This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/LbPyc4hAUlUzut2p0ZpxCw83HnE.roa File: LbPyc4hAUlUzut2p0ZpxCw83HnE.roa (raw, json) Hash identifier: cLTartZVu31Sy+PEywLeLASvzBKWyq6c9Am1NnMnkbU= Subject key identifier: 2D:B3:F2:73:88:40:52:55:33:BA:DD:A9:D1:9A:71:0B:0F:37:1E:71 Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e Certificate serial: 019B78A2738DD131B95464189BDE0F82B054 Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/LbPyc4hAUlUzut2p0ZpxCw83HnE.roa Signing time: Thu 01 Jan 2026 08:17:50 +0000 ROA not before: Thu 01 Jan 2026 08:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44833 IP address blocks: 185.66.236.0/22 maxlen: 24 2a03:22a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:73:8d:d1:31:b9:54:64:18:9b:de:0f:82:b0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e Validity Not Before: Jan 1 08:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2db3f2738840525533badda9d19a710b0f371e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:04:44:c5:d4:0d:6b:3d:ee:70:07:d1:5f: 2a:cb:a9:72:2b:4c:be:b0:43:1e:49:05:46:20:3b: 55:91:a5:72:81:e9:48:d0:7f:6d:ed:2a:5f:1e:c9: 0a:56:05:c7:e3:49:2a:04:79:a0:9e:a6:53:ad:18: af:08:cb:a3:3d:10:4f:93:ac:df:71:17:6e:05:28: ea:95:77:c9:cc:c9:e0:ef:0c:13:f9:85:63:d7:a7: 0a:2f:70:3e:cb:83:46:5d:db:16:77:2b:78:fd:8b: b1:fe:e0:e9:70:22:f3:41:b5:d9:0b:c3:cc:df:df: 41:4c:13:ed:ae:66:36:97:9d:46:05:e5:83:28:59: 7b:9e:8f:c2:2d:59:0f:a2:1a:6e:8c:63:88:df:eb: 78:32:8c:4a:78:33:11:c7:e2:db:e1:57:01:88:8c: 8f:ce:f9:13:26:44:17:97:4c:15:ac:e8:ba:01:a2: 49:00:90:3a:de:fe:37:bb:95:6c:73:7c:40:1e:c0: 8b:fc:ed:06:e1:f9:9b:4e:91:93:7d:e2:bb:4c:fd: f0:70:6c:5b:6b:ff:89:93:13:c1:59:6c:e6:4a:47: 71:73:38:18:aa:60:93:fb:d2:5a:bc:f9:c1:a0:d7: ac:09:42:3f:0c:ac:33:73:80:f5:d8:56:0d:35:43: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B3:F2:73:88:40:52:55:33:BA:DD:A9:D1:9A:71:0B:0F:37:1E:71 X509v3 Authority Key Identifier: keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/LbPyc4hAUlUzut2p0ZpxCw83HnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.236.0/22 IPv6: 2a03:22a0::/32 Signature Algorithm: sha256WithRSAEncryption 48:ef:bf:7c:21:31:09:96:a1:d4:7f:16:4b:6a:a3:db:ae:09: 7f:39:6f:fa:3b:99:46:aa:91:d0:0e:af:28:f8:99:90:75:c1: 2a:cc:83:08:f5:0e:4d:9e:c4:dd:aa:04:79:ec:bf:d3:80:53: aa:ad:3f:91:01:0f:fa:00:0d:71:c8:de:f3:ac:96:94:bb:05: 13:67:c8:12:94:b9:6f:d0:e8:c3:2d:8d:ce:b3:90:92:3f:c5: c9:fb:b4:35:3d:cd:b4:c7:7e:b5:5a:66:a3:3a:08:de:8e:44: 5e:fe:1e:cc:47:6c:4c:8d:00:54:30:df:7c:4e:69:a5:7c:3a: 78:39:ea:dc:6f:47:c3:a9:f8:1a:58:7d:79:88:ee:e6:1c:4f: b8:93:31:e3:21:db:88:76:2f:6d:10:61:76:61:e4:09:d8:f3: 25:94:2d:7a:fe:e3:fd:64:7a:20:48:69:9c:3a:43:90:cf:60: 14:61:69:7a:8e:dc:aa:1c:47:83:0b:08:ac:91:a5:7f:4f:cb: 9f:ee:4e:28:9a:3d:90:c5:23:d3:38:29:87:a9:27:e5:a0:2d: 2e:5f:e1:ce:88:8d:a2:f4:51:d3:ef:db:bc:99:90:b9:db:a4: dd:07:0d:5c:10:46:35:46:59:62:3d:91:32:a0:a9:ce:cc:4a: 7c:5c:d4:aa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4onON0TG5VGQYm94PgrBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMTdjNjY2Y2RhMjNlOTIwZDE0YjkwYWU5MzYzNzEzMzUw YWFjMWUwHhcNMjYwMTAxMDgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGIzZjI3Mzg4NDA1MjU1MzNiYWRkYTlkMTlhNzEwYjBmMzcxZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yIERMXUDWs97nAH0V8qy6lyK0y+ sEMeSQVGIDtVkaVygelI0H9t7SpfHskKVgXH40kqBHmgnqZTrRivCMujPRBPk6zf cRduBSjqlXfJzMng7wwT+YVj16cKL3A+y4NGXdsWdyt4/Yux/uDpcCLzQbXZC8PM 399BTBPtrmY2l51GBeWDKFl7no/CLVkPohpujGOI3+t4MoxKeDMRx+Lb4VcBiIyP zvkTJkQXl0wVrOi6AaJJAJA63v43u5Vsc3xAHsCL/O0G4fmbTpGTfeK7TP3wcGxb a/+JkxPBWWzmSkdxczgYqmCT+9JavPnBoNesCUI/DKwzc4D12FYNNUOh3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC2z8nOIQFJVM7rdqdGacQsPNx5xMB8GA1UdIwQY MBaAFAIXxmbNoj6SDRS5Cuk2NxM1CqweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jZmEwYjUtZTFhMS00MWZmLTg4Y2It MDI5NzE1ZGU0YzZmLzEvTGJQeWM0aEFVbFV6dXQycDBacHhDdzgzSG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jZmEwYjUtZTFhMS00MWZmLTg4Y2ItMDI5NzE1ZGU0YzZm LzEvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuULsMA0E AgACMAcDBQAqAyKgMA0GCSqGSIb3DQEBCwUAA4IBAQBI7798ITEJlqHUfxZLaqPb rgl/OW/6O5lGqpHQDq8o+JmQdcEqzIMI9Q5NnsTdqgR57L/TgFOqrT+RAQ/6AA1x yN7zrJaUuwUTZ8gSlLlv0OjDLY3Os5CSP8XJ+7Q1Pc20x361WmajOgjejkRe/h7M R2xMjQBUMN98TmmlfDp4Oercb0fDqfgaWH15iO7mHE+4kzHjIduIdi9tEGF2YeQJ 2PMllC16/uP9ZHogSGmcOkOQz2AUYWl6jtyqHEeDCwiskaV/T8uf7k4omj2QxSPT OCmHqSfloC0uX+HOiI2i9FHT79u8mZC526TdBw1cEEY1RlliPZEyoKnOzEp8XNSq -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:14 2026 by rpki-client