This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lgvvod8MWJ-ysRigI30vAWaIc-E.roa File: Lgvvod8MWJ-ysRigI30vAWaIc-E.roa (raw, json) Hash identifier: qCOPd0Ryhza/BPVL7OqSUiJjYkRJPVhcLRpL6OEhyHQ= Subject key identifier: 2E:0B:EF:A1:DF:0C:58:9F:B2:B1:18:A0:23:7D:2F:01:66:88:73:E1 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B121DA0307310AD66EEC8CC958700F720 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lgvvod8MWJ-ysRigI30vAWaIc-E.roa Signing time: Fri 12 Dec 2025 10:31:29 +0000 ROA not before: Fri 12 Dec 2025 10:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55201 IP address blocks: 163.5.13.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:1d:a0:30:73:10:ad:66:ee:c8:cc:95:87:00:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 12 10:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e0befa1df0c589fb2b118a0237d2f01668873e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:a3:25:f6:57:82:54:21:4c:4a:48:29:e2: 19:0f:2d:54:d6:c0:47:99:f6:c6:93:91:72:c2:44: e1:b6:b9:f6:9e:84:eb:ec:41:ea:f1:1f:f5:32:23: 3a:8f:a1:1d:78:e2:3e:4e:6a:be:cc:d6:76:d7:7c: be:46:8f:79:e9:4b:57:0d:53:af:68:83:c1:85:eb: dc:65:2a:18:12:ee:31:a4:2e:da:26:3b:76:70:b0: 7b:a9:65:fc:98:4f:14:27:8f:fb:fc:3e:ea:bb:93: c8:ef:8c:b4:e3:be:ae:81:e1:59:3c:84:30:68:d0: 67:79:d9:d7:fd:26:2f:42:12:fd:e7:c0:88:ce:01: f0:27:12:01:13:1d:af:e8:50:b5:b6:29:18:d3:10: ba:eb:8f:2d:71:0a:ae:5c:10:88:91:f8:c4:9a:6b: b3:07:9d:02:64:ab:a1:78:8e:56:16:27:45:62:32: c4:30:70:31:55:31:5d:63:e8:f1:90:26:16:68:ce: 50:70:b1:43:1a:97:0c:46:04:ec:2b:a6:31:52:e5: a8:df:fb:88:0c:32:2a:0a:50:3c:56:10:d6:82:87: 40:a6:09:0b:ce:78:66:11:53:d9:1d:9e:9f:b7:bb: 76:17:f1:80:d6:40:55:ae:53:ed:1e:37:09:cd:d2: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0B:EF:A1:DF:0C:58:9F:B2:B1:18:A0:23:7D:2F:01:66:88:73:E1 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lgvvod8MWJ-ysRigI30vAWaIc-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.13.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption a9:79:3f:9f:ca:be:17:51:a6:8c:39:5d:ce:22:3e:ed:62:80: 54:b0:6c:9d:6c:41:21:66:28:a8:1f:66:cf:30:3e:5d:ee:ea: 0f:66:4c:8d:5c:22:0f:98:62:1b:b4:ea:8f:6c:09:0b:8b:29: 3f:0e:5b:b1:d2:5d:9a:48:1f:d5:47:0c:f1:1a:c2:ff:ec:b9: f7:26:d5:77:03:c4:ae:68:50:a6:5e:cd:aa:2a:9b:fd:6e:cd: 9f:e2:b7:58:f2:d1:81:30:e1:55:06:9c:7a:ae:06:88:65:18: 10:a3:f0:f1:22:3d:59:9b:aa:89:f8:6f:eb:ec:80:55:28:63: b1:d9:cd:0c:fc:96:ac:c7:e1:98:c9:d6:3a:a2:2d:6b:ce:ec: 11:0c:45:7e:bd:b7:1e:4e:47:45:2e:65:2d:37:03:92:81:70: 7f:b0:95:0f:b0:50:11:9b:f1:07:dd:e7:b1:5e:f7:26:75:41: 72:48:12:6f:7b:30:8a:56:18:49:72:8a:41:6b:ad:68:14:f2: 11:89:2f:57:b1:54:0b:f7:5f:10:29:13:23:df:63:d5:a8:8b: a3:8c:16:b2:6b:44:d8:06:67:e1:9c:fe:e1:ac:1c:4d:6f:f3: 84:58:e1:3e:17:4c:8e:96:df:0d:1b:a6:33:be:28:4e:f6:f3: 67:95:46:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsSHaAwcxCtZu7IzJWHAPcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjEyMTAzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTBiZWZhMWRmMGM1ODlmYjJiMTE4YTAyMzdkMmYwMTY2ODg3M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhOjJfZXglQhTEpIKeIZDy1U1sBH mfbGk5FywkThtrn2noTr7EHq8R/1MiM6j6EdeOI+Tmq+zNZ213y+Ro956UtXDVOv aIPBhevcZSoYEu4xpC7aJjt2cLB7qWX8mE8UJ4/7/D7qu5PI74y0476ugeFZPIQw aNBnednX/SYvQhL958CIzgHwJxIBEx2v6FC1tikY0xC6648tcQquXBCIkfjEmmuz B50CZKuheI5WFidFYjLEMHAxVTFdY+jxkCYWaM5QcLFDGpcMRgTsK6YxUuWo3/uI DDIqClA8VhDWgodApgkLznhmEVPZHZ6ft7t2F/GA1kBVrlPtHjcJzdIsYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC4L76HfDFifsrEYoCN9LwFmiHPhMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTGd2dm9kOE1XSi15c1JpZ0kzMHZBV2FJYy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUNAwQA owV/MA0GCSqGSIb3DQEBCwUAA4IBAQCpeT+fyr4XUaaMOV3OIj7tYoBUsGydbEEh ZiioH2bPMD5d7uoPZkyNXCIPmGIbtOqPbAkLiyk/Dlux0l2aSB/VRwzxGsL/7Ln3 JtV3A8SuaFCmXs2qKpv9bs2f4rdY8tGBMOFVBpx6rgaIZRgQo/DxIj1Zm6qJ+G/r 7IBVKGOx2c0M/Jasx+GYydY6oi1rzuwRDEV+vbceTkdFLmUtNwOSgXB/sJUPsFAR m/EH3eexXvcmdUFySBJvezCKVhhJcopBa61oFPIRiS9XsVQL918QKRMj32PVqIuj jBaya0TYBmfhnP7hrBxNb/OEWOE+F0yOlt8NG6YzvihO9vNnlUZD -----END CERTIFICATE-----Generated at Tue Dec 16 06:14:09 2025 by rpki-client