This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa File: LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa (raw, json) Hash identifier: bcLMSmZZ+3fduWbmxkS4mikbivKQ+Mib1eYrxT+UG6c= Subject key identifier: 2C:FD:0B:0C:10:D2:86:4E:9C:EC:1D:B1:E9:59:5B:FB:B9:EC:12:F4 Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Certificate serial: 019B7BA4CE114C708E56FB15E6B78CDA1E68 Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa Signing time: Thu 01 Jan 2026 22:19:16 +0000 ROA not before: Thu 01 Jan 2026 22:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43866 IP address blocks: 91.195.202.0/23 maxlen: 23 91.195.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ce:11:4c:70:8e:56:fb:15:e6:b7:8c:da:1e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cfd0b0c10d2864e9cec1db1e9595bfbb9ec12f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:74:c5:43:d8:d0:5a:9f:80:9d:17:2d:52: 12:43:5f:b7:a6:61:dc:96:ee:f5:74:ae:57:51:a7: 03:c7:6d:bd:a2:e6:e9:00:a2:2b:39:a2:f8:8d:5b: ef:b6:14:3d:84:23:3b:da:d6:33:02:68:c0:76:89: 32:7a:e6:65:47:4e:61:63:30:9a:19:c8:c4:0c:97: a0:cb:29:59:71:37:2a:94:59:b7:e8:83:77:d6:44: 02:30:6b:f8:85:00:74:10:6e:cd:bf:04:77:87:26: fd:6b:5d:c7:dd:ba:12:f9:27:11:92:73:e5:55:15: c6:ff:fd:d7:5c:4e:2a:19:68:aa:33:2f:19:c9:69: e3:ee:cc:a8:44:4e:6e:8c:2e:12:f6:c2:b4:74:62: a4:e9:df:2a:9a:3c:7c:74:a0:94:ca:a1:b5:c4:65: 39:36:c2:58:ed:96:3b:9f:a8:fc:23:64:a4:4f:85: 54:46:6d:fc:68:e8:80:02:e6:43:44:3c:7a:bd:a1: 03:13:9c:bb:a1:c1:da:fb:e3:68:fd:4e:6c:cb:17: 4f:57:ff:5c:43:04:51:3c:77:d1:60:e2:ee:a2:3a: 1a:04:bc:3c:67:f2:41:bf:58:62:c7:81:70:0a:b2: c9:c0:a3:9e:92:ef:5a:e8:10:5f:f4:78:46:39:06: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FD:0B:0C:10:D2:86:4E:9C:EC:1D:B1:E9:59:5B:FB:B9:EC:12:F4 X509v3 Authority Key Identifier: keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.202.0/23 Signature Algorithm: sha256WithRSAEncryption 03:c6:65:98:0c:56:ff:fa:c0:15:6a:95:d5:9a:ef:d5:d5:cd: 54:d8:ca:17:85:fa:39:55:ed:8f:3a:6b:3b:fd:a4:d8:27:0d: 3d:a7:f6:89:0c:3e:fd:bd:44:32:96:23:b0:0c:f5:c2:3e:62: e3:4d:db:b1:83:ea:28:c5:1a:ff:e7:08:14:3c:9e:68:d5:fc: dc:a3:7b:27:72:00:a1:ff:7f:ed:a1:25:80:de:c1:14:65:c1: af:07:d6:f1:9e:a9:a3:b6:32:cf:42:a6:05:a1:25:bd:7c:84: 29:45:f5:48:eb:a5:d9:bb:43:29:73:5e:e1:1e:7f:32:96:f7: 4b:bd:30:bb:08:ad:a2:61:90:57:64:0d:c6:4c:e9:e1:3a:6f: 00:44:4a:d6:44:9e:46:b1:f5:89:13:e2:5c:cb:24:1a:de:1a: 43:73:dd:23:60:b9:44:df:a1:ad:3a:dd:9e:d5:b6:2b:b5:fc: b6:4b:11:3c:c2:0e:f2:74:56:4c:80:87:af:97:1c:9b:9a:dc: b9:e0:3e:24:c9:c6:a3:46:f5:07:3f:c1:3e:ef:a7:c0:00:06: 20:40:d1:23:d0:b7:1c:a4:87:df:ad:55:51:95:a7:a9:c0:a4: ce:56:6e:84:db:53:37:53:f0:dc:7e:84:23:81:b0:57:4a:a2: 1f:ea:88:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pM4RTHCOVvsV5reM2h5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmQ3MDJkZDc4MDBiNjFjOTZjNTBmNDJhNDZiNjk0OWIy MjhkYmIwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2ZkMGIwYzEwZDI4NjRlOWNlYzFkYjFlOTU5NWJmYmI5ZWMxMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C90xUPY0FqfgJ0XLVISQ1+3pmHc lu71dK5XUacDx229oubpAKIrOaL4jVvvthQ9hCM72tYzAmjAdokyeuZlR05hYzCa GcjEDJegyylZcTcqlFm36IN31kQCMGv4hQB0EG7NvwR3hyb9a13H3boS+ScRknPl VRXG//3XXE4qGWiqMy8ZyWnj7syoRE5ujC4S9sK0dGKk6d8qmjx8dKCUyqG1xGU5 NsJY7ZY7n6j8I2SkT4VURm38aOiAAuZDRDx6vaEDE5y7ocHa++No/U5syxdPV/9c QwRRPHfRYOLuojoaBLw8Z/JBv1hix4FwCrLJwKOeku9a6BBf9HhGOQbBIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCz9CwwQ0oZOnOwdselZW/u57BL0MB8GA1UdIwQY MBaAFCC9cC3XgAthyWxQ9CpGtpSbIo27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2Et N2ZhNWViY2Y1NzRlLzEvTFAwTERCRFNoazZjN0IyeDZWbGItN25zRXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2EtN2ZhNWViY2Y1NzRl LzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8PKMA0G CSqGSIb3DQEBCwUAA4IBAQADxmWYDFb/+sAVapXVmu/V1c1U2MoXhfo5Ve2POms7 /aTYJw09p/aJDD79vUQyliOwDPXCPmLjTduxg+ooxRr/5wgUPJ5o1fzco3sncgCh /3/toSWA3sEUZcGvB9bxnqmjtjLPQqYFoSW9fIQpRfVI66XZu0Mpc17hHn8ylvdL vTC7CK2iYZBXZA3GTOnhOm8ARErWRJ5GsfWJE+JcyyQa3hpDc90jYLlE36GtOt2e 1bYrtfy2SxE8wg7ydFZMgIevlxybmty54D4kycajRvUHP8E+76fAAAYgQNEj0Lcc pIffrVVRlaepwKTOVm6E21M3U/DcfoQjgbBXSqIf6og1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:38 2026 by rpki-client