This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LQ_UIvfDgJ4bWRqpBkYtedt__s0.roa File: LQ_UIvfDgJ4bWRqpBkYtedt__s0.roa (raw, json) Hash identifier: 3p7xDB4HYyDUah8fRasyl1V8TZZX8wHpIxxT1mwg3dE= Subject key identifier: 2D:0F:D4:22:F7:C3:80:9E:1B:59:1A:A9:06:46:2D:79:DB:7F:FE:CD Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3610FF075C0BC672425B5C755FC758 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LQ_UIvfDgJ4bWRqpBkYtedt__s0.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61139 IP address blocks: 86.106.129.0/24 maxlen: 24 86.106.130.0/24 maxlen: 24 89.39.126.0/23 maxlen: 23 93.113.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:ff:07:5c:0b:c6:72:42:5b:5c:75:5f:c7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d0fd422f7c3809e1b591aa906462d79db7ffecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:f0:e0:b3:dd:29:83:c5:e9:ad:be:c8:36: fd:29:29:7b:55:79:61:ec:b6:39:53:3a:74:1b:96: 31:23:a8:54:41:59:05:99:27:c0:9f:76:99:37:15: 2f:a0:50:1e:69:b0:2e:55:b5:3f:7f:57:64:05:c7: 32:47:5b:d5:0f:6f:cf:0d:d4:45:c5:d3:ce:34:74: 21:5e:34:09:76:e4:00:ff:48:3a:e5:36:7f:a1:f9: 06:ef:17:6c:90:10:94:72:aa:8c:f9:ca:a6:62:5e: ed:56:94:36:72:2d:8a:60:c4:ac:a4:6b:0a:8d:75: ba:23:36:18:12:8d:04:35:a9:4a:4e:ec:05:a0:b6: cb:0f:33:2e:15:36:f4:fe:20:34:4f:c3:a7:c3:3e: a1:b9:02:3d:6a:dd:1e:c1:39:94:a9:71:be:1a:bc: 7e:71:38:62:eb:c5:01:fb:b5:21:c5:90:a0:e8:f1: 1a:51:00:ed:54:a1:83:12:4f:16:be:c7:ab:08:b4: 7c:b1:43:40:14:98:f8:46:2b:cc:bb:71:df:e3:ac: 8c:c0:39:6e:54:42:9a:48:21:f2:08:ac:f7:43:0e: 74:6b:a5:b2:72:89:2c:c7:3a:63:77:ea:06:7d:5d: f0:be:67:55:ed:a7:3d:06:e6:62:d7:f5:b1:b7:29: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:D4:22:F7:C3:80:9E:1B:59:1A:A9:06:46:2D:79:DB:7F:FE:CD X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LQ_UIvfDgJ4bWRqpBkYtedt__s0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.129.0-86.106.130.255 89.39.126.0/23 93.113.34.0/24 Signature Algorithm: sha256WithRSAEncryption 82:b4:8c:0b:10:72:cb:18:2c:2b:4d:01:57:33:0f:ce:c3:ce: 54:32:27:16:36:c6:2a:18:a5:43:8a:1d:0a:f6:04:a1:93:40: 54:74:74:cf:fd:6e:8e:d5:ab:7a:04:e7:55:98:6e:c1:7c:83: 3a:c0:e8:91:ad:77:9c:c0:b5:d6:45:e7:2e:1c:4e:99:02:b5: de:e4:c3:a9:91:ae:e2:87:80:df:3d:e9:8a:53:15:a2:a4:f8: fe:c0:c3:b0:a7:c8:89:26:ba:7a:a7:6f:03:82:c9:c3:db:35: 70:99:8a:b1:aa:ca:a8:a5:32:5b:03:2b:40:c4:dc:6e:4a:e4: 7b:76:5c:35:e3:a6:47:19:06:71:20:87:7b:83:38:9d:2d:bf: a5:0c:05:17:71:f1:00:ac:e2:b9:66:b7:08:04:93:a6:a0:cb: 58:01:a3:20:21:97:5b:a3:29:5c:09:c5:41:15:26:4c:8e:49: b0:0f:d6:28:f1:83:61:d1:d1:e2:48:4a:84:7e:5a:d0:6d:b6: e6:43:08:dd:97:80:89:c8:14:53:d6:33:9e:0c:38:d1:b4:6a: 7f:53:e2:43:ce:ed:b0:84:f3:a7:69:89:fb:e1:1d:cb:72:e7: f5:1d:ed:60:8d:c1:c9:92:07:10:08:4b:7a:8e:45:2f:47:f4: 23:fd:f3:80 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7NhD/B1wLxnJCW1x1X8dYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDBmZDQyMmY3YzM4MDllMWI1OTFhYTkwNjQ2MmQ3OWRiN2ZmZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaXw4LPdKYPF6a2+yDb9KSl7VXlh 7LY5Uzp0G5YxI6hUQVkFmSfAn3aZNxUvoFAeabAuVbU/f1dkBccyR1vVD2/PDdRF xdPONHQhXjQJduQA/0g65TZ/ofkG7xdskBCUcqqM+cqmYl7tVpQ2ci2KYMSspGsK jXW6IzYYEo0ENalKTuwFoLbLDzMuFTb0/iA0T8Onwz6huQI9at0ewTmUqXG+Grx+ cThi68UB+7UhxZCg6PEaUQDtVKGDEk8WvserCLR8sUNAFJj4RivMu3Hf46yMwDlu VEKaSCHyCKz3Qw50a6Wycoksxzpjd+oGfV3wvmdV7ac9BuZi1/Wxtym2ewIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFC0P1CL3w4CeG1kaqQZGLXnbf/7NMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvTFFfVUl2ZkRnSjRiV1JxcEJrWXRlZHRfX3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABWaoED BABWaoIDBAFZJ34DBABdcSIwDQYJKoZIhvcNAQELBQADggEBAIK0jAsQcssYLCtN AVczD87DzlQyJxY2xioYpUOKHQr2BKGTQFR0dM/9bo7Vq3oE51WYbsF8gzrA6JGt d5zAtdZF5y4cTpkCtd7kw6mRruKHgN896YpTFaKk+P7Aw7CnyIkmunqnbwOCycPb NXCZirGqyqilMlsDK0DE3G5K5Ht2XDXjpkcZBnEgh3uDOJ0tv6UMBRdx8QCs4rlm twgEk6agy1gBoyAhl1ujKVwJxUEVJkyOSbAP1ijxg2HR0eJISoR+WtBttuZDCN2X gInIFFPWM54MONG0an9T4kPO7bCE86dpifvhHcty5/Ud7WCNwcmSBxAIS3qORS9H 9CP984A= -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:42 2026 by rpki-client