This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LQx1VrUpsC_D6q1yzC35sfI76aE.roa File: LQx1VrUpsC_D6q1yzC35sfI76aE.roa (raw, json) Hash identifier: EekJMetwuHX3cRrYHausjQTM3J5Vj9Z9nmIbIVT7Yow= Subject key identifier: 2D:0C:75:56:B5:29:B0:2F:C3:EA:AD:72:CC:2D:F9:B1:F2:3B:E9:A1 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC0647DAE2B3CB5C4776366A7F392 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LQx1VrUpsC_D6q1yzC35sfI76aE.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56655 IP address blocks: 45.89.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c0:64:7d:ae:2b:3c:b5:c4:77:63:66:a7:f3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d0c7556b529b02fc3eaad72cc2df9b1f23be9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:06:8f:49:c3:7c:2d:6f:f2:1a:ce:15:74: cd:78:64:04:e1:88:3f:6f:9c:c6:9e:d7:c4:75:35: a5:4d:a8:12:86:3b:c5:e3:3d:21:59:09:78:86:2e: b1:93:54:a2:a2:d5:b5:8c:6e:3c:3c:dd:5a:8c:6d: 3f:81:de:65:f0:67:59:71:f6:1b:63:e6:da:65:ea: d7:2e:4c:a9:b4:ed:cd:5b:41:64:be:cf:6d:a9:32: a9:d7:ba:79:af:86:29:08:17:9f:94:33:f2:b1:96: f8:f8:00:ee:ac:d0:1e:5a:cb:28:cb:89:1f:80:b7: c3:1b:83:9b:a0:18:0e:66:84:3a:4f:d8:3f:9f:16: 15:1d:bb:01:a1:67:4e:65:2c:ba:d5:78:c4:f4:da: 82:b8:3d:27:ab:ff:b3:e9:7d:d7:dc:e0:85:f1:2f: 86:41:f1:d4:36:02:2e:8b:89:81:59:d3:63:0e:db: 42:af:cb:d3:4e:a0:5c:b2:f7:55:66:7d:b5:95:67: 8d:38:4e:6f:16:eb:7b:b9:6f:a3:00:43:bb:2b:da: 7f:3f:07:10:3c:eb:31:5c:2b:fa:98:9b:3b:0b:8a: dc:e8:ed:80:ec:9c:16:07:87:a2:a1:26:89:cc:ea: 63:a4:06:75:8f:c5:6a:0b:da:f0:08:92:84:e3:2e: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0C:75:56:B5:29:B0:2F:C3:EA:AD:72:CC:2D:F9:B1:F2:3B:E9:A1 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LQx1VrUpsC_D6q1yzC35sfI76aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.97.0/24 Signature Algorithm: sha256WithRSAEncryption 00:9e:89:59:a6:55:d2:92:11:90:6b:f5:3d:d6:6a:cd:76:af: d1:07:62:ab:ce:39:bc:f3:61:fa:76:95:18:df:55:7b:d8:7e: 23:e8:96:28:7e:6f:ec:46:bc:63:15:33:05:81:df:5f:d6:4b: b0:0d:23:bf:0e:62:e3:51:5b:60:c0:93:fb:08:1a:dc:6f:d2: 65:88:0b:55:5c:b7:a7:4a:40:1e:97:66:9a:7b:c8:6a:2e:38: 9c:9f:59:f7:8a:6c:f1:55:6a:f8:d9:34:7d:1b:32:3d:8b:69: 85:cf:5b:9f:ab:dd:b0:a5:78:1f:4c:a8:73:31:bf:f7:92:f3: 6e:74:ea:4a:42:b8:eb:6a:36:da:bb:bb:45:6f:4b:d5:2f:6c: 9a:8c:a5:23:73:6d:28:1e:fa:be:d1:7a:4c:f3:c2:33:8f:06: c0:44:dd:31:78:76:30:f8:ad:a5:39:b9:af:5e:26:0a:40:53: 31:b0:f2:4c:e1:bd:fe:e8:98:18:55:f1:c9:02:a7:91:2e:26: 34:ae:11:7a:12:10:04:5e:13:15:ff:d9:c2:83:c4:48:b8:6a: 22:27:c9:65:85:c9:b1:d3:90:cf:8e:f9:bf:18:fe:83:4b:8a: 97:03:a6:f7:85:9a:ad:ce:ed:77:a8:b7:15:0a:42:4c:15:ba: 29:c7:70:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sBkfa4rPLXEd2Nmp/OSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDBjNzU1NmI1MjliMDJmYzNlYWFkNzJjYzJkZjliMWYyM2JlOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQMGj0nDfC1v8hrOFXTNeGQE4Yg/ b5zGntfEdTWlTagShjvF4z0hWQl4hi6xk1SiotW1jG48PN1ajG0/gd5l8GdZcfYb Y+baZerXLkyptO3NW0Fkvs9tqTKp17p5r4YpCBeflDPysZb4+ADurNAeWssoy4kf gLfDG4OboBgOZoQ6T9g/nxYVHbsBoWdOZSy61XjE9NqCuD0nq/+z6X3X3OCF8S+G QfHUNgIui4mBWdNjDttCr8vTTqBcsvdVZn21lWeNOE5vFut7uW+jAEO7K9p/PwcQ POsxXCv6mJs7C4rc6O2A7JwWB4eioSaJzOpjpAZ1j8VqC9rwCJKE4y5jQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0MdVa1KbAvw+qtcswt+bHyO+mhMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTFF4MVZyVXBzQ19ENnExeXpDMzVzZkk3NmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVlhMA0G CSqGSIb3DQEBCwUAA4IBAQAAnolZplXSkhGQa/U91mrNdq/RB2Krzjm882H6dpUY 31V72H4j6JYofm/sRrxjFTMFgd9f1kuwDSO/DmLjUVtgwJP7CBrcb9JliAtVXLen SkAel2aae8hqLjicn1n3imzxVWr42TR9GzI9i2mFz1ufq92wpXgfTKhzMb/3kvNu dOpKQrjrajbau7tFb0vVL2yajKUjc20oHvq+0XpM88IzjwbARN0xeHYw+K2lObmv XiYKQFMxsPJM4b3+6JgYVfHJAqeRLiY0rhF6EhAEXhMV/9nCg8RIuGoiJ8llhcmx 05DPjvm/GP6DS4qXA6b3hZqtzu13qLcVCkJMFbopx3Bf -----END CERTIFICATE-----Generated at Tue Jan 20 00:42:41 2026 by rpki-client