This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/LXVPkCMf-iOFqNeNwJv-_y-HEIY.roa File: LXVPkCMf-iOFqNeNwJv-_y-HEIY.roa (raw, json) Hash identifier: TXoOFAB4hy2rDjbzbaqZU52p8hSQADOQOZNnNWq9BsY= Subject key identifier: 2D:75:4F:90:23:1F:FA:23:85:A8:D7:8D:C0:9B:FE:FF:2F:87:10:86 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C133F5BAD6CA5FAB4790F4BF4305A5E Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/LXVPkCMf-iOFqNeNwJv-_y-HEIY.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212496 IP address blocks: 185.24.109.0/24 maxlen: 24 185.58.114.0/24 maxlen: 24 185.73.183.0/24 maxlen: 24 185.97.79.0/24 maxlen: 24 185.104.148.0/24 maxlen: 24 185.105.47.0/24 maxlen: 24 185.111.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3f:5b:ad:6c:a5:fa:b4:79:0f:4b:f4:30:5a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d754f90231ffa2385a8d78dc09bfeff2f871086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:b4:ff:1c:4b:2a:dc:62:74:74:fd:68:d1: 3d:2c:ec:82:c2:b1:09:a7:a1:9b:1c:f7:bc:75:94: 5a:84:b3:b6:05:0e:d1:20:d1:b8:61:e2:e9:05:f3: 1c:94:9f:c2:d1:31:8b:7e:a3:98:82:30:ff:b7:d6: 1d:9f:25:c2:23:b6:de:aa:69:5f:a6:c9:f9:8f:de: 5e:f1:1f:f1:4a:cf:7e:22:d0:a4:b9:38:ed:7d:6d: 95:f3:5a:20:77:83:c0:7e:16:3e:20:e8:ba:fc:c0: 3f:3a:40:03:39:49:bc:fb:09:6e:cc:20:75:00:68: 6e:24:c0:95:7f:e6:3e:d2:cd:b8:94:10:98:42:f9: 35:eb:3c:b1:76:04:76:6e:89:22:29:c8:5a:3c:a2: ee:69:86:b6:25:8a:0d:e6:b2:77:2c:c7:43:a5:3b: aa:91:6d:88:f1:f2:4f:7b:bc:eb:67:97:6d:a0:a7: e0:1e:c5:47:4f:59:26:95:a9:47:c3:40:1d:ad:6b: 87:70:05:b3:75:bb:5b:2f:65:f2:38:31:4c:de:50: f2:9f:fe:59:e0:50:80:00:9c:87:85:51:af:8d:c1: 97:4c:c9:17:21:d1:a7:12:5a:15:86:68:7e:86:78: bc:71:eb:e2:0a:96:b5:b8:3b:3b:6f:68:b9:a3:8b: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:4F:90:23:1F:FA:23:85:A8:D7:8D:C0:9B:FE:FF:2F:87:10:86 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/LXVPkCMf-iOFqNeNwJv-_y-HEIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.109.0/24 185.58.114.0/24 185.73.183.0/24 185.97.79.0/24 185.104.148.0/24 185.105.47.0/24 185.111.25.0/24 Signature Algorithm: sha256WithRSAEncryption 16:5d:b5:79:40:96:54:e8:69:f4:c0:8d:d1:25:5c:01:22:a1: 13:f4:13:c7:ad:2c:36:ea:c0:04:8a:58:8d:28:cc:54:15:f0: d1:58:b6:44:ba:30:7b:e2:8c:51:4e:3b:f8:09:70:21:29:63: da:cb:42:ae:26:ff:97:85:65:dc:b2:33:ff:67:0c:4a:e4:55: 87:6d:6e:af:a9:18:b1:6e:5e:c0:fd:13:de:8b:5f:ff:81:27: 80:15:61:a8:31:c6:84:fb:97:ee:e0:e9:fd:ac:9c:a8:b4:bd: 1e:c7:93:31:82:47:b7:ac:bf:b3:2e:cf:ea:1e:af:bd:c5:7a: 22:02:ba:91:30:aa:92:ed:7b:d1:7e:b3:76:cd:f9:aa:ba:9b: ba:3a:51:af:a4:5d:09:5a:45:d0:17:9e:46:87:a2:25:ec:47: da:1c:59:de:a3:19:51:48:00:74:8b:e8:ed:5b:d8:3f:ee:01: 5b:11:96:21:fd:d4:b5:da:35:3b:ce:08:9f:67:78:3c:d2:6e: cb:c2:fa:d1:06:70:00:67:aa:11:8c:5e:89:d8:93:19:f6:2f: 36:79:de:c8:8f:08:19:2f:07:68:96:df:34:cf:4f:08:0a:e2: e8:e8:b2:42:05:55:15:73:dd:66:11:50:dc:1f:89:dc:00:eb: fa:19:28:a8 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8Ez9brWyl+rR5D0v0MFpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc1NGY5MDIzMWZmYTIzODVhOGQ3OGRjMDliZmVmZjJmODcxMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33G0/xxLKtxidHT9aNE9LOyCwrEJ p6GbHPe8dZRahLO2BQ7RING4YeLpBfMclJ/C0TGLfqOYgjD/t9YdnyXCI7beqmlf psn5j95e8R/xSs9+ItCkuTjtfW2V81ogd4PAfhY+IOi6/MA/OkADOUm8+wluzCB1 AGhuJMCVf+Y+0s24lBCYQvk16zyxdgR2bokiKchaPKLuaYa2JYoN5rJ3LMdDpTuq kW2I8fJPe7zrZ5dtoKfgHsVHT1kmlalHw0AdrWuHcAWzdbtbL2XyODFM3lDyn/5Z 4FCAAJyHhVGvjcGXTMkXIdGnEloVhmh+hni8ceviCpa1uDs7b2i5o4tFswIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFC11T5AjH/ojhajXjcCb/v8vhxCGMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvTFhWUGtDTWYtaU9GcU5lTndKdi1feS1IRUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAuRhtAwQA uTpyAwQAuUm3AwQAuWFPAwQAuWiUAwQAuWkvAwQAuW8ZMA0GCSqGSIb3DQEBCwUA A4IBAQAWXbV5QJZU6Gn0wI3RJVwBIqET9BPHrSw26sAEiliNKMxUFfDRWLZEujB7 4oxRTjv4CXAhKWPay0KuJv+XhWXcsjP/ZwxK5FWHbW6vqRixbl7A/RPei1//gSeA FWGoMcaE+5fu4On9rJyotL0ex5Mxgke3rL+zLs/qHq+9xXoiArqRMKqS7XvRfrN2 zfmqupu6OlGvpF0JWkXQF55Gh6Il7EfaHFneoxlRSAB0i+jtW9g/7gFbEZYh/dS1 2jU7zgifZ3g80m7LwvrRBnAAZ6oRjF6J2JMZ9i82ed7IjwgZLwdolt80z08ICuLo 6LJCBVUVc91mEVDcH4ncAOv6GSio -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:21 2026 by rpki-client