This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/lqG4TiS1VcHtRo5hXtYqEofYXQY.roa File: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (raw, json) Hash identifier: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw= Subject key identifier: 96:A1:B8:4E:24:B5:55:C1:ED:46:8E:61:5E:D6:2A:12:87:D8:5D:06 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6E4E588A7FABADF7AA488FBE2CEA Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/lqG4TiS1VcHtRo5hXtYqEofYXQY.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211454 IP address blocks: 185.215.7.0/24 maxlen: 24 2a0a:d6c0:2157::/48 maxlen: 48 2a0a:d6c0:eff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6e:4e:58:8a:7f:ab:ad:f7:aa:48:8f:be:2c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96a1b84e24b555c1ed468e615ed62a1287d85d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:66:21:f3:68:ba:4c:d5:31:cc:3b:ce:38: a8:67:a7:eb:6d:e9:58:bc:60:ae:8d:d3:14:1b:40: 48:e2:69:68:07:b9:e4:be:96:6c:3d:c9:58:78:4d: 16:1b:85:d5:27:71:a3:fa:8f:c3:59:9d:19:5a:89: bc:86:a0:4c:7f:c3:57:3b:6c:0e:f9:ec:a6:fa:9a: 85:86:97:16:78:49:99:2d:da:9d:21:c4:ff:d5:0d: 6e:2c:07:d1:de:e0:f3:eb:c5:ac:22:32:c4:8e:54: 9f:b3:96:97:ff:40:99:07:82:1f:23:de:3f:73:d1: ed:b3:d0:2d:38:72:21:73:18:a3:13:5a:0c:90:2f: 6c:12:ae:39:84:33:9e:24:7e:3d:4c:a0:9d:31:16: a3:8c:d4:43:7a:0d:3c:b3:20:c2:3d:a0:7c:e8:2d: 68:16:97:16:73:47:21:f1:59:82:31:03:ff:84:60: f3:a7:1b:ee:92:3c:5b:b5:96:ac:94:60:f6:d4:bd: 9a:0e:d2:c1:4e:35:c6:5f:fc:39:dd:d8:10:d5:fe: e9:2f:48:e9:7a:64:02:12:f5:60:37:15:e0:01:fd: 3b:a6:aa:d1:85:97:f4:5a:1d:88:21:9f:dc:2c:e0: e9:4e:42:e9:aa:e6:fc:b8:44:1b:4e:f3:8f:82:8f: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:B8:4E:24:B5:55:C1:ED:46:8E:61:5E:D6:2A:12:87:D8:5D:06 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/lqG4TiS1VcHtRo5hXtYqEofYXQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.7.0/24 IPv6: 2a0a:d6c0:2157::/48 2a0a:d6c0:eff4::/48 Signature Algorithm: sha256WithRSAEncryption 72:de:8d:e1:60:77:17:73:b3:f4:12:6e:41:52:f1:fc:de:d8: 5f:42:a6:2f:c4:53:f2:a1:28:0f:c1:fb:bd:82:83:ec:b0:e2: cc:29:b1:ae:59:35:07:b8:25:64:0f:cf:1e:bb:fc:46:60:71: db:6f:2a:0b:90:36:e1:ae:82:03:29:fc:02:b9:73:22:da:09: 43:17:92:42:2a:1b:c0:ef:09:47:97:3e:a5:79:24:c1:0f:06: 06:59:cd:d8:54:71:0e:d9:e3:13:30:5d:6b:53:85:ea:88:67: a6:95:66:fa:b4:d4:85:0d:f7:9a:27:3d:1a:26:08:3d:71:73: 7a:ae:59:56:50:03:5e:f5:d0:5a:1e:49:6a:d2:19:2f:41:a3: 7e:d4:71:5c:80:bc:ed:cc:39:b0:da:8a:21:b4:85:4c:46:92: a4:28:0d:65:ba:19:19:d0:9e:6c:e5:f4:2f:b0:8e:75:1e:ed: a0:d7:4a:80:42:9e:70:21:57:aa:b6:0f:34:14:e4:ea:19:c5: ae:5d:21:c5:64:2d:6e:ee:bd:86:a0:18:78:6e:29:f9:34:6a: d5:aa:dc:20:30:43:56:69:c0:0e:79:e4:13:74:61:6a:c9:7a: 95:78:c0:04:23:c6:a6:7e:5c:c3:d1:82:a8:84:f2:a6:00:27: 65:58:25:92 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9W25OWIp/q633qkiPvizqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmExYjg0ZTI0YjU1NWMxZWQ0NjhlNjE1ZWQ2MmExMjg3ZDg1ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVRmIfNoukzVMcw7zjioZ6frbelY vGCujdMUG0BI4mloB7nkvpZsPclYeE0WG4XVJ3Gj+o/DWZ0ZWom8hqBMf8NXO2wO +eym+pqFhpcWeEmZLdqdIcT/1Q1uLAfR3uDz68WsIjLEjlSfs5aX/0CZB4IfI94/ c9Hts9AtOHIhcxijE1oMkC9sEq45hDOeJH49TKCdMRajjNRDeg08syDCPaB86C1o FpcWc0ch8VmCMQP/hGDzpxvukjxbtZaslGD21L2aDtLBTjXGX/w53dgQ1f7pL0jp emQCEvVgNxXgAf07pqrRhZf0Wh2IIZ/cLODpTkLpqub8uEQbTvOPgo9ztwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJahuE4ktVXB7UaOYV7WKhKH2F0GMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvbHFHNFRpUzFWY0h0Um81aFh0WXFFb2ZZWFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAudcHMBgE AgACMBIDBwAqCtbAIVcDBwAqCtbA7/QwDQYJKoZIhvcNAQELBQADggEBAHLejeFg dxdzs/QSbkFS8fze2F9Cpi/EU/KhKA/B+72Cg+yw4swpsa5ZNQe4JWQPzx67/EZg cdtvKguQNuGuggMp/AK5cyLaCUMXkkIqG8DvCUeXPqV5JMEPBgZZzdhUcQ7Z4xMw XWtTheqIZ6aVZvq01IUN95onPRomCD1xc3quWVZQA1710FoeSWrSGS9Bo37UcVyA vO3MObDaiiG0hUxGkqQoDWW6GRnQnmzl9C+wjnUe7aDXSoBCnnAhV6q2DzQU5OoZ xa5dIcVkLW7uvYagGHhuKfk0atWq3CAwQ1ZpwA555BN0YWrJepV4wAQjxqZ+XMPR gqiE8qYAJ2VYJZI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:59 2026 by rpki-client