This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/LGAzazAsvBBjNUS-QipfT8L_rKc.roa File: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (raw, json) Hash identifier: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg= Subject key identifier: 2C:60:33:6B:30:2C:BC:10:63:35:44:BE:42:2A:5F:4F:C2:FF:AC:A7 Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Certificate serial: 019B7C7F8DE5494E305AFCBDAFE73BA0F3C5 Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/LGAzazAsvBBjNUS-QipfT8L_rKc.roa Signing time: Fri 02 Jan 2026 02:18:12 +0000 ROA not before: Fri 02 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42316 IP address blocks: 45.159.128.0/22 maxlen: 24 176.113.47.0/24 maxlen: 24 185.187.160.0/22 maxlen: 24 2a0b:a880::/29 maxlen: 48 2a0c:9280::/29 maxlen: 48 2a0f:7680::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8d:e5:49:4e:30:5a:fc:bd:af:e7:3b:a0:f3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Validity Not Before: Jan 2 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c60336b302cbc10633544be422a5f4fc2ffaca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:73:42:94:d3:76:5e:c7:16:b9:69:08:5b: d1:bf:87:27:ac:86:23:d4:01:04:b6:3a:f8:73:0a: b4:fc:c4:a3:ce:c5:cf:82:25:52:7a:c4:ba:16:21: 1f:52:1a:c4:58:96:55:bd:e4:ef:71:0d:25:4e:c6: a7:40:0e:08:52:20:fd:a0:fe:93:d5:ab:b5:cc:49: 56:4b:95:c1:f5:1a:08:91:65:b2:2b:6e:fa:21:79: 41:0a:eb:93:1d:30:8e:13:61:fc:60:f3:55:ee:56: 3f:17:e5:f7:ba:d6:b4:57:50:3e:87:d3:d5:2a:03: 82:e9:1b:88:7b:fe:08:a9:91:1f:fa:03:2c:9a:b1: d0:59:9d:7b:1f:80:df:30:f6:76:16:03:77:a4:88: 20:ca:e3:34:87:05:18:b8:f9:38:ad:49:26:35:55: 96:2b:89:b6:02:ab:68:48:66:2a:3d:bf:48:8d:89: fa:46:5b:0e:18:f4:d7:f1:85:73:97:7c:0c:1d:2d: 77:e8:a5:f4:03:7f:47:36:91:e3:59:82:b9:81:bc: 44:11:ed:d4:0b:fd:01:98:d4:43:38:35:6d:fb:36: 5d:f5:f6:e6:cd:34:27:21:65:59:33:c8:66:85:e9: d0:5f:6e:41:44:d3:a7:1a:22:27:4a:77:c4:cc:4f: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:60:33:6B:30:2C:BC:10:63:35:44:BE:42:2A:5F:4F:C2:FF:AC:A7 X509v3 Authority Key Identifier: keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/LGAzazAsvBBjNUS-QipfT8L_rKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.128.0/22 176.113.47.0/24 185.187.160.0/22 IPv6: 2a0b:a880::/29 2a0c:9280::/29 2a0f:7680::/29 Signature Algorithm: sha256WithRSAEncryption 50:08:19:13:37:4b:6d:de:f3:1a:68:d0:59:44:a8:63:a9:08: d4:fa:db:29:79:fd:a6:8a:52:f6:29:39:e7:a5:4a:16:c3:b2: 95:bd:cd:e7:5d:c9:9b:31:a7:38:e0:d9:af:77:a9:5f:0e:5e: 6b:a5:71:bb:6a:8d:2e:de:b8:a9:06:49:c3:f0:4e:ce:af:51: b1:a7:82:d3:67:f8:15:09:da:e0:4c:3c:6d:ad:26:1b:51:c7: 61:48:45:87:54:fc:1b:20:d2:10:b4:f5:93:71:05:bc:96:d4: 8a:30:db:7d:ab:d8:b9:6e:8f:b5:bf:0f:88:f1:7e:54:77:fe: 90:1f:a3:10:5c:d4:ca:32:d2:9c:47:3c:c6:03:e6:d1:81:1d: d8:45:cd:e3:fb:5b:0a:19:26:9f:5a:56:ee:cc:7d:82:4f:0c: 3e:19:8d:fb:13:51:11:ae:3c:c0:9d:96:f7:eb:36:12:43:2d: e5:17:76:d0:6e:4f:3f:6b:d5:08:cf:f4:da:c1:a4:39:c4:db: ab:75:80:3f:45:e3:9b:7a:09:db:11:8d:18:55:72:5d:66:93: 8d:ba:cc:e6:9a:60:15:1b:5b:35:d7:41:bb:3d:25:2c:93:29: eb:f3:f2:79:18:23:ad:3f:f3:cd:c3:91:c4:72:05:38:f9:76: ff:d1:07:e8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt8f43lSU4wWvy9r+c7oPPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk MzRjMDYwHhcNMjYwMTAyMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzYwMzM2YjMwMmNiYzEwNjMzNTQ0YmU0MjJhNWY0ZmMyZmZhY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuupzQpTTdl7HFrlpCFvRv4cnrIYj 1AEEtjr4cwq0/MSjzsXPgiVSesS6FiEfUhrEWJZVveTvcQ0lTsanQA4IUiD9oP6T 1au1zElWS5XB9RoIkWWyK276IXlBCuuTHTCOE2H8YPNV7lY/F+X3uta0V1A+h9PV KgOC6RuIe/4IqZEf+gMsmrHQWZ17H4DfMPZ2FgN3pIggyuM0hwUYuPk4rUkmNVWW K4m2AqtoSGYqPb9IjYn6RlsOGPTX8YVzl3wMHS136KX0A39HNpHjWYK5gbxEEe3U C/0BmNRDODVt+zZd9fbmzTQnIWVZM8hmhenQX25BRNOnGiInSnfEzE/Q8wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFCxgM2swLLwQYzVEvkIqX0/C/6ynMB8GA1UdIwQY MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt ZGJiNjRhNjgzNWFkLzEvTEdBemF6QXN2QkJqTlVTLVFpcGZUOExfcktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQCLZ+AAwQA sHEvAwQCubugMBsEAgACMBUDBQMqC6iAAwUDKgySgAMFAyoPdoAwDQYJKoZIhvcN AQELBQADggEBAFAIGRM3S23e8xpo0FlEqGOpCNT62yl5/aaKUvYpOeelShbDspW9 zeddyZsxpzjg2a93qV8OXmulcbtqjS7euKkGScPwTs6vUbGngtNn+BUJ2uBMPG2t JhtRx2FIRYdU/Bsg0hC09ZNxBbyW1Iow232r2Lluj7W/D4jxflR3/pAfoxBc1Moy 0pxHPMYD5tGBHdhFzeP7WwoZJp9aVu7MfYJPDD4ZjfsTURGuPMCdlvfrNhJDLeUX dtBuTz9r1QjP9NrBpDnE26t1gD9F45t6CdsRjRhVcl1mk426zOaaYBUbWzXXQbs9 JSyTKevz8nkYI60/883DkcRyBTj5dv/RB+g= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:10 2026 by rpki-client