This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/LTXISUxPHYR9FIoNK22-mMEgcIo.roa File: LTXISUxPHYR9FIoNK22-mMEgcIo.roa (raw, json) Hash identifier: 5U15BoyOR1vbWtgd6weIYrRThFJ7bGLw/lOyq6iWyFA= Subject key identifier: 2D:35:C8:49:4C:4F:1D:84:7D:14:8A:0D:2B:6D:BE:98:C1:20:70:8A Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408 Certificate serial: 019B7FF20F7513535E91186EF689AD8666FC Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/LTXISUxPHYR9FIoNK22-mMEgcIo.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203071 IP address blocks: 45.147.94.0/24 maxlen: 24 2a13:4e80::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0f:75:13:53:5e:91:18:6e:f6:89:ad:86:66:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408 Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d35c8494c4f1d847d148a0d2b6dbe98c120708a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:44:94:ea:94:39:de:ba:33:4b:74:00:fe: 27:e4:a9:0d:26:15:bd:cb:13:87:f0:b3:61:18:1d: 9c:d4:cd:29:90:42:b4:ab:35:7c:fe:31:2e:3b:54: 72:c5:84:0f:b8:2a:4a:25:0d:da:80:ca:a1:66:63: 18:0f:9a:38:ce:bb:e7:74:b4:71:cc:39:fd:f3:fc: df:2e:ac:af:59:00:0a:2b:d7:fc:ad:e9:87:a2:82: 62:f2:f1:60:9a:d9:32:a8:5f:98:71:e2:83:eb:d1: 7a:5a:16:21:72:31:f6:26:0a:75:22:c1:e6:ab:0c: f4:cc:ab:61:ac:d0:52:90:d7:72:9b:1c:b1:57:1e: bd:65:c3:69:7e:79:e0:53:9f:16:ca:1f:60:5d:ac: cc:99:bc:41:5a:9b:2a:56:2b:57:16:d4:16:4b:23: e4:8e:dd:59:55:53:61:03:34:69:db:28:9e:79:62: 9c:c2:a0:cf:f1:94:83:d8:33:43:be:60:f5:0c:66: f5:13:ce:53:34:14:03:6f:f3:6a:2a:18:22:5c:db: 83:36:87:8f:4a:56:97:4b:a8:7c:0f:c3:fd:4f:79: be:1d:f3:6f:29:c3:04:a6:d7:df:81:71:37:d9:8e: 0f:ad:23:df:62:4b:dc:f7:13:fd:d4:67:a1:72:8f: 3b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:C8:49:4C:4F:1D:84:7D:14:8A:0D:2B:6D:BE:98:C1:20:70:8A X509v3 Authority Key Identifier: keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/LTXISUxPHYR9FIoNK22-mMEgcIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.94.0/24 IPv6: 2a13:4e80::/40 Signature Algorithm: sha256WithRSAEncryption bd:bb:f9:2f:3b:f8:97:73:a6:71:3d:ef:bd:1f:7f:50:d2:e3: 4f:43:d2:6d:fe:6d:e5:c4:f5:19:31:45:5f:0d:02:8b:a2:62: 03:c6:ce:3f:4f:8f:da:01:f4:6d:08:bd:6a:47:15:e4:cd:3f: 34:1f:0f:6e:ff:1d:0f:01:32:14:12:e6:57:74:b4:4c:7d:38: 6d:fa:be:5b:c0:e9:e9:0c:20:a9:77:6d:4a:65:ee:f2:8b:f5: f1:43:07:68:73:11:17:d6:8b:84:bc:b2:d0:ca:55:74:21:23: 3f:10:d1:34:af:4d:61:99:81:59:5a:c6:3a:d0:22:4e:00:de: 97:6c:67:ad:1c:bd:e1:25:37:8b:ec:7a:3c:ca:39:10:f1:45: ce:28:f4:8f:95:82:01:1a:1e:ce:56:af:3a:09:bd:78:71:c4: ca:f7:f1:9e:52:64:8f:9f:62:17:d5:b0:2e:6d:0a:1e:7d:86: 72:15:0f:7e:ca:cf:3b:ee:2b:50:11:f3:68:a1:31:80:08:4c: 9a:d8:b9:ad:5a:cb:41:3e:56:92:0a:1c:40:14:14:1d:d4:52: 44:9b:1f:58:c9:bf:57:19:21:e7:92:8f:6e:f3:be:7c:26:cc: a8:8e:42:cd:dc:04:56:d3:14:e3:35:4c:85:39:c5:ac:a3:8a: 55:f1:df:ab -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/8g91E1NekRhu9omthmb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYjQwOTJlYTJkMTI5NmRmZTYxZDc4YTdkZmIzYzFlMDM5 MTY0MDgwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDM1Yzg0OTRjNGYxZDg0N2QxNDhhMGQyYjZkYmU5OGMxMjA3MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxxElOqUOd66M0t0AP4n5KkNJhW9 yxOH8LNhGB2c1M0pkEK0qzV8/jEuO1RyxYQPuCpKJQ3agMqhZmMYD5o4zrvndLRx zDn98/zfLqyvWQAKK9f8remHooJi8vFgmtkyqF+YceKD69F6WhYhcjH2Jgp1IsHm qwz0zKthrNBSkNdymxyxVx69ZcNpfnngU58Wyh9gXazMmbxBWpsqVitXFtQWSyPk jt1ZVVNhAzRp2yieeWKcwqDP8ZSD2DNDvmD1DGb1E85TNBQDb/NqKhgiXNuDNoeP SlaXS6h8D8P9T3m+HfNvKcMEptffgXE32Y4PrSPfYkvc9xP91Gehco872QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFC01yElMTx2EfRSKDSttvpjBIHCKMB8GA1UdIwQY MBaAFBy0CS6i0Slt/mHXin37PB4DkWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80Y2EwMDUtMTc3ZC00NGI1LTlkOTYt YzU0NjlmYzdkMmQwLzEvTFRYSVNVeFBIWVI5RklvTksyMi1tTUVnY0lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC80Y2EwMDUtMTc3ZC00NGI1LTlkOTYtYzU0NjlmYzdkMmQw LzEvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALZNeMA4E AgACMAgDBgAqE06AADANBgkqhkiG9w0BAQsFAAOCAQEAvbv5Lzv4l3OmcT3vvR9/ UNLjT0PSbf5t5cT1GTFFXw0Ci6JiA8bOP0+P2gH0bQi9akcV5M0/NB8Pbv8dDwEy FBLmV3S0TH04bfq+W8Dp6QwgqXdtSmXu8ov18UMHaHMRF9aLhLyy0MpVdCEjPxDR NK9NYZmBWVrGOtAiTgDel2xnrRy94SU3i+x6PMo5EPFFzij0j5WCARoezlavOgm9 eHHEyvfxnlJkj59iF9WwLm0KHn2GchUPfsrPO+4rUBHzaKExgAhMmti5rVrLQT5W kgocQBQUHdRSRJsfWMm/Vxkh55KPbvO+fCbMqI5CzdwEVtMU4zVMhTnFrKOKVfHf qw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:06:51 2026 by rpki-client