This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LbY2_G2KBbgl__7uWo-YHI9_yNo.roa File: LbY2_G2KBbgl__7uWo-YHI9_yNo.roa (raw, json) Hash identifier: 5hd8PbswqAq2WJogSU3OrxLc5N3pSgHKApogqCj9CRc= Subject key identifier: 2D:B6:36:FC:6D:8A:05:B8:25:FF:FE:EE:5A:8F:98:1C:8F:7F:C8:DA Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ADDAD88ACB2706A6D0E366835918F50F4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LbY2_G2KBbgl__7uWo-YHI9_yNo.roa Signing time: Tue 02 Dec 2025 06:08:48 +0000 ROA not before: Tue 02 Dec 2025 06:08:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197477 IP address blocks: 77.90.10.0/24 maxlen: 24 77.90.11.0/24 maxlen: 24 77.90.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:ad:88:ac:b2:70:6a:6d:0e:36:68:35:91:8f:50:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 2 06:08:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2db636fc6d8a05b825fffeee5a8f981c8f7fc8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:9d:7b:f4:75:81:da:5f:c5:f6:29:61:c3: 9e:42:2c:8a:53:b2:d7:e9:42:71:42:60:96:40:6a: 31:bc:03:cf:c5:87:87:c0:65:f1:9d:41:b2:90:03: 29:9b:fe:c7:a7:2c:4a:28:da:d6:8f:37:da:7d:6b: 9b:6b:f4:a7:8b:05:0f:78:a0:0f:c8:38:21:0d:56: f1:d3:c0:5b:7c:84:46:5e:ca:2e:2e:45:47:fd:dd: 01:b9:59:98:30:14:67:a2:d8:24:0f:e2:dc:0e:af: 5d:86:5b:8e:58:8d:a3:8a:eb:73:3e:ec:8f:fd:f0: 54:17:8e:e2:f9:fe:31:e7:33:22:be:32:45:b5:6d: a8:b4:17:2b:fd:48:4b:9a:46:60:fe:7a:05:4c:79: 73:de:ad:03:8d:42:a7:9e:df:3e:7e:af:76:75:cb: 3a:40:13:34:40:f1:ac:9c:26:9f:ed:bb:43:aa:51: da:5e:d7:ba:9b:09:1b:d9:4a:0b:1c:27:47:59:92: f7:07:4d:65:1a:a3:90:74:64:92:f9:54:06:bd:33: 8b:ac:3c:04:d8:c7:7d:b9:13:5c:ff:b4:05:a1:67: c9:c7:19:8b:97:29:12:49:e5:6b:b1:d8:38:07:68: 72:4c:2a:25:3c:58:5b:bd:8f:35:4e:6c:43:3d:76: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:36:FC:6D:8A:05:B8:25:FF:FE:EE:5A:8F:98:1C:8F:7F:C8:DA X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LbY2_G2KBbgl__7uWo-YHI9_yNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.10.0/23 77.90.50.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:52:aa:7c:cb:1e:ca:44:6b:1a:85:36:aa:bb:6f:b2:09:da: f6:d4:79:f1:d1:62:9e:21:a8:38:73:af:62:78:a7:fb:97:89: 6d:52:8c:65:4b:11:41:09:de:e1:75:63:6a:09:ff:75:b5:43: 16:02:ca:03:fa:ba:a5:d7:bb:81:d2:25:6b:af:28:04:be:eb: 04:b2:9c:f8:a0:b5:37:5f:07:73:71:c1:ed:87:e4:29:cb:7a: 53:ba:5d:a7:e1:41:25:ac:31:4a:ea:07:aa:ee:b9:a0:fc:a7: 56:fa:be:55:3c:a8:11:c0:2a:f7:1a:87:54:63:ca:50:0f:ed: 7c:e0:7f:a0:76:5b:62:7d:92:22:27:61:10:fb:25:d4:a6:d3: a1:aa:cc:ed:e4:92:a4:bc:cb:2d:a4:b3:ed:4e:cf:0b:5c:1c: 45:b1:05:59:1c:05:7c:e8:10:de:2e:a7:5f:3a:9b:bf:a4:b9: 0c:22:fd:f4:df:4e:8c:08:65:d5:cf:7d:03:05:c7:63:19:2e: 0c:70:17:1f:db:49:8c:a1:83:86:41:4e:25:f7:00:f2:3d:ed: eb:8e:90:bd:ff:72:49:c8:cb:f3:10:c2:c4:52:3b:d4:6f:51: e2:55:52:8f:11:5e:38:a4:d7:15:21:ac:e2:ea:a0:8f:bd:de: 88:98:8c:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrdrYissnBqbQ42aDWRj1D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAyMDYwODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGI2MzZmYzZkOGEwNWI4MjVmZmZlZWU1YThmOTgxYzhmN2ZjOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJude/R1gdpfxfYpYcOeQiyKU7LX 6UJxQmCWQGoxvAPPxYeHwGXxnUGykAMpm/7HpyxKKNrWjzfafWuba/SniwUPeKAP yDghDVbx08BbfIRGXsouLkVH/d0BuVmYMBRnotgkD+LcDq9dhluOWI2jiutzPuyP /fBUF47i+f4x5zMivjJFtW2otBcr/UhLmkZg/noFTHlz3q0DjUKnnt8+fq92dcs6 QBM0QPGsnCaf7btDqlHaXte6mwkb2UoLHCdHWZL3B01lGqOQdGSS+VQGvTOLrDwE 2Md9uRNc/7QFoWfJxxmLlykSSeVrsdg4B2hyTColPFhbvY81TmxDPXbWmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC22NvxtigW4Jf/+7lqPmByPf8jaMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTGJZMl9HMktCYmdsX183dVdvLVlISTlfeU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVoKAwQA TVoyMA0GCSqGSIb3DQEBCwUAA4IBAQAPUqp8yx7KRGsahTaqu2+yCdr21Hnx0WKe Iag4c69ieKf7l4ltUoxlSxFBCd7hdWNqCf91tUMWAsoD+rql17uB0iVrrygEvusE spz4oLU3XwdzccHth+Qpy3pTul2n4UElrDFK6geq7rmg/KdW+r5VPKgRwCr3GodU Y8pQD+184H+gdltifZIiJ2EQ+yXUptOhqszt5JKkvMstpLPtTs8LXBxFsQVZHAV8 6BDeLqdfOpu/pLkMIv30306MCGXVz30DBcdjGS4McBcf20mMoYOGQU4l9wDyPe3r jpC9/3JJyMvzEMLEUjvUb1HiVVKPEV44pNcVIazi6qCPvd6ImIz2 -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:59 2025 by rpki-client