This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LT3YYv-99M7I5WPWICN5prggXr4.roa File: LT3YYv-99M7I5WPWICN5prggXr4.roa (raw, json) Hash identifier: Rxmbuhif6CIKGQHuH8K6Fd6Gkso/7e6NicBm352lfQA= Subject key identifier: 2D:3D:D8:62:FF:BD:F4:CE:C8:E5:63:D6:20:23:79:A6:B8:20:5E:BE Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79107AEAE97C27D69F22BDAA30188DCD Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LT3YYv-99M7I5WPWICN5prggXr4.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216394 IP address blocks: 77.92.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7a:ea:e9:7c:27:d6:9f:22:bd:aa:30:18:8d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d3dd862ffbdf4cec8e563d6202379a6b8205ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:95:7f:a1:08:ad:2e:07:2a:32:9b:af:a2: ef:16:cf:dc:63:16:b6:92:02:1c:65:ff:09:99:39: f8:95:19:19:b7:f3:a1:55:3f:a2:9d:fc:f4:43:f8: eb:b5:b2:a8:ac:03:8d:66:4d:8e:48:d8:d0:e6:b2: bd:de:73:06:38:ad:79:3d:71:14:03:db:46:3a:62: b2:bb:29:5c:56:79:0c:2c:6a:fb:e0:dc:39:63:42: 25:48:72:53:f5:85:45:7c:d5:7d:35:aa:d7:4e:88: ef:5c:14:a3:c5:45:2c:58:17:60:99:1b:79:62:24: 04:d1:e9:31:0a:8f:7a:52:f6:23:cf:92:13:17:e7: a0:b0:ba:f6:2e:ce:01:07:c6:8b:56:50:eb:62:d8: 85:06:2b:38:fd:02:1b:56:b1:eb:36:d4:13:71:0c: ec:c0:df:db:aa:cd:86:cd:cb:73:01:a7:20:04:48: 60:e7:25:c6:96:7b:5f:27:db:d6:3e:79:23:d6:a8: d4:2d:c4:04:61:fd:54:b9:59:52:46:a4:0f:d3:eb: c8:ea:0b:04:e7:65:fe:71:43:a3:e2:41:e6:a2:e9: a5:84:92:18:1e:cc:9f:8f:d7:11:4a:3b:b6:76:8a: 27:5c:3b:c6:d0:cb:76:d1:00:3c:b8:b8:f3:41:07: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3D:D8:62:FF:BD:F4:CE:C8:E5:63:D6:20:23:79:A6:B8:20:5E:BE X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LT3YYv-99M7I5WPWICN5prggXr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.151.0/24 Signature Algorithm: sha256WithRSAEncryption 34:2c:89:f7:9b:c4:ec:a2:01:0f:35:49:f5:20:4f:22:f7:dc: 8d:04:c3:3c:08:b4:25:2b:cd:1d:44:46:77:bf:ad:38:64:c2: 2d:f0:9c:13:5b:82:1d:be:e9:1b:cd:e2:6e:fb:cf:f0:fc:c3: 98:8c:9f:a8:0f:bf:62:a4:ac:af:7c:64:f2:20:54:f5:f3:3f: 8e:c7:a9:4a:30:d7:d9:58:22:58:4f:67:1d:b8:9e:e9:6e:f7: 1c:33:74:2c:ab:b2:50:b5:57:f9:fd:e3:ae:9c:81:d4:36:d1: 2a:b9:04:2b:e1:b1:ac:8a:b0:27:a3:99:09:34:7b:b3:90:4c: 0e:ad:a4:ce:55:eb:2f:9c:36:3d:ff:05:c0:2b:05:8c:89:20: be:53:1f:50:3f:1a:3e:73:2b:65:66:20:90:06:da:2b:79:50: 0f:8f:2c:9a:b8:00:3b:ec:aa:9c:39:ca:84:9d:37:ae:32:e1: 53:d4:41:b0:70:2b:13:ee:d6:7e:ef:10:92:47:4b:ae:c4:63: 22:c5:11:3d:d6:85:17:8d:97:4b:5c:67:6d:a4:96:bb:5b:7c: 44:50:dd:be:fb:d7:00:d2:0d:7d:6c:ad:08:00:c9:ba:19:63: 15:75:12:bb:43:d0:70:1b:84:3f:69:84:4b:1d:79:15:5e:7d: 75:94:14:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHrq6Xwn1p8ivaowGI3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDNkZDg2MmZmYmRmNGNlYzhlNTYzZDYyMDIzNzlhNmI4MjA1ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2WVf6EIrS4HKjKbr6LvFs/cYxa2 kgIcZf8JmTn4lRkZt/OhVT+infz0Q/jrtbKorAONZk2OSNjQ5rK93nMGOK15PXEU A9tGOmKyuylcVnkMLGr74Nw5Y0IlSHJT9YVFfNV9NarXTojvXBSjxUUsWBdgmRt5 YiQE0ekxCo96UvYjz5ITF+egsLr2Ls4BB8aLVlDrYtiFBis4/QIbVrHrNtQTcQzs wN/bqs2GzctzAacgBEhg5yXGlntfJ9vWPnkj1qjULcQEYf1UuVlSRqQP0+vI6gsE 52X+cUOj4kHmoumlhJIYHsyfj9cRSju2doonXDvG0Mt20QA8uLjzQQeuvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC092GL/vfTOyOVj1iAjeaa4IF6+MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvTFQzWVl2LTk5TTdJNVdQV0lDTjVwcmdnWHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyXMA0G CSqGSIb3DQEBCwUAA4IBAQA0LIn3m8TsogEPNUn1IE8i99yNBMM8CLQlK80dREZ3 v604ZMIt8JwTW4IdvukbzeJu+8/w/MOYjJ+oD79ipKyvfGTyIFT18z+Ox6lKMNfZ WCJYT2cduJ7pbvccM3Qsq7JQtVf5/eOunIHUNtEquQQr4bGsirAno5kJNHuzkEwO raTOVesvnDY9/wXAKwWMiSC+Ux9QPxo+cytlZiCQBtoreVAPjyyauAA77KqcOcqE nTeuMuFT1EGwcCsT7tZ+7xCSR0uuxGMixRE91oUXjZdLXGdtpJa7W3xEUN2++9cA 0g19bK0IAMm6GWMVdRK7Q9BwG4Q/aYRLHXkVXn11lBS4 -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:55 2026 by rpki-client