This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/LgGfCw5P6EPS02odz9L5gtFB9CY.roa File: LgGfCw5P6EPS02odz9L5gtFB9CY.roa (raw, json) Hash identifier: TMsWFDEHJPQcP7QFpiFpw7haPOsCTPLSZXPOO1J1hGg= Subject key identifier: 2E:01:9F:0B:0E:4F:E8:43:D2:D3:6A:1D:CF:D2:F9:82:D1:41:F4:26 Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47 Certificate serial: 019B7F83F7AF363660ED821EF7E6A707FA59 Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/LgGfCw5P6EPS02odz9L5gtFB9CY.roa Signing time: Fri 02 Jan 2026 16:21:53 +0000 ROA not before: Fri 02 Jan 2026 16:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209385 IP address blocks: 185.232.124.0/22 maxlen: 24 2a0c:a500::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f7:af:36:36:60:ed:82:1e:f7:e6:a7:07:fa:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47 Validity Not Before: Jan 2 16:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e019f0b0e4fe843d2d36a1dcfd2f982d141f426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:e5:e0:3c:95:8f:b3:2e:ac:47:4d:b1:f3: 10:9e:ce:51:aa:9f:b5:e9:d3:4e:f5:fc:97:3a:29: 0c:79:05:bf:09:de:05:78:e7:3a:ce:de:93:85:23: 07:f7:43:ff:a1:9a:e0:9d:0e:ed:ba:20:75:79:2f: ff:8e:a8:c9:86:e6:42:bf:f8:9d:2a:a4:e1:31:39: 82:79:8e:d1:3d:db:10:54:1b:b8:bd:83:40:b2:d6: a8:ad:a4:b5:10:1c:cc:ff:77:82:4a:94:01:08:fe: 95:26:ec:87:e8:76:b9:9d:bc:c3:ae:46:79:4a:87: 08:93:13:c9:48:6b:1b:44:dd:75:0a:3e:1b:23:ca: ed:04:47:ae:f7:df:7e:8b:84:6a:16:46:13:41:2c: a9:e4:3b:2b:01:5a:26:e1:39:33:9b:00:75:19:41: 52:69:ad:bd:5b:3f:89:7c:0b:60:f6:b2:ab:19:e4: db:a5:ee:65:e3:ff:93:05:17:4d:ea:02:24:59:d7: 0d:b1:10:1c:f8:0b:12:27:32:31:62:87:68:35:c0: ba:df:84:c1:99:57:b2:ac:10:84:31:0d:4c:b5:d2: 26:14:a5:85:2b:9c:5b:03:8b:11:3f:0e:4e:be:b0: 54:bd:0b:c2:ec:61:86:4c:0b:ce:f5:cb:2f:d1:d6: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:9F:0B:0E:4F:E8:43:D2:D3:6A:1D:CF:D2:F9:82:D1:41:F4:26 X509v3 Authority Key Identifier: keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/LgGfCw5P6EPS02odz9L5gtFB9CY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.124.0/22 IPv6: 2a0c:a500::/32 Signature Algorithm: sha256WithRSAEncryption 4d:55:63:01:16:cf:f2:08:66:62:ae:9d:e5:eb:43:0e:07:d3: 58:79:47:53:f6:e9:39:de:73:f2:1f:65:7e:87:c0:06:a9:5d: a9:f2:e8:97:8b:a4:5b:fc:86:11:d7:f8:b2:31:d2:21:da:97: f9:d8:3b:66:8e:2b:46:74:db:1c:6c:8b:ce:fb:d9:b1:b0:e9: d3:25:ae:e8:61:66:3c:05:a4:c8:81:d4:24:eb:f5:5b:08:db: 0b:8a:6e:36:c4:e3:17:d9:8d:20:c6:c1:36:b7:26:d2:3e:fc: fa:c8:88:f2:9e:7d:80:5e:1b:5c:3d:d6:c8:33:8d:d7:d2:5a: 4b:0d:db:58:73:74:00:42:0a:5b:ef:85:36:1c:5f:66:de:87: 5d:4d:a5:ee:41:9c:e6:c0:eb:5a:6f:30:dc:4b:91:b4:e2:69: 0d:bd:fe:8d:f5:c1:70:88:f2:8d:96:ae:3e:50:c2:2b:7d:27: 71:33:7c:e4:4a:62:43:ae:8c:39:bd:d2:49:37:da:b3:16:af: 20:51:4d:90:4d:df:2d:a9:47:01:68:14:02:c6:a3:0b:06:b8: e4:b7:bd:8c:05:50:be:17:cb:59:07:cb:86:80:03:20:6b:6c: 1a:fc:bc:7d:ad:a7:75:e2:be:b2:1a:75:ae:3a:c8:03:da:9d: 66:9e:b1:20 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g/evNjZg7YIe9+anB/pZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGQ1OTQzYzI0MDM3MzBkZTgxOGUzMWI5YjVmZjFkOGMx YzljNDcwHhcNMjYwMTAyMTYyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTAxOWYwYjBlNGZlODQzZDJkMzZhMWRjZmQyZjk4MmQxNDFmNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRjl4DyVj7MurEdNsfMQns5Rqp+1 6dNO9fyXOikMeQW/Cd4FeOc6zt6ThSMH90P/oZrgnQ7tuiB1eS//jqjJhuZCv/id KqThMTmCeY7RPdsQVBu4vYNAstaoraS1EBzM/3eCSpQBCP6VJuyH6Ha5nbzDrkZ5 SocIkxPJSGsbRN11Cj4bI8rtBEeu999+i4RqFkYTQSyp5DsrAVom4TkzmwB1GUFS aa29Wz+JfAtg9rKrGeTbpe5l4/+TBRdN6gIkWdcNsRAc+AsSJzIxYodoNcC634TB mVeyrBCEMQ1MtdImFKWFK5xbA4sRPw5OvrBUvQvC7GGGTAvO9csv0dYmHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC4BnwsOT+hD0tNqHc/S+YLRQfQmMB8GA1UdIwQY MBaAFE0NWUPCQDcw3oGOMbm1/x2MHJxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMt NGE2MzdjNmQ5OTM4LzEvTGdHZkN3NVA2RVBTMDJvZHo5TDVndEZCOUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMtNGE2MzdjNmQ5OTM4 LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueh8MA0E AgACMAcDBQAqDKUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNVWMBFs/yCGZirp3l60MO B9NYeUdT9uk53nPyH2V+h8AGqV2p8uiXi6Rb/IYR1/iyMdIh2pf52DtmjitGdNsc bIvO+9mxsOnTJa7oYWY8BaTIgdQk6/VbCNsLim42xOMX2Y0gxsE2tybSPvz6yIjy nn2AXhtcPdbIM43X0lpLDdtYc3QAQgpb74U2HF9m3oddTaXuQZzmwOtabzDcS5G0 4mkNvf6N9cFwiPKNlq4+UMIrfSdxM3zkSmJDrow5vdJJN9qzFq8gUU2QTd8tqUcB aBQCxqMLBrjkt72MBVC+F8tZB8uGgAMga2wa/Lx9rad14r6yGnWuOsgD2p1mnrEg -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:40 2026 by rpki-client