This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LyQgtb_Ki_9IcReflQrXZlIi_LE.roa File: LyQgtb_Ki_9IcReflQrXZlIi_LE.roa (raw, json) Hash identifier: wEBNcK9m6fAMCsF1cciJs2Ztf39eIV2ORarhcUDfhdI= Subject key identifier: 2F:24:20:B5:BF:CA:8B:FF:48:71:17:9F:95:0A:D7:66:52:22:FC:B1 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBDFBD970BDE30A43FD18389D2E15 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LyQgtb_Ki_9IcReflQrXZlIi_LE.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58057 IP address blocks: 45.131.186.0/24 maxlen: 24 45.136.136.0/22 maxlen: 24 45.136.136.0/24 maxlen: 24 45.136.137.0/24 maxlen: 24 45.136.139.0/24 maxlen: 24 185.102.84.0/24 maxlen: 24 193.33.94.0/23 maxlen: 24 193.163.86.0/24 maxlen: 24 194.50.92.0/24 maxlen: 24 2a04:ccc0:ffff::/48 maxlen: 48 2a04:ccc1::/32 maxlen: 48 2a04:ccc3::/32 maxlen: 48 2a04:ccc4::/32 maxlen: 48 2a04:ccc5::/32 maxlen: 48 2a04:ccc6::/32 maxlen: 48 2a04:ccc7::/32 maxlen: 48 2a09:4c0::/29 maxlen: 64 2a0c:3b80::/32 maxlen: 48 2a0c:3b81::/32 maxlen: 48 2a0c:3b82::/32 maxlen: 48 2a0c:3b83::/32 maxlen: 48 2a0c:3b84::/32 maxlen: 48 2a0c:3b85::/32 maxlen: 48 2a0c:3b86::/32 maxlen: 48 2a0e:97c0:1d0::/44 maxlen: 44 2a0e:97c0:260::/44 maxlen: 44 2a0e:97c1:200::/40 maxlen: 48 2a0e:97c3:110::/44 maxlen: 48 2a0e:97c4:120::/44 maxlen: 48 2a0e:b107:9f2::/48 maxlen: 48 2a0e:b107:1165::/48 maxlen: 48 2a0e:b107:1786::/48 maxlen: 48 2a0e:b107:21c0::/45 maxlen: 48 2a0e:b107:2220::/45 maxlen: 48 2a0e:b107:2228::/45 maxlen: 48 2a0f:e404:102::/48 maxlen: 48 2a10:2f00:18d::/48 maxlen: 48 2a10:2f00:18f::/48 maxlen: 48 2a10:2f00:193::/48 maxlen: 48 2a10:cc40:250::/44 maxlen: 48 2a10:cc45:130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bd:fb:d9:70:bd:e3:0a:43:fd:18:38:9d:2e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f2420b5bfca8bff4871179f950ad7665222fcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:f3:a6:2f:18:32:56:bb:be:a7:28:71:01: b6:44:38:38:55:84:ad:f0:7a:22:81:af:9d:96:76: 10:d6:0b:e7:0b:c3:7c:37:58:e9:c1:1f:19:45:cc: 7f:01:55:10:33:5b:91:76:2d:35:8e:a0:a1:a6:ca: 42:18:1b:ee:9d:69:b7:e6:1a:0f:93:ce:03:63:9a: e4:9c:6d:2c:d1:64:0b:ac:5e:00:47:de:9d:7b:da: 15:8d:0c:fa:d1:e9:22:07:8f:b5:37:54:9e:96:89: f4:3e:96:e3:b1:4a:c7:22:e5:50:d3:81:63:26:b6: 79:32:67:af:7f:5b:8f:a0:11:db:34:bc:be:19:fa: d6:98:d1:56:5a:f6:88:f9:22:3e:4d:c5:b6:91:b9: bd:b2:9c:17:e8:2d:66:27:70:65:36:66:57:fc:c5: 2a:6a:9a:ef:90:4c:1d:8c:45:98:0d:79:7b:4a:9f: 30:a2:c1:f3:b4:40:5b:12:9d:4d:12:25:7f:97:9f: 95:64:cc:3c:94:1b:9b:13:13:d4:6f:33:a1:94:5d: 10:9a:f0:d7:40:06:a1:e2:7b:45:b3:fe:57:90:bc: 6f:14:ae:25:dd:46:f3:87:8a:66:9b:21:b9:b1:71: b5:ce:13:60:44:6b:32:e0:33:db:55:bc:f1:8b:20: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:24:20:B5:BF:CA:8B:FF:48:71:17:9F:95:0A:D7:66:52:22:FC:B1 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LyQgtb_Ki_9IcReflQrXZlIi_LE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.186.0/24 45.136.136.0/22 185.102.84.0/24 193.33.94.0/23 193.163.86.0/24 194.50.92.0/24 IPv6: 2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff 2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff 2a09:4c0::/29 2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:97c0:1d0::/44 2a0e:97c0:260::/44 2a0e:97c1:200::/40 2a0e:97c3:110::/44 2a0e:97c4:120::/44 2a0e:b107:9f2::/48 2a0e:b107:1165::/48 2a0e:b107:1786::/48 2a0e:b107:21c0::/45 2a0e:b107:2220::/44 2a0f:e404:102::/48 2a10:2f00:18d::/48 2a10:2f00:18f::/48 2a10:2f00:193::/48 2a10:cc40:250::/44 2a10:cc45:130::/44 Signature Algorithm: sha256WithRSAEncryption 2f:83:d1:c5:51:af:4e:c3:ba:34:ec:54:dc:bf:60:d6:f4:7b: 6c:fe:03:5f:5c:66:c7:e9:ee:72:35:b1:30:76:bc:6b:31:ae: f0:39:b7:85:5e:6c:be:6a:44:bc:ea:55:e2:64:fc:b6:e8:44: f3:83:00:43:7f:a0:cb:f5:e2:f2:71:98:bb:d0:74:a7:c1:2e: 35:31:29:f3:75:13:60:4f:0d:43:43:bf:2f:ff:0c:ac:a2:37: a8:74:3c:be:36:57:84:ed:b9:ca:2a:89:48:0c:a4:ec:ef:32: 67:51:5d:f5:a7:f8:2c:0b:4f:15:5b:46:94:6c:37:a3:a4:b1: 95:4f:b1:1d:b8:e6:b9:9d:80:c4:e5:0b:a6:e8:04:58:17:8b: be:63:04:88:cc:57:6d:9b:c7:e0:6c:74:17:2f:b0:f6:ba:24: 18:a5:b2:09:88:33:f9:36:4f:b9:37:d2:ea:4f:c9:90:a2:bc: 6f:fd:43:ed:e1:34:b1:eb:23:ab:8d:bf:99:d3:19:50:f1:8e: 2c:29:ca:66:42:6e:7a:ca:b3:fe:27:99:1f:64:87:1a:96:82: 7d:07:49:1a:f8:df:9e:50:f8:1f:3f:d2:6f:4d:ab:0e:ef:4f: 15:74:6b:26:0f:8f:90:70:55:46:2b:45:75:55:4f:2c:2c:8e: b1:04:08:14 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZt9XL372XC94wpD/Rg4nS4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjI0MjBiNWJmY2E4YmZmNDg3MTE3OWY5NTBhZDc2NjUyMjJmY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTzpi8YMla7vqcocQG2RDg4VYSt 8Hoiga+dlnYQ1gvnC8N8N1jpwR8ZRcx/AVUQM1uRdi01jqChpspCGBvunWm35hoP k84DY5rknG0s0WQLrF4AR96de9oVjQz60ekiB4+1N1Selon0PpbjsUrHIuVQ04Fj JrZ5Mmevf1uPoBHbNLy+GfrWmNFWWvaI+SI+TcW2kbm9spwX6C1mJ3BlNmZX/MUq aprvkEwdjEWYDXl7Sp8wosHztEBbEp1NEiV/l5+VZMw8lBubExPUbzOhlF0QmvDX QAah4ntFs/5XkLxvFK4l3Ubzh4pmmyG5sXG1zhNgRGsy4DPbVbzxiyClyQIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFC8kILW/yov/SHEXn5UK12ZSIvyxMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTHlRZ3RiX0tpXzlJY1JlZmxRclhabElpX0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MCoEAgABMCQDBAAt g7oDBAItiIgDBAC5ZlQDBAHBIV4DBADBo1YDBADCMlwwgc8EAgACMIHIMBADBwAq BMzA//8DBQEqBMzAMA4DBQAqBMzDAwUDKgTMwAMFAyoJBMAwDgMFByoMO4ADBQAq DDuGAwcEKg6XwAHQAwcEKg6XwAJgAwYAKg6XwQIDBwQqDpfDARADBwQqDpfEASAD BwAqDrEHCfIDBwAqDrEHEWUDBwAqDrEHF4YDBwMqDrEHIcADBwQqDrEHIiADBwAq D+QEAQIDBwAqEC8AAY0DBwAqEC8AAY8DBwAqEC8AAZMDBwQqEMxAAlADBwQqEMxF ATAwDQYJKoZIhvcNAQELBQADggEBAC+D0cVRr07DujTsVNy/YNb0e2z+A19cZsfp 7nI1sTB2vGsxrvA5t4VebL5qRLzqVeJk/LboRPODAEN/oMv14vJxmLvQdKfBLjUx KfN1E2BPDUNDvy//DKyiN6h0PL42V4TtucoqiUgMpOzvMmdRXfWn+CwLTxVbRpRs N6OksZVPsR245rmdgMTlC6boBFgXi75jBIjMV22bx+BsdBcvsPa6JBilsgmIM/k2 T7k30upPyZCivG/9Q+3hNLHrI6uNv5nTGVDxjiwpymZCbnrKs/4nmR9khxqWgn0H SRr4355Q+B8/0m9Nqw7vTxV0ayYPj5BwVUYrRXVVTywsjrEECBQ= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:48 2026 by rpki-client