This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/lqa3yfi-IJTce6zbolyaur2GC34.roa File: lqa3yfi-IJTce6zbolyaur2GC34.roa (raw, json) Hash identifier: euw2FgarLlwQhKJB1B+fQ7g3yZOfq06R+9gYUXAI1v0= Subject key identifier: 96:A6:B7:C9:F8:BE:20:94:DC:7B:AC:DB:A2:5C:9A:BA:BD:86:0B:7E Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Certificate serial: 019B7F808731E78608B5802623D0549FC075 Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/lqa3yfi-IJTce6zbolyaur2GC34.roa Signing time: Fri 02 Jan 2026 16:18:08 +0000 ROA not before: Fri 02 Jan 2026 16:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44322 IP address blocks: 185.165.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:87:31:e7:86:08:b5:80:26:23:d0:54:9f:c0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Validity Not Before: Jan 2 16:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96a6b7c9f8be2094dc7bacdba25c9ababd860b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:0b:5a:71:66:ca:e2:53:6b:9f:b5:33:86: 50:9b:43:69:82:5b:20:00:da:00:21:56:f7:0e:e5: 32:67:58:ff:ed:eb:92:2f:ea:93:6d:f5:b1:98:e8: 0d:1f:29:5c:bd:73:fb:64:00:ad:6c:74:1e:dc:40: 44:ab:3a:32:f1:dc:7e:a0:c7:d6:53:b5:68:9a:9e: b2:88:3c:a0:1d:42:54:73:af:2b:3e:8c:3a:5d:9b: e0:85:80:df:24:09:72:97:72:1c:6d:0b:22:e2:5b: 4c:51:80:fe:a1:4c:7e:a9:01:06:17:d2:72:96:3d: c9:39:64:38:0f:4b:69:3e:60:c5:7d:be:95:a0:67: d3:97:75:c1:a8:7b:48:62:01:23:13:29:84:c5:fd: d9:b6:d8:3e:db:cd:34:0c:98:8e:e0:8f:4f:f3:8f: 9f:a3:24:34:94:3c:13:b7:29:83:5b:e0:37:cc:fc: 3e:60:da:be:1b:1d:3d:24:00:63:41:22:f3:ec:f9: 96:ce:54:9a:6c:87:ea:48:25:a7:d8:48:de:e5:a8: 85:66:d0:ab:5c:22:0a:f2:93:7f:8a:08:cb:8c:56: 08:dd:50:8b:72:4a:43:e8:c5:d3:a0:d9:72:74:16: 30:b1:bf:8e:df:8a:d9:f9:4f:79:db:c4:3b:7a:f7: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:B7:C9:F8:BE:20:94:DC:7B:AC:DB:A2:5C:9A:BA:BD:86:0B:7E X509v3 Authority Key Identifier: keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/lqa3yfi-IJTce6zbolyaur2GC34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.112.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:d4:ea:7b:a1:87:c6:0d:f7:a7:1b:6e:9c:e7:dc:d5:40:58: c5:b6:d1:16:7f:3e:6d:ab:75:ec:db:dc:49:8a:4e:e7:14:8a: ba:6d:99:9b:17:9a:fd:74:19:45:54:7b:f9:71:37:b0:a0:cf: 88:3c:38:ff:e1:2c:5f:f8:20:b6:00:6e:74:9f:37:62:79:b6: b1:33:99:06:78:58:07:49:d4:02:d4:ec:48:64:fc:fd:fe:be: fe:05:e0:58:7f:b2:53:e6:4e:a3:c1:24:fc:45:cd:7f:b5:5a: 73:14:38:d9:94:37:1a:4b:b5:6b:8e:8d:d7:1c:c1:39:64:b4: 9a:19:34:ac:8a:09:f4:4a:9b:5c:a6:ab:88:7f:da:ba:b2:71: ef:57:f4:c1:7b:08:df:d3:61:6a:38:25:d6:e3:b6:0d:21:71: f7:02:29:52:52:75:fb:d8:72:dc:2a:76:ee:ba:f7:97:39:f1: 4d:58:e7:7b:56:f4:41:c6:73:0d:ed:7a:12:4b:dd:af:47:a9: 8c:d8:08:9c:f2:99:b2:44:8a:1a:38:ed:46:46:59:d0:75:25: 59:f5:ed:07:07:6e:b1:bb:b4:be:e6:bc:ed:4e:72:5e:f9:af: 0c:76:9b:63:fa:ae:e0:8a:97:8d:3d:8c:11:f5:bc:72:54:06: be:7d:bc:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gIcx54YItYAmI9BUn8B1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZGE5OWY5MzUxOGUyOWE5NDViMDdmNjBhMThlZjg2ZTli MzllNjUwHhcNMjYwMTAyMTYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmE2YjdjOWY4YmUyMDk0ZGM3YmFjZGJhMjVjOWFiYWJkODYwYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGQLWnFmyuJTa5+1M4ZQm0Npglsg ANoAIVb3DuUyZ1j/7euSL+qTbfWxmOgNHylcvXP7ZACtbHQe3EBEqzoy8dx+oMfW U7Vomp6yiDygHUJUc68rPow6XZvghYDfJAlyl3IcbQsi4ltMUYD+oUx+qQEGF9Jy lj3JOWQ4D0tpPmDFfb6VoGfTl3XBqHtIYgEjEymExf3Zttg+2800DJiO4I9P84+f oyQ0lDwTtymDW+A3zPw+YNq+Gx09JABjQSLz7PmWzlSabIfqSCWn2Eje5aiFZtCr XCIK8pN/igjLjFYI3VCLckpD6MXToNlydBYwsb+O34rZ+U9528Q7evcOXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJamt8n4viCU3Hus26Jcmrq9hgt+MB8GA1UdIwQY MBaAFFPamfk1GOKalFsH9goY74bps55lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODkt OWYzMDJjMjBhZTcwLzEvbHFhM3lmaS1JSlRjZTZ6Ym9seWF1cjJHQzM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODktOWYzMDJjMjBhZTcw LzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaVwMA0G CSqGSIb3DQEBCwUAA4IBAQA+1Op7oYfGDfenG26c59zVQFjFttEWfz5tq3Xs29xJ ik7nFIq6bZmbF5r9dBlFVHv5cTewoM+IPDj/4Sxf+CC2AG50nzdiebaxM5kGeFgH SdQC1OxIZPz9/r7+BeBYf7JT5k6jwST8Rc1/tVpzFDjZlDcaS7Vrjo3XHME5ZLSa GTSsign0SptcpquIf9q6snHvV/TBewjf02FqOCXW47YNIXH3AilSUnX72HLcKnbu uveXOfFNWOd7VvRBxnMN7XoSS92vR6mM2Aic8pmyRIoaOO1GRlnQdSVZ9e0HB26x u7S+5rztTnJe+a8Mdptj+q7gipeNPYwR9bxyVAa+fbz5 -----END CERTIFICATE-----Generated at Fri Jan 9 07:53:52 2026 by rpki-client