This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/LC5Mu0EHFpOuyF3AsdML60Oq8I4.roa File: LC5Mu0EHFpOuyF3AsdML60Oq8I4.roa (raw, json) Hash identifier: W64k0JzMt5VdTs+SJjlrI8vTWVThfolarZ2v/pELr38= Subject key identifier: 2C:2E:4C:BB:41:07:16:93:AE:C8:5D:C0:B1:D3:0B:EB:43:AA:F0:8E Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 019ACB504CDBC1A071861B01650BF99A778A Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/LC5Mu0EHFpOuyF3AsdML60Oq8I4.roa Signing time: Fri 28 Nov 2025 16:33:48 +0000 ROA not before: Fri 28 Nov 2025 16:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 77.83.152.0/24 maxlen: 24 77.83.153.0/24 maxlen: 24 77.83.154.0/24 maxlen: 24 77.83.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:50:4c:db:c1:a0:71:86:1b:01:65:0b:f9:9a:77:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Nov 28 16:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c2e4cbb41071693aec85dc0b1d30beb43aaf08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:ce:97:19:a7:9f:33:f9:22:f3:8e:c5:a3: 90:6f:59:9b:4b:75:2c:45:0e:c8:34:47:a2:e6:06: 73:04:88:62:da:3d:a7:3a:b9:4f:bd:6f:26:db:3a: 91:1d:c1:23:5f:e1:a0:b9:d5:81:73:63:a8:1f:ff: a4:54:e0:6e:85:46:9e:4e:9e:ca:d1:08:84:1c:e8: 24:b1:10:56:89:cf:1a:d9:0a:ef:04:f5:8c:d0:d1: 79:20:b9:7e:59:3c:ef:81:ad:92:57:87:cd:b4:25: 4c:ca:5f:55:c1:87:05:b4:83:70:55:d4:58:d7:0b: 30:33:76:7b:a1:ea:fb:35:93:51:9f:1a:6b:51:65: 74:37:9e:f3:b9:6d:54:72:95:f2:72:c2:24:4d:9f: 08:f5:e4:55:70:a2:34:ac:d6:08:96:51:29:59:4d: 92:65:68:c7:2c:0d:13:30:09:93:33:c3:b4:14:84: 1f:56:5e:3d:f2:e1:69:ef:1e:e2:56:4b:7e:c3:34: 8b:a1:9d:f6:3a:7a:48:fd:0f:2a:91:e0:5e:5c:ce: 7f:8d:63:24:b8:30:cb:68:25:7c:3c:68:4d:b6:5f: 8c:4f:8a:0f:6c:39:a6:dc:4d:b0:3a:27:1b:ee:b1: 21:03:13:2e:7c:39:18:c4:ac:5d:11:ae:75:7c:18: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:4C:BB:41:07:16:93:AE:C8:5D:C0:B1:D3:0B:EB:43:AA:F0:8E X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/LC5Mu0EHFpOuyF3AsdML60Oq8I4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.152.0/22 Signature Algorithm: sha256WithRSAEncryption 85:29:86:fa:05:be:50:7d:8b:82:61:ab:f8:7f:a8:91:7b:ed: f4:ff:4a:de:19:8d:18:2d:0d:65:46:7d:68:f5:ac:fd:d9:48: 2b:4d:23:8f:5d:2c:6d:02:f0:67:87:14:c8:4a:8f:f7:73:3f: 34:46:1e:e6:a5:20:90:50:58:84:e0:76:4a:84:13:22:40:d9: 04:d7:91:55:d3:9c:cf:8f:7b:df:e5:17:d7:c8:36:33:63:50: 8c:a7:34:2c:81:01:ca:75:bd:3c:e6:39:0e:b0:c1:a2:88:8b: 31:9d:42:76:07:08:04:de:38:c6:c6:1f:e0:45:5c:f4:6a:4a: 16:8d:96:7b:03:5e:76:a5:b0:14:ce:8a:a1:5f:57:9b:85:16: ab:6d:7b:18:07:34:4a:b0:de:87:b5:2f:2b:56:7c:10:5a:19: 25:29:77:6b:2b:35:cc:a4:75:a4:72:83:85:c4:e0:43:9c:f9: 9a:4a:1e:45:a0:38:4f:1c:b6:d7:0a:5a:f0:cb:1e:c4:43:cb: 38:23:20:04:b8:16:9e:39:6c:7f:20:f7:70:3f:07:ac:ee:83: c5:48:0d:c3:3c:92:7a:ac:06:2e:aa:23:f1:fc:6d:1d:46:48: e8:c3:0b:ae:9c:2f:1a:cf:f1:83:54:8b:c9:58:83:f1:ba:49: 46:14:89:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrLUEzbwaBxhhsBZQv5mneKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUxMTI4MTYzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzJlNGNiYjQxMDcxNjkzYWVjODVkYzBiMWQzMGJlYjQzYWFmMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/POlxmnnzP5IvOOxaOQb1mbS3Us RQ7INEei5gZzBIhi2j2nOrlPvW8m2zqRHcEjX+GgudWBc2OoH/+kVOBuhUaeTp7K 0QiEHOgksRBWic8a2QrvBPWM0NF5ILl+WTzvga2SV4fNtCVMyl9VwYcFtINwVdRY 1wswM3Z7oer7NZNRnxprUWV0N57zuW1UcpXycsIkTZ8I9eRVcKI0rNYIllEpWU2S ZWjHLA0TMAmTM8O0FIQfVl498uFp7x7iVkt+wzSLoZ32OnpI/Q8qkeBeXM5/jWMk uDDLaCV8PGhNtl+MT4oPbDmm3E2wOicb7rEhAxMufDkYxKxdEa51fBimgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwuTLtBBxaTrshdwLHTC+tDqvCOMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvTEM1TXUwRUhGcE91eUYzQXNkTUw2ME9xOEk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVOYMA0G CSqGSIb3DQEBCwUAA4IBAQCFKYb6Bb5QfYuCYav4f6iRe+30/0reGY0YLQ1lRn1o 9az92UgrTSOPXSxtAvBnhxTISo/3cz80Rh7mpSCQUFiE4HZKhBMiQNkE15FV05zP j3vf5RfXyDYzY1CMpzQsgQHKdb085jkOsMGiiIsxnUJ2BwgE3jjGxh/gRVz0akoW jZZ7A152pbAUzoqhX1ebhRarbXsYBzRKsN6HtS8rVnwQWhklKXdrKzXMpHWkcoOF xOBDnPmaSh5FoDhPHLbXClrwyx7EQ8s4IyAEuBaeOWx/IPdwPwes7oPFSA3DPJJ6 rAYuqiPx/G0dRkjowwuunC8az/GDVIvJWIPxuklGFImb -----END CERTIFICATE-----Generated at Fri Dec 5 11:53:30 2025 by rpki-client