This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa File: LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa (raw, json) Hash identifier: p9xq3q/MMRkwXX0B1rVTdYY5jk1Jby2fa+eubc67Btw= Subject key identifier: 2D:05:C8:DA:97:49:27:9B:A5:76:23:FF:64:C4:C1:1E:CC:A3:D3:37 Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9 Certificate serial: 019B7A5AA6C4F5B4A570A5A24AF074393E7F Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13039 IP address blocks: 193.228.188.0/22 maxlen: 22 212.20.160.0/19 maxlen: 19 217.14.112.0/20 maxlen: 24 2001:40b8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:c4:f5:b4:a5:70:a5:a2:4a:f0:74:39:3e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d05c8da9749279ba57623ff64c4c11ecca3d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:ba:2d:07:1c:3f:10:2b:83:d3:4e:2a:08: bb:6c:84:83:78:f6:4f:de:c7:d7:6b:04:b4:70:dd: 34:fc:9c:98:81:8f:96:8e:c7:ba:aa:d2:6b:20:e2: 06:13:55:e5:d7:1c:d3:37:f0:69:b9:b9:46:fb:b7: 28:11:f1:cb:6c:dc:21:2f:67:5c:1c:9a:a9:5b:27: 8b:e7:6d:dc:3f:76:dd:d4:a7:30:4d:15:b7:45:84: ca:df:e4:ab:2b:ff:2b:53:5b:5e:ef:33:2f:57:c0: e8:5e:07:5c:7b:a2:cb:31:dc:e4:98:3f:12:64:02: 79:33:64:20:a8:c5:59:57:97:90:9a:ec:e2:9f:d5: 8d:b8:44:83:76:13:7f:43:79:e0:87:38:ea:1a:76: 73:3f:70:10:08:e8:bc:e8:74:93:af:f7:f5:f6:66: 15:a8:c1:1e:dc:74:68:b3:1b:52:19:1b:91:f1:90: 4f:4d:f4:ea:90:ee:cf:c0:10:e9:5d:e0:e2:a9:95: 82:dd:fb:06:b2:40:0a:ad:b6:4c:a1:e3:41:6f:d1: 80:79:9f:45:af:4b:ed:a8:f5:9f:1f:af:bc:b8:3c: e6:6b:f5:76:b7:a1:f7:8d:68:7b:ff:a2:6b:0b:29: fc:0c:57:15:09:b1:ed:9b:25:7d:30:3e:48:11:2d: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:05:C8:DA:97:49:27:9B:A5:76:23:FF:64:C4:C1:1E:CC:A3:D3:37 X509v3 Authority Key Identifier: keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.188.0/22 212.20.160.0/19 217.14.112.0/20 IPv6: 2001:40b8::/32 Signature Algorithm: sha256WithRSAEncryption 86:d3:71:90:63:c3:0e:35:8d:c3:74:81:76:54:cc:df:11:18: 2a:f3:45:2e:99:9f:80:ad:83:81:f5:47:78:c7:b7:7f:ac:7c: b2:56:53:ac:be:1f:40:ad:09:e8:c9:da:70:5b:83:5c:93:f4: 7d:b9:00:36:36:5b:20:e8:4b:c2:42:31:9c:b0:93:84:7b:86: f2:0f:25:1b:e4:da:e4:91:d6:43:ca:42:e5:41:01:c8:9e:0e: f5:de:c0:86:c1:62:fb:4e:6e:dd:4c:1c:3a:43:e2:38:30:7b: 66:77:47:61:44:76:f0:2c:7d:21:6e:60:0a:17:1f:d7:93:77: 9a:e1:b1:00:23:93:f7:83:95:62:82:51:9b:46:0c:ff:a4:0c: e4:bc:b4:17:d8:61:74:02:a2:15:de:e6:c2:78:32:c9:19:23: f2:f3:16:43:90:f4:03:22:b8:80:64:7e:37:a8:a4:9a:a5:a3: 87:27:c1:dc:33:4e:0b:b6:ba:3e:16:1b:28:52:82:3f:f0:27: 70:ab:80:11:0d:56:23:da:52:c0:be:f5:83:d2:86:7d:18:5b: 92:ff:d2:a9:0c:32:2f:22:c8:9c:26:0a:9d:87:38:79:18:4f: f9:27:46:23:09:e4:4a:40:3d:1f:98:ab:a4:f5:ff:16:7d:01: 63:4b:5d:f0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WqbE9bSlcKWiSvB0OT5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWRiZWJiYzEwNzBiOTllNGZiMzcyMTE3ZGYyNjIwMDM4 NjAzZTkwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDA1YzhkYTk3NDkyNzliYTU3NjIzZmY2NGM0YzExZWNjYTNkMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxi6LQccPxArg9NOKgi7bISDePZP 3sfXawS0cN00/JyYgY+Wjse6qtJrIOIGE1Xl1xzTN/BpublG+7coEfHLbNwhL2dc HJqpWyeL523cP3bd1KcwTRW3RYTK3+SrK/8rU1te7zMvV8DoXgdce6LLMdzkmD8S ZAJ5M2QgqMVZV5eQmuzin9WNuESDdhN/Q3nghzjqGnZzP3AQCOi86HSTr/f19mYV qMEe3HRosxtSGRuR8ZBPTfTqkO7PwBDpXeDiqZWC3fsGskAKrbZMoeNBb9GAeZ9F r0vtqPWfH6+8uDzma/V2t6H3jWh7/6JrCyn8DFcVCbHtmyV9MD5IES2cZQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFC0FyNqXSSebpXYj/2TEwR7Mo9M3MB8GA1UdIwQY MBaAFJVdvrvBBwuZ5Ps3IRffJiADhgPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYt MDIzMjAzOTQ3ZDlkLzEvTFFYSTJwZEpKNXVsZGlQX1pNVEJIc3lqMHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYtMDIzMjAzOTQ3ZDlk LzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCweS8AwQF 1BSgAwQE2Q5wMA0EAgACMAcDBQAgAUC4MA0GCSqGSIb3DQEBCwUAA4IBAQCG03GQ Y8MONY3DdIF2VMzfERgq80UumZ+ArYOB9Ud4x7d/rHyyVlOsvh9ArQnoydpwW4Nc k/R9uQA2Nlsg6EvCQjGcsJOEe4byDyUb5NrkkdZDykLlQQHIng713sCGwWL7Tm7d TBw6Q+I4MHtmd0dhRHbwLH0hbmAKFx/Xk3ea4bEAI5P3g5ViglGbRgz/pAzkvLQX 2GF0AqIV3ubCeDLJGSPy8xZDkPQDIriAZH43qKSapaOHJ8HcM04Ltro+FhsoUoI/ 8Cdwq4ARDVYj2lLAvvWD0oZ9GFuS/9KpDDIvIsicJgqdhzh5GE/5J0YjCeRKQD0f mKuk9f8WfQFjS13w -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:46 2026 by rpki-client