This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LqemzF8lXKzA1QmVUn0d1F4dONk.roa File: LqemzF8lXKzA1QmVUn0d1F4dONk.roa (raw, json) Hash identifier: B6LIsBe71h8XpKhaHdfT1mO1QfO8oz9J/kiXuqpRxGM= Subject key identifier: 2E:A7:A6:CC:5F:25:5C:AC:C0:D5:09:95:52:7D:1D:D4:5E:1D:38:D9 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B282F5A9CD6593A7F340D3F4ACC27F0C9 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LqemzF8lXKzA1QmVUn0d1F4dONk.roa Signing time: Tue 16 Dec 2025 17:22:30 +0000 ROA not before: Tue 16 Dec 2025 17:22:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213596 IP address blocks: 77.239.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:2f:5a:9c:d6:59:3a:7f:34:0d:3f:4a:cc:27:f0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 16 17:22:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ea7a6cc5f255cacc0d50995527d1dd45e1d38d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:70:1c:fd:ab:18:1a:49:65:61:f6:34:ed: f1:76:9a:5a:36:2f:be:23:20:df:a9:62:4a:2f:1e: 84:5e:77:8a:91:42:6a:85:ad:77:10:27:44:66:c8: aa:62:d3:1e:ea:d8:8b:d3:13:45:19:c6:b0:60:19: ac:72:1e:98:e3:1d:08:0b:22:56:2b:f3:74:ad:05: b0:2c:8f:ba:d1:4e:52:8d:31:3e:3f:9d:0e:28:0e: c4:cf:57:4c:c6:a5:bc:08:3f:a2:74:e7:82:1f:a8: 6c:91:6f:84:93:cc:35:fd:b2:0b:84:06:44:31:19: 2d:83:63:f5:ff:b6:99:ce:d7:79:31:c1:ba:70:9c: b3:bd:c1:b9:2f:4c:0f:d2:c6:8b:3f:24:b4:17:09: ac:8d:38:d8:3e:83:0a:a9:1c:f6:c6:56:07:17:7f: ec:69:0d:4f:86:ad:00:92:1b:ad:ab:5b:e3:b8:8a: 5f:5a:60:c8:45:00:49:89:53:2a:5c:98:2d:1c:3c: 5e:0d:f7:db:35:3d:42:0f:08:3b:17:39:ca:11:51: 0e:6c:3e:dd:60:5c:df:18:8d:08:dd:5e:21:fa:d3: 95:61:ed:d7:4b:bf:12:6a:d8:10:0a:b2:d1:59:0a: 8a:7d:74:47:50:5f:41:f0:81:2c:69:c4:77:13:9a: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:A6:CC:5F:25:5C:AC:C0:D5:09:95:52:7D:1D:D4:5E:1D:38:D9 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LqemzF8lXKzA1QmVUn0d1F4dONk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.126.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:de:95:c7:e8:22:9b:c6:a3:e0:5c:b6:17:4f:21:86:5d:e1: f6:77:3d:80:e8:f8:88:7d:40:5f:ee:9a:8a:df:28:09:85:b0: 1c:ae:a8:cf:4e:29:b9:15:e3:cb:a1:ea:39:fb:c4:f9:64:4b: 56:e6:b7:a5:e9:08:b0:eb:76:2b:58:3c:6a:85:39:2f:d4:5c: c3:ee:e2:76:aa:71:3e:97:95:b4:7b:03:f4:47:b3:b9:50:f5: 56:ed:67:d2:55:e7:b4:2a:79:8a:88:6a:a8:70:50:5f:c0:85: 67:36:68:4f:3d:1c:59:eb:ad:22:a5:71:ab:e4:02:bd:eb:70: 45:a5:fd:3b:8f:e5:e5:29:a9:c2:89:13:24:22:3e:c9:7a:4a: c1:da:3d:9c:21:d3:1b:14:97:75:8c:60:8d:0d:05:e5:20:32: 59:89:e6:5f:85:ae:43:da:0e:a4:45:22:54:95:33:22:27:8a: 59:7c:0b:73:90:cd:14:ee:cd:39:ff:03:ab:8e:bc:50:c7:c2: 08:ea:f7:15:75:20:30:16:02:aa:0f:f7:e4:e8:f6:55:39:28: 4d:c1:dd:3b:39:45:b6:8b:a8:35:4a:28:02:cb:a2:87:bc:27: 55:7b:2d:5c:98:17:4d:ad:a8:fe:0b:0b:71:45:50:68:1d:b7: 7b:da:90:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsoL1qc1lk6fzQNP0rMJ/DJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE2MTcyMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWE3YTZjYzVmMjU1Y2FjYzBkNTA5OTU1MjdkMWRkNDVlMWQzOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt9wHP2rGBpJZWH2NO3xdppaNi++ IyDfqWJKLx6EXneKkUJqha13ECdEZsiqYtMe6tiL0xNFGcawYBmsch6Y4x0ICyJW K/N0rQWwLI+60U5SjTE+P50OKA7Ez1dMxqW8CD+idOeCH6hskW+Ek8w1/bILhAZE MRktg2P1/7aZztd5McG6cJyzvcG5L0wP0saLPyS0FwmsjTjYPoMKqRz2xlYHF3/s aQ1Phq0Akhutq1vjuIpfWmDIRQBJiVMqXJgtHDxeDffbNT1CDwg7FznKEVEObD7d YFzfGI0I3V4h+tOVYe3XS78SatgQCrLRWQqKfXRHUF9B8IEsacR3E5rVIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6npsxfJVyswNUJlVJ9HdReHTjZMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTHFlbXpGOGxYS3pBMVFtVlVuMGQxRjRkT05rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe9+MA0G CSqGSIb3DQEBCwUAA4IBAQBs3pXH6CKbxqPgXLYXTyGGXeH2dz2A6PiIfUBf7pqK 3ygJhbAcrqjPTim5FePLoeo5+8T5ZEtW5rel6Qiw63YrWDxqhTkv1FzD7uJ2qnE+ l5W0ewP0R7O5UPVW7WfSVee0KnmKiGqocFBfwIVnNmhPPRxZ660ipXGr5AK963BF pf07j+XlKanCiRMkIj7JekrB2j2cIdMbFJd1jGCNDQXlIDJZieZfha5D2g6kRSJU lTMiJ4pZfAtzkM0U7s05/wOrjrxQx8II6vcVdSAwFgKqD/fk6PZVOShNwd07OUW2 i6g1SigCy6KHvCdVey1cmBdNraj+CwtxRVBoHbd72pAw -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:12 2025 by rpki-client