This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LN_d_KFeYmWgaTvIjU4kZsCt9Lg.roa File: LN_d_KFeYmWgaTvIjU4kZsCt9Lg.roa (raw, json) Hash identifier: 70wtq0GSbZKnpwbcJ3hNvnTlzf4Grw7Y3hDXaxu8B8E= Subject key identifier: 2C:DF:DD:FC:A1:5E:62:65:A0:69:3B:C8:8D:4E:24:66:C0:AD:F4:B8 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5779F89F484964BEB8213EB94640 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LN_d_KFeYmWgaTvIjU4kZsCt9Lg.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207821 IP address blocks: 45.129.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:57:79:f8:9f:48:49:64:be:b8:21:3e:b9:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cdfddfca15e6265a0693bc88d4e2466c0adf4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3c:36:ae:40:a3:2e:f0:ae:8f:e5:dd:f5:62: bf:f7:25:21:c9:7f:0b:c6:bc:f4:28:04:c1:59:7e: b0:8e:c2:75:9b:25:90:72:7d:56:50:ec:1f:0b:78: a4:9e:ed:9f:ae:91:40:f5:76:11:5c:e5:7b:48:67: eb:84:0d:ef:55:d0:16:e6:a0:be:53:e4:56:f7:4c: 78:a0:24:09:81:3b:3d:27:5b:ad:da:71:bd:a5:bd: d7:76:cb:a8:5e:86:09:d4:10:a4:ca:dc:8f:e6:79: e4:44:99:51:6e:2f:b2:1e:4a:27:f8:57:2e:ec:4d: b6:93:ae:4d:d2:af:c6:01:7a:6c:d3:17:41:ba:34: bd:68:08:42:31:16:d3:3b:89:ae:b3:15:42:21:b9: 56:59:c4:d7:66:69:dd:1b:fc:cc:a0:f1:a6:6a:12: 09:2e:d4:3a:4e:b1:ad:03:63:1f:f9:77:a0:70:fa: 30:55:88:05:6d:5c:35:a0:7b:c4:02:1f:fd:46:f2: 59:61:6c:cf:e3:65:f6:f2:43:51:30:47:57:f0:f5: 95:b6:1a:54:15:3e:f2:be:b6:1c:c4:fe:8b:df:96: fa:32:f3:8e:02:0c:ea:e3:ac:1d:76:70:70:eb:fc: bd:5f:a8:19:80:21:76:de:3b:97:fd:48:92:4b:e2: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:DD:FC:A1:5E:62:65:A0:69:3B:C8:8D:4E:24:66:C0:AD:F4:B8 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LN_d_KFeYmWgaTvIjU4kZsCt9Lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.134.0/23 Signature Algorithm: sha256WithRSAEncryption 29:c4:e7:4b:fc:b6:66:13:61:01:72:cc:48:d0:5b:15:4f:49: eb:2f:23:01:df:bf:2d:53:1f:cb:64:f4:34:54:3c:92:dd:b0: 5b:71:44:57:ec:75:a6:ed:ad:40:65:de:2f:3a:c7:c1:d6:99: 5e:b8:21:81:22:05:2b:7a:47:b5:f6:8f:23:c8:aa:19:ad:bb: a0:fb:1e:bd:c5:ee:6b:5a:7c:9b:d6:ad:15:73:9a:ad:d4:2b: ea:7b:94:af:a6:51:f6:32:1c:c1:a2:cf:eb:c4:4e:e4:9f:ce: 70:18:27:19:55:93:cb:62:43:9d:96:80:73:bf:b0:c1:80:77: fb:14:dd:10:7a:c8:54:93:99:17:3e:48:13:53:33:a2:9c:14: 59:11:ce:77:08:00:89:4d:49:50:ac:bc:98:e4:cd:c1:06:b3: 25:9c:57:88:99:cb:51:ea:e8:39:a0:6d:2a:06:0d:02:6b:ad: fc:3b:46:40:57:68:60:27:9e:47:1d:0c:86:d0:70:0c:d5:46: 13:d2:34:05:9b:16:8d:38:e6:75:78:f1:2f:b7:6e:c5:16:ad: 39:fb:05:50:14:b0:77:cc:07:e1:e5:df:73:81:ff:1f:88:e7: 58:e0:8f:cb:03:73:01:3f:90:61:7a:79:79:ee:7a:26:73:e3: be:90:47:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVd5+J9ISWS+uCE+uUZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2RmZGRmY2ExNWU2MjY1YTA2OTNiYzg4ZDRlMjQ2NmMwYWRmNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+zw2rkCjLvCuj+Xd9WK/9yUhyX8L xrz0KATBWX6wjsJ1myWQcn1WUOwfC3iknu2frpFA9XYRXOV7SGfrhA3vVdAW5qC+ U+RW90x4oCQJgTs9J1ut2nG9pb3XdsuoXoYJ1BCkytyP5nnkRJlRbi+yHkon+Fcu 7E22k65N0q/GAXps0xdBujS9aAhCMRbTO4musxVCIblWWcTXZmndG/zMoPGmahIJ LtQ6TrGtA2Mf+XegcPowVYgFbVw1oHvEAh/9RvJZYWzP42X28kNRMEdX8PWVthpU FT7yvrYcxP6L35b6MvOOAgzq46wddnBw6/y9X6gZgCF23juX/UiSS+I5SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzf3fyhXmJloGk7yI1OJGbArfS4MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvTE5fZF9LRmVZbVdnYVR2SWpVNGtac0N0OUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYGGMA0G CSqGSIb3DQEBCwUAA4IBAQApxOdL/LZmE2EBcsxI0FsVT0nrLyMB378tUx/LZPQ0 VDyS3bBbcURX7HWm7a1AZd4vOsfB1pleuCGBIgUreke19o8jyKoZrbug+x69xe5r Wnyb1q0Vc5qt1Cvqe5SvplH2MhzBos/rxE7kn85wGCcZVZPLYkOdloBzv7DBgHf7 FN0QeshUk5kXPkgTUzOinBRZEc53CACJTUlQrLyY5M3BBrMlnFeImctR6ug5oG0q Bg0Ca638O0ZAV2hgJ55HHQyG0HAM1UYT0jQFmxaNOOZ1ePEvt27FFq05+wVQFLB3 zAfh5d9zgf8fiOdY4I/LA3MBP5Bhenl57nomc+O+kEfU -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:19 2026 by rpki-client