This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/LBEwWg6NXwV0Qivix1KpxT3aiNU.roa File: LBEwWg6NXwV0Qivix1KpxT3aiNU.roa (raw, json) Hash identifier: NAmrPdbUkUwZLyDdKu29iu1NmoDceqKiDehZJJ6AYqk= Subject key identifier: 2C:11:30:5A:0E:8D:5F:05:74:42:2B:E2:C7:52:A9:C5:3D:DA:88:D5 Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Certificate serial: 019B7CED553DFF7F90EFFD35E148A08B911E Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/LBEwWg6NXwV0Qivix1KpxT3aiNU.roa Signing time: Fri 02 Jan 2026 04:18:07 +0000 ROA not before: Fri 02 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 144.2.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:55:3d:ff:7f:90:ef:fd:35:e1:48:a0:8b:91:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Validity Not Before: Jan 2 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c11305a0e8d5f0574422be2c752a9c53dda88d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:78:fb:83:b5:cb:ee:3f:df:7c:0b:3d:0e: 8f:0b:db:ee:13:d5:66:d6:a4:49:8c:99:da:9b:46: 64:b7:d8:6b:bf:f3:a0:88:8b:36:7a:9f:82:96:73: f9:ec:33:2d:3e:93:2d:c1:67:ee:b6:2a:61:20:94: 99:3c:2b:eb:f9:9f:1e:6d:b9:1c:77:1f:89:a0:5f: f4:a0:68:af:0b:80:2b:96:b1:2d:77:1b:84:68:e2: 2f:13:4e:4c:28:f5:c9:da:b9:ab:ef:f9:fc:ae:fc: 57:31:d4:12:c4:44:64:eb:9d:bc:12:04:b8:57:f1: 0a:97:89:b9:7e:43:1a:0b:b0:53:ac:0c:d0:8e:e6: 50:0d:3a:f4:07:42:32:90:b7:cb:ef:4d:a5:77:04: 98:33:0a:83:ae:58:34:b7:d9:fe:0a:97:5c:a3:75: c6:9c:a3:8d:ac:8b:1d:89:e4:52:66:09:bc:d9:47: eb:6c:85:ad:21:ac:40:3b:1d:58:55:21:76:80:ac: e2:71:04:a0:28:58:4e:d7:00:5c:db:35:3e:2b:b3: 3d:8c:df:51:42:e9:53:69:41:32:82:79:1b:50:cf: 2e:a8:d9:5b:13:62:bd:30:ee:51:10:bb:6b:99:78: ef:4d:20:36:5f:4e:96:08:7f:59:b4:66:68:0e:f6: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:11:30:5A:0E:8D:5F:05:74:42:2B:E2:C7:52:A9:C5:3D:DA:88:D5 X509v3 Authority Key Identifier: keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/LBEwWg6NXwV0Qivix1KpxT3aiNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.2.154.0/24 Signature Algorithm: sha256WithRSAEncryption 25:3f:6a:9f:bd:b4:cb:d7:0a:07:40:79:6b:b9:b9:44:cf:da: c5:56:4e:a1:a9:d4:20:12:97:92:70:dc:ad:16:12:b0:29:a5: 34:97:9f:82:2b:59:74:35:36:47:90:9b:40:70:8b:72:f1:9b: 28:61:f5:b7:3f:fc:39:0e:d8:45:e7:d2:62:8a:d7:e1:fe:6c: 70:f6:3b:c7:4f:cd:a5:eb:b7:f9:ef:b3:76:6a:58:19:38:ca: c6:bb:c5:75:82:9d:37:91:c4:db:48:15:c6:3b:75:9c:4f:d1: 89:22:a0:e6:bf:81:9b:bd:67:62:48:cd:b4:fa:0c:ea:a4:a2: a2:c1:4c:5c:58:16:ff:e3:c4:eb:fc:ac:5a:5d:e3:3d:26:50: 19:2a:d5:7f:8b:9f:36:77:f4:38:bf:93:e5:88:83:0d:52:62: 1f:63:01:c9:ad:fa:70:e7:cc:d8:10:76:ce:4d:c8:dd:67:b8: 52:44:55:76:c9:2d:2b:6b:a7:c2:dc:a6:79:9d:21:0e:8c:71: 94:e8:8b:36:36:90:0c:0b:3b:70:2b:21:d8:7e:04:97:ce:37: fe:7b:11:ef:67:44:00:2b:a6:cc:15:fd:16:b7:a2:a6:64:ee: 78:8e:92:79:5c:bb:58:ca:ac:83:04:b7:3b:03:db:cd:e0:46: 00:84:8f:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VU9/3+Q7/014Uigi5EeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4 MzIwYzUwHhcNMjYwMTAyMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzExMzA1YTBlOGQ1ZjA1NzQ0MjJiZTJjNzUyYTljNTNkZGE4OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv154+4O1y+4/33wLPQ6PC9vuE9Vm 1qRJjJnam0Zkt9hrv/OgiIs2ep+ClnP57DMtPpMtwWfutiphIJSZPCvr+Z8ebbkc dx+JoF/0oGivC4ArlrEtdxuEaOIvE05MKPXJ2rmr7/n8rvxXMdQSxERk6528EgS4 V/EKl4m5fkMaC7BTrAzQjuZQDTr0B0IykLfL702ldwSYMwqDrlg0t9n+Cpdco3XG nKONrIsdieRSZgm82UfrbIWtIaxAOx1YVSF2gKzicQSgKFhO1wBc2zU+K7M9jN9R QulTaUEygnkbUM8uqNlbE2K9MO5RELtrmXjvTSA2X06WCH9ZtGZoDvY0XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwRMFoOjV8FdEIr4sdSqcU92ojVMB8GA1UdIwQY MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt NTcyOGZiMjRiZjBlLzEvTEJFd1dnNk5Yd1YwUWl2aXgxS3B4VDNhaU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkAKaMA0G CSqGSIb3DQEBCwUAA4IBAQAlP2qfvbTL1woHQHlrublEz9rFVk6hqdQgEpeScNyt FhKwKaU0l5+CK1l0NTZHkJtAcIty8ZsoYfW3P/w5DthF59Jiitfh/mxw9jvHT82l 67f577N2algZOMrGu8V1gp03kcTbSBXGO3WcT9GJIqDmv4GbvWdiSM20+gzqpKKi wUxcWBb/48Tr/KxaXeM9JlAZKtV/i582d/Q4v5PliIMNUmIfYwHJrfpw58zYEHbO TcjdZ7hSRFV2yS0ra6fC3KZ5nSEOjHGU6Is2NpAMCztwKyHYfgSXzjf+exHvZ0QA K6bMFf0Wt6KmZO54jpJ5XLtYyqyDBLc7A9vN4EYAhI9y -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client