This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/Lnic-b8RKeW1rpPqbvXKHlom-ys.roa File: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (raw, json) Hash identifier: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4= Subject key identifier: 2E:78:9C:F9:BF:11:29:E5:B5:AE:93:EA:6E:F5:CA:1E:5A:26:FB:2B Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Certificate serial: 019B775951C3BF5598D5AC16A76CB643B9A7 Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/Lnic-b8RKeW1rpPqbvXKHlom-ys.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 77.246.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:51:c3:bf:55:98:d5:ac:16:a7:6c:b6:43:b9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e789cf9bf1129e5b5ae93ea6ef5ca1e5a26fb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:6a:64:b2:8a:25:e5:8b:db:f6:65:32:f3: b3:14:c8:fe:8a:c2:5a:53:b4:3f:89:9d:e1:a2:7f: 0b:b0:a0:13:41:6e:82:1e:0e:09:f1:a7:19:72:e5: 3d:b5:ad:54:1a:db:0b:df:15:2f:4a:ff:49:a6:37: 50:c7:de:87:36:27:b2:1c:aa:18:bb:a8:63:b3:47: a2:fe:56:12:43:db:8e:54:99:7b:3d:78:50:a5:72: b2:59:e3:13:a0:fb:31:75:fc:90:d4:bd:95:3e:b4: 36:71:a6:8f:d3:43:de:e8:c5:23:42:3c:9c:0b:93: 67:3d:fe:03:a5:69:e4:e3:9c:47:9c:31:b9:7a:6c: 67:98:86:b1:ba:9c:70:15:22:c8:a5:fb:ec:12:89: c8:e5:0d:c8:04:a5:ce:cd:8a:9c:35:e5:c2:b3:74: f8:ee:c2:12:1c:76:fd:ba:91:57:f4:37:2e:4a:ca: c0:6b:04:41:bd:b6:d8:d6:78:6b:34:61:a2:a2:23: 1b:e6:31:51:aa:65:68:7e:78:13:13:76:1b:32:eb: 4c:7e:cd:89:33:25:55:65:51:35:36:b0:da:19:e9: 64:d2:e8:ab:ce:b7:f6:6e:c6:92:9a:c3:ce:ae:c3: 89:52:0a:60:53:25:ec:c9:0e:64:e8:f4:df:7e:8c: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:78:9C:F9:BF:11:29:E5:B5:AE:93:EA:6E:F5:CA:1E:5A:26:FB:2B X509v3 Authority Key Identifier: keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/Lnic-b8RKeW1rpPqbvXKHlom-ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.60.0/24 Signature Algorithm: sha256WithRSAEncryption 27:84:72:29:c7:9c:33:ce:28:d6:34:f2:68:10:86:09:38:99: e2:59:14:12:9e:10:ad:42:b8:06:16:da:1d:43:e8:18:19:30: 17:c9:39:60:9e:3d:be:0e:b1:f6:51:dc:45:29:25:8f:fd:0e: 0c:e9:7a:79:67:fd:6b:c3:d0:99:42:65:8f:fb:b0:2f:2c:db: 95:a4:5f:eb:38:31:cc:b4:e6:1b:32:bc:4b:38:6b:41:ba:85: 76:c3:43:3e:e5:70:16:95:17:84:20:71:f6:47:78:63:1c:c6: 36:67:da:18:da:a6:21:46:79:60:f8:20:42:ee:36:e2:80:1e: 03:04:58:05:d9:11:09:49:3a:65:0b:a1:cb:48:d3:61:a0:2b: f6:9a:e4:e8:ad:83:a5:e6:8a:ca:96:9f:18:b6:bf:41:9c:59: 58:f4:8c:5a:47:2a:88:39:72:d2:a5:0c:91:a7:4d:d0:0f:e5: e3:39:aa:80:a2:7d:e1:d5:9d:b2:af:59:4b:bc:03:9f:31:fe: c3:72:c5:20:ae:a9:6f:5d:4d:07:65:af:42:5a:9b:1c:9d:9f: f2:f1:dc:d7:d1:3e:45:8b:1f:95:b2:f9:0c:5b:bb:4c:36:91: 60:b4:0c:92:7b:e8:54:a0:db:93:e3:55:2f:bd:b0:c0:37:b7: 6c:4c:3e:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVHDv1WY1awWp2y2Q7mnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5 M2U3ODkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc4OWNmOWJmMTEyOWU1YjVhZTkzZWE2ZWY1Y2ExZTVhMjZmYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsThqZLKKJeWL2/ZlMvOzFMj+isJa U7Q/iZ3hon8LsKATQW6CHg4J8acZcuU9ta1UGtsL3xUvSv9JpjdQx96HNieyHKoY u6hjs0ei/lYSQ9uOVJl7PXhQpXKyWeMToPsxdfyQ1L2VPrQ2caaP00Pe6MUjQjyc C5NnPf4DpWnk45xHnDG5emxnmIaxupxwFSLIpfvsEonI5Q3IBKXOzYqcNeXCs3T4 7sISHHb9upFX9DcuSsrAawRBvbbY1nhrNGGioiMb5jFRqmVofngTE3YbMutMfs2J MyVVZVE1NrDaGelk0uirzrf2bsaSmsPOrsOJUgpgUyXsyQ5k6PTffoxs4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC54nPm/ESnlta6T6m71yh5aJvsrMB8GA1UdIwQY MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt NmUwNjk2ZmVlOGU2LzEvTG5pYy1iOFJLZVcxcnBQcWJ2WEtIbG9tLXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2 LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfY8MA0G CSqGSIb3DQEBCwUAA4IBAQAnhHIpx5wzzijWNPJoEIYJOJniWRQSnhCtQrgGFtod Q+gYGTAXyTlgnj2+DrH2UdxFKSWP/Q4M6Xp5Z/1rw9CZQmWP+7AvLNuVpF/rODHM tOYbMrxLOGtBuoV2w0M+5XAWlReEIHH2R3hjHMY2Z9oY2qYhRnlg+CBC7jbigB4D BFgF2REJSTplC6HLSNNhoCv2muTorYOl5orKlp8Ytr9BnFlY9IxaRyqIOXLSpQyR p03QD+XjOaqAon3h1Z2yr1lLvAOfMf7DcsUgrqlvXU0HZa9CWpscnZ/y8dzX0T5F ix+VsvkMW7tMNpFgtAySe+hUoNuT41UvvbDAN7dsTD73 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:21 2026 by rpki-client