This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa
File: LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa (raw, json)
Hash identifier: 382IR5KX357ftVcZUNVV6W3Ot0v8DcTQMbqIjY9RuVI=
Subject key identifier: 2E:01:F5:31:EF:B6:7A:A6:28:2F:ED:33:35:C9:A7:56:9B:28:9A:B4
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019C4EB9ED166D9B6D1B1ECC2A57EF265C95
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa
Signing time: Wed 11 Feb 2026 22:02:13 +0000
ROA not before: Wed 11 Feb 2026 22:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 62.164.224.0/19 maxlen: 20
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
84.247.59.0/24 maxlen: 24
86.104.8.0/24 maxlen: 24
88.135.96.0/20 maxlen: 24
89.34.171.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
121.127.48.0/20 maxlen: 24
121.127.56.0/21 maxlen: 24
168.75.224.0/20 maxlen: 24
176.222.48.0/22 maxlen: 24
192.200.192.0/19 maxlen: 23
194.149.76.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
212.32.96.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Feb 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4e:b9:ed:16:6d:9b:6d:1b:1e:cc:2a:57:ef:26:5c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Feb 11 22:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e01f531efb67aa6282fed3335c9a7569b289ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:7a:42:e2:aa:b3:e8:52:76:13:51:7d:cd:
00:32:0c:9a:95:85:1b:cb:07:d9:9b:78:0c:7b:51:
d8:31:14:7a:59:65:3a:fa:7e:b7:0b:3d:60:3d:b4:
19:44:af:7c:ac:17:e3:67:1d:54:c8:25:f2:36:92:
92:7d:f8:ea:bd:46:54:04:71:b1:8b:39:1b:6e:7f:
e6:af:8b:e5:ed:03:4f:c9:c4:ea:62:e5:66:2c:b6:
5f:cc:2e:55:ae:1f:5b:24:a4:22:40:97:91:49:29:
00:5b:50:bf:bb:94:e1:a8:a1:ff:49:1f:f2:dc:70:
08:0b:6c:93:e5:ce:ce:e1:2c:65:a6:64:99:05:42:
a9:d9:cf:70:85:4d:7b:18:34:9d:7a:ef:c9:c0:49:
3d:66:0d:62:1c:b8:99:29:1c:2d:7a:2a:d0:7d:fd:
e6:fb:12:ef:56:1b:ab:b9:08:f7:11:bc:53:89:f3:
b4:9f:90:b6:eb:5d:72:c6:33:7b:4b:75:d1:e7:bb:
da:e6:eb:bc:c2:58:70:20:8d:9a:6e:3b:45:9e:9f:
51:aa:dd:6a:31:67:ff:c0:91:bc:7d:12:63:ae:35:
bb:d6:fd:17:bf:19:57:40:4e:6d:40:98:8d:31:1b:
a1:9b:e5:e9:7c:79:01:61:f1:29:e1:9d:70:ef:fb:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:F5:31:EF:B6:7A:A6:28:2F:ED:33:35:C9:A7:56:9B:28:9A:B4
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.224.0/19
66.9.96.0/20
66.117.8.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
84.247.59.0/24
86.104.8.0/24
88.135.96.0/20
89.34.171.0/24
89.42.40.0/24
93.119.184.0/21
94.26.110.0/23
94.101.103.0/24
121.127.48.0/20
168.75.224.0/20
176.222.48.0/22
192.200.192.0/19
194.149.76.0/22
195.133.202.0/23
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
54:da:5c:2d:75:86:a3:2f:5a:aa:1c:47:a1:5e:c3:d3:c0:b5:
1f:9b:7e:dc:f7:01:bd:95:09:6c:a1:ed:d1:97:af:ab:3d:f3:
6e:da:8a:8a:90:92:9e:e6:7d:8b:43:a6:9a:2f:65:d4:3d:cd:
f9:4f:e4:4d:a0:e2:64:eb:6a:21:cc:87:5f:a6:b6:b6:23:d8:
b7:eb:59:7b:e6:2c:99:d8:31:de:85:4b:37:da:45:2b:72:23:
b9:eb:04:8d:9b:f4:8d:6a:c4:0d:8b:ac:e3:38:fc:a3:e2:5c:
f5:92:fe:0a:ea:99:7b:d2:3e:db:27:1f:13:fc:6e:c0:63:12:
ff:24:99:14:e0:9d:cc:98:8b:fe:e9:a8:d4:4e:66:fa:be:eb:
51:22:13:54:b4:82:b5:9b:af:81:ce:0c:48:61:d4:c7:d1:0e:
e7:c7:78:f2:0c:a6:a7:ca:58:65:8a:15:52:1c:a4:74:89:2b:
5d:fb:5f:86:5f:bd:1a:92:d4:90:b0:28:96:75:fd:e2:3b:ef:
ee:5f:3b:b8:5f:15:97:27:47:d3:8d:ab:d8:a3:a7:af:57:5f:
8a:47:c1:ee:41:15:8e:79:ab:42:40:97:b6:ec:f5:e3:5f:df:
c8:d8:c5:16:4e:c7:f5:30:aa:f5:8a:87:73:0d:03:18:87:5e:
4a:a6:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 17:25:51 2026 by rpki-client