This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/LBDdRDDjw294mcZ0nbMxr8CzfS4.roa File: LBDdRDDjw294mcZ0nbMxr8CzfS4.roa (raw, json) Hash identifier: PPYwxRl5Le8Vm1g+lp2aZkNuPa03sEDkYEJw4YbvaRI= Subject key identifier: 2C:10:DD:44:30:E3:C3:6F:78:99:C6:74:9D:B3:31:AF:C0:B3:7D:2E Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66 Certificate serial: 019B77C65F2687A02AF9C6A9B74433BCC621 Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/LBDdRDDjw294mcZ0nbMxr8CzfS4.roa Signing time: Thu 01 Jan 2026 04:17:27 +0000 ROA not before: Thu 01 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48360 IP address blocks: 185.77.104.0/22 maxlen: 24 2a05:62c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:5f:26:87:a0:2a:f9:c6:a9:b7:44:33:bc:c6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66 Validity Not Before: Jan 1 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c10dd4430e3c36f7899c6749db331afc0b37d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:4b:ca:46:1b:c9:33:5f:51:b8:5b:d1:60: b4:2f:ff:80:2f:94:0a:42:74:54:a7:22:35:3c:22: a1:1f:49:c5:a1:1e:66:aa:9e:11:b7:a1:0f:6b:b8: a5:35:b9:04:4b:63:97:fa:01:77:10:f5:e3:5c:c6: 64:bd:55:bc:c5:02:75:ad:e7:5a:a2:14:f8:0b:91: 60:5a:c2:42:22:86:c0:f1:9d:aa:3f:6a:a0:47:02: f3:74:73:53:4d:fa:1e:97:56:20:bd:c8:00:e9:49: fe:00:30:92:f2:9e:a0:4c:b9:a3:a4:ef:34:46:82: 67:8d:d3:24:dd:03:13:08:6d:11:f0:83:e2:a7:55: 55:fb:7a:17:4a:41:67:9d:8a:9d:ac:e4:33:a6:67: b7:1b:cd:3a:bc:21:12:44:db:d4:a7:49:7d:11:2d: 2e:e1:eb:b6:de:0c:91:f1:7b:c8:02:9d:66:ba:3b: a2:ad:59:29:b9:87:2a:b0:5f:b7:91:bf:5a:7e:1a: a0:b8:8d:fa:a8:70:5f:1b:ca:25:62:c9:2b:97:e9: f6:03:22:0d:92:4d:12:86:b3:fe:b5:50:a0:6d:28: 1d:93:24:93:40:34:59:e0:74:42:21:36:6d:30:9e: 01:0c:0b:57:a0:17:83:f4:0b:86:f0:f2:f2:e7:57: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:10:DD:44:30:E3:C3:6F:78:99:C6:74:9D:B3:31:AF:C0:B3:7D:2E X509v3 Authority Key Identifier: keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/LBDdRDDjw294mcZ0nbMxr8CzfS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.104.0/22 IPv6: 2a05:62c0::/29 Signature Algorithm: sha256WithRSAEncryption 63:a0:e3:84:34:6a:83:96:36:9f:3a:73:d7:7e:47:d1:06:7d: c5:b6:23:1a:60:e3:08:c0:d9:8f:e2:04:70:aa:30:ea:33:6a: 7b:e0:a3:0c:b6:7f:26:18:89:07:d6:3f:96:d3:8f:eb:4c:69: 70:f8:3d:5f:fc:36:14:d1:bc:95:97:e2:79:4b:af:ec:f9:ea: 9e:53:8a:11:02:8b:c4:30:a2:c5:40:4b:56:d0:d9:de:5b:4a: b9:9a:dc:1b:dc:38:fa:9b:89:dc:c1:bf:2b:a4:53:44:d3:2d: a5:1d:65:87:43:0d:3c:ef:93:8e:28:b3:b3:78:f5:51:e2:9b: f5:d3:1b:56:96:f6:2b:e7:21:ad:f0:44:48:90:c2:0c:31:bf: 22:86:2b:ba:77:86:3d:b1:ac:e1:db:af:ac:38:56:a9:15:64: 4c:84:69:d1:16:07:61:83:9a:6d:72:ae:c2:df:91:2c:a8:4d: 65:c7:cf:22:29:6d:53:7e:13:2f:a7:e9:ef:54:f3:c0:b5:ef: d0:c0:76:4f:2d:65:82:18:25:d9:53:5c:d9:ae:48:a5:de:6e: a7:08:84:3d:a2:9b:24:cb:ff:9e:12:1f:c2:a8:dc:ed:b2:79: 5e:7b:e5:bd:81:fc:c4:8e:32:06:5f:23:44:20:66:05:12:9f: c3:1c:98:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xl8mh6Aq+capt0QzvMYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjQ3MGZkNGQ2NzQyMTJmZmM4MmE5OTM2ZjNmZTI1NGJl Y2NlNjYwHhcNMjYwMTAxMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzEwZGQ0NDMwZTNjMzZmNzg5OWM2NzQ5ZGIzMzFhZmMwYjM3ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHpLykYbyTNfUbhb0WC0L/+AL5QK QnRUpyI1PCKhH0nFoR5mqp4Rt6EPa7ilNbkES2OX+gF3EPXjXMZkvVW8xQJ1reda ohT4C5FgWsJCIobA8Z2qP2qgRwLzdHNTTfoel1YgvcgA6Un+ADCS8p6gTLmjpO80 RoJnjdMk3QMTCG0R8IPip1VV+3oXSkFnnYqdrOQzpme3G806vCESRNvUp0l9ES0u 4eu23gyR8XvIAp1mujuirVkpuYcqsF+3kb9afhqguI36qHBfG8olYskrl+n2AyIN kk0ShrP+tVCgbSgdkySTQDRZ4HRCITZtMJ4BDAtXoBeD9AuG8PLy51cRIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCwQ3UQw48NveJnGdJ2zMa/As30uMB8GA1UdIwQY MBaAFD60cP1NZ0IS/8gqmTbz/iVL7M5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAt NWYwMTU3MzBkODExLzEvTEJEZFJERGp3Mjk0bWNaMG5iTXhyOEN6ZlM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAtNWYwMTU3MzBkODEx LzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU1oMA0E AgACMAcDBQMqBWLAMA0GCSqGSIb3DQEBCwUAA4IBAQBjoOOENGqDljafOnPXfkfR Bn3FtiMaYOMIwNmP4gRwqjDqM2p74KMMtn8mGIkH1j+W04/rTGlw+D1f/DYU0byV l+J5S6/s+eqeU4oRAovEMKLFQEtW0NneW0q5mtwb3Dj6m4ncwb8rpFNE0y2lHWWH Qw0875OOKLOzePVR4pv10xtWlvYr5yGt8ERIkMIMMb8ihiu6d4Y9sazh26+sOFap FWRMhGnRFgdhg5ptcq7C35EsqE1lx88iKW1TfhMvp+nvVPPAte/QwHZPLWWCGCXZ U1zZrkil3m6nCIQ9opsky/+eEh/CqNztsnlee+W9gfzEjjIGXyNEIGYFEp/DHJhj -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:12 2026 by rpki-client