This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/LB1iluIm_5YolIXGM1SSD3ekV9E.roa File: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (raw, json) Hash identifier: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg= Subject key identifier: 2C:1D:62:96:E2:26:FF:96:28:94:85:C6:33:54:92:0F:77:A4:57:D1 Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Certificate serial: 019B7C80B501AB48BABB08E2003941FFD708 Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/LB1iluIm_5YolIXGM1SSD3ekV9E.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203144 IP address blocks: 80.244.4.0/24 maxlen: 24 194.76.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b5:01:ab:48:ba:bb:08:e2:00:39:41:ff:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c1d6296e226ff96289485c63354920f77a457d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:18:22:80:0b:dc:1b:aa:47:78:e5:25:86: 19:0a:67:7e:66:08:d3:46:c0:d3:0f:0c:58:f0:f1: db:89:79:e3:b4:93:f7:79:ed:d0:80:1a:32:8d:8e: fd:9c:4c:09:28:7d:78:bb:4c:cd:c2:03:17:43:e4: a4:95:2d:36:2f:5f:02:62:09:98:b1:54:38:1e:c4: 72:7b:2a:09:23:51:80:a4:5b:bf:66:7e:53:f0:03: 3a:18:4c:c5:85:9c:a8:40:f3:62:20:fe:fe:34:8a: be:80:c5:68:c1:93:31:20:0f:6b:34:9d:d4:fd:a7: 85:a0:ec:d2:44:ad:ef:b2:06:e4:b4:e8:37:92:b6: f3:d5:8c:a5:d8:14:34:54:ef:94:7e:b2:eb:8a:61: 00:c2:11:73:7c:00:70:9e:f0:4e:0e:2b:c6:96:e4: c0:8b:2a:bc:67:a9:e2:a9:11:78:44:c6:4b:c8:94: 5f:01:85:7a:67:e4:3b:e3:fc:15:77:32:68:e3:d6: 18:42:00:57:fe:a0:9a:40:90:c0:25:f1:f3:a0:a6: 39:98:3f:ee:9a:b0:f9:4c:bd:ca:3e:b9:45:3a:b9: 62:81:21:06:9a:b8:48:07:fe:08:a8:2e:83:eb:78: ff:0a:14:e4:f9:5f:81:12:a5:0e:e3:f0:dd:6c:da: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:62:96:E2:26:FF:96:28:94:85:C6:33:54:92:0F:77:A4:57:D1 X509v3 Authority Key Identifier: keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/LB1iluIm_5YolIXGM1SSD3ekV9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.4.0/24 194.76.186.0/24 Signature Algorithm: sha256WithRSAEncryption 89:97:88:04:e9:ba:ac:6c:df:fd:1b:8b:9e:75:c6:7e:ae:0a: a5:41:ce:7e:52:e9:b0:2f:6f:38:c1:33:a3:22:14:86:c2:e5: eb:81:ee:60:47:61:9a:19:92:07:fb:05:3c:da:f5:d8:1e:3f: 2c:9c:ed:d5:5b:50:18:96:7a:49:b9:ea:46:a4:86:dc:be:59: 38:70:b1:fe:1b:1c:a4:1a:cb:bc:4c:43:ac:5b:48:42:93:ad: c4:76:84:e6:5d:e9:71:e6:e7:7f:6a:26:da:8a:cc:72:64:4a: c7:18:cd:5f:71:86:e5:ff:fc:b5:27:af:c8:76:09:2f:7e:62: 9d:c1:7c:b8:06:e2:ff:1e:4f:52:9d:38:7e:c0:43:61:5e:e6: 41:08:63:4a:93:30:e6:c6:d0:08:21:37:2c:28:c0:e7:8c:a4: e7:2f:ce:22:9c:6e:74:ff:1b:12:1c:49:72:80:22:cc:34:68: d0:a4:86:cb:7e:39:84:e4:40:e6:21:75:ce:ec:4b:60:64:d0: 7b:c3:9a:e3:08:8d:52:b4:a1:93:ce:33:c5:d0:99:cf:3d:58: 6f:24:03:3e:2d:68:f8:6f:53:ba:88:ea:26:d2:ee:06:5b:dc: 7b:f2:bc:5b:03:08:b2:6d:ab:46:96:68:e9:0c:1a:61:00:6b: f3:fb:95:b9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gLUBq0i6uwjiADlB/9cIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjdkYmU2YWM3NTVhOTA2M2MzNjBiMTUyNWU4NDRmZDJh NTdiOTMwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzFkNjI5NmUyMjZmZjk2Mjg5NDg1YzYzMzU0OTIwZjc3YTQ1N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9EYIoAL3BuqR3jlJYYZCmd+ZgjT RsDTDwxY8PHbiXnjtJP3ee3QgBoyjY79nEwJKH14u0zNwgMXQ+SklS02L18CYgmY sVQ4HsRyeyoJI1GApFu/Zn5T8AM6GEzFhZyoQPNiIP7+NIq+gMVowZMxIA9rNJ3U /aeFoOzSRK3vsgbktOg3krbz1Yyl2BQ0VO+UfrLrimEAwhFzfABwnvBODivGluTA iyq8Z6niqRF4RMZLyJRfAYV6Z+Q74/wVdzJo49YYQgBX/qCaQJDAJfHzoKY5mD/u mrD5TL3KPrlFOrligSEGmrhIB/4IqC6D63j/ChTk+V+BEqUO4/DdbNogqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCwdYpbiJv+WKJSFxjNUkg93pFfRMB8GA1UdIwQY MBaAFORn2+asdVqQY8NgsVJehE/SpXuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYt ZWNlNTc3ZTMwN2FkLzEvTEIxaWx1SW1fNVlvbElYR00xU1NEM2VrVjlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYtZWNlNTc3ZTMwN2Fk LzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPQEAwQA wky6MA0GCSqGSIb3DQEBCwUAA4IBAQCJl4gE6bqsbN/9G4uedcZ+rgqlQc5+Uumw L284wTOjIhSGwuXrge5gR2GaGZIH+wU82vXYHj8snO3VW1AYlnpJuepGpIbcvlk4 cLH+GxykGsu8TEOsW0hCk63EdoTmXelx5ud/aibaisxyZErHGM1fcYbl//y1J6/I dgkvfmKdwXy4BuL/Hk9SnTh+wENhXuZBCGNKkzDmxtAIITcsKMDnjKTnL84inG50 /xsSHElygCLMNGjQpIbLfjmE5EDmIXXO7EtgZNB7w5rjCI1StKGTzjPF0JnPPVhv JAM+LWj4b1O6iOom0u4GW9x78rxbAwiybatGlmjpDBphAGvz+5W5 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:28 2026 by rpki-client