This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/LKAft93oZKWm8C5vqJwOGZJiSJU.roa File: LKAft93oZKWm8C5vqJwOGZJiSJU.roa (raw, json) Hash identifier: DXlp4EQmxRSQHGzjwfBhaby6m7/cBeVJqjDN3Ga+MWk= Subject key identifier: 2C:A0:1F:B7:DD:E8:64:A5:A6:F0:2E:6F:A8:9C:0E:19:92:62:48:95 Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e Certificate serial: 019ABA1A46A8FDE3B52B27B43B416358B338 Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/LKAft93oZKWm8C5vqJwOGZJiSJU.roa Signing time: Tue 25 Nov 2025 08:21:15 +0000 ROA not before: Tue 25 Nov 2025 08:21:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50304 IP address blocks: 77.246.246.0/24 maxlen: 24 185.213.52.0/22 maxlen: 24 2a0b:8340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:1a:46:a8:fd:e3:b5:2b:27:b4:3b:41:63:58:b3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e Validity Not Before: Nov 25 08:21:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ca01fb7dde864a5a6f02e6fa89c0e1992624895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:37:e9:87:75:8c:d4:72:9a:75:a2:6a:2b: ca:b6:6e:63:7d:f8:82:7c:45:03:1e:41:42:78:06: ee:f5:f3:39:b1:2a:69:7b:1e:de:c0:ee:20:5c:3a: cd:53:d2:97:ac:a2:46:86:77:5d:40:62:39:9e:80: 43:24:26:d0:84:d8:bf:f4:03:fb:bd:f7:0d:f0:40: b6:cc:3b:af:e1:90:c0:a3:68:1e:9e:c8:3f:63:57: 35:f5:12:fe:86:2c:3b:ef:32:9f:d2:09:78:f1:69: 38:fe:3d:f0:8a:4c:d2:94:87:9b:79:2b:31:91:3c: 68:f0:39:14:cb:77:2e:61:37:d0:41:39:a1:c6:f2: 84:20:e1:56:da:81:d2:c6:88:29:91:94:24:12:10: 55:7d:b5:a3:17:21:c5:da:e7:9f:8f:cc:92:69:bf: 64:9b:69:54:d0:f1:d7:97:a2:83:4d:15:7d:be:0f: 20:64:00:11:fc:28:bc:4b:1e:b1:bb:7d:bf:90:61: a8:83:96:af:87:0b:d5:db:37:8c:6b:1f:b0:9e:ae: 79:d1:8f:ac:e5:55:34:17:74:f2:00:06:4d:8d:63: a7:9d:a9:cd:c4:22:86:68:8b:db:e8:b9:43:c9:21: c5:83:0e:32:25:cd:0b:d8:9e:47:92:6c:a4:b4:4b: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:1F:B7:DD:E8:64:A5:A6:F0:2E:6F:A8:9C:0E:19:92:62:48:95 X509v3 Authority Key Identifier: keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/LKAft93oZKWm8C5vqJwOGZJiSJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.246.0/24 185.213.52.0/22 IPv6: 2a0b:8340::/29 Signature Algorithm: sha256WithRSAEncryption 89:85:e7:49:21:9c:9a:0b:cc:52:7e:91:6d:9d:64:a1:04:84: fa:a1:b7:fa:5d:99:a4:55:d0:7e:31:0f:7e:55:a9:8a:e6:69: b2:d9:67:a1:f9:08:7d:db:4c:19:4d:63:f8:5c:e3:33:e0:16: b1:46:2b:73:f0:9d:64:71:df:d6:d8:ce:f7:6a:93:d7:5a:81: 3b:22:1c:67:ee:c3:6f:ff:a9:f6:db:0e:35:17:53:f4:92:9d: a0:1c:7b:ab:85:8d:8c:93:8a:01:70:dd:76:7b:16:6f:6f:22: f3:5a:73:e6:34:2e:cb:10:71:2e:fe:69:bc:ff:6a:1b:27:45: af:f6:cf:ed:fb:af:38:49:4c:98:44:0c:0c:ba:cb:a9:35:c7: ce:f4:12:11:d0:aa:8c:a5:a6:31:46:d1:6d:22:48:a0:2c:6b: b3:ad:95:a0:48:0a:dd:5c:0a:e7:fd:16:e0:e3:81:f4:d7:80: 36:e2:05:f6:39:20:4e:27:f0:a6:25:7a:33:a5:cd:ac:31:33: f8:1a:36:47:84:e3:90:8d:85:28:e0:2c:51:cb:cb:34:80:85: 1b:74:84:63:bc:e4:1b:c3:cf:40:6b:f5:dd:df:e6:ec:14:a2: 71:62:83:c1:88:d3:0b:59:5f:59:49:fe:a2:81:d9:ba:92:e1: d9:10:64:3b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZq6Gkao/eO1Kye0O0FjWLM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy MjgxOGUwHhcNMjUxMTI1MDgyMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2EwMWZiN2RkZTg2NGE1YTZmMDJlNmZhODljMGUxOTkyNjI0ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcU36Yd1jNRymnWiaivKtm5jffiC fEUDHkFCeAbu9fM5sSppex7ewO4gXDrNU9KXrKJGhnddQGI5noBDJCbQhNi/9AP7 vfcN8EC2zDuv4ZDAo2gensg/Y1c19RL+hiw77zKf0gl48Wk4/j3wikzSlIebeSsx kTxo8DkUy3cuYTfQQTmhxvKEIOFW2oHSxogpkZQkEhBVfbWjFyHF2uefj8ySab9k m2lU0PHXl6KDTRV9vg8gZAAR/Ci8Sx6xu32/kGGog5avhwvV2zeMax+wnq550Y+s 5VU0F3TyAAZNjWOnnanNxCKGaIvb6LlDySHFgw4yJc0L2J5HkmyktEtihQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCygH7fd6GSlpvAub6icDhmSYkiVMB8GA1UdIwQY MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt ODFkMjE0ZWRmMjk4LzEvTEtBZnQ5M29aS1dtOEM1dnFKd09HWkppU0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4 LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATfb2AwQC udU0MA0EAgACMAcDBQMqC4NAMA0GCSqGSIb3DQEBCwUAA4IBAQCJhedJIZyaC8xS fpFtnWShBIT6obf6XZmkVdB+MQ9+VamK5mmy2Weh+Qh920wZTWP4XOMz4BaxRitz 8J1kcd/W2M73apPXWoE7Ihxn7sNv/6n22w41F1P0kp2gHHurhY2Mk4oBcN12exZv byLzWnPmNC7LEHEu/mm8/2obJ0Wv9s/t+684SUyYRAwMusupNcfO9BIR0KqMpaYx RtFtIkigLGuzrZWgSArdXArn/Rbg44H014A24gX2OSBOJ/CmJXozpc2sMTP4GjZH hOOQjYUo4CxRy8s0gIUbdIRjvOQbw89Aa/Xd3+bsFKJxYoPBiNMLWV9ZSf6igdm6 kuHZEGQ7 -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:10 2025 by rpki-client