This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/LZIb0ymnvJVoat3eKMXkwKhNB3s.roa File: LZIb0ymnvJVoat3eKMXkwKhNB3s.roa (raw, json) Hash identifier: MiIObMs9Gh9JbmWmMRy+8OGwOPF9Eqpf22VuDL3pf3g= Subject key identifier: 2D:92:1B:D3:29:A7:BC:95:68:6A:DD:DE:28:C5:E4:C0:A8:4D:07:7B Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4 Certificate serial: 019B7F158E27F8A94D43065F1A7036750E60 Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/LZIb0ymnvJVoat3eKMXkwKhNB3s.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 77.105.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8e:27:f8:a9:4d:43:06:5f:1a:70:36:75:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d921bd329a7bc95686addde28c5e4c0a84d077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:ef:97:c5:e5:77:91:c9:66:bb:3e:0f:9e: 97:4a:e1:f0:70:a9:40:52:6a:ed:59:66:b6:81:5b: cc:4c:86:77:6a:38:82:ca:b4:79:c1:09:ca:04:49: d5:46:7f:02:e4:f5:b4:11:64:03:97:12:f9:e5:46: 17:c4:76:a4:9d:f4:f5:56:4f:fc:a7:06:87:a7:51: 9e:53:88:8f:9a:2b:6d:71:56:29:d3:d1:e4:28:93: 94:1e:28:a1:b5:21:b2:3d:99:fe:c1:b9:31:52:c1: 31:62:25:c2:fd:2c:32:59:ad:a0:eb:6e:fb:a0:5f: b7:e0:d6:5b:00:44:c7:e0:55:76:46:e8:f7:ea:79: 58:93:eb:26:45:4a:88:18:5a:55:7e:6d:6c:18:21: 5a:c6:2f:69:2b:ac:a6:7d:17:3b:3c:f0:61:e7:41: 25:da:77:f4:35:f9:f6:a7:2e:c9:b0:6d:02:02:59: 2e:e5:e8:bd:b6:a7:8b:fc:35:64:ce:b7:bc:d9:91: 45:14:01:3b:e0:8a:ba:be:3a:28:9c:d6:84:b9:aa: c6:49:9d:ab:af:b9:6a:0a:b6:c1:84:e4:4a:bd:cd: 94:a5:b5:95:8f:03:08:ba:80:ce:8c:ce:04:d4:68: 33:39:a1:1a:2e:cb:3e:9e:5c:8b:d7:8e:b6:7b:39: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:92:1B:D3:29:A7:BC:95:68:6A:DD:DE:28:C5:E4:C0:A8:4D:07:7B X509v3 Authority Key Identifier: keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/LZIb0ymnvJVoat3eKMXkwKhNB3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.166.0/24 Signature Algorithm: sha256WithRSAEncryption 39:87:2f:bb:07:9b:7d:d3:55:2a:99:17:f3:34:84:31:12:83: fe:cf:8c:ba:f1:63:d1:45:e5:35:da:69:8f:c5:28:cf:b2:dd: 4b:b2:61:4f:f8:90:dc:8a:08:4e:70:a7:3c:e7:9c:fd:4a:d4: f8:cf:d8:d6:c5:1e:ea:aa:2f:ba:70:a0:9f:73:79:6a:f8:79: a7:dc:86:04:e4:b8:d8:05:b3:b5:ec:78:37:5f:0f:f0:e0:2a: dd:b6:c4:5e:9e:68:20:f0:01:6b:94:39:7c:22:d1:ad:0f:d2: 88:78:2e:92:0b:c3:bb:79:ea:43:33:93:c4:50:1b:f5:70:66: ad:69:10:dc:81:5f:94:84:cd:a9:cd:94:38:16:de:ea:79:e1: 59:29:a0:17:f4:30:75:a2:cb:c7:4f:a5:5f:ec:ce:41:1a:87: 5e:ab:c4:36:bb:20:8c:cc:d4:8f:8f:1a:4f:b7:a8:72:5f:43: ed:81:7e:1f:5a:e4:5a:9d:20:83:78:65:cf:56:bb:d7:57:15: 3d:eb:0e:ae:88:5f:9f:91:a9:4b:0c:3c:37:1c:56:9e:9b:c3: 95:94:ac:e2:59:f9:c0:a7:87:ef:9c:47:3c:53:8b:57:71:0f: 68:4c:40:56:04:08:5d:be:34:48:2e:45:97:2a:96:6d:ef:05: 16:6b:29:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FY4n+KlNQwZfGnA2dQ5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw MGM5YTQwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkyMWJkMzI5YTdiYzk1Njg2YWRkZGUyOGM1ZTRjMGE4NGQwNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSLvl8Xld5HJZrs+D56XSuHwcKlA UmrtWWa2gVvMTIZ3ajiCyrR5wQnKBEnVRn8C5PW0EWQDlxL55UYXxHaknfT1Vk/8 pwaHp1GeU4iPmittcVYp09HkKJOUHiihtSGyPZn+wbkxUsExYiXC/SwyWa2g6277 oF+34NZbAETH4FV2Ruj36nlYk+smRUqIGFpVfm1sGCFaxi9pK6ymfRc7PPBh50El 2nf0Nfn2py7JsG0CAlku5ei9tqeL/DVkzre82ZFFFAE74Iq6vjoonNaEuarGSZ2r r7lqCrbBhORKvc2UpbWVjwMIuoDOjM4E1GgzOaEaLss+nlyL1462ezkbNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2SG9Mpp7yVaGrd3ijF5MCoTQd7MB8GA1UdIwQY MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt MTVmYzBiNjhmODQ0LzEvTFpJYjB5bW52SlZvYXQzZUtNWGt3S2hOQjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0 LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmmMA0G CSqGSIb3DQEBCwUAA4IBAQA5hy+7B5t901UqmRfzNIQxEoP+z4y68WPRReU12mmP xSjPst1LsmFP+JDcighOcKc855z9StT4z9jWxR7qqi+6cKCfc3lq+Hmn3IYE5LjY BbO17Hg3Xw/w4CrdtsRenmgg8AFrlDl8ItGtD9KIeC6SC8O7eepDM5PEUBv1cGat aRDcgV+UhM2pzZQ4Ft7qeeFZKaAX9DB1osvHT6Vf7M5BGodeq8Q2uyCMzNSPjxpP t6hyX0PtgX4fWuRanSCDeGXPVrvXVxU96w6uiF+fkalLDDw3HFaem8OVlKziWfnA p4fvnEc8U4tXcQ9oTEBWBAhdvjRILkWXKpZt7wUWaymm -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:48 2026 by rpki-client