This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1LGdECS37WYO0cSstd7WiM58Wb4.roa File: 1LGdECS37WYO0cSstd7WiM58Wb4.roa (raw, json) Hash identifier: o62Pe4Cj4MRSCZ8/0ZYxX65Y0zAb31DdOeGPHsIeQHk= Subject key identifier: D4:B1:9D:10:24:B7:ED:66:0E:D1:C4:AC:B5:DE:D6:88:CE:7C:59:BE Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AE3CFF897504715F5545C49D233C944BC Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1LGdECS37WYO0cSstd7WiM58Wb4.roa Signing time: Wed 03 Dec 2025 10:44:08 +0000 ROA not before: Wed 03 Dec 2025 10:44:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216155 IP address blocks: 185.254.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:cf:f8:97:50:47:15:f5:54:5c:49:d2:33:c9:44:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 3 10:44:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d4b19d1024b7ed660ed1c4acb5ded688ce7c59be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:4c:a0:c6:91:82:d1:17:7b:c2:a0:b8:d6: c9:70:7d:22:97:31:a4:16:5d:18:9c:17:4a:d1:b1: 13:d9:09:38:e5:34:72:20:c1:c2:e4:6b:57:f4:6d: 73:7d:13:da:15:ba:a5:67:0e:96:34:09:0b:0d:4c: 75:53:a9:97:87:67:db:a7:dd:e0:8c:72:36:9a:26: da:65:20:4f:50:84:ba:9c:04:60:21:16:8a:b2:2c: 7e:a6:b7:3d:c2:3b:e5:21:d0:52:06:0a:76:83:f1: cb:85:ce:ab:11:f9:f7:38:d1:6a:93:23:35:9a:28: 9e:d8:fb:d7:0f:f5:96:fb:4b:ea:c6:63:79:d1:11: cd:70:7d:5c:b7:15:80:6c:04:b3:76:7b:25:97:33: 10:2c:a3:be:3f:e2:e0:29:84:f4:65:ff:e3:20:2c: 99:d3:75:19:0a:34:50:6f:3d:6c:67:8f:59:f4:35: c5:03:83:19:87:24:e0:f4:c1:a0:71:40:ba:3f:02: 74:2b:77:48:8d:1e:c5:15:29:a9:6e:4e:f4:c9:74: c9:34:86:3a:92:04:22:46:32:76:2e:51:b8:a5:1c: 93:60:fb:01:00:ff:e6:bd:ad:3a:1d:f0:d7:9d:56: 5b:69:eb:7b:da:78:f9:bd:41:9b:b0:85:30:ec:c0: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B1:9D:10:24:B7:ED:66:0E:D1:C4:AC:B5:DE:D6:88:CE:7C:59:BE X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1LGdECS37WYO0cSstd7WiM58Wb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.18.0/24 Signature Algorithm: sha256WithRSAEncryption 04:7b:b0:4e:a7:11:ec:1d:e6:db:92:9b:72:30:bc:2b:3e:b7: a2:85:4d:6f:2d:48:32:02:98:80:32:4e:48:d5:8b:ff:46:a3: d5:01:68:d8:14:2c:cd:1a:d6:0a:46:7d:6d:3e:93:cd:4f:0d: b4:f1:1e:f6:ac:bb:29:85:30:a7:c7:54:3e:18:ea:2d:38:d2: 6f:d6:06:ac:40:4d:0a:92:da:b8:b1:60:2c:34:27:bb:b3:13: 42:41:88:64:3e:02:db:64:e9:80:91:9f:85:86:24:76:70:c8: b6:ff:f8:af:ad:11:b9:eb:15:9b:33:2d:f0:07:97:21:1a:22: 14:0f:7c:c0:6d:69:f6:12:78:ba:91:20:dd:47:57:e3:bc:17: 5b:d1:b5:d8:23:b1:4f:6d:14:75:fe:af:45:9b:83:a5:35:cb: 69:26:82:3b:7e:4b:e0:d6:6d:6c:66:03:15:80:83:78:90:ba: c2:de:6e:26:dc:9b:be:33:c1:67:65:d2:e9:40:93:bd:25:3e: 57:b2:36:c9:06:f1:c5:8b:7d:3b:de:88:1b:46:f6:0b:52:c6: c4:b8:8a:bb:b8:64:71:5a:75:60:a3:8d:91:76:48:92:e1:b7: 22:cb:a8:b4:17:66:a6:b1:23:f7:02:85:73:37:4d:7f:78:b1: 90:cd:55:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjz/iXUEcV9VRcSdIzyUS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjAzMTA0NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGIxOWQxMDI0YjdlZDY2MGVkMWM0YWNiNWRlZDY4OGNlN2M1OWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVJMoMaRgtEXe8KguNbJcH0ilzGk Fl0YnBdK0bET2Qk45TRyIMHC5GtX9G1zfRPaFbqlZw6WNAkLDUx1U6mXh2fbp93g jHI2mibaZSBPUIS6nARgIRaKsix+prc9wjvlIdBSBgp2g/HLhc6rEfn3ONFqkyM1 miie2PvXD/WW+0vqxmN50RHNcH1ctxWAbASzdnsllzMQLKO+P+LgKYT0Zf/jICyZ 03UZCjRQbz1sZ49Z9DXFA4MZhyTg9MGgcUC6PwJ0K3dIjR7FFSmpbk70yXTJNIY6 kgQiRjJ2LlG4pRyTYPsBAP/mva06HfDXnVZbaet72nj5vUGbsIUw7MBH0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSxnRAkt+1mDtHErLXe1ojOfFm+MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvMUxHZEVDUzM3V1lPMGNTc3RkN1dpTTU4V2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4SMA0G CSqGSIb3DQEBCwUAA4IBAQAEe7BOpxHsHebbkptyMLwrPreihU1vLUgyApiAMk5I 1Yv/RqPVAWjYFCzNGtYKRn1tPpPNTw208R72rLsphTCnx1Q+GOotONJv1gasQE0K ktq4sWAsNCe7sxNCQYhkPgLbZOmAkZ+FhiR2cMi2//ivrRG56xWbMy3wB5chGiIU D3zAbWn2Eni6kSDdR1fjvBdb0bXYI7FPbRR1/q9Fm4OlNctpJoI7fkvg1m1sZgMV gIN4kLrC3m4m3Ju+M8FnZdLpQJO9JT5XsjbJBvHFi3073ogbRvYLUsbEuIq7uGRx WnVgo42RdkiS4bciy6i0F2amsSP3AoVzN01/eLGQzVUR -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:26 2025 by rpki-client