This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa File: LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa (raw, json) Hash identifier: 3JSgEpOjV3VwZSuSqrVrhNnp29HLqalajVpqLvd8t0Q= Subject key identifier: 2D:50:41:C3:79:1B:0D:F3:3C:40:BA:3C:53:C1:69:92:06:56:04:A6 Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6 Certificate serial: 019B7F135ACF06A62FCD59D8AABBDA288BA5 Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa Signing time: Fri 02 Jan 2026 14:18:53 +0000 ROA not before: Fri 02 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208315 IP address blocks: 45.142.240.0/22 maxlen: 22 2a0e:dc40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:5a:cf:06:a6:2f:cd:59:d8:aa:bb:da:28:8b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6 Validity Not Before: Jan 2 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d5041c3791b0df33c40ba3c53c16992065604a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:08:69:87:10:55:a9:aa:ee:d0:7e:6e:a9: d6:44:59:9f:d4:a4:80:d1:6d:79:35:b9:d9:af:cb: b6:7c:bd:4e:f2:29:88:0e:5d:ce:59:17:74:c7:ad: f4:a2:5c:e3:da:b3:75:43:d0:8d:6a:3f:5e:31:92: 80:f0:25:aa:2e:a4:ef:d3:d7:2b:63:db:3c:c1:c4: d8:b7:d8:f2:c2:cd:13:67:a1:23:4a:51:1c:4c:ef: 0e:8c:e5:9a:45:78:aa:bc:b8:6b:f2:9b:c7:4b:24: b3:be:5b:e4:06:83:53:f2:6d:d0:cc:87:f8:c2:a3: be:23:da:e1:9d:63:b9:a4:a3:22:1f:a6:92:e2:9d: 9b:62:f1:e8:2e:62:01:91:d1:97:ab:2b:0f:e6:36: c9:b1:2c:14:64:b0:4f:07:83:73:b0:b1:5b:7d:28: 3a:86:9e:11:ed:4b:b7:0b:5f:95:67:78:3d:65:2f: 41:fa:73:9c:4a:23:75:81:d9:f4:b4:dd:64:c2:d1: 42:6d:11:20:95:07:c4:83:33:f8:63:21:5c:9e:d8: 9f:0e:7b:df:3e:4d:63:82:df:f0:f5:a9:e0:7a:ee: df:5a:68:8f:50:6d:8a:d1:58:e9:c8:d7:49:21:77: ac:ab:47:42:00:da:56:55:f1:64:70:b1:25:32:d0: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:50:41:C3:79:1B:0D:F3:3C:40:BA:3C:53:C1:69:92:06:56:04:A6 X509v3 Authority Key Identifier: keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.240.0/22 IPv6: 2a0e:dc40::/29 Signature Algorithm: sha256WithRSAEncryption 9b:12:f5:36:a9:a2:a1:c4:be:cd:74:be:9c:bd:eb:7a:cf:67: 1b:78:e0:b1:3e:ef:96:c7:a8:c1:f2:d3:45:9a:8a:d2:89:a6: 28:0d:54:57:08:50:5f:9a:07:41:59:9e:9e:99:39:a5:68:f3: a4:ee:c7:cb:76:77:d4:52:d6:05:83:95:53:dc:f8:bc:78:a3: eb:a3:72:8f:2c:53:f2:98:cc:ab:00:8f:f7:05:ec:f4:6b:81: 5f:21:2d:7e:74:70:6a:df:50:f2:f5:48:85:08:b6:60:76:11: aa:dc:8e:bf:62:85:f5:67:81:83:dc:6f:97:18:0b:49:34:fe: 0c:d1:a0:fe:fb:c4:2a:9a:8e:61:8c:ea:62:04:d6:67:76:0a: 90:65:4f:dc:0e:78:07:de:26:a6:a8:10:c5:d7:bd:43:43:c2: 71:e6:e4:4a:2a:61:6e:64:4d:de:ef:6f:83:24:71:14:08:cc: 47:7a:e0:d1:0b:fb:53:b0:8d:2c:4f:9e:15:9f:20:fe:ab:49: 6a:07:c8:0e:a8:20:16:0c:b9:03:53:e5:c0:c6:48:c5:81:84: db:c4:e2:a2:2d:25:ba:d7:ae:44:4c:9a:2f:d0:b5:90:ec:4d: 48:5b:65:63:01:7d:6e:9a:b7:c3:9a:6c:2b:e1:1c:c2:7f:52: f9:29:f3:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E1rPBqYvzVnYqrvaKIulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOGU3MDk3OTkwZTVhNjcxNzhlMjk3ODc1YTBkOWY0NjA1 ODkyYTYwHhcNMjYwMTAyMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDUwNDFjMzc5MWIwZGYzM2M0MGJhM2M1M2MxNjk5MjA2NTYwNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpUIaYcQVamq7tB+bqnWRFmf1KSA 0W15NbnZr8u2fL1O8imIDl3OWRd0x630olzj2rN1Q9CNaj9eMZKA8CWqLqTv09cr Y9s8wcTYt9jyws0TZ6EjSlEcTO8OjOWaRXiqvLhr8pvHSySzvlvkBoNT8m3QzIf4 wqO+I9rhnWO5pKMiH6aS4p2bYvHoLmIBkdGXqysP5jbJsSwUZLBPB4NzsLFbfSg6 hp4R7Uu3C1+VZ3g9ZS9B+nOcSiN1gdn0tN1kwtFCbREglQfEgzP4YyFcntifDnvf Pk1jgt/w9angeu7fWmiPUG2K0VjpyNdJIXesq0dCANpWVfFkcLElMtCTMQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC1QQcN5Gw3zPEC6PFPBaZIGVgSmMB8GA1UdIwQY MBaAFHyOcJeZDlpnF44peHWg2fRgWJKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQt YThhYzQxODA5ZjVmLzEvTFZCQncza2JEZk04UUxvOFU4RnBrZ1pXQktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQtYThhYzQxODA5ZjVm LzEvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY7wMA0E AgACMAcDBQMqDtxAMA0GCSqGSIb3DQEBCwUAA4IBAQCbEvU2qaKhxL7NdL6cvet6 z2cbeOCxPu+Wx6jB8tNFmorSiaYoDVRXCFBfmgdBWZ6emTmlaPOk7sfLdnfUUtYF g5VT3Pi8eKPro3KPLFPymMyrAI/3Bez0a4FfIS1+dHBq31Dy9UiFCLZgdhGq3I6/ YoX1Z4GD3G+XGAtJNP4M0aD++8Qqmo5hjOpiBNZndgqQZU/cDngH3iamqBDF171D Q8Jx5uRKKmFuZE3e72+DJHEUCMxHeuDRC/tTsI0sT54VnyD+q0lqB8gOqCAWDLkD U+XAxkjFgYTbxOKiLSW6165ETJov0LWQ7E1IW2VjAX1umrfDmmwr4RzCf1L5KfOf -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:58 2026 by rpki-client