This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LG9XIK_MLYyjB0UFbHjeKYpMPK8.roa File: LG9XIK_MLYyjB0UFbHjeKYpMPK8.roa (raw, json) Hash identifier: 8XYZGjqN6kqvc28ZEmvKEuOWBYWjfI/wtI4kkaavjPQ= Subject key identifier: 2C:6F:57:20:AF:CC:2D:8C:A3:07:45:05:6C:78:DE:29:8A:4C:3C:AF Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A9D5D702ABD3AF4AC7B3EE3F25F5751DC Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LG9XIK_MLYyjB0UFbHjeKYpMPK8.roa Signing time: Wed 19 Nov 2025 18:25:37 +0000 ROA not before: Wed 19 Nov 2025 18:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200195 IP address blocks: 45.89.60.0/24 maxlen: 24 45.89.61.0/24 maxlen: 24 45.150.66.0/24 maxlen: 24 138.124.181.0/24 maxlen: 24 2a0e:4005::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:5d:70:2a:bd:3a:f4:ac:7b:3e:e3:f2:5f:57:51:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 19 18:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c6f5720afcc2d8ca30745056c78de298a4c3caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:71:02:88:27:7e:55:a5:6f:99:11:c5:7a: 01:76:16:88:eb:bd:0b:ed:21:21:ad:00:29:80:34: 94:fe:3a:47:c4:ca:07:b5:f5:94:db:df:2f:a1:61: fc:1a:23:d2:55:81:b3:40:50:47:1a:4c:1e:ed:01: 87:26:b8:2d:e4:11:d4:7c:8f:22:8f:d9:6c:6b:fa: f4:6a:06:78:45:52:bc:ee:31:5f:f5:a3:72:0f:33: b7:cd:89:be:5b:47:4c:a7:fe:52:9b:c9:52:d0:c9: d4:41:61:c5:56:d1:80:3c:27:12:5f:7b:17:23:55: 4c:71:9d:30:91:f8:71:3a:b7:04:d2:31:0d:29:28: ca:33:dc:12:df:62:97:ba:c7:55:ee:a0:ef:f3:d5: 99:68:ae:35:d2:97:6e:61:c2:3b:af:0d:35:21:66: 88:04:47:46:9e:f1:b1:c3:6e:3b:22:62:64:26:06: c4:4f:a9:88:74:26:ad:76:9f:2d:ac:a0:db:86:e9: 5c:0d:19:b8:09:67:a1:27:4e:50:74:b0:17:ab:27: 4e:c4:09:f5:c6:d5:22:71:92:ab:d9:0f:f8:17:18: 98:6b:bc:24:10:45:f2:7a:69:e0:f7:78:3d:46:59: 2e:4b:c4:b7:bc:c2:3c:b3:6b:5f:2e:b1:af:35:48: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6F:57:20:AF:CC:2D:8C:A3:07:45:05:6C:78:DE:29:8A:4C:3C:AF X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LG9XIK_MLYyjB0UFbHjeKYpMPK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.60.0/23 45.150.66.0/24 138.124.181.0/24 IPv6: 2a0e:4005::/32 Signature Algorithm: sha256WithRSAEncryption ad:2b:ba:ad:c5:a2:8f:28:47:d9:5b:d4:ff:5e:fe:29:fc:d6: cc:1a:85:a3:1d:a4:19:06:a7:eb:c1:f7:e7:b6:8f:1a:71:f8: 8b:58:1e:e3:b6:5b:61:06:b0:1f:74:c7:42:dd:64:1a:ad:11: fa:13:89:c0:33:43:db:66:e5:14:17:76:53:00:76:3c:96:da: c6:8c:d4:b2:3f:5a:a5:c9:69:0d:89:15:1e:7d:dd:bb:9f:81: 4c:8e:19:66:1f:cc:07:8d:fe:39:4e:cc:83:43:9b:c5:8d:9c: b7:4e:eb:d9:f5:4d:db:ec:e0:c6:cb:c6:de:dc:11:62:ce:6f: eb:ac:4f:00:a3:50:b1:de:54:17:ec:22:8f:f4:80:10:5f:1b: 6a:f9:f4:05:f1:5d:30:21:b3:38:80:bc:27:d7:34:21:50:5b: 7a:14:58:5d:19:73:ae:a9:2f:85:9e:9d:85:d1:38:6f:47:69: 2e:e6:ba:4b:b6:1a:21:56:b6:91:cc:50:aa:ff:1c:37:21:f6: 1f:e0:3a:20:d4:f9:ad:74:36:5a:9f:1c:e0:55:be:81:06:7f: 9a:bd:c7:bd:ab:f7:59:d3:af:d9:fa:a9:50:2b:e0:d8:5f:1e: 76:bd:c0:d9:06:f3:5c:06:ce:1e:bf:b2:a9:c2:03:6d:57:8d: fd:11:c2:b2 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqdXXAqvTr0rHs+4/JfV1HcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTE5MTgyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzZmNTcyMGFmY2MyZDhjYTMwNzQ1MDU2Yzc4ZGUyOThhNGMzY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsBxAognflWlb5kRxXoBdhaI670L 7SEhrQApgDSU/jpHxMoHtfWU298voWH8GiPSVYGzQFBHGkwe7QGHJrgt5BHUfI8i j9lsa/r0agZ4RVK87jFf9aNyDzO3zYm+W0dMp/5Sm8lS0MnUQWHFVtGAPCcSX3sX I1VMcZ0wkfhxOrcE0jENKSjKM9wS32KXusdV7qDv89WZaK410pduYcI7rw01IWaI BEdGnvGxw247ImJkJgbET6mIdCatdp8trKDbhulcDRm4CWehJ05QdLAXqydOxAn1 xtUicZKr2Q/4FxiYa7wkEEXyemng93g9RlkuS8S3vMI8s2tfLrGvNUj7uQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCxvVyCvzC2MowdFBWx43imKTDyvMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvTEc5WElLX01MWXlqQjBVRmJIamVLWXBNUEs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLVk8AwQA LZZCAwQAiny1MA0EAgACMAcDBQAqDkAFMA0GCSqGSIb3DQEBCwUAA4IBAQCtK7qt xaKPKEfZW9T/Xv4p/NbMGoWjHaQZBqfrwffnto8acfiLWB7jtlthBrAfdMdC3WQa rRH6E4nAM0PbZuUUF3ZTAHY8ltrGjNSyP1qlyWkNiRUefd27n4FMjhlmH8wHjf45 TsyDQ5vFjZy3TuvZ9U3b7ODGy8be3BFizm/rrE8Ao1Cx3lQX7CKP9IAQXxtq+fQF 8V0wIbM4gLwn1zQhUFt6FFhdGXOuqS+Fnp2F0ThvR2ku5rpLthohVraRzFCq/xw3 IfYf4Dog1PmtdDZanxzgVb6BBn+avce9q/dZ06/Z+qlQK+DYXx52vcDZBvNcBs4e v7KpwgNtV439EcKy -----END CERTIFICATE-----Generated at Sat Dec 6 15:06:52 2025 by rpki-client