This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/LqYm4D3B3E2FFGXtJXw3kgLOLDI.roa File: LqYm4D3B3E2FFGXtJXw3kgLOLDI.roa (raw, json) Hash identifier: JksgLIgsZpcPfg5QMvqz9txCxaYLptCGbZJW6YSihME= Subject key identifier: 2E:A6:26:E0:3D:C1:DC:4D:85:14:65:ED:25:7C:37:92:02:CE:2C:32 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7DAD2FFD5FD7300AFDA247CB49D0 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/LqYm4D3B3E2FFGXtJXw3kgLOLDI.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 45.90.248.0/22 maxlen: 22 45.93.224.0/24 maxlen: 24 45.93.225.0/24 maxlen: 24 45.93.226.0/24 maxlen: 24 45.130.79.0/24 maxlen: 24 89.190.148.0/24 maxlen: 24 89.190.149.0/24 maxlen: 24 212.60.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7d:ad:2f:fd:5f:d7:30:0a:fd:a2:47:cb:49:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ea626e03dc1dc4d851465ed257c379202ce2c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:98:2d:64:f6:b4:d0:b3:06:c1:be:18:84: b8:bc:53:5b:04:df:d8:ff:cb:f9:67:11:3d:5c:0a: 5a:e9:17:00:de:e5:74:cf:c0:6e:7f:8f:1b:9d:c7: 50:fd:be:2c:a7:8b:a9:62:4d:7c:40:69:3d:c4:d4: 01:38:b6:d8:76:99:6d:e6:5f:10:70:c0:b1:68:06: c9:ce:e3:e4:45:cc:02:5f:24:19:8f:bc:b4:b4:e0: e7:1a:7a:b0:7c:fd:a1:ee:e2:f2:e9:02:65:48:49: d8:fd:42:53:00:b3:cf:bf:a3:87:28:29:17:b3:fc: 2d:66:53:51:8f:25:e9:47:11:84:95:13:ed:48:f6: 37:cc:e7:0f:d1:40:2c:fe:00:c9:24:7c:19:cf:17: 14:09:14:c9:40:c0:79:ab:80:54:21:25:96:18:e4: f7:b7:94:3d:ba:f1:49:0b:9d:c0:0c:3e:7a:09:f5: 4f:61:78:ab:33:a2:4b:9f:7d:39:03:f8:8d:a6:eb: 7d:8c:c8:e6:da:08:d8:6f:bf:3c:4f:df:ce:a1:11: b7:76:83:f6:8a:8a:84:e3:2f:bd:1b:03:49:c5:bc: b5:83:f2:07:a1:46:3e:a0:28:d2:3a:21:dc:1d:75: 84:af:c3:47:94:f3:f3:49:55:53:3c:b4:83:84:66: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A6:26:E0:3D:C1:DC:4D:85:14:65:ED:25:7C:37:92:02:CE:2C:32 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/LqYm4D3B3E2FFGXtJXw3kgLOLDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.248.0/22 45.93.224.0-45.93.226.255 45.130.79.0/24 89.190.148.0/23 212.60.0.0/22 Signature Algorithm: sha256WithRSAEncryption 17:83:2b:ca:cf:a2:f6:40:d8:05:68:8c:e0:52:94:54:54:0e: b3:c9:bb:ef:21:bc:b9:1e:ab:69:3b:9f:ad:fb:83:a6:b4:9e: 92:53:e5:4b:4a:c8:11:c6:ca:1e:bc:a0:1e:f7:dc:69:fd:1c: 8c:11:5c:58:a9:03:78:af:9a:0e:a6:b5:d1:00:33:47:32:1f: 67:a6:8e:39:39:65:db:d9:18:a3:54:19:14:b4:33:e2:31:59: 8e:e2:9a:e1:a5:23:c2:09:18:99:db:d4:f2:8d:f0:d4:b6:16: e7:f6:f3:23:18:d7:10:2f:0a:58:9e:c1:6b:81:dc:cc:50:06: 69:09:67:7c:04:2a:d0:7b:d5:10:dd:73:f3:5a:45:1a:5e:67: 4b:d4:16:94:0d:60:53:89:57:5b:9a:cc:03:79:c1:12:9c:d7: 5c:fb:91:a4:f0:f1:82:64:41:1f:81:a5:2c:32:1d:1f:f5:a6: df:55:ba:1c:cc:cb:9d:08:18:13:b1:51:d0:2e:65:5e:56:ce: ea:0d:a9:fc:c1:02:5f:41:fb:18:57:34:7f:eb:cb:14:68:19: ad:5c:1e:73:77:21:ec:df:fc:6f:96:34:90:4f:be:22:85:7d: c1:ae:aa:5d:ba:41:16:eb:40:d6:5a:8f:33:5d:9b:11:1d:10: 6c:f5:65:30 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8f32tL/1f1zAK/aJHy0nQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWE2MjZlMDNkYzFkYzRkODUxNDY1ZWQyNTdjMzc5MjAyY2UyYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M2YLWT2tNCzBsG+GIS4vFNbBN/Y /8v5ZxE9XApa6RcA3uV0z8Buf48bncdQ/b4sp4upYk18QGk9xNQBOLbYdplt5l8Q cMCxaAbJzuPkRcwCXyQZj7y0tODnGnqwfP2h7uLy6QJlSEnY/UJTALPPv6OHKCkX s/wtZlNRjyXpRxGElRPtSPY3zOcP0UAs/gDJJHwZzxcUCRTJQMB5q4BUISWWGOT3 t5Q9uvFJC53ADD56CfVPYXirM6JLn305A/iNput9jMjm2gjYb788T9/OoRG3doP2 ioqE4y+9GwNJxby1g/IHoUY+oCjSOiHcHXWEr8NHlPPzSVVTPLSDhGY/IwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFC6mJuA9wdxNhRRl7SV8N5ICziwyMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvTHFZbTREM0IzRTJGRkdYdEpYdzNrZ0xPTERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCLVr4MAwD BAUtXeADBAAtXeIDBAAtgk8DBAFZvpQDBALUPAAwDQYJKoZIhvcNAQELBQADggEB ABeDK8rPovZA2AVojOBSlFRUDrPJu+8hvLkeq2k7n637g6a0npJT5UtKyBHGyh68 oB733Gn9HIwRXFipA3ivmg6mtdEAM0cyH2emjjk5ZdvZGKNUGRS0M+IxWY7imuGl I8IJGJnb1PKN8NS2Fuf28yMY1xAvCliewWuB3MxQBmkJZ3wEKtB71RDdc/NaRRpe Z0vUFpQNYFOJV1uazAN5wRKc11z7kaTw8YJkQR+BpSwyHR/1pt9VuhzMy50IGBOx UdAuZV5WzuoNqfzBAl9B+xhXNH/ryxRoGa1cHnN3Iezf/G+WNJBPviKFfcGuql26 QRbrQNZajzNdmxEdEGz1ZTA= -----END CERTIFICATE-----Generated at Mon Jan 19 18:40:21 2026 by rpki-client