This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/LaBbMvd3OwQhNnrUizZKTdnekiQ.roa File: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (raw, json) Hash identifier: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8= Subject key identifier: 2D:A0:5B:32:F7:77:3B:04:21:36:7A:D4:8B:36:4A:4D:D9:DE:92:24 Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Certificate serial: 019B76EB4C75E283C873569B6E4902386020 Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/LaBbMvd3OwQhNnrUizZKTdnekiQ.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52026 IP address blocks: 91.234.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4c:75:e2:83:c8:73:56:9b:6e:49:02:38:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da05b32f7773b0421367ad48b364a4dd9de9224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:29:62:51:26:4d:e6:c5:8c:fe:1b:ed:6e:a4: 1c:2b:90:ab:5b:d2:1c:a9:8b:5b:cc:1b:9d:72:2c: 52:82:5f:94:36:ee:56:64:03:64:dd:9e:06:ce:7a: 1f:0e:fa:ad:dc:99:b4:94:1b:d1:f6:57:2f:cc:84: df:78:5c:c0:a7:b5:bd:77:1e:c5:51:d6:0d:24:89: 8f:c0:92:9a:c9:e5:8a:0e:23:2d:74:88:30:04:f8: f9:e8:4c:f7:80:92:9e:7f:62:b0:7f:9a:fa:4a:17: a0:4d:25:43:81:e2:db:99:b5:92:77:3c:20:ae:0a: ba:67:cb:cc:f8:c8:1c:ab:bb:f6:6d:de:a2:18:eb: d3:10:e3:2e:49:9a:32:d0:0b:62:73:fc:81:6f:8b: 4b:ff:d6:78:50:5b:58:3a:f7:46:80:da:55:62:84: 43:67:19:a6:3c:41:18:9d:f0:b1:6f:19:f9:59:6a: 47:7c:4e:d9:55:83:5e:ae:04:ff:9b:06:9a:b2:c2: d5:dd:b3:f8:65:b7:a7:81:0b:5f:b0:76:2b:a5:e9: 8e:1e:ea:40:3d:52:6c:80:50:08:3c:e4:70:68:b9: a2:6b:8e:8c:2e:77:32:e9:41:4d:e1:af:31:17:92: 34:dc:1a:e0:09:d5:83:b7:80:cf:44:07:9a:cf:fa: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A0:5B:32:F7:77:3B:04:21:36:7A:D4:8B:36:4A:4D:D9:DE:92:24 X509v3 Authority Key Identifier: keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/LaBbMvd3OwQhNnrUizZKTdnekiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:98:5d:53:9b:12:8e:91:8c:40:8c:ab:3e:f0:e5:bc:85:c7: 63:6f:ac:1f:2f:72:1d:1c:ad:b1:89:16:a3:ca:53:2e:60:c4: 91:fc:c6:84:10:44:6e:b9:60:8d:e3:fc:14:b5:9d:e1:4b:fd: fb:1a:fc:48:43:99:1d:d1:87:62:d0:1a:43:3a:45:14:ad:57: 42:2d:4e:3d:25:fd:0b:e5:53:f6:7f:1d:a8:a8:58:3c:f2:c9: 3a:96:44:e4:16:8a:ec:c5:fe:1d:62:d9:73:cf:15:5d:30:a2: a3:1f:79:62:40:d9:46:a6:7d:63:29:01:33:5e:c7:15:d6:c6: 36:ec:47:71:59:df:cb:c9:95:32:55:39:82:c3:d6:3c:47:d9: 03:83:a1:4c:14:96:e2:c1:94:24:b2:34:aa:93:64:d3:8c:3a: d2:ae:fa:59:78:8f:37:81:09:a8:9e:18:ff:9e:d6:0f:e4:77: 41:bc:d8:d7:62:ea:71:f1:9f:ae:91:29:99:7b:b6:b6:38:80: b1:32:20:6a:dd:ad:56:7b:c2:a7:40:8c:b1:7a:64:1e:1b:88: 58:4c:d4:38:1b:4b:54:7b:51:76:7b:eb:97:19:a0:e1:46:50: a8:99:a9:2b:a0:c8:f8:e2:dd:6b:67:66:21:25:60:cb:dd:e5: f1:00:d4:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260x14oPIc1abbkkCOGAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm NTQ3YTIwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGEwNWIzMmY3NzczYjA0MjEzNjdhZDQ4YjM2NGE0ZGQ5ZGU5MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCliUSZN5sWM/hvtbqQcK5CrW9Ic qYtbzBudcixSgl+UNu5WZANk3Z4GznofDvqt3Jm0lBvR9lcvzITfeFzAp7W9dx7F UdYNJImPwJKayeWKDiMtdIgwBPj56Ez3gJKef2Kwf5r6ShegTSVDgeLbmbWSdzwg rgq6Z8vM+Mgcq7v2bd6iGOvTEOMuSZoy0Atic/yBb4tL/9Z4UFtYOvdGgNpVYoRD ZxmmPEEYnfCxbxn5WWpHfE7ZVYNergT/mwaassLV3bP4ZbengQtfsHYrpemOHupA PVJsgFAIPORwaLmia46MLncy6UFN4a8xF5I03BrgCdWDt4DPRAeaz/ofIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2gWzL3dzsEITZ61Is2Sk3Z3pIkMB8GA1UdIwQY MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt MTg4MGU3ZWYxZGI0LzEvTGFCYk12ZDNPd1FoTm5yVWl6WktUZG5la2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0 LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+qEMA0G CSqGSIb3DQEBCwUAA4IBAQAdmF1TmxKOkYxAjKs+8OW8hcdjb6wfL3IdHK2xiRaj ylMuYMSR/MaEEERuuWCN4/wUtZ3hS/37GvxIQ5kd0Ydi0BpDOkUUrVdCLU49Jf0L 5VP2fx2oqFg88sk6lkTkForsxf4dYtlzzxVdMKKjH3liQNlGpn1jKQEzXscV1sY2 7EdxWd/LyZUyVTmCw9Y8R9kDg6FMFJbiwZQksjSqk2TTjDrSrvpZeI83gQmonhj/ ntYP5HdBvNjXYupx8Z+ukSmZe7a2OICxMiBq3a1We8KnQIyxemQeG4hYTNQ4G0tU e1F2e+uXGaDhRlComakroMj44t1rZ2YhJWDL3eXxANTJ -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:42 2026 by rpki-client