This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/lqsLALggP8BPfl8pdq3Xpv8eVgg.roa File: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (raw, json) Hash identifier: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s= Subject key identifier: 96:AB:0B:00:B8:20:3F:C0:4F:7E:5F:29:76:AD:D7:A6:FF:1E:56:08 Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef Certificate serial: 019B797F1E988CD64B5669FDF382335FC26F Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/lqsLALggP8BPfl8pdq3Xpv8eVgg.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.179.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1e:98:8c:d6:4b:56:69:fd:f3:82:33:5f:c2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96ab0b00b8203fc04f7e5f2976add7a6ff1e5608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:34:bf:73:50:4e:24:54:08:0e:6f:a6:95: 43:ca:57:f6:d8:08:99:a0:94:b2:81:a8:3b:7e:d5: 95:f0:6e:25:1c:ca:e3:5f:9e:6f:13:a5:97:54:80: 6b:3a:bf:3c:d4:aa:45:64:47:68:9f:df:8b:32:9c: c7:90:9c:94:f3:ce:b2:a8:eb:dc:1a:2f:43:8c:e5: 4e:7d:6b:fc:f4:71:d6:40:07:e0:1e:8c:7b:a8:86: 9d:75:f4:8a:25:77:d5:24:3e:2d:af:e9:42:60:8f: b9:6b:99:cf:84:8e:73:1d:3a:ea:84:20:64:8e:97: 8f:63:7a:e4:d5:92:73:9b:ce:5d:d2:3e:93:e4:9b: 0c:3e:8b:8c:ca:f5:4e:05:d3:a3:eb:70:4a:de:09: b8:4a:1f:8e:de:eb:14:f8:88:35:df:5a:be:18:c3: 35:04:b2:cb:5e:66:cb:b4:47:5d:d1:2d:07:83:dd: a1:e4:64:45:f9:ec:bf:9a:42:81:4f:65:f4:3f:95: db:8a:e3:42:49:e6:3a:0e:4a:1a:35:0b:53:c3:4b: fd:f5:b9:6e:79:c7:fd:a6:5b:b7:d7:f8:4a:23:c5: cc:25:fa:65:77:7f:bf:b4:43:3b:a9:cc:5c:3c:a7: cb:c8:75:d8:e1:43:bd:9a:88:d7:c6:59:fb:6b:a6: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AB:0B:00:B8:20:3F:C0:4F:7E:5F:29:76:AD:D7:A6:FF:1E:56:08 X509v3 Authority Key Identifier: keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/lqsLALggP8BPfl8pdq3Xpv8eVgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.91.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:12:e0:67:91:a8:20:a5:c8:ad:e9:d2:0c:ae:36:4e:b9:1b: 7c:3e:9b:c5:24:57:13:0f:1a:7e:03:65:36:1d:14:c3:15:8d: f2:9d:41:90:0b:85:e2:f7:fa:40:2c:df:ef:cd:dd:40:d7:de: 30:ff:c8:74:70:73:3a:56:bc:fb:69:74:0f:9f:ad:44:96:7b: 6b:7e:22:b4:43:f4:d1:c3:0a:f2:87:f7:dc:dd:fb:e7:40:56: 19:e2:9b:ff:3a:ac:fb:62:ba:ac:87:cb:15:3a:d6:b8:d5:dd: 75:a0:49:b2:94:f3:24:b7:fb:fd:71:29:92:cb:08:30:52:87: d8:61:f3:2c:bd:1e:6d:4b:12:cb:f3:21:4e:89:f1:97:e5:fe: 45:8f:8b:01:2a:4d:21:94:58:b6:59:d0:fc:ce:64:ca:2f:f0: 83:47:17:0e:d1:32:2e:5c:4e:c5:0a:12:c4:09:6a:7b:f2:90: f6:5a:49:7c:8e:cf:cc:26:00:1c:98:3d:d0:f9:3a:7d:26:af: 67:b8:4b:2b:2c:38:34:42:e5:8f:64:fd:38:b6:24:75:fc:d7: d7:1f:25:b7:6e:4b:1c:2d:12:55:93:7b:01:06:fb:62:5f:0b: e6:5d:83:ae:25:93:b3:fa:ae:74:98:a4:d1:e0:ef:eb:9e:26: 75:40:6c:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fx6YjNZLVmn984IzX8JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk NmIxZWYwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmFiMGIwMGI4MjAzZmMwNGY3ZTVmMjk3NmFkZDdhNmZmMWU1NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjw0v3NQTiRUCA5vppVDylf22AiZ oJSygag7ftWV8G4lHMrjX55vE6WXVIBrOr881KpFZEdon9+LMpzHkJyU886yqOvc Gi9DjOVOfWv89HHWQAfgHox7qIaddfSKJXfVJD4tr+lCYI+5a5nPhI5zHTrqhCBk jpePY3rk1ZJzm85d0j6T5JsMPouMyvVOBdOj63BK3gm4Sh+O3usU+Ig131q+GMM1 BLLLXmbLtEdd0S0Hg92h5GRF+ey/mkKBT2X0P5XbiuNCSeY6DkoaNQtTw0v99blu ecf9plu31/hKI8XMJfpld3+/tEM7qcxcPKfLyHXY4UO9mojXxln7a6YMIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJarCwC4ID/AT35fKXat16b/HlYIMB8GA1UdIwQY MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt YmU1N2Q3ZGZhMGRlLzEvbHFzTEFMZ2dQOEJQZmw4cGRxM1hwdjhlVmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNbMA0G CSqGSIb3DQEBCwUAA4IBAQAKEuBnkaggpcit6dIMrjZOuRt8PpvFJFcTDxp+A2U2 HRTDFY3ynUGQC4Xi9/pALN/vzd1A194w/8h0cHM6Vrz7aXQPn61ElntrfiK0Q/TR wwryh/fc3fvnQFYZ4pv/Oqz7Yrqsh8sVOta41d11oEmylPMkt/v9cSmSywgwUofY YfMsvR5tSxLL8yFOifGX5f5Fj4sBKk0hlFi2WdD8zmTKL/CDRxcO0TIuXE7FChLE CWp78pD2Wkl8js/MJgAcmD3Q+Tp9Jq9nuEsrLDg0QuWPZP04tiR1/NfXHyW3bksc LRJVk3sBBvtiXwvmXYOuJZOz+q50mKTR4O/rniZ1QGyd -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:36 2026 by rpki-client