This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LAbZGLeFXNmRURTztrONghrROUE.roa File: LAbZGLeFXNmRURTztrONghrROUE.roa (raw, json) Hash identifier: KIQme81wNiSTLhCcOehBgo8BQRccsG1/iUnb31hd2i8= Subject key identifier: 2C:06:D9:18:B7:85:5C:D9:91:51:14:F3:B6:B3:8D:82:1A:D1:39:41 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019ADCB56CA215CDE8442A692770C314D49E Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LAbZGLeFXNmRURTztrONghrROUE.roa Signing time: Tue 02 Dec 2025 01:37:48 +0000 ROA not before: Tue 02 Dec 2025 01:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39018 IP address blocks: 185.193.38.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dc:b5:6c:a2:15:cd:e8:44:2a:69:27:70:c3:14:d4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Dec 2 01:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c06d918b7855cd9915114f3b6b38d821ad13941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:90:4b:58:65:51:99:b1:86:53:85:f7:c2: d1:75:14:ca:16:25:59:0a:55:3b:5b:19:86:1b:9e: 92:30:3d:47:bc:57:d7:83:c0:fa:c7:ab:4d:92:38: f5:e7:23:a1:6a:24:71:f1:cc:7f:00:ca:48:30:f5: 90:47:30:2d:0d:cb:19:a0:aa:ab:0d:d0:62:82:af: ca:7b:cb:3e:82:d3:86:ee:37:7c:25:00:01:11:cd: 54:85:94:5c:d4:cb:b6:1b:57:2e:9c:64:5e:03:78: 9a:75:a7:12:41:4f:6c:d1:c6:03:ed:0e:69:21:2d: ca:54:52:7c:dd:4e:fb:70:22:a0:2d:8e:62:33:8a: 86:d5:2c:89:f6:e6:4f:86:fe:d2:7e:0c:71:f2:49: 85:dc:5f:a3:49:5f:32:c3:57:b4:71:05:5c:a5:9c: 18:a6:68:78:d8:21:61:0d:b2:05:88:bf:3d:1e:02: f0:cf:6e:4a:81:19:23:3e:2a:a9:ab:3b:f3:89:b7: 0d:54:be:e1:7d:f8:cb:78:f7:c2:ba:c6:09:fd:a6: 97:a1:5f:ab:0d:1b:7a:80:a5:55:1d:2c:54:7d:48: 7c:7b:9c:3b:f8:34:f2:24:61:c9:a9:71:d7:f3:c0: fb:e3:85:bb:d8:33:0e:9c:e8:b8:d8:ad:9f:6c:d3: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:06:D9:18:B7:85:5C:D9:91:51:14:F3:B6:B3:8D:82:1A:D1:39:41 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LAbZGLeFXNmRURTztrONghrROUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.38.0/24 Signature Algorithm: sha256WithRSAEncryption a5:dd:b4:23:fc:8b:74:98:f5:88:26:7e:45:84:30:01:a8:57: 50:78:2d:ef:38:f9:99:81:29:90:32:93:53:bf:a4:6b:7a:fa: 49:c6:d6:86:8b:de:7a:49:3f:a1:34:03:b7:48:c1:4b:dd:aa: 54:31:06:c8:80:57:a5:61:3d:c5:91:6e:e8:51:ac:b7:09:cf: 3c:c5:aa:30:db:8a:62:1f:f7:21:92:3b:59:7c:b2:c0:98:27: d5:c0:43:6b:a7:63:3c:c8:64:85:81:5e:11:7d:be:db:af:1e: 9e:b7:36:49:12:ea:79:b6:38:84:eb:e9:f2:ed:ac:3b:ff:65: 9e:23:40:e2:27:f3:31:07:48:b9:81:01:95:7f:f9:a0:65:51: 06:4b:0c:14:b5:79:4f:60:86:36:e8:98:e6:7d:79:54:94:26: b1:07:30:1a:ec:e6:97:cd:78:4e:6c:e7:62:84:29:f7:df:ca: e6:1d:2a:b9:51:74:b4:c3:a5:99:dc:e9:c0:b5:d0:a7:80:85: 61:e9:6f:dd:da:e4:22:38:b7:63:f5:07:65:1f:44:e8:8b:6c: 9f:2b:93:ec:9e:d4:c4:c2:9d:c4:76:3b:45:d6:08:40:9c:1a: 46:3f:96:df:d9:bd:18:83:87:8e:b4:48:5c:a4:e5:a3:ea:f5: 75:b0:e6:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrctWyiFc3oRCppJ3DDFNSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMjAyMDEzNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzA2ZDkxOGI3ODU1Y2Q5OTE1MTE0ZjNiNmIzOGQ4MjFhZDEzOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3mQS1hlUZmxhlOF98LRdRTKFiVZ ClU7WxmGG56SMD1HvFfXg8D6x6tNkjj15yOhaiRx8cx/AMpIMPWQRzAtDcsZoKqr DdBigq/Ke8s+gtOG7jd8JQABEc1UhZRc1Mu2G1cunGReA3iadacSQU9s0cYD7Q5p IS3KVFJ83U77cCKgLY5iM4qG1SyJ9uZPhv7Sfgxx8kmF3F+jSV8yw1e0cQVcpZwY pmh42CFhDbIFiL89HgLwz25KgRkjPiqpqzvzibcNVL7hffjLePfCusYJ/aaXoV+r DRt6gKVVHSxUfUh8e5w7+DTyJGHJqXHX88D744W72DMOnOi42K2fbNOnEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwG2Ri3hVzZkVEU87azjYIa0TlBMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvTEFiWkdMZUZYTm1SVVJUenRyT05naHJST1VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucEmMA0G CSqGSIb3DQEBCwUAA4IBAQCl3bQj/It0mPWIJn5FhDABqFdQeC3vOPmZgSmQMpNT v6RrevpJxtaGi956ST+hNAO3SMFL3apUMQbIgFelYT3FkW7oUay3Cc88xaow24pi H/chkjtZfLLAmCfVwENrp2M8yGSFgV4Rfb7brx6etzZJEup5tjiE6+ny7aw7/2We I0DiJ/MxB0i5gQGVf/mgZVEGSwwUtXlPYIY26JjmfXlUlCaxBzAa7OaXzXhObOdi hCn338rmHSq5UXS0w6WZ3OnAtdCngIVh6W/d2uQiOLdj9QdlH0Toi2yfK5PsntTE wp3EdjtF1ghAnBpGP5bf2b0Yg4eOtEhcpOWj6vV1sOZX -----END CERTIFICATE-----Generated at Fri Dec 5 05:58:00 2025 by rpki-client