This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/lBg3_ekP2XBYVM3th5LmKxYKUuE.roa File: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (raw, json) Hash identifier: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8= Subject key identifier: 94:18:37:FD:E9:0F:D9:70:58:54:CD:ED:87:92:E6:2B:16:0A:52:E1 Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6 Certificate serial: 019B7910236B055F4F481D4AB81B6548E28F Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/lBg3_ekP2XBYVM3th5LmKxYKUuE.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209638 IP address blocks: 185.178.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:6b:05:5f:4f:48:1d:4a:b8:1b:65:48:e2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=941837fde90fd9705854cded8792e62b160a52e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:50:54:d6:1c:dc:aa:60:60:c9:88:86:da: cd:d9:fe:37:77:68:5d:65:a8:13:82:ca:40:7b:f9: 77:9a:93:f6:33:8c:f1:04:fc:75:78:b7:f5:3a:06: 3c:26:d2:e9:a9:09:35:e7:27:de:ed:20:ee:ad:19: 23:4e:7d:7a:60:1a:3c:be:3e:83:68:34:7d:18:66: c7:67:54:69:8e:0a:4e:04:d6:b7:f7:1e:e6:31:9d: 3f:cd:a7:c4:85:a6:76:ea:f9:bd:42:69:fe:79:73: e7:83:c1:12:5c:49:53:89:29:1f:37:0e:8c:20:fc: 90:bb:c8:3b:51:e7:f3:75:c8:fe:fd:bc:a5:a1:da: 74:31:a0:30:76:ba:9e:11:26:09:c5:68:71:4f:fd: 3e:8d:47:56:f6:ed:f0:6f:ca:40:8f:89:6d:a9:db: 6d:97:22:ec:78:1a:f4:a5:04:3a:69:a1:d7:40:90: a5:c0:5e:b4:51:a9:6a:50:6e:d7:3c:d2:99:59:38: 1e:18:0a:02:7b:a8:d5:84:05:9a:da:b2:53:f4:3e: 5c:31:e9:cb:a8:1c:56:f5:90:09:63:68:4b:97:28: f5:39:1a:f7:fd:6c:58:1a:67:5e:01:42:20:c7:64: a5:e1:c9:ec:6d:34:10:14:af:23:1e:61:a0:0b:38: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:37:FD:E9:0F:D9:70:58:54:CD:ED:87:92:E6:2B:16:0A:52:E1 X509v3 Authority Key Identifier: keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/lBg3_ekP2XBYVM3th5LmKxYKUuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.107.0/24 Signature Algorithm: sha256WithRSAEncryption 13:fc:49:06:81:9b:ea:96:ca:56:26:75:27:2b:b9:71:04:47: 75:ab:e6:ad:fa:ee:e5:0e:ad:86:30:e5:e9:05:93:a4:c4:2c: 88:bc:37:bd:27:ed:7d:ab:10:a7:a6:ad:51:84:a1:11:36:98: 1a:e1:d8:06:d1:de:48:68:69:32:be:83:21:d2:b2:3f:31:14: 78:69:85:f5:ab:93:bd:7c:c0:45:f1:71:b0:15:19:1c:8e:bd: 90:68:7e:13:e4:6c:fa:dc:52:f6:e9:4f:83:4f:a2:9b:f9:d9: ea:48:87:c4:0c:cb:6c:1a:c7:b4:7c:40:fe:27:e4:56:f6:53: df:61:17:04:18:63:93:cf:65:7f:a6:71:3c:21:d4:40:c5:87: 4f:f2:9c:69:6a:33:e5:77:37:87:68:42:85:ad:fe:d6:55:eb: 7d:ad:74:31:cb:1e:13:5a:54:c9:3d:1b:44:e9:b3:bf:b0:1c: d1:78:ad:4c:70:77:96:d8:64:a7:04:3f:e6:41:7b:d5:92:88: f4:4f:3d:01:c4:75:dd:c4:91:86:5b:9f:4c:64:a4:83:d9:e0: a7:26:40:a0:5f:0e:19:8d:a6:00:df:8a:98:7b:0d:6e:94:32: 40:0e:d8:2f:af:6e:9a:0d:6c:36:a9:37:04:21:5d:6c:4c:5a: c4:ba:42:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECNrBV9PSB1KuBtlSOKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTdmNzc3ZTcxYWMzNDEyMmVkYjM1ZWRkNjBjZjE0ZDc1 YjllZjYwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDE4MzdmZGU5MGZkOTcwNTg1NGNkZWQ4NzkyZTYyYjE2MGE1MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPtQVNYc3KpgYMmIhtrN2f43d2hd ZagTgspAe/l3mpP2M4zxBPx1eLf1OgY8JtLpqQk15yfe7SDurRkjTn16YBo8vj6D aDR9GGbHZ1RpjgpOBNa39x7mMZ0/zafEhaZ26vm9Qmn+eXPng8ESXElTiSkfNw6M IPyQu8g7Uefzdcj+/bylodp0MaAwdrqeESYJxWhxT/0+jUdW9u3wb8pAj4ltqdtt lyLseBr0pQQ6aaHXQJClwF60UalqUG7XPNKZWTgeGAoCe6jVhAWa2rJT9D5cMenL qBxW9ZAJY2hLlyj1ORr3/WxYGmdeAUIgx2Sl4cnsbTQQFK8jHmGgCzib9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQYN/3pD9lwWFTN7YeS5isWClLhMB8GA1UdIwQY MBaAFJkX93fnGsNBIu2zXt1gzxTXW572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTkt YTg4ZjU3NDE1MmI2LzEvbEJnM19la1AyWEJZVk0zdGg1TG1LeFlLVXVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTktYTg4ZjU3NDE1MmI2 LzEvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubJrMA0G CSqGSIb3DQEBCwUAA4IBAQAT/EkGgZvqlspWJnUnK7lxBEd1q+at+u7lDq2GMOXp BZOkxCyIvDe9J+19qxCnpq1RhKERNpga4dgG0d5IaGkyvoMh0rI/MRR4aYX1q5O9 fMBF8XGwFRkcjr2QaH4T5Gz63FL26U+DT6Kb+dnqSIfEDMtsGse0fED+J+RW9lPf YRcEGGOTz2V/pnE8IdRAxYdP8pxpajPldzeHaEKFrf7WVet9rXQxyx4TWlTJPRtE 6bO/sBzReK1McHeW2GSnBD/mQXvVkoj0Tz0BxHXdxJGGW59MZKSD2eCnJkCgXw4Z jaYA34qYew1ulDJADtgvr26aDWw2qTcEIV1sTFrEukJ1 -----END CERTIFICATE-----Generated at Tue Jan 27 00:27:09 2026 by rpki-client