This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LqgEpr3BemI8yuKT9wZgM3My0gw.roa File: LqgEpr3BemI8yuKT9wZgM3My0gw.roa (raw, json) Hash identifier: s3EzF0sVCwnORv4gIFgONOm+kHRufFUMiRtA9uKgN6U= Subject key identifier: 2E:A8:04:A6:BD:C1:7A:62:3C:CA:E2:93:F7:06:60:33:73:32:D2:0C Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68A5A59563EF8F1EF4D36929F1CAE Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LqgEpr3BemI8yuKT9wZgM3My0gw.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56882 IP address blocks: 37.209.160.0/21 maxlen: 21 45.252.236.0/22 maxlen: 22 46.251.252.0/23 maxlen: 23 46.251.254.0/23 maxlen: 23 84.236.154.0/24 maxlen: 24 84.236.156.0/24 maxlen: 24 84.236.157.0/24 maxlen: 24 84.236.158.0/24 maxlen: 24 91.228.91.0/24 maxlen: 24 103.82.48.0/22 maxlen: 22 115.42.52.0/22 maxlen: 22 168.245.196.0/23 maxlen: 23 176.227.144.0/24 maxlen: 24 185.59.64.0/24 maxlen: 24 185.59.65.0/24 maxlen: 24 185.59.66.0/24 maxlen: 24 185.59.67.0/24 maxlen: 24 185.130.152.0/22 maxlen: 22 185.193.8.0/22 maxlen: 22 188.64.100.0/22 maxlen: 22 188.227.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8a:5a:59:56:3e:f8:f1:ef:4d:36:92:9f:1c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ea804a6bdc17a623ccae293f70660337332d20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:df:81:5b:d1:9d:a6:67:b0:19:c2:55:49: bd:0b:1f:98:1f:91:cb:b8:81:98:37:59:d0:d9:de: b3:28:3f:a5:1d:8d:b8:1a:3d:3f:d0:8b:38:ef:e1: a8:97:f1:f9:86:93:8e:0d:6e:ab:f1:a3:82:cf:bb: 8f:17:4e:e4:a4:0f:5b:4e:a6:29:4a:01:6c:f5:9a: 91:e5:39:51:d9:a8:90:0f:7e:77:e5:49:9b:7f:ed: 67:a1:19:62:33:92:db:ef:a1:77:e9:b8:cc:0a:f5: 7d:ff:28:29:ba:ba:4f:b8:8b:9e:1f:ca:a4:04:67: 89:e3:0a:ab:de:46:30:00:3c:3c:6e:95:95:a2:07: e7:03:3a:eb:e6:3a:e8:de:09:a2:64:82:6a:09:3d: d1:16:77:74:c7:2f:72:0e:80:c2:b0:06:29:4e:ec: 6c:e6:be:31:8f:f7:3c:8f:c9:a0:14:99:1d:ec:8c: 20:d3:5a:80:6b:f4:93:26:c7:61:5a:40:f8:a9:56: 0e:06:d2:04:d7:01:61:d3:ac:af:17:78:94:61:8a: ad:9e:07:e0:c5:f3:12:ea:37:39:f1:5b:90:43:2a: e3:c2:51:2d:a5:ef:17:e2:5f:f2:86:da:b1:5f:77: ff:29:82:67:ae:11:13:2c:a2:89:82:13:9b:04:67: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A8:04:A6:BD:C1:7A:62:3C:CA:E2:93:F7:06:60:33:73:32:D2:0C X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LqgEpr3BemI8yuKT9wZgM3My0gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.160.0/21 45.252.236.0/22 46.251.252.0/22 84.236.154.0/24 84.236.156.0-84.236.158.255 91.228.91.0/24 103.82.48.0/22 115.42.52.0/22 168.245.196.0/23 176.227.144.0/24 185.59.64.0/22 185.130.152.0/22 185.193.8.0/22 188.64.100.0/22 188.227.128.0/19 Signature Algorithm: sha256WithRSAEncryption 99:d9:03:f7:6b:7e:97:e6:47:8b:60:9f:e4:fe:68:50:6b:ae: 58:01:a0:e6:02:1a:32:17:1b:96:a9:95:d5:84:cc:c6:85:78: 20:19:2c:20:4c:8e:ec:fa:57:86:39:73:ef:9c:4b:40:10:7c: 7a:39:01:7c:aa:f7:95:04:f1:e5:18:7d:62:b5:f5:b8:a6:01: 77:4f:ec:10:02:2b:0c:b8:1a:68:b4:13:76:e6:46:1a:e4:aa: d2:0b:ca:5b:3d:2d:6b:7f:a7:64:69:d2:a9:08:b4:82:3c:4e: be:ff:8e:40:67:c2:88:97:c6:70:89:62:06:3f:54:73:bc:7f: 4a:b7:99:97:ac:70:b3:b4:e0:80:97:16:86:22:d8:a7:55:3e: a5:7e:e6:c9:d1:e3:ab:50:78:ec:66:ae:5d:a8:f1:9a:47:98: 02:3d:fe:df:4b:89:c4:55:5d:44:50:31:a5:a3:89:ec:68:13: 9e:ae:72:d7:db:98:22:0a:7b:f1:b1:05:6d:b5:63:16:be:5c: e1:56:ec:25:9a:d1:84:ae:e7:e5:5a:a7:1f:b2:47:46:d0:3e: 40:d2:10:10:72:ac:51:9a:c9:90:cb:55:e6:44:84:5a:3a:65: be:96:7a:21:5d:e5:fc:4c:6c:e9:2f:10:5a:fd:52:5a:28:91: 8c:58:a7:e8 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt3xopaWVY++PHvTTaSnxyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWE4MDRhNmJkYzE3YTYyM2NjYWUyOTNmNzA2NjAzMzczMzJkMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLfgVvRnaZnsBnCVUm9Cx+YH5HL uIGYN1nQ2d6zKD+lHY24Gj0/0Is47+Gol/H5hpOODW6r8aOCz7uPF07kpA9bTqYp SgFs9ZqR5TlR2aiQD3535Umbf+1noRliM5Lb76F36bjMCvV9/ygpurpPuIueH8qk BGeJ4wqr3kYwADw8bpWVogfnAzrr5jro3gmiZIJqCT3RFnd0xy9yDoDCsAYpTuxs 5r4xj/c8j8mgFJkd7Iwg01qAa/STJsdhWkD4qVYOBtIE1wFh06yvF3iUYYqtngfg xfMS6jc58VuQQyrjwlEtpe8X4l/yhtqxX3f/KYJnrhETLKKJghObBGcvtwIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFC6oBKa9wXpiPMrik/cGYDNzMtIMMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvTHFnRXByM0JlbUk4eXVLVDl3WmdNM015MGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQDJdGgAwQC LfzsAwQCLvv8AwQAVOyaMAwDBAJU7JwDBABU7J4DBABb5FsDBAJnUjADBAJzKjQD BAGo9cQDBACw45ADBAK5O0ADBAK5gpgDBAK5wQgDBAK8QGQDBAW844AwDQYJKoZI hvcNAQELBQADggEBAJnZA/drfpfmR4tgn+T+aFBrrlgBoOYCGjIXG5apldWEzMaF eCAZLCBMjuz6V4Y5c++cS0AQfHo5AXyq95UE8eUYfWK19bimAXdP7BACKwy4Gmi0 E3bmRhrkqtILyls9LWt/p2Rp0qkItII8Tr7/jkBnwoiXxnCJYgY/VHO8f0q3mZes cLO04ICXFoYi2KdVPqV+5snR46tQeOxmrl2o8ZpHmAI9/t9LicRVXURQMaWjiexo E56uctfbmCIKe/GxBW21Yxa+XOFW7CWa0YSu5+Vapx+yR0bQPkDSEBByrFGayZDL VeZEhFo6Zb6WeiFd5fxMbOkvEFr9UlookYxYp+g= -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:05 2026 by rpki-client