This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LSJGfLb8IebGPRaYQJynh33g5Jc.roa File: LSJGfLb8IebGPRaYQJynh33g5Jc.roa (raw, json) Hash identifier: fLRksMT0wITOKQirOpQdNFgGxf3gM4ebg+XPgLCPzks= Subject key identifier: 2D:22:46:7C:B6:FC:21:E6:C6:3D:16:98:40:9C:A7:87:7D:E0:E4:97 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F343C340BD4A291A6B538FD49875 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LSJGfLb8IebGPRaYQJynh33g5Jc.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207408 IP address blocks: 80.77.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:43:c3:40:bd:4a:29:1a:6b:53:8f:d4:98:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d22467cb6fc21e6c63d1698409ca7877de0e497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:97:2c:a8:5b:63:0b:73:a0:56:dc:63:8c: f1:25:ee:6a:13:58:78:8a:32:3c:56:fd:89:0e:7a: 9f:73:e8:ac:18:72:de:d9:85:02:74:ea:5b:7e:9c: 31:8e:f6:39:02:ad:cd:53:1f:2c:c8:d3:4e:23:01: f1:8c:6f:65:0a:a6:6f:de:36:0d:44:53:45:4c:86: ab:87:13:9d:80:8a:46:78:9a:41:c0:39:fb:92:84: c3:99:ca:5d:e2:7a:e3:b5:0a:0f:2d:9d:99:a3:d3: 45:ce:92:51:b1:fe:fc:fb:bb:e0:ff:59:2f:1b:8b: 1e:c5:7a:cf:c1:c2:74:2f:c8:1e:ca:02:a0:cd:9f: b3:c0:21:0c:d9:13:fe:f2:7e:0a:94:76:ca:d9:75: 83:09:6c:8e:fc:0f:83:b4:0a:a2:b4:00:98:e0:7b: 4e:da:6d:94:c3:72:ff:8d:6d:75:8d:33:f5:ae:9d: c6:08:74:e2:3c:fd:4c:15:0c:1d:46:c5:a1:a8:95: 43:79:c1:9e:e0:44:8c:4f:11:0c:47:4e:5d:9a:aa: ed:24:ff:57:0e:35:14:4b:25:54:d0:cf:8d:ac:29: 32:81:ad:57:53:c1:f9:7f:e7:33:ee:1f:ec:69:bf: 9b:2d:13:2c:65:ba:4f:fe:65:aa:87:56:b3:4e:a7: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:22:46:7C:B6:FC:21:E6:C6:3D:16:98:40:9C:A7:87:7D:E0:E4:97 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LSJGfLb8IebGPRaYQJynh33g5Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.25.0/24 Signature Algorithm: sha256WithRSAEncryption a1:b0:41:6b:50:ff:40:46:44:10:51:e0:7c:f8:52:02:5a:6a: 13:ec:fa:61:b4:1a:b1:1f:83:3d:63:ec:62:81:61:bb:ed:96: 0c:27:cc:d0:6b:ea:8c:0e:7f:28:94:24:b4:2d:09:84:0d:0e: 60:65:8e:7a:e7:a8:20:d3:a8:14:73:a8:45:4e:28:54:dc:b5: 43:03:55:2f:46:ee:b8:21:4c:88:42:07:06:64:65:8f:82:13: 53:79:28:64:c9:ba:3a:81:a9:04:e4:4a:d5:e3:da:c6:5e:41: 8d:8b:c5:16:c4:e9:77:87:79:0c:fe:b8:85:e9:43:00:1f:d2: 94:43:2c:0d:01:ff:e3:a7:39:d6:d7:c5:fb:05:51:2c:51:1d: e7:e3:3e:7d:b8:1a:c6:97:b1:c8:ea:2f:3f:f5:b0:6d:3f:c8: aa:49:00:f1:02:68:a2:f8:d3:ab:00:b3:fe:a7:10:55:bd:27: 1c:f1:c3:b4:53:73:ce:c6:d1:37:b0:1e:05:5f:b6:d0:6a:6f: 1b:f8:c6:27:1c:b0:7e:3d:b8:5e:ed:fb:cc:cc:d7:4d:a0:57: 9b:df:63:0a:f3:2c:ea:76:eb:26:8f:a2:76:33:b0:1d:74:28: 24:bf:fa:fe:cb:6d:50:5a:63:67:f4:56:21:ac:31:cf:7f:e4: ed:28:16:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPNDw0C9Sikaa1OP1Jh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDIyNDY3Y2I2ZmMyMWU2YzYzZDE2OTg0MDljYTc4NzdkZTBlNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB6XLKhbYwtzoFbcY4zxJe5qE1h4 ijI8Vv2JDnqfc+isGHLe2YUCdOpbfpwxjvY5Aq3NUx8syNNOIwHxjG9lCqZv3jYN RFNFTIarhxOdgIpGeJpBwDn7koTDmcpd4nrjtQoPLZ2Zo9NFzpJRsf78+7vg/1kv G4sexXrPwcJ0L8geygKgzZ+zwCEM2RP+8n4KlHbK2XWDCWyO/A+DtAqitACY4HtO 2m2Uw3L/jW11jTP1rp3GCHTiPP1MFQwdRsWhqJVDecGe4ESMTxEMR05dmqrtJP9X DjUUSyVU0M+NrCkyga1XU8H5f+cz7h/sab+bLRMsZbpP/mWqh1azTqcaowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0iRny2/CHmxj0WmECcp4d94OSXMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvTFNKR2ZMYjhJZWJHUFJhWVFKeW5oMzNnNUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE0ZMA0G CSqGSIb3DQEBCwUAA4IBAQChsEFrUP9ARkQQUeB8+FICWmoT7PphtBqxH4M9Y+xi gWG77ZYMJ8zQa+qMDn8olCS0LQmEDQ5gZY5656gg06gUc6hFTihU3LVDA1UvRu64 IUyIQgcGZGWPghNTeShkybo6gakE5ErV49rGXkGNi8UWxOl3h3kM/riF6UMAH9KU QywNAf/jpznW18X7BVEsUR3n4z59uBrGl7HI6i8/9bBtP8iqSQDxAmii+NOrALP+ pxBVvScc8cO0U3POxtE3sB4FX7bQam8b+MYnHLB+Pbhe7fvMzNdNoFeb32MK8yzq dusmj6J2M7AddCgkv/r+y21QWmNn9FYhrDHPf+TtKBbb -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:50 2026 by rpki-client