This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa File: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (raw, json) Hash identifier: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10= Subject key identifier: 96:0F:B1:69:0F:F9:90:C5:D1:81:47:B5:71:F4:EA:B8:BF:AC:C4:49 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B797EE360BE035FD0F400A196E46BE62B Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206037 IP address blocks: 185.14.176.0/24 maxlen: 24 185.14.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e3:60:be:03:5f:d0:f4:00:a1:96:e4:6b:e6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=960fb1690ff990c5d18147b571f4eab8bfacc449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:70:6d:60:6a:9f:61:fc:0f:8d:c9:30:8d:96: da:17:67:e2:1d:f4:b3:0f:82:65:96:bb:58:cc:d9: 50:76:54:13:b3:38:6d:5e:bf:1b:0c:c8:69:23:ce: d6:d4:60:54:8e:71:38:c1:74:8d:fa:1b:ae:f1:53: c9:4b:ca:71:3c:d5:23:7e:3d:99:44:9d:10:37:76: 4e:29:35:ea:3f:f1:3a:aa:25:e5:b2:a0:f1:50:c0: 0e:76:d3:b0:dd:28:5f:06:e1:dd:0b:a6:81:5e:ab: 04:34:35:6d:0c:de:54:d9:98:d0:73:09:4f:b1:5a: 97:20:58:7a:0d:38:70:bb:68:23:3f:86:9a:8c:d0: 38:58:8a:be:09:d7:0c:5c:5a:92:92:5f:95:de:c8: dc:78:34:9a:93:f0:40:93:fe:11:d3:47:9b:3f:a3: 9c:1d:1d:df:c8:67:9c:88:93:4f:85:08:de:97:58: 2f:82:8d:fd:19:46:94:33:98:c0:96:c4:34:f8:13: f6:f5:46:62:eb:88:bf:0c:fd:ee:81:81:5d:59:5e: 21:f5:11:96:63:8f:c1:71:bb:11:ee:ce:d7:68:97: b6:ec:40:93:ef:e5:9d:a5:04:54:ac:6d:e8:eb:87: 7b:90:4f:e1:7a:3c:79:13:86:a1:06:0b:86:08:58: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:B1:69:0F:F9:90:C5:D1:81:47:B5:71:F4:EA:B8:BF:AC:C4:49 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.176.0/24 185.14.178.0/24 Signature Algorithm: sha256WithRSAEncryption 02:80:73:fe:e5:9a:dc:bd:7a:fc:2e:d6:91:76:4a:9b:94:13: 04:d9:c9:61:e1:3e:6a:c2:5a:7f:67:9a:f0:6a:7b:63:fe:cf: 03:05:de:d2:76:ae:06:b5:02:9f:6f:ed:6c:1c:7b:b1:a1:f3: 38:c5:f0:92:b6:74:8f:6a:0d:98:d1:f9:6f:8d:bb:8d:85:11: e0:9d:1b:43:16:81:f1:17:e8:50:7b:d6:c6:da:0a:e7:70:99: 2d:e1:24:dc:2d:e4:52:af:82:f8:f0:32:39:1a:a4:f2:14:1c: d6:5b:4d:87:e7:3a:9a:c5:58:e3:1c:6c:a9:b8:3e:d8:67:91: 65:52:61:e0:42:7c:92:24:8d:f2:ad:f3:f0:be:51:23:8b:61: eb:1a:03:25:50:28:52:4c:04:42:4f:af:a9:31:2e:89:b1:c9: 4e:bb:a8:02:e5:60:01:0b:7d:ba:30:ea:03:6f:8b:a4:9b:a8: 14:0e:27:d1:d2:e3:4f:04:5d:de:a7:cb:2d:83:d1:c8:20:b1: 09:3b:c8:ac:3e:37:c1:c1:13:a9:da:fc:77:b4:7c:52:73:7a: a0:46:94:e8:1d:51:2b:9e:bf:5a:90:fa:5a:f5:1c:3e:91:5d: b3:31:28:d5:fd:30:a9:f3:c7:59:e4:3f:47:24:5f:54:aa:d5: ac:1c:6a:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fuNgvgNf0PQAoZbka+YrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjBmYjE2OTBmZjk5MGM1ZDE4MTQ3YjU3MWY0ZWFiOGJmYWNjNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33BtYGqfYfwPjckwjZbaF2fiHfSz D4JllrtYzNlQdlQTszhtXr8bDMhpI87W1GBUjnE4wXSN+huu8VPJS8pxPNUjfj2Z RJ0QN3ZOKTXqP/E6qiXlsqDxUMAOdtOw3ShfBuHdC6aBXqsENDVtDN5U2ZjQcwlP sVqXIFh6DThwu2gjP4aajNA4WIq+CdcMXFqSkl+V3sjceDSak/BAk/4R00ebP6Oc HR3fyGeciJNPhQjel1gvgo39GUaUM5jAlsQ0+BP29UZi64i/DP3ugYFdWV4h9RGW Y4/BcbsR7s7XaJe27ECT7+WdpQRUrG3o64d7kE/hejx5E4ahBguGCFjCWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJYPsWkP+ZDF0YFHtXH06ri/rMRJMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvbGcteGFRXzVrTVhSZ1VlMWNmVHF1TC1zeEVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQ6wAwQA uQ6yMA0GCSqGSIb3DQEBCwUAA4IBAQACgHP+5ZrcvXr8LtaRdkqblBME2clh4T5q wlp/Z5rwantj/s8DBd7Sdq4GtQKfb+1sHHuxofM4xfCStnSPag2Y0flvjbuNhRHg nRtDFoHxF+hQe9bG2grncJkt4STcLeRSr4L48DI5GqTyFBzWW02H5zqaxVjjHGyp uD7YZ5FlUmHgQnySJI3yrfPwvlEji2HrGgMlUChSTARCT6+pMS6JsclOu6gC5WAB C326MOoDb4ukm6gUDifR0uNPBF3ep8stg9HIILEJO8isPjfBwROp2vx3tHxSc3qg RpToHVErnr9akPpa9Rw+kV2zMSjV/TCp88dZ5D9HJF9UqtWsHGpX -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:01 2026 by rpki-client