This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/LGaXWPb8sVewbeAiqsjliqHS5FU.roa File: LGaXWPb8sVewbeAiqsjliqHS5FU.roa (raw, json) Hash identifier: rDB26YuQ2ovWQGE6oyw5Ta3692pcrg+OO7rhpjHQcXk= Subject key identifier: 2C:66:97:58:F6:FC:B1:57:B0:6D:E0:22:AA:C8:E5:8A:A1:D2:E4:55 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019ACB262E41B7EB4EDE53B577767F05878B Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/LGaXWPb8sVewbeAiqsjliqHS5FU.roa Signing time: Fri 28 Nov 2025 15:47:48 +0000 ROA not before: Fri 28 Nov 2025 15:47:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 188.74.161.0/24 maxlen: 24 188.74.162.0/24 maxlen: 24 188.74.165.0/24 maxlen: 24 188.74.166.0/24 maxlen: 24 188.74.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:26:2e:41:b7:eb:4e:de:53:b5:77:76:7f:05:87:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Nov 28 15:47:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c669758f6fcb157b06de022aac8e58aa1d2e455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:d8:f9:f6:91:8f:10:9a:5b:5e:76:b8:35: 79:f4:8b:f1:18:13:d6:b4:11:a4:e1:61:00:cd:33: e6:6e:45:b2:a6:cb:1a:06:65:cf:d6:f9:1f:60:41: 95:e4:c4:cc:f2:1f:97:37:d9:44:cd:e4:f1:ef:30: a3:5c:92:54:66:84:7e:e7:e9:a2:72:d6:a9:bc:5e: 65:c2:0b:70:39:69:26:e1:48:70:1d:8e:f7:17:40: 87:2d:17:23:9b:55:e0:a9:98:38:1b:94:23:8d:5d: c8:ee:fb:fe:b5:ae:89:b6:47:74:e9:26:b7:6e:52: fb:44:29:d7:64:b4:39:ed:24:c5:b5:0b:1d:dc:4f: 86:cb:b1:d7:b4:d6:44:25:83:7a:fa:d0:bf:f3:d5: 48:a7:7e:3e:66:79:ae:fb:93:c2:26:53:97:83:0d: 9e:d6:8e:b8:7b:e6:10:34:1b:ae:00:ca:27:ce:13: 4a:86:58:50:17:8b:e0:b6:6b:85:66:fc:26:cb:ea: 74:46:e7:e0:65:63:c9:c0:e6:53:f8:8e:e2:09:ee: 86:cb:11:e1:f0:92:32:b8:9f:14:6a:46:03:09:7f: 10:f9:ca:c2:95:c5:62:a2:9c:21:5c:c5:8e:ae:ca: 14:c7:63:bd:7d:8e:7d:e9:af:b7:61:22:2d:b0:30: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:66:97:58:F6:FC:B1:57:B0:6D:E0:22:AA:C8:E5:8A:A1:D2:E4:55 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/LGaXWPb8sVewbeAiqsjliqHS5FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.74.161.0-188.74.162.255 188.74.165.0-188.74.167.255 Signature Algorithm: sha256WithRSAEncryption 1a:0f:9d:8b:d2:e7:35:44:f9:f6:d0:c0:b4:5f:81:3c:23:6e: 2f:00:c9:18:b2:b5:9e:3d:c0:51:a0:0b:f9:36:b9:d3:67:b3: e5:3a:d8:23:73:7e:9c:c8:7c:e9:7e:4e:96:1f:a7:7c:76:b4: 03:0e:7a:aa:c3:42:a2:4e:fb:49:af:24:83:76:6c:d5:e4:45: 05:c5:91:f7:5a:af:83:82:2f:5a:18:3c:7b:23:1a:66:4d:89: 2e:af:74:5c:48:3c:95:40:f5:43:6a:54:10:a5:49:92:c6:14: 2c:b8:c0:0b:9e:03:4e:77:72:0e:a9:83:19:4a:af:59:cd:32: 25:2d:81:2d:e7:19:c8:ef:6e:b9:b6:52:20:cc:42:66:c1:51: 2f:7f:c8:cb:3b:3f:2e:36:30:41:e1:b2:cd:40:0e:c6:8f:8e: 86:ff:8d:5b:6c:d3:0a:5d:52:73:a9:31:eb:2e:4b:50:9b:15: 38:3b:d8:fe:4b:7b:5f:e4:38:9e:58:ce:a5:18:21:69:24:35: 0f:8b:20:6b:ed:82:dd:24:1f:04:67:d6:b9:6c:c8:ee:d0:21: 3e:fb:9e:e4:b2:6d:cd:74:a4:72:11:0b:1f:1e:ec:b0:6d:29: 8d:d4:0f:3e:3b:f9:7f:51:7d:d3:b0:a2:71:1e:61:56:e5:54: b2:6a:88:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZrLJi5Bt+tO3lO1d3Z/BYeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUxMTI4MTU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzY2OTc1OGY2ZmNiMTU3YjA2ZGUwMjJhYWM4ZTU4YWExZDJlNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP3Y+faRjxCaW152uDV59IvxGBPW tBGk4WEAzTPmbkWypssaBmXP1vkfYEGV5MTM8h+XN9lEzeTx7zCjXJJUZoR+5+mi ctapvF5lwgtwOWkm4UhwHY73F0CHLRcjm1XgqZg4G5QjjV3I7vv+ta6Jtkd06Sa3 blL7RCnXZLQ57STFtQsd3E+Gy7HXtNZEJYN6+tC/89VIp34+Znmu+5PCJlOXgw2e 1o64e+YQNBuuAMonzhNKhlhQF4vgtmuFZvwmy+p0RufgZWPJwOZT+I7iCe6GyxHh 8JIyuJ8UakYDCX8Q+crClcViopwhXMWOrsoUx2O9fY596a+3YSItsDBIwQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCxml1j2/LFXsG3gIqrI5Yqh0uRVMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvTEdhWFdQYjhzVmV3YmVBaXFzamxpcUhTNUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAC8SqED BAC8SqIwDAMEALxKpQMEA7xKoDANBgkqhkiG9w0BAQsFAAOCAQEAGg+di9LnNUT5 9tDAtF+BPCNuLwDJGLK1nj3AUaAL+Ta502ez5TrYI3N+nMh86X5Olh+nfHa0Aw56 qsNCok77Sa8kg3Zs1eRFBcWR91qvg4IvWhg8eyMaZk2JLq90XEg8lUD1Q2pUEKVJ ksYULLjAC54DTndyDqmDGUqvWc0yJS2BLecZyO9uubZSIMxCZsFRL3/Iyzs/LjYw QeGyzUAOxo+Ohv+NW2zTCl1Sc6kx6y5LUJsVODvY/kt7X+Q4nljOpRghaSQ1D4sg a+2C3SQfBGfWuWzI7tAhPvue5LJtzXSkchELHx7ssG0pjdQPPjv5f1F907CicR5h VuVUsmqIBQ== -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:28 2025 by rpki-client