This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/LSPYdHWOrzjzMpezGhhKeAopRDI.roa File: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (raw, json) Hash identifier: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs= Subject key identifier: 2D:23:D8:74:75:8E:AF:38:F3:32:97:B3:1A:18:4A:78:0A:29:44:32 Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f Certificate serial: 019B7A5B624C51D5B44BD7404104164E8B5C Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/LSPYdHWOrzjzMpezGhhKeAopRDI.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16110 IP address blocks: 5.63.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:62:4c:51:d5:b4:4b:d7:40:41:04:16:4e:8b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d23d874758eaf38f33297b31a184a780a294432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:0e:4b:04:63:46:12:3b:c1:bb:0f:a9:a9: 21:76:f9:e6:04:d0:74:4d:71:29:fa:af:d6:35:8d: ae:db:67:b4:1b:b8:20:30:93:f4:b8:70:03:39:9f: e8:38:7a:39:7f:88:a1:58:ee:d2:50:c5:06:a9:0c: 66:e9:e6:17:5d:f7:cb:ee:68:d3:4d:50:da:fc:b9: d3:ab:bc:bc:9f:7e:d1:47:46:a6:bb:51:e2:2a:ea: 54:89:b9:3b:b1:88:f0:39:15:e9:49:61:07:2a:70: a4:d2:87:7e:cf:af:c5:30:ae:be:a6:d9:92:2f:5d: 5c:df:f3:24:ed:d7:97:c4:d9:dd:2a:4c:89:0e:4d: ef:d2:75:a4:02:bd:a1:67:81:d6:3d:0e:27:ce:2b: 4a:c6:84:b8:cc:6f:57:f6:c2:a5:16:fb:de:70:0d: 11:9c:8e:bd:08:ea:6e:37:3a:93:20:bb:fe:60:b0: 00:86:49:41:a1:55:33:c7:e7:e7:4f:18:09:7c:58: 21:9b:f4:ac:a6:c4:4d:fc:2e:e0:cb:39:e9:11:39: d4:06:f5:4f:32:02:fc:f2:74:66:5a:50:88:44:83: 02:e7:57:42:d7:e9:55:c1:b7:af:2d:66:4b:c7:1d: e3:12:79:b5:dd:e3:0f:6d:71:6b:13:d8:29:7e:ef: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:D8:74:75:8E:AF:38:F3:32:97:B3:1A:18:4A:78:0A:29:44:32 X509v3 Authority Key Identifier: keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/LSPYdHWOrzjzMpezGhhKeAopRDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.185.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:aa:51:30:67:e2:7a:be:00:34:c8:3d:e1:b6:f7:81:a0:02: 54:70:ab:7a:ba:8e:06:2f:fb:c1:83:d1:5c:14:61:63:74:5a: 4d:3d:f3:34:06:97:ec:2d:72:44:d9:5d:2c:f4:d6:7c:de:8b: e9:f4:93:aa:98:d3:24:7f:51:83:94:9a:99:d5:5b:9f:9e:64: 8c:78:c8:30:99:c2:eb:c7:7d:f1:bc:69:6f:a5:c6:fd:39:a2: fa:a6:7c:d2:fe:f9:27:f3:8a:e7:2d:ba:5c:1f:f9:9c:81:b7: bd:0a:3c:f9:2f:10:4a:da:87:d8:8e:8d:52:0f:d4:b8:8c:31: 03:01:98:89:eb:b4:b9:3b:fc:5b:14:7f:bb:bf:c5:62:fa:04: a6:d5:cb:ad:32:02:ab:5e:a9:df:a8:c2:7d:b6:d5:6f:10:91: b6:7b:58:14:35:34:c9:00:33:4f:c2:60:29:0e:36:71:98:f5: 35:fd:b6:10:2a:24:dd:91:7d:00:27:db:2f:af:50:df:d2:19: 0e:f9:83:ef:f0:85:cf:b9:7d:52:da:19:24:f4:45:37:2e:74: 28:73:6b:01:e5:c0:9b:ab:cc:54:7d:cb:a5:e3:2c:3c:c4:33: 8a:66:e6:db:1a:89:83:8d:bb:75:b8:e2:49:15:40:86:15:81: d0:d1:04:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2JMUdW0S9dAQQQWTotcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YmMzY2RhYzQ2NDA4YzBjOGEzNTgxNzg4YjUxMGQwZjA0 ZTlkMWYwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDIzZDg3NDc1OGVhZjM4ZjMzMjk3YjMxYTE4NGE3ODBhMjk0NDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS8OSwRjRhI7wbsPqakhdvnmBNB0 TXEp+q/WNY2u22e0G7ggMJP0uHADOZ/oOHo5f4ihWO7SUMUGqQxm6eYXXffL7mjT TVDa/LnTq7y8n37RR0amu1HiKupUibk7sYjwORXpSWEHKnCk0od+z6/FMK6+ptmS L11c3/Mk7deXxNndKkyJDk3v0nWkAr2hZ4HWPQ4nzitKxoS4zG9X9sKlFvvecA0R nI69COpuNzqTILv+YLAAhklBoVUzx+fnTxgJfFghm/SspsRN/C7gyznpETnUBvVP MgL88nRmWlCIRIMC51dC1+lVwbevLWZLxx3jEnm13eMPbXFrE9gpfu8enwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0j2HR1jq848zKXsxoYSngKKUQyMB8GA1UdIwQY MBaAFJS8PNrEZAjAyKNYF4i1ENDwTp0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEt YzYwNDcyZTlmNzE3LzEvTFNQWWRIV09yemp6TXBlekdoaEtlQW9wUkRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEtYzYwNDcyZTlmNzE3 LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT+5MA0G CSqGSIb3DQEBCwUAA4IBAQCeqlEwZ+J6vgA0yD3htveBoAJUcKt6uo4GL/vBg9Fc FGFjdFpNPfM0BpfsLXJE2V0s9NZ83ovp9JOqmNMkf1GDlJqZ1VufnmSMeMgwmcLr x33xvGlvpcb9OaL6pnzS/vkn84rnLbpcH/mcgbe9Cjz5LxBK2ofYjo1SD9S4jDED AZiJ67S5O/xbFH+7v8Vi+gSm1cutMgKrXqnfqMJ9ttVvEJG2e1gUNTTJADNPwmAp DjZxmPU1/bYQKiTdkX0AJ9svr1Df0hkO+YPv8IXPuX1S2hkk9EU3LnQoc2sB5cCb q8xUfcul4yw8xDOKZubbGomDjbt1uOJJFUCGFYHQ0QQa -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:55 2026 by rpki-client