This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LqdBaMELCX7yA0raC3hWV--HIYI.roa File: LqdBaMELCX7yA0raC3hWV--HIYI.roa (raw, json) Hash identifier: onaAzUmlAd3Fz9MrEfcy+vZAGXkcbckOQyEBNQh62rI= Subject key identifier: 2E:A7:41:68:C1:0B:09:7E:F2:03:4A:DA:0B:78:56:57:EF:87:21:82 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019A9C419FA445A6600BC0346CDAD46B66B0 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LqdBaMELCX7yA0raC3hWV--HIYI.roa Signing time: Wed 19 Nov 2025 13:15:37 +0000 ROA not before: Wed 19 Nov 2025 13:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209260 IP address blocks: 158.173.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:41:9f:a4:45:a6:60:0b:c0:34:6c:da:d4:6b:66:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 19 13:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ea74168c10b097ef2034ada0b785657ef872182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:3b:5d:66:23:1a:32:a5:49:56:1f:c5:90: 4e:a2:e6:e6:90:41:50:f7:62:56:28:f9:3a:10:97: 27:c5:d7:55:02:c5:43:3c:d2:41:0c:3a:1a:0f:e2: 37:31:bc:3f:69:35:a6:fc:79:b2:dd:d5:12:44:d5: 07:43:2b:1c:78:78:4f:a6:42:98:29:c3:41:4c:65: 25:e6:9e:63:55:d1:b7:76:86:2b:d4:39:97:16:ed: 24:2f:15:3d:58:fe:8f:f3:88:96:9d:09:e4:c7:7b: e6:c5:67:41:4d:3d:5f:31:95:c7:b9:ca:5a:b7:30: 81:a9:99:fc:de:b4:01:bb:76:e6:a8:a4:82:34:2a: 78:b5:25:af:4c:bb:19:4a:98:96:3e:4c:81:1a:2e: f2:b9:14:db:1f:fe:a8:28:8a:ed:88:e2:48:0f:8e: 66:8b:f0:de:42:bf:22:38:ce:8b:67:17:d6:ea:03: ff:44:3e:af:05:4d:80:90:88:5c:dd:c3:8a:09:92: 00:43:8f:72:2e:d9:4e:6e:2b:69:e4:8b:6f:91:38: 3a:5d:8e:8b:60:37:96:d0:32:17:b8:6a:da:76:57: e5:24:8a:59:70:e6:88:d5:fe:5f:f6:82:7c:b2:41: d3:2d:9d:58:30:75:a6:b7:3b:08:71:87:8a:ab:ca: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:41:68:C1:0B:09:7E:F2:03:4A:DA:0B:78:56:57:EF:87:21:82 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LqdBaMELCX7yA0raC3hWV--HIYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.203.0/24 Signature Algorithm: sha256WithRSAEncryption dc:29:e3:2c:82:a3:95:99:b6:9d:eb:db:d2:9d:28:a1:38:0b: 5a:27:0f:35:cf:94:64:51:2e:ed:6c:b4:2a:a5:78:8e:28:de: 32:73:ac:51:78:fa:9c:68:5b:f6:00:87:9c:a6:d4:11:51:f6: af:4a:3b:9b:77:70:5b:10:fd:44:bc:7e:0d:1c:d9:52:8b:86: 7b:5d:15:21:62:c5:dd:cc:f3:82:c9:59:47:57:fb:0f:78:8e: ec:68:d3:cf:a3:72:5c:57:7c:c7:d4:23:d2:aa:96:2f:02:0b: 19:ab:40:33:0d:8d:63:f0:40:ef:92:d9:90:82:0b:92:e3:7a: d3:93:d4:8c:0a:86:bf:1e:33:f1:3e:09:cc:80:92:36:a0:27: 26:a5:98:96:c2:6d:59:55:9e:33:19:98:0c:3c:18:b7:73:aa: c3:9a:19:f7:86:03:12:47:40:9a:ec:d4:e6:b3:55:0b:13:82: a9:70:40:70:82:98:37:03:16:db:5c:51:f7:18:47:02:80:14: 1f:b3:1d:6e:27:f2:1b:3e:7b:21:3c:29:2d:6a:21:dc:a8:f3: 4d:e1:30:6c:08:68:93:05:52:6d:fc:28:31:4e:4c:98:c6:3a: 8c:fd:d7:d1:cc:fd:ec:7f:34:ba:28:e4:d3:d7:c3:7c:1d:79: af:90:63:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcQZ+kRaZgC8A0bNrUa2awMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMTE5MTMxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWE3NDE2OGMxMGIwOTdlZjIwMzRhZGEwYjc4NTY1N2VmODcyMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzow7XWYjGjKlSVYfxZBOoubmkEFQ 92JWKPk6EJcnxddVAsVDPNJBDDoaD+I3Mbw/aTWm/Hmy3dUSRNUHQysceHhPpkKY KcNBTGUl5p5jVdG3doYr1DmXFu0kLxU9WP6P84iWnQnkx3vmxWdBTT1fMZXHucpa tzCBqZn83rQBu3bmqKSCNCp4tSWvTLsZSpiWPkyBGi7yuRTbH/6oKIrtiOJID45m i/DeQr8iOM6LZxfW6gP/RD6vBU2AkIhc3cOKCZIAQ49yLtlObitp5ItvkTg6XY6L YDeW0DIXuGradlflJIpZcOaI1f5f9oJ8skHTLZ1YMHWmtzsIcYeKq8q19wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6nQWjBCwl+8gNK2gt4VlfvhyGCMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvTHFkQmFNRUxDWDd5QTByYUMzaFdWLS1ISVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3LMA0G CSqGSIb3DQEBCwUAA4IBAQDcKeMsgqOVmbad69vSnSihOAtaJw81z5RkUS7tbLQq pXiOKN4yc6xRePqcaFv2AIecptQRUfavSjubd3BbEP1EvH4NHNlSi4Z7XRUhYsXd zPOCyVlHV/sPeI7saNPPo3JcV3zH1CPSqpYvAgsZq0AzDY1j8EDvktmQgguS43rT k9SMCoa/HjPxPgnMgJI2oCcmpZiWwm1ZVZ4zGZgMPBi3c6rDmhn3hgMSR0Ca7NTm s1ULE4KpcEBwgpg3AxbbXFH3GEcCgBQfsx1uJ/IbPnshPCktaiHcqPNN4TBsCGiT BVJt/CgxTkyYxjqM/dfRzP3sfzS6KOTT18N8HXmvkGNS -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:28 2025 by rpki-client