This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LtbBjOx_hJolvH_RVCG_bLfXxFE.roa File: LtbBjOx_hJolvH_RVCG_bLfXxFE.roa (raw, json) Hash identifier: aDMsbWlPq04kYD/9xZ5j12OT+fpd9/fPTH0UbEVWOEo= Subject key identifier: 2E:D6:C1:8C:EC:7F:84:9A:25:BC:7F:D1:54:21:BF:6C:B7:D7:C4:51 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019A76E7B933B7CF46F90C34E24B7C5AD865 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LtbBjOx_hJolvH_RVCG_bLfXxFE.roa Signing time: Wed 12 Nov 2025 07:11:29 +0000 ROA not before: Wed 12 Nov 2025 07:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 88.151.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:e7:b9:33:b7:cf:46:f9:0c:34:e2:4b:7c:5a:d8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Nov 12 07:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ed6c18cec7f849a25bc7fd15421bf6cb7d7c451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:91:22:8e:2e:4d:98:b2:a2:63:a5:7d:ff: ad:ed:52:70:99:57:ca:a7:62:dc:ce:6d:36:23:f8: c1:a1:00:91:56:71:2f:aa:30:dc:3a:09:a3:d0:b9: ac:7c:9f:28:a5:65:fd:cf:c5:66:ff:e0:01:ca:c0: 87:41:67:0d:d3:ed:1f:ee:4e:d5:14:ec:0a:1e:fb: ba:db:ff:b5:19:f8:7d:e5:e6:a1:34:79:d5:cc:cd: f8:6c:de:2d:23:0f:b5:bb:f3:80:45:29:c3:bb:dc: 40:f6:11:ec:b7:b2:20:ed:54:94:90:63:e1:82:90: 9b:b1:6e:af:01:22:9f:68:09:63:d6:8c:9c:8d:1d: c8:88:21:9f:4d:3f:4d:c8:c9:eb:b0:26:30:cf:70: 5a:1e:b1:4f:e4:87:ba:d0:95:6c:7b:13:00:9a:1b: 96:70:1c:75:7f:bf:b7:06:d5:6e:31:a6:69:06:bf: a2:09:7c:71:ac:70:1f:3c:db:bd:89:48:b2:06:d2: 3c:ef:48:77:56:43:43:4b:be:0e:dd:af:94:99:ac: d6:7e:4b:ee:31:5e:7e:a3:74:d7:cb:de:e0:42:33: 58:81:e7:9e:dd:e7:a9:29:b5:a6:95:11:cb:06:94: e2:f4:54:b8:8e:d6:66:a4:b1:5a:e8:4d:68:ef:44: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:C1:8C:EC:7F:84:9A:25:BC:7F:D1:54:21:BF:6C:B7:D7:C4:51 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LtbBjOx_hJolvH_RVCG_bLfXxFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.62.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:a1:0c:31:71:29:5a:0f:77:bd:85:e3:7b:f4:38:2f:9e:02: 3f:a1:ec:74:18:fb:8d:0c:f6:b6:43:bb:04:bf:99:17:9f:c3: b9:91:71:22:6f:e0:4a:2a:bf:c2:1f:4c:38:65:9f:dd:e0:bf: 7c:b0:c9:1a:0b:d4:98:93:66:c1:61:7e:f8:7b:61:9b:59:3f: aa:30:cf:f4:39:6c:48:83:f0:2a:31:b1:8b:65:30:5a:2a:2b: 99:a9:96:ea:32:e9:30:69:9e:92:82:3e:a3:31:bc:df:e5:82: 9f:ff:9c:22:44:2a:07:ab:87:a6:20:4f:2b:a4:1c:f5:93:be: 6a:b9:99:aa:13:6c:c1:52:d3:ec:bc:08:28:6c:39:ef:37:4f: bd:e3:66:c9:48:8a:d4:11:12:1a:22:79:9a:a5:b4:81:d7:53: a2:d9:0b:f3:1a:1c:bb:67:66:da:cf:16:5f:39:38:a8:f9:3f: 77:34:ca:d1:9f:1b:a5:71:e7:bf:f6:cb:86:1f:4f:a0:f9:39: 24:6c:82:9a:57:e0:f6:c9:9d:e3:e8:20:bd:f2:48:d3:e7:c7: 21:c6:43:67:15:ac:5e:69:66:02:ef:b6:f4:c5:45:c6:75:d9: 2b:42:36:ae:23:6c:79:3e:83:26:d9:38:02:fb:5d:85:98:a4: e4:10:50:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp257kzt89G+Qw04kt8WthlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUxMTEyMDcxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWQ2YzE4Y2VjN2Y4NDlhMjViYzdmZDE1NDIxYmY2Y2I3ZDdjNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynuRIo4uTZiyomOlff+t7VJwmVfK p2Lczm02I/jBoQCRVnEvqjDcOgmj0LmsfJ8opWX9z8Vm/+ABysCHQWcN0+0f7k7V FOwKHvu62/+1Gfh95eahNHnVzM34bN4tIw+1u/OARSnDu9xA9hHst7Ig7VSUkGPh gpCbsW6vASKfaAlj1oycjR3IiCGfTT9NyMnrsCYwz3BaHrFP5Ie60JVsexMAmhuW cBx1f7+3BtVuMaZpBr+iCXxxrHAfPNu9iUiyBtI870h3VkNDS74O3a+UmazWfkvu MV5+o3TXy97gQjNYgeee3eepKbWmlRHLBpTi9FS4jtZmpLFa6E1o70TdGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7WwYzsf4SaJbx/0VQhv2y318RRMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvTHRiQmpPeF9oSm9sdkhfUlZDR19iTGZYeEZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJc+MA0G CSqGSIb3DQEBCwUAA4IBAQCboQwxcSlaD3e9heN79DgvngI/oex0GPuNDPa2Q7sE v5kXn8O5kXEib+BKKr/CH0w4ZZ/d4L98sMkaC9SYk2bBYX74e2GbWT+qMM/0OWxI g/AqMbGLZTBaKiuZqZbqMukwaZ6Sgj6jMbzf5YKf/5wiRCoHq4emIE8rpBz1k75q uZmqE2zBUtPsvAgobDnvN0+942bJSIrUERIaInmapbSB11Oi2QvzGhy7Z2bazxZf OTio+T93NMrRnxulcee/9suGH0+g+TkkbIKaV+D2yZ3j6CC98kjT58chxkNnFaxe aWYC77b0xUXGddkrQjauI2x5PoMm2TgC+12FmKTkEFD6 -----END CERTIFICATE-----Generated at Fri Dec 5 14:07:41 2025 by rpki-client