This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa File: lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa (raw, json) Hash identifier: xyC0OirskdCSUadmtCeoUwblgPmS4gYDwVr6k8DHX9w= Subject key identifier: 96:6A:80:DE:A2:9B:33:62:E7:E3:03:43:57:B6:CE:3F:62:8D:22:3C Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71 Certificate serial: 019B7F13AEA55B9C9456496B579184E9FAF4 Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa Signing time: Fri 02 Jan 2026 14:19:14 +0000 ROA not before: Fri 02 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3252 IP address blocks: 195.177.68.0/22 maxlen: 24 2001:67c:2d3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ae:a5:5b:9c:94:56:49:6b:57:91:84:e9:fa:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71 Validity Not Before: Jan 2 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966a80dea29b3362e7e3034357b6ce3f628d223c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:9a:30:52:40:3c:11:0a:e3:a6:3e:66:a2: ff:c4:91:6f:4e:c1:54:0b:25:24:b1:31:d4:ea:f8: 10:37:ed:c0:63:2b:c8:57:fd:cf:52:6c:e4:da:0f: 8d:c3:49:ee:ef:53:49:1f:15:99:f6:a3:a2:0f:d9: 7b:f3:4c:d4:cc:9d:79:fc:af:47:a3:c1:33:ec:1e: 19:9c:8c:aa:44:8f:81:7c:4f:e2:c3:6d:e1:08:95: 77:60:2f:86:05:44:c6:a9:43:10:56:e6:84:d9:64: ac:a1:18:b5:a5:ba:2d:c0:a6:5c:7a:14:4d:f5:ca: 61:4a:13:a7:fd:c2:a1:1d:fe:23:42:d9:b6:16:4e: ee:3b:94:af:7e:99:c9:78:0c:a7:ff:63:89:4e:34: 7f:7e:46:f6:0a:bf:4d:d3:31:82:92:bb:03:bd:db: e8:da:5d:cc:ee:5b:27:05:0d:23:3e:e3:d4:74:3c: 1b:ed:a3:d9:0d:8f:d0:52:75:27:02:ff:3a:3d:78: 20:ad:49:87:3e:25:e5:5d:35:2c:ee:ac:e5:1a:7d: 9e:2e:f2:63:dc:2f:db:fe:bb:7d:d0:90:ca:ff:02: 93:63:9c:73:c9:75:4f:00:59:93:bd:d1:82:66:8f: 7c:5c:ae:6a:bd:9a:fd:00:e5:0f:21:b3:c8:2f:67: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:80:DE:A2:9B:33:62:E7:E3:03:43:57:B6:CE:3F:62:8D:22:3C X509v3 Authority Key Identifier: keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.68.0/22 IPv6: 2001:67c:2d3c::/48 Signature Algorithm: sha256WithRSAEncryption 9f:72:ab:93:a1:06:63:ee:9c:5d:a7:40:ef:51:a6:37:a9:ba: 8f:ac:8d:7e:c9:78:4e:e1:1d:9d:4a:c8:7e:40:0d:93:af:e1: a0:52:d3:6c:f3:f0:af:81:4c:56:df:cf:04:2a:10:91:16:82: e6:fc:bd:55:2b:49:44:11:80:c1:bf:80:e0:76:57:e7:bd:06: 6d:c7:e1:58:f7:93:11:fa:8b:6d:bd:44:2e:db:41:4b:1c:7d: d5:19:17:d1:ed:cf:64:0b:29:e2:e9:d2:5e:53:58:d6:b3:48: a0:39:93:93:4b:0e:85:65:30:08:24:77:5d:5b:cb:76:8d:0f: 64:d4:ac:74:28:f3:cc:f4:05:0c:6f:3d:1e:63:bc:2e:b6:0e: 6b:bd:0b:9c:b5:d3:ec:a3:d6:01:3a:72:98:94:57:71:d0:cc: db:5d:b6:92:3d:23:b5:15:56:b4:93:9f:8c:8e:78:17:9a:c2: 85:de:bd:2a:4f:b8:4b:3e:30:26:03:93:1f:79:4f:2e:92:d8: f3:c1:04:31:59:ea:aa:39:13:5e:db:3d:d1:b9:b3:48:f8:b2: ed:5a:09:6b:70:ce:3d:c3:3b:26:ab:d8:f9:e3:16:1d:fd:19: d8:c4:65:81:d9:42:b1:66:0f:1f:ed:a6:ac:ca:1d:35:63:64: 71:f6:e6:07 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/E66lW5yUVklrV5GE6fr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTc5ZGNkNWEzZGVlNDUwZWFmM2Y5MzE1MmVkNmRhODA2 YmJmNzEwHhcNMjYwMTAyMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZhODBkZWEyOWIzMzYyZTdlMzAzNDM1N2I2Y2UzZjYyOGQyMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAOaMFJAPBEK46Y+ZqL/xJFvTsFU CyUksTHU6vgQN+3AYyvIV/3PUmzk2g+Nw0nu71NJHxWZ9qOiD9l780zUzJ15/K9H o8Ez7B4ZnIyqRI+BfE/iw23hCJV3YC+GBUTGqUMQVuaE2WSsoRi1pbotwKZcehRN 9cphShOn/cKhHf4jQtm2Fk7uO5SvfpnJeAyn/2OJTjR/fkb2Cr9N0zGCkrsDvdvo 2l3M7lsnBQ0jPuPUdDwb7aPZDY/QUnUnAv86PXggrUmHPiXlXTUs7qzlGn2eLvJj 3C/b/rt90JDK/wKTY5xzyXVPAFmTvdGCZo98XK5qvZr9AOUPIbPIL2cjfwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJZqgN6imzNi5+MDQ1e2zj9ijSI8MB8GA1UdIwQY MBaAFM6nnc1aPe5FDq8/kxUu1tqAa79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQt ODZlMjQyNjA1MTZmLzEvbG1xQTNxS2JNMkxuNHdORFY3Yk9QMktOSWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQtODZlMjQyNjA1MTZm LzEvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCw7FEMA8E AgACMAkDBwAgAQZ8LTwwDQYJKoZIhvcNAQELBQADggEBAJ9yq5OhBmPunF2nQO9R pjepuo+sjX7JeE7hHZ1KyH5ADZOv4aBS02zz8K+BTFbfzwQqEJEWgub8vVUrSUQR gMG/gOB2V+e9Bm3H4Vj3kxH6i229RC7bQUscfdUZF9Htz2QLKeLp0l5TWNazSKA5 k5NLDoVlMAgkd11by3aND2TUrHQo88z0BQxvPR5jvC62Dmu9C5y10+yj1gE6cpiU V3HQzNtdtpI9I7UVVrSTn4yOeBeawoXevSpPuEs+MCYDkx95Ty6S2PPBBDFZ6qo5 E17bPdG5s0j4su1aCWtwzj3DOyar2PnjFh39GdjEZYHZQrFmDx/tpqzKHTVjZHH2 5gc= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:06 2026 by rpki-client