This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa File: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (raw, json) Hash identifier: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk= Subject key identifier: 2F:14:90:3F:48:39:89:3D:A0:B1:F1:E0:12:6F:AD:B3:E5:83:24:5F Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Certificate serial: 019B7DCA21A69E62AD06A45B4EE2D2D3382E Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 31.13.185.0/24 maxlen: 24 31.13.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:21:a6:9e:62:ad:06:a4:5b:4e:e2:d2:d3:38:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f14903f4839893da0b1f1e0126fadb3e583245f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:ce:e9:7e:4a:b3:f6:4c:8c:30:5a:83:80: 50:74:f2:37:41:a0:a0:22:da:b8:83:1c:01:f3:97: 18:f1:8f:22:e3:84:aa:52:d9:5f:63:e0:69:09:c0: 73:23:5f:7d:dd:87:c3:e5:1b:08:c8:91:0a:d1:85: 2c:a2:33:88:77:0a:16:c6:84:4f:a8:6a:a1:52:3c: 63:21:8d:5c:89:e1:78:38:6f:1c:ad:74:2c:30:07: 94:52:0e:c0:88:f0:83:2d:e0:8d:41:ea:bd:da:76: e4:98:bd:a0:ab:e7:3d:a0:31:c6:5b:50:b2:9c:aa: 7e:b9:3b:a6:40:b9:c8:05:15:a8:85:24:94:57:1b: 21:dd:1d:a8:d1:1a:b8:4b:ae:0c:9b:56:5b:9f:0f: c4:34:8e:32:94:ec:42:86:b6:e9:e4:c7:5f:79:f7: 00:46:6b:b7:61:9b:bc:f1:0d:04:2b:bb:d9:c0:fa: fc:f4:6e:08:4b:c4:01:87:77:7d:86:2b:03:e6:ca: a4:33:ba:af:c8:77:cd:4e:7e:32:f0:d0:13:28:33: 3a:9f:1a:10:de:bf:dc:f5:12:49:63:ed:fb:7a:2e: 49:b1:05:90:f8:f3:6e:d6:a4:07:42:91:a7:67:43: ad:f8:69:17:9c:4c:ad:12:05:44:3b:d0:73:c1:73: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:90:3F:48:39:89:3D:A0:B1:F1:E0:12:6F:AD:B3:E5:83:24:5F X509v3 Authority Key Identifier: keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.185.0/24 31.13.187.0/24 Signature Algorithm: sha256WithRSAEncryption a1:2a:b5:be:f4:27:86:c2:89:92:d2:11:07:66:40:35:5c:3a: 53:28:68:2f:12:06:42:a6:7d:3a:77:ad:98:88:ad:28:a6:83: b3:37:3f:1d:14:c0:30:54:9f:a0:5c:bf:30:b0:b2:44:56:c6: 85:e7:94:09:b3:a8:05:4b:f5:c0:68:2c:c8:4e:69:88:8a:51: 03:33:d3:23:27:d8:d9:c9:eb:b0:ab:e8:9d:54:a9:dd:12:62: 25:54:5d:e8:07:71:cd:95:08:90:63:05:5e:0f:3e:b7:1c:3b: 61:96:eb:2c:e2:3c:76:31:57:bf:46:f6:17:47:f4:78:38:05: e3:cc:d0:a4:ea:5b:c4:43:3c:c8:6f:93:d5:97:60:7c:39:5f: 89:ea:a8:43:72:99:a1:53:d1:0b:6e:92:b8:b3:c9:6e:3d:6e: 18:04:72:bd:e3:a3:fb:b2:50:f0:52:c5:08:6f:93:bf:d0:05: 42:84:00:3f:b8:66:94:d4:0b:26:44:ab:a1:3c:82:27:11:48: 6e:9d:14:7c:f2:41:80:d6:3f:f5:5b:64:35:95:f3:09:95:c7: 24:77:ec:61:c8:78:65:51:43:90:ed:8c:71:df:5b:e5:b3:69: 7a:9d:9e:2b:3f:e0:fe:f0:67:1d:53:26:c1:fb:30:13:c5:9b: c3:91:e0:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yiGmnmKtBqRbTuLS0zguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3 OWFkNzcwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjE0OTAzZjQ4Mzk4OTNkYTBiMWYxZTAxMjZmYWRiM2U1ODMyNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogPO6X5Ks/ZMjDBag4BQdPI3QaCg Itq4gxwB85cY8Y8i44SqUtlfY+BpCcBzI1993YfD5RsIyJEK0YUsojOIdwoWxoRP qGqhUjxjIY1cieF4OG8crXQsMAeUUg7AiPCDLeCNQeq92nbkmL2gq+c9oDHGW1Cy nKp+uTumQLnIBRWohSSUVxsh3R2o0Rq4S64Mm1Zbnw/ENI4ylOxChrbp5MdfefcA Rmu3YZu88Q0EK7vZwPr89G4IS8QBh3d9hisD5sqkM7qvyHfNTn4y8NATKDM6nxoQ 3r/c9RJJY+37ei5JsQWQ+PNu1qQHQpGnZ0Ot+GkXnEytEgVEO9BzwXNg5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC8UkD9IOYk9oLHx4BJvrbPlgyRfMB8GA1UdIwQY MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt M2UxMGQxYWI3NDA4LzEvTHhTUVAwZzVpVDJnc2ZIZ0VtLXRzLVdESkY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4 LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw25AwQA Hw27MA0GCSqGSIb3DQEBCwUAA4IBAQChKrW+9CeGwomS0hEHZkA1XDpTKGgvEgZC pn06d62YiK0opoOzNz8dFMAwVJ+gXL8wsLJEVsaF55QJs6gFS/XAaCzITmmIilED M9MjJ9jZyeuwq+idVKndEmIlVF3oB3HNlQiQYwVeDz63HDthluss4jx2MVe/RvYX R/R4OAXjzNCk6lvEQzzIb5PVl2B8OV+J6qhDcpmhU9ELbpK4s8luPW4YBHK946P7 slDwUsUIb5O/0AVChAA/uGaU1AsmRKuhPIInEUhunRR88kGA1j/1W2Q1lfMJlcck d+xhyHhlUUOQ7Yxx31vls2l6nZ4rP+D+8GcdUybB+zATxZvDkeAk -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:19 2026 by rpki-client