:c8:3a:d2:b4:2c:76:bb:bc:11: 34:a1:3b:a4:d7:24:94:1c:6f:4c:b6:a2:e2:c8:a4: 26:1a:60:0f:2f:81:2b:de:9f:4c:40:f7:5e:b9:88: 7c:1a:b7:a0:f1:6b:36:1f:95:a3:66:84:8f:16:30: 42:b2:14:91:0e:95:f9:12:69:f9:2c:73:11:f3:5d: 8e:d8:36:ee:09:17:81:a4:d6:1c:ea:48:06:12:2e: ac:d3:ba:dc:00:c5:16:35:dd:3e:9d:aa:5a:eb:68: 1f:33:f1:2c:8a:87:04:78:10:b2:cd:30:69:d5:93: 06:e7:39:f7:b6:29:1a:26:f6:c2:04:aa:85:1f:3d: 83:87:18:14:25:de:df:73:df:15:27:da:35:56:26: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3A:81:FB:FC:51:B0:1C:E5:7D:90:B7:8B:EE:7C:D4:ED:13:44:F0 X509v3 Authority Key Identifier: keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/lzqB-_xRsBzlfZC3i-581O0TRPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.96.0/22 Signature Algorithm: sha256WithRSAEncryption c6:5d:e5:c0:0b:38:d2:d2:bc:ee:b1:97:28:0a:28:ee:2d:35: b6:64:c8:54:df:20:da:87:ed:f4:9a:e6:90:ea:e7:55:f8:45: 55:18:80:ce:dc:de:9d:68:42:3d:16:e7:e2:7e:fd:e3:66:43: 9c:2e:70:3c:6c:3f:5b:3f:78:38:22:5b:a7:92:2b:5e:93:0b: 2d:c3:d6:0b:07:dd:af:24:a5:84:b8:cc:ca:62:4a:c7:16:02: e7:1f:f5:f8:6c:ca:2e:ab:92:6a:b5:37:07:39:93:38:e7:7e: 30:70:50:1f:19:59:f1:ab:20:39:ed:3a:52:67:ce:54:8b:60: a1:d8:de:62:7a:7e:03:22:30:80:07:2f:85:99:8e:95:8a:41: 03:b3:38:bf:3d:18:87:5b:ad:97:d1:c7:d3:ff:8a:88:a2:17: e1:0f:87:37:a9:e7:1f:2e:de:e2:cf:e3:db:7f:e6:54:c6:ed: e9:a9:24:eb:86:da:14:1d:e5:44:ed:40:68:8c:f4:f0:37:93: 05:de:92:7b:34:c6:49:48:eb:6a:10:8e:13:3f:11:15:db:a1: 0b:a8:b6:d9:4c:00:73:60:41:d4:21:63:8c:a8:2e:f2:36:e6: 68:6c:7d:85:97:8f:9f:8b:7e:25:4e:28:b6:6d:0f:25:a7:04: 12:28:46:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoDVeIQBs00g/C8AOIfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzg1YjNhOWUzM2M1MmI1OGI5ZWM5NWEzNzcyM2YwMDA4 YmY5NDYwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzNhODFmYmZjNTFiMDFjZTU3ZDkwYjc4YmVlN2NkNGVkMTM0NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uwY/vJloh7nCHrTP2fSmw3QRP6v DlgLyYxW8d1ph2+gBxaR3TfbuBUfhCvI617m9wVHV1J1dO5aRagk7naI4aGqTq+K E53i/OPw2zvsCyS1qJSyCVD/7Jaxsqo5SCSKzLbcoJ7tJ0B3lTgbpx3IOtK0LHa7 vBE0oTuk1ySUHG9MtqLiyKQmGmAPL4Er3p9MQPdeuYh8Greg8Ws2H5WjZoSPFjBC shSRDpX5Emn5LHMR812O2DbuCReBpNYc6kgGEi6s07rcAMUWNd0+napa62gfM/Es iocEeBCyzTBp1ZMG5zn3tikaJvbCBKqFHz2DhxgUJd7fc98VJ9o1ViaEowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJc6gfv8UbAc5X2Qt4vufNTtE0TwMB8GA1UdIwQY MBaAFJN4WzqeM8UrWLnslaN3I/AAi/lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMt ZjRiYWI3MTllMDcwLzEvbHpxQi1feFJzQnpsZlpDM2ktNTgxTzBUUlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMtZjRiYWI3MTllMDcw LzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaVgMA0G CSqGSIb3DQEBCwUAA4IBAQDGXeXACzjS0rzusZcoCijuLTW2ZMhU3yDah+30muaQ 6udV+EVVGIDO3N6daEI9Fufifv3jZkOcLnA8bD9bP3g4Ilunkitekwstw9YLB92v JKWEuMzKYkrHFgLnH/X4bMouq5JqtTcHOZM4534wcFAfGVnxqyA57TpSZ85Ui2Ch 2N5ien4DIjCABy+FmY6VikEDszi/PRiHW62X0cfT/4qIohfhD4c3qecfLt7iz+Pb f+ZUxu3pqSTrhtoUHeVE7UBojPTwN5MF3pJ7NMZJSOtqEI4TPxEV26ELqLbZTABz YEHUIWOMqC7yNuZobH2Fl4+fi34lTii2bQ8lpwQSKEYN -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:21 2026 by rpki-client