This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/LBuMJhT9HI_N-o97AGqRNMobN2k.roa File: LBuMJhT9HI_N-o97AGqRNMobN2k.roa (raw, json) Hash identifier: J1YinkBVmpDcd/nfyc1eO3Q9IO60Z11LEvtRdzK2OZo= Subject key identifier: 2C:1B:8C:26:14:FD:1C:8F:CD:FA:8F:7B:00:6A:91:34:CA:1B:37:69 Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361 Certificate serial: 019B7FF22267456B161854497F96869ACD6B Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/LBuMJhT9HI_N-o97AGqRNMobN2k.roa Signing time: Fri 02 Jan 2026 18:22:13 +0000 ROA not before: Fri 02 Jan 2026 18:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209328 IP address blocks: 176.97.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:22:67:45:6b:16:18:54:49:7f:96:86:9a:cd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361 Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c1b8c2614fd1c8fcdfa8f7b006a9134ca1b3769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:bd:34:d1:31:0b:9d:b3:d0:60:f4:57:74: 0e:5c:98:13:35:79:59:da:73:53:6f:10:bc:56:bd: 03:43:57:f7:e1:1e:e3:fc:b2:9b:c6:fb:e8:7a:be: ea:3f:1f:78:99:c3:42:0a:7a:e3:77:bd:d3:2d:dd: c4:a1:67:df:60:66:c5:df:4c:e0:60:e5:53:9b:0b: cc:79:0e:52:ae:34:48:c2:de:c7:37:9b:b2:6e:c6: bd:f9:7d:3d:6c:45:2d:e0:50:37:79:5e:8d:b3:39: d3:9f:07:17:90:65:fe:a8:d9:8d:9d:05:37:9f:ef: 60:ea:60:38:b7:48:58:20:d1:3e:ed:87:f7:a8:a3: e2:61:b6:dd:da:2c:6f:da:b8:2a:31:f1:e6:26:b4: f1:93:43:2d:e5:67:c1:15:73:a8:55:03:af:6e:e4: 82:15:bc:d4:1f:cf:5d:67:2d:4a:04:b1:c1:8c:77: 64:d1:21:0a:00:6c:c0:cb:45:5a:91:e2:d7:f9:d2: ae:14:59:22:f8:e6:ac:55:53:47:e6:17:3b:86:ac: 8c:32:9d:c6:90:50:f0:43:92:3e:11:a3:0a:54:b2: 8d:c7:5b:bd:73:ec:63:5f:36:af:fd:f1:78:f8:24: 5e:26:6f:b1:a2:93:67:1e:2c:5e:28:71:20:99:a4: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:8C:26:14:FD:1C:8F:CD:FA:8F:7B:00:6A:91:34:CA:1B:37:69 X509v3 Authority Key Identifier: keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/LBuMJhT9HI_N-o97AGqRNMobN2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.50.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:bf:be:a6:f6:7b:34:36:26:5f:c9:f1:69:c8:32:24:8e:ee: a3:4a:f7:87:f0:da:a9:bf:76:92:22:7b:65:34:3b:e5:45:e6: 5c:26:e6:22:27:d3:c2:52:0d:c9:6a:17:45:19:e6:7b:39:3e: be:66:56:5a:12:19:fd:ec:3b:88:ba:ad:1c:74:63:a6:41:29: 92:5b:b4:3b:02:84:71:a4:cb:e0:4e:6f:59:61:7a:01:12:31: ad:a3:0a:c1:47:d9:a4:e6:6e:b3:31:8a:ff:68:f7:82:40:1c: 84:68:5b:bc:cf:4d:15:57:af:23:72:c5:85:9a:01:0a:89:3c: 8f:71:22:cc:64:a8:76:12:33:6d:9e:4a:9a:fd:17:4e:fc:6f: f6:7c:1b:74:22:ed:b4:4a:34:80:e8:0f:52:17:b8:6a:8a:c5: ee:d9:6c:6b:38:ad:f9:af:4f:92:6d:ae:b7:6c:0e:39:7c:6c: 79:3b:49:5e:ad:72:ed:1e:b7:8c:72:ae:ba:72:77:9f:2d:5d: 2a:f5:5f:3f:59:ce:2a:ed:23:9c:a8:a6:45:e0:61:cd:17:8a: f6:7f:5d:04:61:ef:b5:7f:d7:14:b5:bb:e9:d0:70:68:a8:e6: 95:c3:ae:1a:7f:bb:64:ee:b4:c1:5b:d9:98:8c:bb:4d:f0:9c: 93:13:1e:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8iJnRWsWGFRJf5aGms1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1 MzEzNjEwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzFiOGMyNjE0ZmQxYzhmY2RmYThmN2IwMDZhOTEzNGNhMWIzNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso+9NNExC52z0GD0V3QOXJgTNXlZ 2nNTbxC8Vr0DQ1f34R7j/LKbxvvoer7qPx94mcNCCnrjd73TLd3EoWffYGbF30zg YOVTmwvMeQ5SrjRIwt7HN5uybsa9+X09bEUt4FA3eV6NsznTnwcXkGX+qNmNnQU3 n+9g6mA4t0hYINE+7Yf3qKPiYbbd2ixv2rgqMfHmJrTxk0Mt5WfBFXOoVQOvbuSC FbzUH89dZy1KBLHBjHdk0SEKAGzAy0VakeLX+dKuFFki+OasVVNH5hc7hqyMMp3G kFDwQ5I+EaMKVLKNx1u9c+xjXzav/fF4+CReJm+xopNnHixeKHEgmaQfqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwbjCYU/RyPzfqPewBqkTTKGzdpMB8GA1UdIwQY MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct MzE2NjBjMjJkMTllLzEvTEJ1TUpoVDlISV9OLW85N0FHcVJOTW9iTjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGEyMA0G CSqGSIb3DQEBCwUAA4IBAQB/v76m9ns0NiZfyfFpyDIkju6jSveH8Nqpv3aSIntl NDvlReZcJuYiJ9PCUg3JahdFGeZ7OT6+ZlZaEhn97DuIuq0cdGOmQSmSW7Q7AoRx pMvgTm9ZYXoBEjGtowrBR9mk5m6zMYr/aPeCQByEaFu8z00VV68jcsWFmgEKiTyP cSLMZKh2EjNtnkqa/RdO/G/2fBt0Iu20SjSA6A9SF7hqisXu2WxrOK35r0+Sba63 bA45fGx5O0lerXLtHreMcq66cnefLV0q9V8/Wc4q7SOcqKZF4GHNF4r2f10EYe+1 f9cUtbvp0HBoqOaVw64af7tk7rTBW9mYjLtN8JyTEx4a -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:35 2026 by rpki-client