This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/LQ0nUG087BHLM9q435rBPVa8bMI.roa File: LQ0nUG087BHLM9q435rBPVa8bMI.roa (raw, json) Hash identifier: UFpnOF74KErqQ2amul9MeV32Xu5TKxE7+2JeP9LumgQ= Subject key identifier: 2D:0D:27:50:6D:3C:EC:11:CB:33:DA:B8:DF:9A:C1:3D:56:BC:6C:C2 Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Certificate serial: 019A585F798CCCF3E4C17A24047A79C0DB39 Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/LQ0nUG087BHLM9q435rBPVa8bMI.roa Signing time: Thu 06 Nov 2025 08:54:03 +0000 ROA not before: Thu 06 Nov 2025 08:54:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203210 IP address blocks: 178.251.122.0/24 maxlen: 24 178.251.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:5f:79:8c:cc:f3:e4:c1:7a:24:04:7a:79:c0:db:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Validity Not Before: Nov 6 08:54:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d0d27506d3cec11cb33dab8df9ac13d56bc6cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:cd:e5:6f:05:53:a7:5d:d3:77:d3:74:7a: 68:73:b2:e5:c9:df:70:4f:75:57:c4:80:c0:2e:6f: 99:42:37:41:37:7b:1a:00:92:3f:e6:0a:93:d1:a4: 82:1d:4f:0a:a6:2b:62:b2:6c:2c:bc:51:8b:fe:3b: 46:ed:6c:50:f1:d3:a2:fb:d9:12:18:9c:7e:90:cf: c7:ff:71:49:8a:46:6e:6d:8e:e1:02:63:63:04:c6: 7b:76:1d:23:6c:bc:bb:fe:6b:5d:d9:eb:10:93:32: b1:39:9e:e9:7a:9a:fb:24:e8:20:eb:5d:df:26:25: f8:51:91:52:63:ef:2d:14:40:a2:73:91:b6:45:86: f5:18:be:97:25:b2:12:63:e7:5b:2a:d3:76:d0:96: ba:52:8a:68:30:34:9b:1a:53:8f:5a:7f:f6:f5:6c: 46:64:00:74:58:99:8c:f5:c1:c7:f4:e7:c9:a3:df: 19:9d:e9:42:8c:81:15:3c:ed:95:37:cd:6a:b6:a8: 54:a9:44:04:e2:74:57:29:7d:56:95:d0:6b:1a:c1: fd:56:25:be:3f:c5:e6:fa:7b:85:10:7d:25:60:76: 94:77:ce:24:37:56:88:09:10:a3:ac:5a:47:e6:80: e3:63:f7:75:fa:03:b6:1d:86:4f:e3:ea:fd:8a:a1: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0D:27:50:6D:3C:EC:11:CB:33:DA:B8:DF:9A:C1:3D:56:BC:6C:C2 X509v3 Authority Key Identifier: keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/LQ0nUG087BHLM9q435rBPVa8bMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.122.0/23 Signature Algorithm: sha256WithRSAEncryption a7:87:cc:d9:18:13:c9:ca:a6:a7:a8:0c:5c:5c:b7:37:3b:e6: 0e:31:5a:db:33:7c:8a:b6:80:d5:a6:c2:c8:85:c5:62:28:d5: ba:96:aa:42:d0:d7:c3:72:41:a3:07:2c:a7:46:b9:c1:9d:b2: 18:90:c3:12:75:92:15:8f:08:7b:fa:77:99:65:ea:c4:8e:97: c1:06:83:63:9a:0c:74:f9:b8:e6:c7:81:6e:77:a3:21:15:1c: 1e:dc:c9:92:dd:81:33:5f:ad:53:05:63:03:78:a6:6c:62:21: de:98:9d:af:21:01:4b:99:2b:74:b1:15:d9:62:54:06:34:82: 6e:c4:cc:d0:65:d2:e4:c4:cf:46:47:f7:4a:98:c0:2d:f7:e5: a9:bf:2c:52:99:40:5a:33:ad:eb:00:9b:1f:96:0a:45:ec:56: 82:1f:fd:da:b3:56:68:00:43:82:27:a6:67:81:1f:b0:b8:8c: 27:2c:70:3a:44:5b:bc:9f:76:45:49:e6:e4:21:52:4e:14:d5: 74:84:08:06:4f:93:28:3f:ee:6c:15:15:ac:e7:c5:01:ac:cf: 51:6d:9b:ae:b9:cb:67:b4:95:57:95:3a:f6:d3:f9:ed:b3:2d: c3:81:b7:8a:dd:0b:cf:12:cf:60:10:1a:0e:3d:4b:05:6d:9e: e9:82:15:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpYX3mMzPPkwXokBHp5wNs5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDYxNGUxOTVjMTY1NmEyOGU4YjE5YjIyNzg0ZThiNTVi YjQ1MzMwHhcNMjUxMTA2MDg1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDBkMjc1MDZkM2NlYzExY2IzM2RhYjhkZjlhYzEzZDU2YmM2Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28LN5W8FU6dd03fTdHpoc7Llyd9w T3VXxIDALm+ZQjdBN3saAJI/5gqT0aSCHU8KpitismwsvFGL/jtG7WxQ8dOi+9kS GJx+kM/H/3FJikZubY7hAmNjBMZ7dh0jbLy7/mtd2esQkzKxOZ7pepr7JOgg613f JiX4UZFSY+8tFECic5G2RYb1GL6XJbISY+dbKtN20Ja6UopoMDSbGlOPWn/29WxG ZAB0WJmM9cHH9OfJo98ZnelCjIEVPO2VN81qtqhUqUQE4nRXKX1WldBrGsH9ViW+ P8Xm+nuFEH0lYHaUd84kN1aICRCjrFpH5oDjY/d1+gO2HYZP4+r9iqGv+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0NJ1BtPOwRyzPauN+awT1WvGzCMB8GA1UdIwQY MBaAFB8GFOGVwWVqKOixmyJ4TotVu0UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUt YmVmODcyZGFlY2U3LzEvTFEwblVHMDg3QkhMTTlxNDM1ckJQVmE4Yk1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUtYmVmODcyZGFlY2U3 LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsvt6MA0G CSqGSIb3DQEBCwUAA4IBAQCnh8zZGBPJyqanqAxcXLc3O+YOMVrbM3yKtoDVpsLI hcViKNW6lqpC0NfDckGjByynRrnBnbIYkMMSdZIVjwh7+neZZerEjpfBBoNjmgx0 +bjmx4Fud6MhFRwe3MmS3YEzX61TBWMDeKZsYiHemJ2vIQFLmSt0sRXZYlQGNIJu xMzQZdLkxM9GR/dKmMAt9+WpvyxSmUBaM63rAJsflgpF7FaCH/3as1ZoAEOCJ6Zn gR+wuIwnLHA6RFu8n3ZFSebkIVJOFNV0hAgGT5MoP+5sFRWs58UBrM9RbZuuuctn tJVXlTr20/ntsy3DgbeK3QvPEs9gEBoOPUsFbZ7pghWE -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:52 2025 by rpki-client