This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/ILu_AnT71_jqTT1HhE40TqJOdBo.roa
File: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (raw, json)
Hash identifier: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=
Subject key identifier: 20:BB:BF:02:74:FB:D7:F8:EA:4D:3D:47:84:4E:34:4E:A2:4E:74:1A
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019B7B3694FC1E0350FCF8B8BDA424E136E5
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/ILu_AnT71_jqTT1HhE40TqJOdBo.roa
Signing time: Thu 01 Jan 2026 20:18:53 +0000
ROA not before: Thu 01 Jan 2026 20:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3758
IP address blocks: 85.203.24.0/24 maxlen: 24
85.203.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:94:fc:1e:03:50:fc:f8:b8:bd:a4:24:e1:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jan 1 20:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20bbbf0274fbd7f8ea4d3d47844e344ea24e741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:2d:f8:93:55:86:d6:fa:ef:6b:f6:87:36:
be:c7:f1:e4:01:76:0d:47:97:c5:8f:d3:49:9f:63:
0f:bd:62:24:8a:3f:1e:3d:d8:e2:df:5e:23:b1:fc:
84:a3:37:30:b9:84:6d:a7:d1:b5:5a:8f:91:4f:f3:
e7:aa:a0:38:8a:4a:80:66:97:73:36:44:55:84:97:
fa:62:fb:d6:e9:0d:cb:45:44:ff:39:af:b6:0b:88:
d8:f7:5c:29:0c:1f:e1:dd:0c:8f:35:bf:79:30:29:
a2:89:c8:07:05:35:f7:de:32:5a:f8:d0:25:21:5a:
a4:7e:de:da:91:41:74:b9:bb:12:6d:d4:3c:b9:f2:
c7:f3:06:cd:f4:b3:7d:01:10:cb:f6:8f:5c:74:7f:
29:3e:59:bb:58:0e:bd:f9:4a:c6:35:96:42:6b:03:
95:84:ca:d7:f2:58:4c:97:0e:99:99:9a:27:9e:b2:
14:a1:71:a8:e9:24:f3:9f:70:e6:28:3c:55:d7:c9:
99:ec:20:ec:db:cc:79:45:f1:7c:6b:73:7b:55:4e:
0b:60:79:33:72:55:c5:8c:bd:ab:bf:27:87:62:4a:
32:20:49:8b:de:63:c5:76:7d:7b:a9:95:04:88:3b:
9a:93:27:65:86:5e:9b:28:ee:4f:53:7f:15:68:e6:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:BF:02:74:FB:D7:F8:EA:4D:3D:47:84:4E:34:4E:A2:4E:74:1A
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/ILu_AnT71_jqTT1HhE40TqJOdBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.24.0/24
85.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:92:e5:aa:3c:79:2f:b1:c5:e3:4e:ea:f5:01:dd:f5:1b:47:
4d:16:73:dc:b7:87:5e:62:24:ee:58:12:8e:1f:e1:27:30:32:
b1:6c:4a:bf:ec:a2:3a:ca:dc:a2:a0:a6:76:34:b0:3c:ab:0b:
0f:2a:00:35:1f:9b:3f:00:ab:aa:79:c2:47:ec:b8:b0:c8:51:
dd:a0:59:85:12:a9:c1:ce:3c:d8:2c:b0:b7:23:46:0a:8e:f8:
ae:8b:17:60:6f:34:fe:c2:fb:56:d4:e3:7e:f7:fe:be:b4:e2:
e6:84:30:72:f3:cd:a0:51:53:34:d9:b1:be:31:95:ed:97:e0:
99:a9:2a:3d:50:2e:c6:3e:d4:b3:f9:d5:17:1b:2a:da:46:03:
c7:20:a5:af:0e:ad:eb:f0:94:7b:15:67:1b:ef:59:df:70:b0:
4c:50:b7:1d:df:5e:48:69:fe:e7:62:da:d6:2f:6c:0a:df:43:
71:1b:2b:46:f5:61:10:9e:3a:eb:b3:3a:7b:37:93:13:90:f8:
df:ac:12:19:58:4d:e4:f9:c8:a2:09:47:eb:c7:df:6a:95:07:
09:01:6d:dc:c1:56:84:d3:85:12:17:5b:fe:c3:8a:3f:78:6e:
83:99:0b:e8:20:6d:57:8c:34:d6:6f:cf:91:fd:99:fb:65:66:
0a:6a:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 02:48:43 2026 by rpki-client