This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/lbi2EEOv7Zrhga3le8zAYXKzasA.roa File: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (raw, json) Hash identifier: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs= Subject key identifier: 95:B8:B6:10:43:AF:ED:9A:E1:81:AD:E5:7B:CC:C0:61:72:B3:6A:C0 Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Certificate serial: 019B7F156E18EDDA6142A21330F70FF814ED Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/lbi2EEOv7Zrhga3le8zAYXKzasA.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.189.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6e:18:ed:da:61:42:a2:13:30:f7:0f:f8:14:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95b8b61043afed9ae181ade57bccc06172b36ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:80:99:6c:5a:ad:f3:6c:57:71:af:4a:63: c7:0e:5b:02:20:3f:48:a9:fe:c8:dc:35:a7:0b:ec: a7:d8:5d:cd:f3:dd:ae:87:f1:97:39:51:81:43:50: 4c:b0:a0:0f:c2:3e:87:a5:7a:9a:40:05:0e:12:dc: 56:53:91:f7:e3:28:70:8b:76:bd:f0:ee:3b:c1:b8: 5d:50:ef:85:da:a2:71:f9:45:1e:60:88:02:f1:8a: 7d:c6:a7:1a:c1:50:70:c3:79:be:ba:8f:70:73:1e: 97:7b:6f:54:d0:1c:89:aa:80:6f:1d:b0:3e:ec:58: 65:55:a7:44:63:a0:fe:e9:bc:02:c6:d6:cb:2e:18: 27:13:3d:46:89:07:d5:28:9e:d1:e9:79:1d:7c:06: 10:b0:36:c3:ab:fd:4a:55:2e:d6:4d:e8:06:94:5b: 37:7b:ed:25:3a:da:e2:cc:ff:24:ae:c2:79:42:11: 23:25:89:fa:ae:bd:12:3f:d2:26:dc:24:fd:5c:57: 31:6c:0a:8f:63:7b:f9:ca:4c:24:69:5e:b9:f0:9a: bf:e9:9c:02:96:6b:94:6d:52:f0:18:60:a5:8c:6c: 83:51:41:5f:63:c3:ee:2f:ef:89:bc:b4:1c:0e:2f: 98:34:23:a4:56:c8:42:aa:34:1d:ff:a4:8d:72:e1: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B8:B6:10:43:AF:ED:9A:E1:81:AD:E5:7B:CC:C0:61:72:B3:6A:C0 X509v3 Authority Key Identifier: keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/lbi2EEOv7Zrhga3le8zAYXKzasA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.110.0/24 Signature Algorithm: sha256WithRSAEncryption 71:f6:7d:2c:dc:45:16:78:12:33:1f:8b:6e:4e:5f:d2:61:b0: 1e:c0:98:7c:de:04:b7:d8:3b:ab:b9:43:35:c4:98:41:d9:bb: a9:ec:13:79:4d:50:4c:70:29:a0:d3:a2:24:a9:13:a3:f2:1e: 71:f6:aa:05:6f:24:d8:8c:78:ac:99:b0:12:64:41:ed:cc:40: 41:d3:24:03:fb:4f:bf:ab:d8:c0:b4:45:db:3a:4d:0a:9e:3a: b3:7a:84:de:04:46:21:35:30:a2:a6:dd:24:97:6a:2e:8d:f3: d8:33:67:eb:ad:c9:a6:e4:25:5b:06:ca:6a:2e:73:79:5a:f6: cd:31:5d:fb:12:44:b3:5a:85:04:1d:be:5f:8e:27:83:dc:3b: 9a:36:eb:fd:20:a4:e0:fb:04:d2:06:45:2d:32:08:ce:68:58: 58:a8:11:b5:bc:2f:77:8d:cc:c0:0e:17:b7:1b:25:a2:7c:a4: d5:95:26:cd:58:d3:3f:48:91:23:e1:92:06:75:b0:24:83:44: 0b:a4:fb:ff:50:8e:9f:4f:f4:6d:af:d0:cd:5d:d6:b0:0c:f5: 02:0c:e8:f4:0b:c7:ae:d4:75:cd:61:bf:ab:77:75:31:00:71: ed:eb:ac:2d:ee:bc:aa:32:69:67:4e:41:72:8b:fd:1b:b5:a2: 7c:9d:0f:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FW4Y7dphQqITMPcP+BTtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk ZWZiNTkwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWI4YjYxMDQzYWZlZDlhZTE4MWFkZTU3YmNjYzA2MTcyYjM2YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8qAmWxarfNsV3GvSmPHDlsCID9I qf7I3DWnC+yn2F3N892uh/GXOVGBQ1BMsKAPwj6HpXqaQAUOEtxWU5H34yhwi3a9 8O47wbhdUO+F2qJx+UUeYIgC8Yp9xqcawVBww3m+uo9wcx6Xe29U0ByJqoBvHbA+ 7FhlVadEY6D+6bwCxtbLLhgnEz1GiQfVKJ7R6XkdfAYQsDbDq/1KVS7WTegGlFs3 e+0lOtrizP8krsJ5QhEjJYn6rr0SP9Im3CT9XFcxbAqPY3v5ykwkaV658Jq/6ZwC lmuUbVLwGGCljGyDUUFfY8PuL++JvLQcDi+YNCOkVshCqjQd/6SNcuGfgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJW4thBDr+2a4YGt5XvMwGFys2rAMB8GA1UdIwQY MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt NDZiZDdkNzk0ZmI2LzEvbGJpMkVFT3Y3WnJoZ2EzbGU4ekFZWEt6YXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2 LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub1uMA0G CSqGSIb3DQEBCwUAA4IBAQBx9n0s3EUWeBIzH4tuTl/SYbAewJh83gS32DuruUM1 xJhB2bup7BN5TVBMcCmg06IkqROj8h5x9qoFbyTYjHismbASZEHtzEBB0yQD+0+/ q9jAtEXbOk0KnjqzeoTeBEYhNTCipt0kl2oujfPYM2frrcmm5CVbBspqLnN5WvbN MV37EkSzWoUEHb5fjieD3DuaNuv9IKTg+wTSBkUtMgjOaFhYqBG1vC93jczADhe3 GyWifKTVlSbNWNM/SJEj4ZIGdbAkg0QLpPv/UI6fT/Rtr9DNXdawDPUCDOj0C8eu 1HXNYb+rd3UxAHHt66wt7ryqMmlnTkFyi/0btaJ8nQ/D -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:25 2026 by rpki-client