This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa File: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (raw, json) Hash identifier: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU= Subject key identifier: 2C:D7:6B:77:7D:A6:2F:8A:35:E4:F8:F9:25:C5:A6:04:A4:76:43:62 Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Certificate serial: 019B7BA35A6DF87A9916555E987AB1EF715D Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa Signing time: Thu 01 Jan 2026 22:17:41 +0000 ROA not before: Thu 01 Jan 2026 22:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15532 IP address blocks: 91.206.104.0/23 maxlen: 23 91.206.104.0/24 maxlen: 24 194.11.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5a:6d:f8:7a:99:16:55:5e:98:7a:b1:ef:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd76b777da62f8a35e4f8f925c5a604a4764362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:7e:03:f1:5b:43:ca:67:9d:b2:90:51:3a: 5f:13:fa:33:f1:d7:26:1b:8f:5a:4e:20:77:6e:fa: fe:71:67:e1:10:0e:5a:e9:76:d0:ae:31:11:9c:7a: a6:5d:04:b5:a3:e2:f1:5f:58:f6:71:08:bc:4d:03: 3b:1e:ad:fd:77:c0:cc:38:24:f4:bf:c5:4f:20:5c: 59:7c:d0:78:24:87:86:7f:81:17:00:ff:9b:22:85: a4:ab:fa:d6:a1:c0:96:22:7e:2f:59:cd:e6:43:f0: b8:81:ea:b5:ed:ef:47:a0:56:1b:e5:e0:a0:6d:2f: b3:46:d4:03:b8:73:a5:02:49:05:db:ee:2a:05:c5: f1:7f:6d:04:df:b2:af:ec:ff:e3:bc:a4:b7:a2:cc: 1d:46:0d:88:01:0f:27:70:50:8b:ed:54:27:57:11: d0:d2:f6:7a:5d:4a:12:e6:95:82:e2:9b:68:6b:07: 5c:5f:ff:9a:b2:ed:19:3e:f4:09:26:3c:33:c8:67: b3:30:9b:91:8a:ed:18:ef:6a:3b:d9:f4:f3:55:4f: fc:7a:f3:15:92:37:f8:32:67:d0:7d:d2:34:5d:96: cb:78:34:4f:a6:8a:91:13:76:36:d1:50:53:ce:8c: 95:6e:07:e6:2a:62:87:4a:e3:f9:54:41:6f:fe:90: 26:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D7:6B:77:7D:A6:2F:8A:35:E4:F8:F9:25:C5:A6:04:A4:76:43:62 X509v3 Authority Key Identifier: keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.104.0/23 194.11.223.0/24 Signature Algorithm: sha256WithRSAEncryption 93:8a:b3:75:ae:d9:06:44:7a:8b:39:c1:54:e1:e1:7d:aa:a6: ca:d2:00:1e:ec:d9:e5:88:f1:dd:eb:ea:b7:8e:29:6c:7b:62: 63:c1:e6:76:b9:89:7d:7d:7e:2b:31:5e:7f:af:65:b3:97:58: 93:bc:0d:f3:47:d2:cc:10:af:36:38:53:3b:c5:f1:7b:72:23: 39:eb:4b:fb:51:b7:39:f5:3e:e7:53:dc:35:db:39:9c:c2:fc: b9:1b:d3:71:ea:22:f2:a7:3c:62:5b:8b:d5:bb:5c:d0:e3:80: f4:23:d5:7d:3d:e2:c3:c4:3a:d1:f6:a5:1f:d9:6c:69:46:83: a7:0f:bf:71:57:a3:d6:1f:39:35:3d:47:93:46:f4:2f:46:a2: 8e:d4:49:e0:20:eb:48:01:e5:42:6b:0a:a3:90:64:ac:2d:c3: f6:9f:cb:15:d2:32:67:d9:84:47:38:81:9b:b6:d3:8f:a9:a8: b2:bb:81:0c:29:8f:e7:22:b0:fe:2e:21:b8:e3:db:34:e6:36: a0:9f:db:85:4a:2c:49:bd:90:85:4f:3f:a7:bf:9f:7f:47:12: 9e:07:2c:49:b1:6a:b2:e1:f7:50:f1:f1:86:77:1a:e3:64:89: ce:47:55:ab:5a:49:ab:d7:21:d0:bb:43:d1:ed:e7:06:62:9d: 6d:0e:69:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o1pt+HqZFlVemHqx73FdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGJjZjIxMjdhZjBiMmUwYTI0NmFlNDU3NDMwNGM3YWU3 NzE1ZTkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Q3NmI3NzdkYTYyZjhhMzVlNGY4ZjkyNWM1YTYwNGE0NzY0MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4t+A/FbQ8pnnbKQUTpfE/oz8dcm G49aTiB3bvr+cWfhEA5a6XbQrjERnHqmXQS1o+LxX1j2cQi8TQM7Hq39d8DMOCT0 v8VPIFxZfNB4JIeGf4EXAP+bIoWkq/rWocCWIn4vWc3mQ/C4geq17e9HoFYb5eCg bS+zRtQDuHOlAkkF2+4qBcXxf20E37Kv7P/jvKS3oswdRg2IAQ8ncFCL7VQnVxHQ 0vZ6XUoS5pWC4ptoawdcX/+asu0ZPvQJJjwzyGezMJuRiu0Y72o72fTzVU/8evMV kjf4MmfQfdI0XZbLeDRPpoqRE3Y20VBTzoyVbgfmKmKHSuP5VEFv/pAm+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCzXa3d9pi+KNeT4+SXFpgSkdkNiMB8GA1UdIwQY MBaAFNNLzyEnrwsuCiRq5FdDBMeudxXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUt YWZjMWVlNDYxMWExLzEvTE5kcmQzMm1MNG8xNVBqNUpjV21CS1IyUTJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUtYWZjMWVlNDYxMWEx LzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW85oAwQA wgvfMA0GCSqGSIb3DQEBCwUAA4IBAQCTirN1rtkGRHqLOcFU4eF9qqbK0gAe7Nnl iPHd6+q3jilse2JjweZ2uYl9fX4rMV5/r2Wzl1iTvA3zR9LMEK82OFM7xfF7ciM5 60v7Ubc59T7nU9w12zmcwvy5G9Nx6iLypzxiW4vVu1zQ44D0I9V9PeLDxDrR9qUf 2WxpRoOnD79xV6PWHzk1PUeTRvQvRqKO1EngIOtIAeVCawqjkGSsLcP2n8sV0jJn 2YRHOIGbttOPqaiyu4EMKY/nIrD+LiG449s05jagn9uFSixJvZCFTz+nv59/RxKe ByxJsWqy4fdQ8fGGdxrjZInOR1WrWkmr1yHQu0PR7ecGYp1tDmkU -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:09 2026 by rpki-client