This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LUXiP9lc-43LWBpb942dwhjBNw4.roa File: LUXiP9lc-43LWBpb942dwhjBNw4.roa (raw, json) Hash identifier: 7y3gL/Nd09qe+9fnzQGt4tQA+oTTyzaF0SSwuon/o0s= Subject key identifier: 2D:45:E2:3F:D9:5C:FB:8D:CB:58:1A:5B:F7:8D:9D:C2:18:C1:37:0E Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B0C4A3A829EDB823F2D66E8A8DB1F7D24 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LUXiP9lc-43LWBpb942dwhjBNw4.roa Signing time: Thu 11 Dec 2025 07:22:29 +0000 ROA not before: Thu 11 Dec 2025 07:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 86.110.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:4a:3a:82:9e:db:82:3f:2d:66:e8:a8:db:1f:7d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Dec 11 07:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d45e23fd95cfb8dcb581a5bf78d9dc218c1370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:40:69:3c:d8:3b:59:e6:cc:54:83:9d:1c: 27:c2:ad:58:a2:80:6d:6b:d6:f2:0c:8b:ca:1f:24: dd:2c:2a:be:f2:1e:ea:56:8f:14:6b:7b:33:03:0b: 65:32:30:bf:6c:c8:2c:6e:6e:f5:22:3f:8d:bb:39: ef:a8:9a:37:95:67:36:32:c6:c6:0a:11:29:52:d1: 86:35:d2:c0:9c:97:1f:9e:9b:5d:07:3e:15:d5:45: 3c:4e:48:89:24:de:fd:e8:9d:c3:cc:60:1e:68:c1: 6d:38:9a:4c:64:3f:e3:fd:e3:06:e3:ba:f0:fb:7a: a6:1a:ce:2b:eb:20:77:d8:1b:a5:7e:84:05:aa:53: b8:e3:62:47:ca:11:3b:59:d3:3b:27:16:30:95:71: 7f:f1:22:9b:f1:13:51:ac:d9:ce:bd:f7:5c:64:24: a6:7f:0a:d5:f4:06:d4:11:ef:54:cb:2a:60:c3:71: 3b:94:20:55:f9:86:d2:17:a8:e4:45:18:f2:58:2f: 2b:4a:5a:89:54:76:c1:b3:2c:e4:aa:ca:0d:ac:c5: 06:5e:b6:72:47:7d:72:1f:90:29:4f:a5:a8:5c:19: 5f:9f:e5:dc:ec:21:00:71:ef:24:43:de:e3:e2:b5: 77:ac:27:b5:1c:36:49:ab:d6:e9:b1:46:fc:ca:25: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:45:E2:3F:D9:5C:FB:8D:CB:58:1A:5B:F7:8D:9D:C2:18:C1:37:0E X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LUXiP9lc-43LWBpb942dwhjBNw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.44.0/24 Signature Algorithm: sha256WithRSAEncryption b1:85:e1:e0:ca:f7:0b:14:ff:9f:03:8f:19:f4:06:58:f8:cb: 64:55:04:54:11:49:25:4e:ff:31:bb:49:50:0f:cd:70:f9:3d: 24:48:36:3b:f8:ba:c3:02:15:2f:e2:d9:e7:5e:5b:94:25:37: 83:b1:6a:3a:61:2d:44:66:5b:28:93:e5:79:66:be:a2:04:4b: a4:88:5f:c2:67:69:b2:0a:e2:f4:12:c2:e0:42:13:3b:0e:c6: 20:52:2a:26:d2:6d:9d:f6:2a:d2:8b:19:9e:c2:f5:84:59:fd: 1c:66:9d:1e:4b:a6:f1:f6:bf:35:50:a8:a5:23:ea:5a:4e:55: 88:60:7b:5d:92:f9:0f:dc:c1:ab:ec:65:fe:a7:f0:68:c2:0b: 89:4d:44:48:15:e3:91:16:5d:dd:a1:7a:40:06:f7:6f:2f:2e: e5:3e:be:a6:62:45:34:ec:0a:a6:09:a3:7d:2b:81:29:f5:84: 56:c8:73:73:68:5e:9e:13:37:ff:59:73:08:e6:ad:c4:9c:27: 35:3d:52:b4:04:32:4c:62:7f:ce:45:38:64:8c:c0:27:aa:38: b6:94:96:0c:0a:07:9d:1f:46:a8:99:c3:ca:9f:6f:3b:96:ac: 9d:07:96:f7:dc:6b:66:93:26:f8:31:a4:b9:25:14:68:2f:8f: 74:fa:89:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMSjqCntuCPy1m6KjbH30kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMjExMDcyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDQ1ZTIzZmQ5NWNmYjhkY2I1ODFhNWJmNzhkOWRjMjE4YzEzNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9AaTzYO1nmzFSDnRwnwq1YooBt a9byDIvKHyTdLCq+8h7qVo8Ua3szAwtlMjC/bMgsbm71Ij+NuznvqJo3lWc2MsbG ChEpUtGGNdLAnJcfnptdBz4V1UU8TkiJJN796J3DzGAeaMFtOJpMZD/j/eMG47rw +3qmGs4r6yB32BulfoQFqlO442JHyhE7WdM7JxYwlXF/8SKb8RNRrNnOvfdcZCSm fwrV9AbUEe9Uyypgw3E7lCBV+YbSF6jkRRjyWC8rSlqJVHbBsyzkqsoNrMUGXrZy R31yH5ApT6WoXBlfn+Xc7CEAce8kQ97j4rV3rCe1HDZJq9bpsUb8yiWSSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC1F4j/ZXPuNy1gaW/eNncIYwTcOMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvTFVYaVA5bGMtNDNMV0JwYjk0MmR3aGpCTnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4sMA0G CSqGSIb3DQEBCwUAA4IBAQCxheHgyvcLFP+fA48Z9AZY+MtkVQRUEUklTv8xu0lQ D81w+T0kSDY7+LrDAhUv4tnnXluUJTeDsWo6YS1EZlsok+V5Zr6iBEukiF/CZ2my CuL0EsLgQhM7DsYgUiom0m2d9irSixmewvWEWf0cZp0eS6bx9r81UKilI+paTlWI YHtdkvkP3MGr7GX+p/BowguJTURIFeORFl3doXpABvdvLy7lPr6mYkU07AqmCaN9 K4Ep9YRWyHNzaF6eEzf/WXMI5q3EnCc1PVK0BDJMYn/ORThkjMAnqji2lJYMCged H0aomcPKn287lqydB5b33Gtmkyb4MaS5JRRoL490+okF -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:18 2025 by rpki-client