This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/lsqyIsBpeXNcnzeA__pb_tIJpCw.roa File: lsqyIsBpeXNcnzeA__pb_tIJpCw.roa (raw, json) Hash identifier: HoC4xWQnoAYB+cqd8waKYlqr45hX2BtPdIJZjs3Wcow= Subject key identifier: 96:CA:B2:22:C0:69:79:73:5C:9F:37:80:FF:FA:5B:FE:D2:09:A4:2C Certificate issuer: /CN=e95bf5882167d152885b46a46c36096ec72c10e8 Certificate serial: 019B7C7F8F878B59765171CED185BCDE4089 Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/lsqyIsBpeXNcnzeA__pb_tIJpCw.roa Signing time: Fri 02 Jan 2026 02:18:13 +0000 ROA not before: Fri 02 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210512 IP address blocks: 45.139.179.0/24 maxlen: 24 195.80.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8f:87:8b:59:76:51:71:ce:d1:85:bc:de:40:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8 Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96cab222c06979735c9f3780fffa5bfed209a42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:25:d9:ce:c8:50:38:b8:16:90:f9:e7:ed: 47:4b:ea:b2:75:8c:f7:5d:56:ee:d4:11:56:a2:53: 88:5d:44:91:27:51:6b:18:25:e5:2c:d4:d8:ca:89: ed:87:94:67:15:6d:5f:b3:b6:a3:7d:e8:ff:9a:97: e4:5d:c8:ec:98:ff:a4:81:86:cf:ab:df:79:bf:cf: e0:e6:ed:95:73:b3:f1:d9:ed:6f:fa:75:a5:a6:32: c1:54:af:02:5c:61:8e:a2:4a:ce:bf:08:8f:9e:f8: d3:0e:0a:ee:f3:ec:c6:f3:48:d3:02:04:f2:51:d2: 4f:32:00:09:71:c3:98:80:3c:09:cb:19:b3:6f:7a: 6f:36:6d:95:39:97:69:0e:c6:77:00:e5:b5:c7:08: 2d:3e:43:ad:9b:91:a6:d7:50:e6:3b:38:c4:56:6b: 9d:91:96:0b:82:8a:e9:b0:f2:dd:fa:55:80:19:9d: ee:da:a3:b7:03:b2:00:69:00:05:99:a4:6d:e8:1a: 7f:b4:a5:43:70:49:6f:8a:c8:b1:4e:93:a6:20:c8: 39:d4:23:2c:c2:d7:9b:d8:46:92:33:67:b3:c9:a7: 9a:b0:6d:39:45:59:f8:58:33:bf:e3:9c:c2:ae:ca: 86:41:bb:54:42:85:79:d5:dc:c9:d0:76:35:7e:a2: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:B2:22:C0:69:79:73:5C:9F:37:80:FF:FA:5B:FE:D2:09:A4:2C X509v3 Authority Key Identifier: keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/lsqyIsBpeXNcnzeA__pb_tIJpCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.179.0/24 195.80.138.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:42:d1:98:9d:f4:fc:df:78:70:de:cb:1f:d2:06:e9:86:a2: 60:17:f6:b4:b4:0e:24:e1:77:dd:a9:6a:cd:ca:d6:c2:0e:98: b0:21:04:8e:7a:14:31:54:34:c0:09:15:c8:86:05:a0:58:81: 69:56:2c:62:8e:ea:55:b6:bb:68:cf:93:0f:cd:30:84:5e:7a: 88:8a:8b:e8:f0:4a:f9:41:bc:14:19:9f:9d:eb:f0:51:e4:bf: 08:bb:9e:44:e8:c0:05:5a:16:40:a9:14:b1:ee:74:1c:bd:29: 68:df:a6:17:12:3b:6b:ce:96:64:2d:f1:c2:1b:58:b6:48:5e: 9b:16:8a:92:8b:19:a5:21:ff:1f:75:7b:25:22:a3:7a:5d:d5: 9b:78:7c:f2:a4:ab:8c:6f:dc:c1:e6:18:ce:e4:41:c2:64:2f: 17:a4:83:70:44:ed:0f:6b:52:0a:b1:33:dc:2f:3c:77:c5:cb: cc:59:46:98:02:b6:f9:71:22:a0:d1:ce:ed:51:b2:38:93:34: 03:4b:9c:16:b1:34:a5:0b:ba:b5:69:ae:d1:16:0f:62:7f:f0: ad:02:70:49:06:d8:3c:f0:b7:36:59:d2:a5:c1:41:e4:62:5d: 4c:c3:a7:45:98:a9:b7:45:9e:58:c9:8a:46:72:9f:70:d7:f7: fe:dc:3d:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f4+Hi1l2UXHO0YW83kCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NWJmNTg4MjE2N2QxNTI4ODViNDZhNDZjMzYwOTZlYzcy YzEwZTgwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmNhYjIyMmMwNjk3OTczNWM5ZjM3ODBmZmZhNWJmZWQyMDlhNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv8l2c7IUDi4FpD55+1HS+qydYz3 XVbu1BFWolOIXUSRJ1FrGCXlLNTYyonth5RnFW1fs7ajfej/mpfkXcjsmP+kgYbP q995v8/g5u2Vc7Px2e1v+nWlpjLBVK8CXGGOokrOvwiPnvjTDgru8+zG80jTAgTy UdJPMgAJccOYgDwJyxmzb3pvNm2VOZdpDsZ3AOW1xwgtPkOtm5Gm11DmOzjEVmud kZYLgorpsPLd+lWAGZ3u2qO3A7IAaQAFmaRt6Bp/tKVDcElvisixTpOmIMg51CMs wteb2EaSM2ezyaeasG05RVn4WDO/45zCrsqGQbtUQoV51dzJ0HY1fqJSuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJbKsiLAaXlzXJ83gP/6W/7SCaQsMB8GA1UdIwQY MBaAFOlb9YghZ9FSiFtGpGw2CW7HLBDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80OTRmYzUtODM3MC00MzEzLWE3NzUt NGM3YzZlZTFkNjQ1LzEvbHNxeUlzQnBlWE5jbnplQV9fcGJfdElKcEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80OTRmYzUtODM3MC00MzEzLWE3NzUtNGM3YzZlZTFkNjQ1 LzEvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYuzAwQA w1CKMA0GCSqGSIb3DQEBCwUAA4IBAQAeQtGYnfT833hw3ssf0gbphqJgF/a0tA4k 4XfdqWrNytbCDpiwIQSOehQxVDTACRXIhgWgWIFpVixijupVtrtoz5MPzTCEXnqI iovo8Er5QbwUGZ+d6/BR5L8Iu55E6MAFWhZAqRSx7nQcvSlo36YXEjtrzpZkLfHC G1i2SF6bFoqSixmlIf8fdXslIqN6XdWbeHzypKuMb9zB5hjO5EHCZC8XpINwRO0P a1IKsTPcLzx3xcvMWUaYArb5cSKg0c7tUbI4kzQDS5wWsTSlC7q1aa7RFg9if/Ct AnBJBtg88Lc2WdKlwUHkYl1Mw6dFmKm3RZ5YyYpGcp9w1/f+3D2T -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:39 2026 by rpki-client