This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/LX-ARaBvjhL1OCxybAxnFHn8WPw.roa File: LX-ARaBvjhL1OCxybAxnFHn8WPw.roa (raw, json) Hash identifier: z5k53jG7hGiyHO30GuFIqCTEvuGJih3P4io8dzdcoxM= Subject key identifier: 2D:7F:80:45:A0:6F:8E:12:F5:38:2C:72:6C:0C:67:14:79:FC:58:FC Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019C24383968BB3D3547235498EDAD5B14D6 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/LX-ARaBvjhL1OCxybAxnFHn8WPw.roa Signing time: Tue 03 Feb 2026 15:56:30 +0000 ROA not before: Tue 03 Feb 2026 15:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31130 IP address blocks: 70.40.188.0/24 maxlen: 24 70.40.189.0/24 maxlen: 24 91.92.250.0/24 maxlen: 24 2001:3780::/32 maxlen: 32 2001:3785::/32 maxlen: 32 2a12:4044::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:38:39:68:bb:3d:35:47:23:54:98:ed:ad:5b:14:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Feb 3 15:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d7f8045a06f8e12f5382c726c0c671479fc58fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:14:53:ec:c1:49:ce:58:11:cb:a6:48:2d: 32:85:af:4c:4c:b4:f2:88:a8:55:ab:71:c7:49:d8: 23:3f:f9:40:48:94:a1:a1:5f:03:9a:ca:d0:6c:21: 79:06:f4:34:77:58:3b:3e:8a:23:72:50:eb:f8:98: b1:e5:a0:01:81:cb:ce:0b:76:53:b5:37:e4:ef:9b: 54:6a:b2:d0:49:44:22:6b:f4:a6:4e:6f:2d:20:9f: 70:25:15:d9:ee:12:a6:eb:6e:5b:66:5d:65:94:eb: cb:70:69:78:fc:22:30:3a:d3:55:fc:c3:cc:2c:31: 68:bf:b5:67:b6:20:b9:70:e5:78:3d:60:5a:78:18: 2c:b2:1d:ff:2d:ad:3c:41:4b:ec:3a:17:63:fa:ca: 35:9b:c5:20:98:f2:63:0e:df:fe:79:42:ab:10:ad: 1a:53:53:28:4a:6c:94:dc:85:1a:a9:c1:77:e7:5d: 19:9d:d2:0c:d6:fe:49:06:3d:f0:7c:a6:ab:6e:82: b4:18:1d:cd:b5:fb:38:85:fb:1d:30:9d:40:c9:22: c7:df:49:2a:c6:9d:1e:8a:4a:a6:c5:dd:65:4a:14: 6d:6f:bb:f6:a0:91:5b:f2:1e:06:39:15:71:74:ea: 08:75:f0:cc:ba:f0:6c:9b:7c:c1:fa:24:48:d4:51: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7F:80:45:A0:6F:8E:12:F5:38:2C:72:6C:0C:67:14:79:FC:58:FC X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/LX-ARaBvjhL1OCxybAxnFHn8WPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.40.188.0/23 91.92.250.0/24 IPv6: 2001:3780::/32 2001:3785::/32 2a12:4044::/32 Signature Algorithm: sha256WithRSAEncryption d0:24:96:c7:bd:be:2b:b1:8c:aa:bf:dc:30:60:b8:be:ed:54: 35:40:ee:89:bd:15:0c:5a:00:b0:7c:5f:90:4b:38:36:d4:bb: 02:c4:10:2f:4f:d0:28:2c:43:5b:75:21:02:23:4e:25:c0:58: 37:db:d4:44:6e:a7:be:5c:dc:bc:77:9c:7d:58:4d:32:e0:fb: d8:44:fb:66:a5:bd:49:91:15:71:5b:b7:1e:32:b3:ce:51:88: dd:f0:a3:75:23:de:41:f7:59:36:96:b4:2c:37:71:88:69:c5: 1c:5e:01:43:60:78:77:6e:a1:c6:b8:cf:8e:e6:c0:14:50:f2: 22:b1:7e:4b:b4:83:94:83:02:38:2a:b5:12:52:88:01:02:8b: d7:77:3a:82:7c:e9:33:b9:05:12:a7:e1:8e:60:23:4f:84:20: 74:61:26:12:37:85:a3:51:af:4e:60:68:f1:31:8f:2a:6f:3c: 73:87:f1:d0:ff:d7:95:7f:d1:c9:f5:16:16:14:ca:75:d9:f8: 11:84:24:b9:37:6f:1e:be:11:c6:8c:fe:db:c8:b6:ce:ef:6c: 88:9f:51:8e:da:18:d1:8a:0c:59:9b:8e:18:bf:f4:dc:a5:08: 49:43:24:55:8d:2f:c8:b0:1b:a3:dc:2b:85:cf:03:1c:0e:56: 6b:a4:8e:23 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZwkODlouz01RyNUmO2tWxTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwMjAzMTU1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDdmODA0NWEwNmY4ZTEyZjUzODJjNzI2YzBjNjcxNDc5ZmM1OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskIUU+zBSc5YEcumSC0yha9MTLTy iKhVq3HHSdgjP/lASJShoV8DmsrQbCF5BvQ0d1g7PoojclDr+Jix5aABgcvOC3ZT tTfk75tUarLQSUQia/SmTm8tIJ9wJRXZ7hKm625bZl1llOvLcGl4/CIwOtNV/MPM LDFov7VntiC5cOV4PWBaeBgssh3/La08QUvsOhdj+so1m8UgmPJjDt/+eUKrEK0a U1MoSmyU3IUaqcF3510ZndIM1v5JBj3wfKarboK0GB3Ntfs4hfsdMJ1AySLH30kq xp0eikqmxd1lShRtb7v2oJFb8h4GORVxdOoIdfDMuvBsm3zB+iRI1FFr7wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFC1/gEWgb44S9TgscmwMZxR5/Fj8MB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvTFgtQVJhQnZqaEwxT0N4eWJBeG5GSG44V1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQBRii8AwQA W1z6MBsEAgACMBUDBQAgATeAAwUAIAE3hQMFACoSQEQwDQYJKoZIhvcNAQELBQAD ggEBANAklse9viuxjKq/3DBguL7tVDVA7om9FQxaALB8X5BLODbUuwLEEC9P0Cgs Q1t1IQIjTiXAWDfb1ERup75c3Lx3nH1YTTLg+9hE+2alvUmRFXFbtx4ys85RiN3w o3Uj3kH3WTaWtCw3cYhpxRxeAUNgeHduoca4z47mwBRQ8iKxfku0g5SDAjgqtRJS iAECi9d3OoJ86TO5BRKn4Y5gI0+EIHRhJhI3haNRr05gaPExjypvPHOH8dD/15V/ 0cn1FhYUynXZ+BGEJLk3bx6+EcaM/tvIts7vbIifUY7aGNGKDFmbjhi/9NylCElD JFWNL8iwG6PcK4XPAxwOVmukjiM= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:21 2026 by rpki-client