This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/LNb42L1m0tMsBxluQXFH9OE79jc.roa
File: LNb42L1m0tMsBxluQXFH9OE79jc.roa (raw, json)
Hash identifier: Y27U9YGM/gKMGQyY9CcVkyZMB1i0H4sQ3s5bCFoh+RM=
Subject key identifier: 2C:D6:F8:D8:BD:66:D2:D3:2C:07:19:6E:41:71:47:F4:E1:3B:F6:37
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 019B7F15922B4D9C5FD5999153710670BD93
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/LNb42L1m0tMsBxluQXFH9OE79jc.roa
Signing time: Fri 02 Jan 2026 14:21:18 +0000
ROA not before: Fri 02 Jan 2026 14:21:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200432
IP address blocks: 185.107.60.0/22 maxlen: 22
185.107.60.0/24 maxlen: 24
185.107.61.0/24 maxlen: 24
185.107.62.0/24 maxlen: 24
185.107.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:92:2b:4d:9c:5f:d5:99:91:53:71:06:70:bd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jan 2 14:21:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cd6f8d8bd66d2d32c07196e417147f4e13bf637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:46:34:1e:e3:43:f7:2a:99:2a:9f:c9:77:
ab:b1:d4:00:1b:e4:26:6b:c3:c1:84:cd:dc:c3:79:
bf:0b:06:f4:56:e3:38:d4:ee:cf:68:f0:36:80:2f:
72:c5:57:a3:ca:53:e0:60:39:60:29:4e:17:73:ec:
9e:ac:04:82:a6:8f:fe:b0:25:ec:c3:15:0b:c5:51:
77:73:d0:dc:1f:12:3f:c8:2b:bd:e9:7f:53:8e:89:
e9:14:bb:7a:e6:e9:07:f9:a2:d5:9e:fe:64:91:1f:
1c:08:e4:82:95:9c:a1:cd:7f:37:95:ed:a9:1a:63:
f1:5f:02:1b:26:4e:8c:1e:c1:98:bd:3b:11:ef:30:
d0:11:9a:9c:77:94:bc:54:3a:dc:94:12:b9:8f:cd:
7e:d5:01:7a:3d:80:20:e4:63:c5:4a:bc:48:98:ba:
02:fb:49:ae:40:b8:8a:41:74:df:9c:d4:9c:7d:39:
97:fb:6a:6e:1f:2a:8a:f7:89:53:68:be:d0:0a:51:
83:aa:54:a0:e8:14:67:ef:c3:af:b3:d1:00:90:7c:
00:bf:35:5c:3f:d4:7a:da:32:b2:4c:90:61:7a:94:
d7:16:6d:82:54:bd:df:98:99:07:da:90:31:42:1a:
88:c5:bd:dd:30:31:4a:8a:7a:38:15:c7:f3:a3:c4:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D6:F8:D8:BD:66:D2:D3:2C:07:19:6E:41:71:47:F4:E1:3B:F6:37
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/LNb42L1m0tMsBxluQXFH9OE79jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:1d:59:2a:a0:ec:58:c9:22:62:96:1b:fd:41:ab:b0:11:b9:
05:27:fd:ad:ae:a3:4f:76:72:40:8f:34:4c:a5:55:bf:ab:cf:
ac:6f:4a:52:19:e2:7b:d4:0c:54:71:a1:55:3d:f9:05:8c:23:
04:57:e7:9c:3f:77:53:6b:c6:f0:a6:5d:ca:3a:ca:dc:d8:ee:
7b:f4:48:b1:ea:9b:5b:ab:4b:58:a2:e6:1a:b2:5e:f7:36:36:
43:ed:4b:28:db:e1:e1:c2:95:a5:c6:97:48:65:34:af:99:7b:
26:fd:df:b3:58:2d:b4:20:86:37:fe:6e:c2:43:a7:44:a2:4b:
f9:2b:6c:7b:75:33:eb:3c:00:43:8a:f2:49:8e:af:f5:94:60:
3e:78:69:8e:8f:f1:2c:e1:cf:f7:34:f8:b4:1a:60:69:4f:e7:
51:4c:93:8b:09:c8:dd:ca:3c:4a:24:e7:7c:d9:f6:a9:cb:58:
e4:d5:88:49:b1:54:d0:89:95:32:3b:8a:57:d5:d1:5d:c9:a6:
98:95:b5:70:ee:41:50:c7:ec:84:f8:71:c3:89:7d:ca:1f:ed:
0a:04:ff:ea:18:33:88:df:50:79:0d:da:64:e7:f5:ae:51:01:
dc:44:b7:b7:df:ef:df:84:aa:97:a3:d9:87:53:59:42:ab:5d:
de:54:5b:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FZIrTZxf1ZmRU3EGcL2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjYyOWYzNGNkMDgzYmM2ODA1NDA2OWIxY2M1ZWU3OTcx
ZjhiYmIwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2Q2ZjhkOGJkNjZkMmQzMmMwNzE5NmU0MTcxNDdmNGUxM2JmNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AdGNB7jQ/cqmSqfyXersdQAG+Qm
a8PBhM3cw3m/Cwb0VuM41O7PaPA2gC9yxVejylPgYDlgKU4Xc+yerASCpo/+sCXs
wxULxVF3c9DcHxI/yCu96X9TjonpFLt65ukH+aLVnv5kkR8cCOSClZyhzX83le2p
GmPxXwIbJk6MHsGYvTsR7zDQEZqcd5S8VDrclBK5j81+1QF6PYAg5GPFSrxImLoC
+0muQLiKQXTfnNScfTmX+2puHyqK94lTaL7QClGDqlSg6BRn78Ovs9EAkHwAvzVc
P9R62jKyTJBhepTXFm2CVL3fmJkH2pAxQhqIxb3dMDFKino4Fcfzo8S0TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzW+Ni9ZtLTLAcZbkFxR/ThO/Y3MB8GA1UdIwQY
MBaAFFL2KfNM0IO8aAVAabHMXueXH4u7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEt
OTdhNDI4M2I2MjkyLzEvTE5iNDJMMW0wdE1zQnhsdVFYRkg5T0U3OWpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEtOTdhNDI4M2I2Mjky
LzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWs8MA0G
CSqGSIb3DQEBCwUAA4IBAQA8HVkqoOxYySJilhv9QauwEbkFJ/2trqNPdnJAjzRM
pVW/q8+sb0pSGeJ71AxUcaFVPfkFjCMEV+ecP3dTa8bwpl3KOsrc2O579Eix6ptb
q0tYouYasl73NjZD7Uso2+HhwpWlxpdIZTSvmXsm/d+zWC20IIY3/m7CQ6dEokv5
K2x7dTPrPABDivJJjq/1lGA+eGmOj/Es4c/3NPi0GmBpT+dRTJOLCcjdyjxKJOd8
2fapy1jk1YhJsVTQiZUyO4pX1dFdyaaYlbVw7kFQx+yE+HHDiX3KH+0KBP/qGDOI
31B5Ddpk5/WuUQHcRLe33+/fhKqXo9mHU1lCq13eVFsB
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:15 2026 by rpki-client