This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa File: lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa (raw, json) Hash identifier: FYaKqxecYgMTbSZpwvOmlyri4oxlPadKxms2T+56wVY= Subject key identifier: 95:B4:8B:36:2D:63:90:51:41:4E:F0:FD:0D:1A:55:51:50:F1:29:4E Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019AD746BC83570A1DEF2379613DCD7709AE Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa Signing time: Mon 01 Dec 2025 00:18:48 +0000 ROA not before: Mon 01 Dec 2025 00:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.81.44.0/24 maxlen: 24 212.81.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:46:bc:83:57:0a:1d:ef:23:79:61:3d:cd:77:09:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Dec 1 00:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95b48b362d639051414ef0fd0d1a555150f1294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:fc:b9:1a:cf:4f:9a:e6:4e:e6:75:95:d3: 66:75:26:85:dc:ff:ea:92:96:56:ba:d7:a9:e7:dd: 2c:18:06:52:a3:2a:ff:05:64:2b:82:c1:a1:86:a5: 8c:42:5a:d7:86:33:61:9a:55:1c:97:8b:61:d2:ec: 0b:3e:18:1f:43:2e:35:a4:47:8c:f6:bc:8e:8c:44: 55:9a:90:08:2e:82:9f:79:8f:16:fe:db:a5:ce:02: a3:1c:86:e6:78:e7:4f:10:28:62:33:f4:1c:d5:82: f0:6c:92:71:76:b8:83:b7:7f:49:ed:94:bb:12:ce: 24:cc:c0:05:9f:f3:b5:0e:d2:0b:5b:1e:58:4c:2a: af:d4:26:3b:f3:c0:b2:6b:b5:0f:5a:b5:13:ce:99: 40:78:9a:ee:77:a8:d5:5a:35:02:fe:1a:28:4d:30: 9b:88:6c:62:0d:d2:65:f3:bf:1a:6d:d4:55:77:9f: 68:6d:e2:c5:2e:b3:f7:80:28:a8:4d:79:49:26:32: 5b:8d:5e:d7:80:65:0d:76:22:48:a0:74:56:45:86: f4:e5:76:da:10:44:d5:52:6f:65:c3:ec:cc:7e:ab: 37:18:15:d3:f7:87:d2:92:5e:6c:7a:ad:3d:71:05: 1e:4f:11:ce:d8:cc:5b:2f:42:d1:49:0d:37:42:83: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:8B:36:2D:63:90:51:41:4E:F0:FD:0D:1A:55:51:50:F1:29:4E X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.44.0/23 Signature Algorithm: sha256WithRSAEncryption 66:3d:9c:3a:09:09:27:5d:1b:1c:bd:ff:fa:eb:a5:08:92:f6: f0:15:0c:71:11:3f:42:ba:1c:aa:40:4c:a4:d3:15:70:f1:fe: 5d:a1:f7:ce:12:8c:17:8e:f0:d7:2b:23:ff:14:96:e1:86:95: 35:24:a8:93:18:eb:e9:13:73:d6:2b:0f:21:5b:8d:fa:44:aa: 58:bd:13:a3:92:98:80:2f:f3:14:87:97:be:6d:43:92:54:7b: 5a:4e:aa:7b:31:43:d3:4c:e0:b8:f7:b0:2a:0e:97:9c:91:8e: 2a:93:7f:ce:0a:f4:c4:20:4a:39:d6:d3:ce:e3:0f:7c:87:f4: 5a:ae:6c:41:03:3c:54:c8:ff:c8:dc:0b:c6:5e:23:e1:d3:d0: 74:ec:d9:6b:22:d6:69:6d:cb:65:ba:4e:71:51:d3:c3:53:a2: eb:c8:f1:c4:13:47:f8:8f:51:c0:10:22:11:a9:67:dd:88:54: 25:02:ad:56:0d:47:d3:20:71:b3:e6:93:aa:bb:0a:26:92:8b: 41:d1:ca:03:73:bb:21:81:a0:db:9f:28:fd:fc:08:b1:36:c7: 67:46:1e:25:aa:e5:f3:89:70:94:84:70:24:c9:f3:f5:7f:cb: f4:17:b6:35:d3:30:50:09:71:bd:a7:e0:32:8b:cb:50:29:f4: 73:17:4b:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrXRryDVwod7yN5YT3NdwmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUxMjAxMDAxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWI0OGIzNjJkNjM5MDUxNDE0ZWYwZmQwZDFhNTU1MTUwZjEyOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSn8uRrPT5rmTuZ1ldNmdSaF3P/q kpZWutep590sGAZSoyr/BWQrgsGhhqWMQlrXhjNhmlUcl4th0uwLPhgfQy41pEeM 9ryOjERVmpAILoKfeY8W/tulzgKjHIbmeOdPEChiM/Qc1YLwbJJxdriDt39J7ZS7 Es4kzMAFn/O1DtILWx5YTCqv1CY788Cya7UPWrUTzplAeJrud6jVWjUC/hooTTCb iGxiDdJl878abdRVd59obeLFLrP3gCioTXlJJjJbjV7XgGUNdiJIoHRWRYb05Xba EETVUm9lw+zMfqs3GBXT94fSkl5seq09cQUeTxHO2MxbL0LRSQ03QoN+vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJW0izYtY5BRQU7w/Q0aVVFQ8SlOMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvbGJTTE5pMWprRkZCVHZEOURScFZVVkR4S1U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FEsMA0G CSqGSIb3DQEBCwUAA4IBAQBmPZw6CQknXRscvf/666UIkvbwFQxxET9CuhyqQEyk 0xVw8f5doffOEowXjvDXKyP/FJbhhpU1JKiTGOvpE3PWKw8hW436RKpYvROjkpiA L/MUh5e+bUOSVHtaTqp7MUPTTOC497AqDpeckY4qk3/OCvTEIEo51tPO4w98h/Ra rmxBAzxUyP/I3AvGXiPh09B07NlrItZpbctluk5xUdPDU6LryPHEE0f4j1HAECIR qWfdiFQlAq1WDUfTIHGz5pOquwomkotB0coDc7shgaDbnyj9/AixNsdnRh4lquXz iXCUhHAkyfP1f8v0F7Y10zBQCXG9p+Ayi8tQKfRzF0uU -----END CERTIFICATE-----Generated at Fri Dec 5 17:38:13 2025 by rpki-client