This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LYYD-7Mxzx83mSBMEmnQdmheEC8.roa File: LYYD-7Mxzx83mSBMEmnQdmheEC8.roa (raw, json) Hash identifier: stNE7bVwP15KilVQa93UjwlIrQiIqI/ZUOwjgAQWBXA= Subject key identifier: 2D:86:03:FB:B3:31:CF:1F:37:99:20:4C:12:69:D0:76:68:5E:10:2F Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E6F1A78D9F9A9D46962A52CADBDC Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LYYD-7Mxzx83mSBMEmnQdmheEC8.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51699 IP address blocks: 5.1.64.0/24 maxlen: 24 5.1.65.0/24 maxlen: 24 2a07:6fc0:5::/48 maxlen: 48 2a0f:b80:4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e6:f1:a7:8d:9f:9a:9d:46:96:2a:52:ca:db:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8603fbb331cf1f3799204c1269d076685e102f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ce:65:dd:c9:56:fc:63:8e:3f:3a:70:66:44: 1d:a3:c3:2f:34:1b:f8:54:2a:68:b5:fe:66:da:be: 36:26:25:88:68:af:42:12:ed:23:f5:de:90:a1:c4: 29:23:03:db:f8:ee:df:97:2d:d6:49:45:23:bd:f2: c7:81:28:6d:f9:a5:bc:3f:bf:ad:56:89:ef:08:b0: 5f:da:ff:64:69:40:c5:9e:47:c9:af:dc:5d:f0:41: a0:34:f5:c0:c7:89:f0:75:70:e5:57:96:ac:92:4a: 49:92:16:c0:5c:2e:82:c7:69:64:c9:13:38:cc:18: d5:ab:57:6e:f5:84:87:96:5e:dd:31:3e:c9:17:3a: 50:92:9e:6e:27:65:04:14:31:10:b7:21:6a:a0:ef: 9e:10:80:6b:0a:4b:41:4b:73:80:59:53:c2:7c:17: 46:7e:46:90:b4:e4:53:ea:91:f3:63:d1:88:f1:1b: a4:81:58:b5:f9:cf:0b:b0:b2:51:32:4d:65:37:f6: 33:51:4b:aa:18:dc:67:a8:64:93:72:02:c9:7b:24: 45:67:a8:74:60:62:25:7f:a7:bb:7c:2a:48:4b:e6: 5a:cd:38:4c:b9:1d:04:3a:7c:e8:44:57:29:38:25: 56:e4:e5:27:d6:84:14:a2:e5:f6:b1:9a:65:2c:e0: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:03:FB:B3:31:CF:1F:37:99:20:4C:12:69:D0:76:68:5E:10:2F X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LYYD-7Mxzx83mSBMEmnQdmheEC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.64.0/23 IPv6: 2a07:6fc0:5::/48 2a0f:b80:4::/46 Signature Algorithm: sha256WithRSAEncryption 6a:c1:f4:2f:a8:a0:60:6e:4b:7e:bd:65:a2:bc:50:cc:61:ef: d5:fa:66:92:3a:77:63:90:5c:fb:a3:d9:42:c7:f8:9e:fc:3a: 1c:2e:b8:a9:81:3e:f5:80:74:89:02:7d:e1:e5:a5:39:48:01: bf:2a:8b:a2:c2:22:9d:d4:fc:e3:da:68:b2:b4:ad:4a:c6:9d: df:dd:cf:f7:cd:be:c1:79:b9:90:af:62:95:0a:9e:34:a0:df: 37:b3:aa:87:a2:9f:99:7c:29:6e:0f:d8:43:0c:84:fc:84:25: 42:2f:4b:14:94:f4:2a:45:e0:56:78:e8:02:cc:c4:bd:4d:7a: 6c:09:db:1c:31:6b:9f:77:4e:6b:86:a7:bb:c2:b0:74:b2:92: 85:0d:94:3b:3a:c8:7c:aa:35:c9:fb:71:9c:bb:e7:53:8a:4d: 10:1c:f3:c1:a0:ec:7e:bc:be:d8:15:e4:ac:e4:89:2a:6a:7d: 36:52:f8:f0:b6:61:2c:40:b2:0a:e8:ee:d8:2c:c6:8f:ce:06: ec:d1:29:ad:53:98:97:3d:7c:07:12:23:7f:be:d0:6e:bb:86: 8e:21:a9:44:e7:a6:9e:db:17:e7:bb:be:1b:9a:09:79:20:06: de:5e:36:6b:a0:73:21:b2:72:45:a4:03:9f:62:d4:b0:97:5e: cb:3e:33:35 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WObxp42fmp1GlipSytvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDg2MDNmYmIzMzFjZjFmMzc5OTIwNGMxMjY5ZDA3NjY4NWUxMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c5l3clW/GOOPzpwZkQdo8MvNBv4 VCpotf5m2r42JiWIaK9CEu0j9d6QocQpIwPb+O7fly3WSUUjvfLHgSht+aW8P7+t VonvCLBf2v9kaUDFnkfJr9xd8EGgNPXAx4nwdXDlV5askkpJkhbAXC6Cx2lkyRM4 zBjVq1du9YSHll7dMT7JFzpQkp5uJ2UEFDEQtyFqoO+eEIBrCktBS3OAWVPCfBdG fkaQtORT6pHzY9GI8RukgVi1+c8LsLJRMk1lN/YzUUuqGNxnqGSTcgLJeyRFZ6h0 YGIlf6e7fCpIS+ZazThMuR0EOnzoRFcpOCVW5OUn1oQUouX2sZplLOCzTQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFC2GA/uzMc8fN5kgTBJp0HZoXhAvMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvTFlZRC03TXh6eDgzbVNCTUVtblFkbWhlRUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBBQFAMBgE AgACMBIDBwAqB2/AAAUDBwIqDwuAAAQwDQYJKoZIhvcNAQELBQADggEBAGrB9C+o oGBuS369ZaK8UMxh79X6ZpI6d2OQXPuj2ULH+J78OhwuuKmBPvWAdIkCfeHlpTlI Ab8qi6LCIp3U/OPaaLK0rUrGnd/dz/fNvsF5uZCvYpUKnjSg3zezqoein5l8KW4P 2EMMhPyEJUIvSxSU9CpF4FZ46ALMxL1NemwJ2xwxa593TmuGp7vCsHSykoUNlDs6 yHyqNcn7cZy751OKTRAc88Gg7H68vtgV5KzkiSpqfTZS+PC2YSxAsgro7tgsxo/O BuzRKa1TmJc9fAcSI3++0G67ho4hqUTnpp7bF+e7vhuaCXkgBt5eNmugcyGyckWk A59i1LCXXss+MzU= -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:44 2026 by rpki-client