This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/lUYFhgrgYwzzCnla_INuymemYAw.roa
File: lUYFhgrgYwzzCnla_INuymemYAw.roa (raw, json)
Hash identifier: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=
Subject key identifier: 95:46:05:86:0A:E0:63:0C:F3:0A:79:5A:FC:83:6E:CA:67:A6:60:0C
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019B7B36A34D7B39F88D7180B0560C0E8AD1
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/lUYFhgrgYwzzCnla_INuymemYAw.roa
Signing time: Thu 01 Jan 2026 20:18:56 +0000
ROA not before: Thu 01 Jan 2026 20:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213373
IP address blocks: 85.203.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:a3:4d:7b:39:f8:8d:71:80:b0:56:0c:0e:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jan 1 20:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=954605860ae0630cf30a795afc836eca67a6600c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:14:a3:50:1f:c3:89:6c:05:3f:50:27:a3:
ea:c1:38:dd:6c:1a:52:6d:05:46:6f:c8:32:b2:02:
00:3c:c6:eb:7c:c0:75:ae:d2:ad:e5:5d:48:a1:c5:
3e:82:f2:45:93:e4:01:06:48:1f:a7:89:30:7b:5a:
ee:14:72:d4:46:4c:87:6e:90:f7:75:f4:6b:f3:33:
ae:82:b7:d2:88:bf:f6:28:d8:c8:ce:15:ba:6c:0e:
5a:08:ec:22:86:ab:48:86:41:78:5d:50:95:77:a7:
7b:5d:f7:93:31:11:bb:7f:f5:74:ee:29:bf:3a:33:
fb:03:d5:af:9b:bc:c3:ab:d2:c6:33:71:46:74:73:
2b:46:b4:86:c5:8a:ba:74:78:a9:02:dd:59:24:eb:
d3:d6:0d:88:ef:df:88:b8:d7:33:e6:5b:b0:0b:d1:
76:16:a6:8e:a2:6d:d2:dc:66:41:bd:cf:1d:65:5d:
2f:76:53:ef:04:4e:46:1f:56:5b:8f:59:69:88:00:
fc:87:ac:d7:58:cf:7f:66:6f:fe:98:5c:a7:49:8c:
d9:aa:36:78:0f:bb:bd:0e:4b:b3:32:ca:6a:ff:9b:
c5:ba:98:48:5c:9b:1e:1f:ae:99:9d:fb:43:8e:74:
41:70:de:d8:00:53:67:bf:81:53:86:a4:89:35:4c:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:05:86:0A:E0:63:0C:F3:0A:79:5A:FC:83:6E:CA:67:A6:60:0C
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/lUYFhgrgYwzzCnla_INuymemYAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.26.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1e:39:24:e5:41:25:3c:cf:01:12:64:e8:e1:12:6b:06:91:
9b:b2:31:5a:c0:e8:fb:33:77:ca:77:dc:7f:8d:9a:ed:3f:85:
03:f3:a3:79:0f:d0:3c:0f:c4:eb:c2:94:97:9f:02:14:d5:f1:
ae:1e:67:84:c8:8d:72:8a:d9:dd:e7:fb:1b:9a:9c:5d:3e:5c:
e0:33:56:a0:51:22:e0:c4:41:f0:0d:97:c0:f9:5d:01:27:b0:
6d:ca:57:b8:80:76:0d:70:81:c3:20:fd:39:b3:e7:32:14:92:
9a:ed:1a:e2:04:85:8b:c8:14:7a:9c:40:22:d7:6d:0a:ca:3f:
b7:57:ab:ef:63:fe:38:09:52:16:6d:6f:e5:bd:c9:1c:ca:1f:
b2:c6:fd:01:fe:9c:23:4d:fa:c8:91:75:39:44:07:71:85:0e:
3e:53:bc:b7:ae:47:e9:06:fd:f9:f6:7a:64:96:55:58:7b:b9:
3e:7e:0b:61:d0:8b:80:e9:c7:b0:03:d1:c3:f5:b9:ed:a1:6b:
ac:a1:a2:52:59:16:ff:04:d4:f7:56:cb:7a:41:19:ee:3c:34:
99:61:d9:b0:58:87:54:d4:5f:78:cb:bc:cf:0e:ec:d6:ee:51:
18:0d:07:ec:c9:fd:d0:fd:db:5a:78:f8:b7:0f:6e:b6:24:f1:
8f:dc:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 02:50:01 2026 by rpki-client