This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/LAbYOinZZOhTcyKiJf7ioNWaoRM.roa File: LAbYOinZZOhTcyKiJf7ioNWaoRM.roa (raw, json) Hash identifier: 6Goc3YnbiYxs3x4btVAtwsDJJBqkd3Y6gTGImQ5TWEw= Subject key identifier: 2C:06:D8:3A:29:D9:64:E8:53:73:22:A2:25:FE:E2:A0:D5:9A:A1:13 Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019ABF5184F7E779C62AE294C03ADD672B1C Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/LAbYOinZZOhTcyKiJf7ioNWaoRM.roa Signing time: Wed 26 Nov 2025 08:39:41 +0000 ROA not before: Wed 26 Nov 2025 08:39:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3320 IP address blocks: 46.80.0.0/12 maxlen: 12 62.153.0.0/16 maxlen: 16 62.154.0.0/15 maxlen: 15 62.156.0.0/14 maxlen: 14 62.224.0.0/14 maxlen: 14 79.192.0.0/10 maxlen: 10 80.128.0.0/11 maxlen: 11 80.128.0.0/12 maxlen: 12 80.144.0.0/13 maxlen: 13 80.152.0.0/14 maxlen: 14 80.156.0.0/16 maxlen: 16 80.157.0.0/16 maxlen: 16 80.157.8.0/21 maxlen: 21 80.157.16.0/20 maxlen: 20 84.128.0.0/10 maxlen: 10 87.128.0.0/10 maxlen: 10 91.0.0.0/10 maxlen: 10 93.192.0.0/10 maxlen: 10 192.166.49.0/24 maxlen: 24 193.158.0.0/15 maxlen: 15 194.25.0.0/16 maxlen: 16 194.150.228.0/23 maxlen: 23 195.145.0.0/16 maxlen: 16 195.243.0.0/16 maxlen: 16 212.184.0.0/15 maxlen: 15 217.0.0.0/13 maxlen: 13 217.80.0.0/12 maxlen: 12 217.224.0.0/11 maxlen: 11 2003::/19 maxlen: 19 2003::/23 maxlen: 23 2003:8:f400::/48 maxlen: 48 2003:8:f401::/48 maxlen: 48 2003:8:f402::/48 maxlen: 48 2003:8:f403::/48 maxlen: 48 2003:8:f404::/48 maxlen: 48 2003:8:f405::/48 maxlen: 48 2003:8:f406::/48 maxlen: 48 2003:8:f407::/48 maxlen: 48 2003:8:f408::/48 maxlen: 48 2003:8:f409::/48 maxlen: 48 2003:8:f40a::/48 maxlen: 48 2003:8:f40b::/48 maxlen: 48 2003:8:f40c::/48 maxlen: 48 2003:8:f40d::/48 maxlen: 48 2003:8:f40e::/48 maxlen: 48 2003:8:f40f::/48 maxlen: 48 2003:8:f412::/48 maxlen: 48 2003:8:f413::/48 maxlen: 48 2003:8:f414::/48 maxlen: 48 2003:8:f415::/48 maxlen: 48 2003:8:f416::/48 maxlen: 48 2003:8:f417::/48 maxlen: 48 2003:8:f418::/48 maxlen: 48 2003:8:f419::/48 maxlen: 48 2003:8:f41a::/48 maxlen: 48 2003:8:f41b::/48 maxlen: 48 2003:8:f41c::/48 maxlen: 48 2003:8:f41d::/48 maxlen: 48 2003:8:f41e::/48 maxlen: 48 2003:8:f41f::/48 maxlen: 48 2003:8:f420::/48 maxlen: 48 2003:8:f421::/48 maxlen: 48 2003:8:f422::/48 maxlen: 48 2003:8:f423::/48 maxlen: 48 2003:8:f424::/48 maxlen: 48 2003:8:f425::/48 maxlen: 48 2003:8:f426::/48 maxlen: 48 2003:8:f427::/48 maxlen: 48 2003:8:f428::/48 maxlen: 48 2003:8:f429::/48 maxlen: 48 2003:8:f42a::/48 maxlen: 48 2003:8:f42b::/48 maxlen: 48 2003:8:f500::/41 maxlen: 48 2003:3c0::/28 maxlen: 28 2003:3e0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:51:84:f7:e7:79:c6:2a:e2:94:c0:3a:dd:67:2b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Nov 26 08:39:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c06d83a29d964e8537322a225fee2a0d59aa113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:c7:7a:d7:37:f5:f5:53:f2:d3:3e:e2:bc: 57:b2:0a:a6:f2:99:d2:19:f3:0e:e5:2e:31:c2:15: 10:a2:bb:c5:96:74:51:d9:54:ef:78:d8:e4:70:c5: 47:72:8c:36:e4:22:a9:14:34:4b:ff:fe:47:20:75: 33:af:95:f0:d6:3b:31:3b:c8:9a:a4:fc:41:3a:77: 8c:75:35:dc:16:0c:52:6c:bb:22:19:ec:f6:a9:f4: 59:ad:e8:91:d9:d6:da:17:93:9b:c6:a1:cb:2f:3a: ae:86:31:0c:af:10:ec:22:c4:4c:5d:34:be:7e:02: a2:ea:25:58:9e:3d:c1:11:58:96:38:28:2a:80:3a: 24:19:b7:d5:f7:6d:1b:d5:60:fb:3d:57:e3:45:4a: 8d:06:41:f8:1c:b0:e8:af:87:1b:2f:ff:58:22:68: a1:c3:fe:89:79:e2:b5:53:d9:07:69:c2:ba:b3:49: 19:ff:73:8e:fe:70:87:6f:77:84:8f:53:ca:e0:f6: 92:c0:de:35:8a:52:45:86:e0:5c:e3:95:75:ca:22: 17:3a:c6:26:bc:2e:04:a5:8e:6f:a1:c8:bb:ac:5f: 61:ed:33:e6:7c:a2:64:29:6d:38:94:d6:fe:f3:c2: 72:b9:aa:84:5b:cd:8a:55:bb:4d:07:56:a3:a0:c8: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:06:D8:3A:29:D9:64:E8:53:73:22:A2:25:FE:E2:A0:D5:9A:A1:13 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/LAbYOinZZOhTcyKiJf7ioNWaoRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.80.0.0/12 62.153.0.0-62.159.255.255 62.224.0.0/14 79.192.0.0/10 80.128.0.0/11 84.128.0.0/10 87.128.0.0/10 91.0.0.0/10 93.192.0.0/10 192.166.49.0/24 193.158.0.0/15 194.25.0.0/16 194.150.228.0/23 195.145.0.0/16 195.243.0.0/16 212.184.0.0/15 217.0.0.0/13 217.80.0.0/12 217.224.0.0/11 IPv6: 2003::/19 Signature Algorithm: sha256WithRSAEncryption a8:52:c5:82:2b:9c:eb:5b:7f:52:28:5b:2f:96:14:25:35:30: 40:70:12:9b:20:34:0c:6f:6b:fb:80:a3:48:19:63:eb:be:65: 26:3a:cd:87:79:79:41:9a:60:f8:1b:5e:10:1a:da:82:f3:fd: 69:20:43:65:a6:20:2e:80:ac:2b:d5:54:c3:34:bb:45:9d:3e: 80:4d:a4:ac:7c:79:51:8f:19:d0:a2:b5:3b:52:1f:11:a3:2b: 57:83:21:c7:14:d6:8e:f9:10:2e:d9:0b:e7:56:cc:23:f4:a8: f6:0d:be:c8:a0:69:27:70:66:11:b9:33:fd:f0:48:d7:40:d0: e7:1f:20:be:43:22:d6:6a:14:6b:d5:f1:5e:bc:26:ed:38:24: 10:bb:84:83:6f:a2:06:7f:a5:b7:7d:70:ca:44:7d:88:29:0e: 10:15:66:ae:6b:59:01:46:9a:c6:a4:d0:df:2f:06:9e:8d:13: 0a:5a:e0:e6:81:7f:16:c1:ad:fe:3a:df:e9:ba:a6:00:5a:66: a7:55:b7:c9:48:0a:47:3e:b2:61:39:0a:44:83:5f:38:a6:d3: bb:b1:b4:3a:80:0f:b9:ac:9c:6b:e3:05:55:b0:a2:8c:b1:83: 22:a3:a3:88:2d:42:a6:92:b2:00:b8:f2:58:8c:d2:a8:af:f5: 2b:0c:ef:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgISAZq/UYT353nGKuKUwDrdZyscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUxMTI2MDgzOTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzA2ZDgzYTI5ZDk2NGU4NTM3MzIyYTIyNWZlZTJhMGQ1OWFhMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlnHetc39fVT8tM+4rxXsgqm8pnS GfMO5S4xwhUQorvFlnRR2VTveNjkcMVHcow25CKpFDRL//5HIHUzr5Xw1jsxO8ia pPxBOneMdTXcFgxSbLsiGez2qfRZreiR2dbaF5ObxqHLLzquhjEMrxDsIsRMXTS+ fgKi6iVYnj3BEViWOCgqgDokGbfV920b1WD7PVfjRUqNBkH4HLDor4cbL/9YImih w/6JeeK1U9kHacK6s0kZ/3OO/nCHb3eEj1PK4PaSwN41ilJFhuBc45V1yiIXOsYm vC4EpY5voci7rF9h7TPmfKJkKW04lNb+88JyuaqEW82KVbtNB1ajoMj1swIDAQAB o4ICfTCCAnkwHQYDVR0OBBYEFCwG2Dop2WToU3MioiX+4qDVmqETMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xL0xBYllPaW5aWk9oVGN5S2lKZjdpb05XYW9STS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgZAGCCsGAQUFBwEHAQH/BIGAMH4wbgQCAAEwaAMDBC5Q MAoDAwA+mQMDBT6AAwMCPuADAwZPwAMDBVCAAwMGVIADAwZXgAMDBlsAAwMGXcAD BADApjEDAwHBngMDAMIZAwQBwpbkAwMAw5EDAwDD8wMDAdS4AwMD2QADAwTZUAMD BdngMAwEAgACMAYDBAUgAwAwDQYJKoZIhvcNAQELBQADggEBAKhSxYIrnOtbf1Io Wy+WFCU1MEBwEpsgNAxva/uAo0gZY+u+ZSY6zYd5eUGaYPgbXhAa2oLz/WkgQ2Wm IC6ArCvVVMM0u0WdPoBNpKx8eVGPGdCitTtSHxGjK1eDIccU1o75EC7ZC+dWzCP0 qPYNvsigaSdwZhG5M/3wSNdA0OcfIL5DItZqFGvV8V68Ju04JBC7hINvogZ/pbd9 cMpEfYgpDhAVZq5rWQFGmsak0N8vBp6NEwpa4OaBfxbBrf463+m6pgBaZqdVt8lI Ckc+smE5CkSDXzim07uxtDqAD7msnGvjBVWwooyxgyKjo4gtQqaSsgC48liM0qiv 9SsM7yE= -----END CERTIFICATE-----Generated at Fri Dec 5 07:04:04 2025 by rpki-client