This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/LggB48-j7YY9SCWaA8exH9VEaUk.roa File: LggB48-j7YY9SCWaA8exH9VEaUk.roa (raw, json) Hash identifier: q3ynPTcziyC9bHjFnAz0n/dVRFiqqPc4LI87XhrGp+g= Subject key identifier: 2E:08:01:E3:CF:A3:ED:86:3D:48:25:9A:03:C7:B1:1F:D5:44:69:49 Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Certificate serial: 019B7F8234AD90144D662064EC2064B05D66 Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/LggB48-j7YY9SCWaA8exH9VEaUk.roa Signing time: Fri 02 Jan 2026 16:19:58 +0000 ROA not before: Fri 02 Jan 2026 16:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61171 IP address blocks: 185.10.24.0/24 maxlen: 24 185.10.25.0/24 maxlen: 24 185.10.26.0/24 maxlen: 24 185.10.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:34:ad:90:14:4d:66:20:64:ec:20:64:b0:5d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Validity Not Before: Jan 2 16:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e0801e3cfa3ed863d48259a03c7b11fd5446949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:16:5c:e9:54:62:96:32:a6:10:b2:2b:68: 14:ae:d5:f8:59:bc:b8:a9:09:9c:20:c9:8a:1f:61: 5c:50:10:19:0e:0d:70:f1:78:b4:66:f6:fa:51:5e: 32:7d:dd:0f:85:d5:0d:c0:50:74:f3:db:ae:cb:91: 64:ca:c1:c0:1d:6f:2c:c4:36:4e:29:6a:ef:22:90: a4:11:1a:ac:f5:07:e2:d4:c7:13:8b:f2:cb:94:88: 4e:82:c5:d5:af:74:cc:f2:e6:b1:3b:d4:8a:f0:bd: 35:17:fc:ad:cd:f3:ac:5a:8c:96:c9:bf:3f:00:ec: a0:73:e1:dc:66:33:7f:b5:04:35:d0:ab:c9:03:11: cb:db:3a:55:59:18:e7:60:24:82:3c:6f:ff:77:eb: be:b9:74:0a:5b:db:1c:4b:72:39:e0:8a:fd:f7:c2: 46:e2:8c:ee:04:32:ec:d0:aa:56:ae:4c:91:8d:41: cb:01:e4:4d:f9:76:4a:92:b4:12:17:32:b2:5a:e3: 13:6e:fa:18:fd:c4:19:80:5c:ad:0d:36:0f:cd:1a: bf:47:df:b7:11:83:71:74:2f:0c:c9:12:2a:04:ab: 0e:de:da:d3:63:b7:91:e7:bd:1b:c1:0f:bb:35:1a: e8:47:6d:f8:e2:2c:31:5a:c3:a3:a9:1a:27:4b:1d: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:08:01:E3:CF:A3:ED:86:3D:48:25:9A:03:C7:B1:1F:D5:44:69:49 X509v3 Authority Key Identifier: keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/LggB48-j7YY9SCWaA8exH9VEaUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.24.0/22 Signature Algorithm: sha256WithRSAEncryption a0:52:fd:80:9c:62:83:aa:1d:9b:79:76:46:fe:88:e9:ee:7d: 36:66:96:b2:40:34:4a:35:5b:d3:fd:21:f5:9d:4e:32:4d:16: d7:c2:1b:3c:de:3c:86:4e:32:58:28:92:cf:09:89:10:f9:50: b3:2c:3b:83:dd:1b:59:f0:b7:4e:9b:39:4d:95:b8:03:33:6b: e7:91:8b:65:a9:e0:92:14:d9:eb:91:c9:1b:c8:11:46:8f:d6: 37:6e:3a:12:37:ef:87:4c:0e:6d:05:6f:93:68:68:b0:93:66: cc:b8:a3:96:74:63:14:e8:9b:13:57:dd:f3:4d:53:78:89:dc: 54:c1:8a:d5:1e:63:99:11:76:21:78:3d:63:00:f2:15:27:70: 02:bd:aa:ae:b2:7f:5c:4d:75:b9:44:c5:54:db:16:b5:7e:3f: eb:7c:0d:a0:29:9e:f5:78:2e:bd:e9:91:65:61:90:e6:9e:79: 40:d5:bf:1d:ca:e5:e2:2c:5b:3e:82:d8:08:43:08:af:6b:d6: 99:06:8d:32:e5:7b:5c:e9:ac:46:b9:84:2c:ce:6c:2d:1d:12: a2:5d:6d:14:39:96:1b:5f:2a:84:c5:1e:8c:44:c7:5c:ed:d3: 26:34:9b:62:98:0e:37:0f:89:72:fd:7a:d2:f7:d0:00:f1:4b: d6:ed:50:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gjStkBRNZiBk7CBksF1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNjE0YmYyNTdkM2FmNzcwYmJmM2M2YzJkMzViZmE0NjU2 ODZjZWIwHhcNMjYwMTAyMTYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTA4MDFlM2NmYTNlZDg2M2Q0ODI1OWEwM2M3YjExZmQ1NDQ2OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkWXOlUYpYyphCyK2gUrtX4Wby4 qQmcIMmKH2FcUBAZDg1w8Xi0Zvb6UV4yfd0PhdUNwFB089uuy5FkysHAHW8sxDZO KWrvIpCkERqs9Qfi1McTi/LLlIhOgsXVr3TM8uaxO9SK8L01F/ytzfOsWoyWyb8/ AOygc+HcZjN/tQQ10KvJAxHL2zpVWRjnYCSCPG//d+u+uXQKW9scS3I54Ir998JG 4ozuBDLs0KpWrkyRjUHLAeRN+XZKkrQSFzKyWuMTbvoY/cQZgFytDTYPzRq/R9+3 EYNxdC8MyRIqBKsO3trTY7eR570bwQ+7NRroR2344iwxWsOjqRonSx3veQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4IAePPo+2GPUglmgPHsR/VRGlJMB8GA1UdIwQY MBaAFDxhS/JX0693C788bC01v6RlaGzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYt ZjZiMDQ0ZGNkNjI0LzEvTGdnQjQ4LWo3WVk5U0NXYUE4ZXhIOVZFYVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYtZjZiMDQ0ZGNkNjI0 LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQoYMA0G CSqGSIb3DQEBCwUAA4IBAQCgUv2AnGKDqh2beXZG/ojp7n02ZpayQDRKNVvT/SH1 nU4yTRbXwhs83jyGTjJYKJLPCYkQ+VCzLDuD3RtZ8LdOmzlNlbgDM2vnkYtlqeCS FNnrkckbyBFGj9Y3bjoSN++HTA5tBW+TaGiwk2bMuKOWdGMU6JsTV93zTVN4idxU wYrVHmOZEXYheD1jAPIVJ3ACvaqusn9cTXW5RMVU2xa1fj/rfA2gKZ71eC696ZFl YZDmnnlA1b8dyuXiLFs+gtgIQwiva9aZBo0y5Xtc6axGuYQszmwtHRKiXW0UOZYb XyqExR6MRMdc7dMmNJtimA43D4ly/XrS99AA8UvW7VAj -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:20 2026 by rpki-client