This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lbroVbioTo6hf28e2Q0LhVza09c.roa File: lbroVbioTo6hf28e2Q0LhVza09c.roa (raw, json) Hash identifier: 19nh6FglCIcEqqXMrrwwd9nSlFomEoJLuqeCNwvFxGQ= Subject key identifier: 95:BA:E8:55:B8:A8:4E:8E:A1:7F:6F:1E:D9:0D:0B:85:5C:DA:D3:D7 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68C02877545061878C99111FB2142 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lbroVbioTo6hf28e2Q0LhVza09c.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60807 IP address blocks: 84.236.180.0/24 maxlen: 24 84.236.250.0/24 maxlen: 24 88.148.96.0/23 maxlen: 23 178.156.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:02:87:75:45:06:18:78:c9:91:11:fb:21:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95bae855b8a84e8ea17f6f1ed90d0b855cdad3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:18:1a:e9:fd:18:88:45:27:7c:cd:e7:fb: 82:c8:c0:74:b3:e8:78:81:a0:ec:0d:65:ba:59:09: cf:a4:2b:3b:34:f7:78:57:6f:cd:ba:37:22:79:04: a4:30:c3:bb:1b:02:71:95:15:63:ec:02:07:2d:69: fa:06:c0:b0:bb:f4:ec:fd:f3:8a:c8:32:04:44:8a: aa:f0:77:e2:1d:3e:ec:61:2b:e4:c9:8a:44:37:83: c2:ce:0b:a7:08:3a:22:f0:ff:56:d6:88:fd:a9:e3: f7:d9:23:6b:4d:e1:aa:1f:09:0a:25:0c:cc:5b:35: 0a:7e:4c:8b:d3:b4:75:94:a9:6c:fd:6d:e9:ad:cc: 3d:bf:0f:a7:bf:38:13:81:d8:ad:c2:e2:60:23:23: ed:d5:1a:40:28:54:63:2d:41:bb:6a:c3:ce:21:60: 53:6b:73:06:c7:2b:97:82:a1:06:dd:50:31:da:98: 11:3f:d8:16:86:3d:07:b5:a4:ad:17:a9:8a:c3:49: 3e:73:c8:04:d0:2d:93:59:cf:7a:9d:e4:c5:fd:4c: ad:c7:3e:a0:de:b6:16:6b:60:e9:0f:fa:16:ff:e4: 60:ea:db:66:dd:ac:fb:73:6a:2e:3d:4b:eb:38:a0: 98:10:06:ed:12:ed:f2:ef:23:13:75:7e:ba:02:21: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BA:E8:55:B8:A8:4E:8E:A1:7F:6F:1E:D9:0D:0B:85:5C:DA:D3:D7 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lbroVbioTo6hf28e2Q0LhVza09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.180.0/24 84.236.250.0/24 88.148.96.0/23 178.156.47.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e6:0d:1c:6c:8a:ee:c2:84:f5:0f:b9:4c:dd:d2:76:0f:fd: d5:69:c0:d8:6c:00:9e:c5:1c:bc:cf:01:88:f5:de:a2:97:6e: f1:d8:a5:65:b6:92:9c:b5:19:ee:a9:30:46:7c:5a:a0:78:d8: e0:3a:44:24:1b:32:d4:dd:1f:2a:ff:3d:e0:7f:c1:e3:51:ed: 4f:a9:f9:8a:33:db:c3:d9:6e:31:b8:5d:e5:3d:4a:5a:4d:cb: fe:f1:62:1b:cd:50:31:5a:ff:50:c7:97:88:54:52:2d:b6:cc: 1a:a9:b5:a8:db:24:41:8a:48:18:b2:a6:e2:85:53:6d:26:b7: 3d:c2:67:22:83:f4:ba:34:d0:49:a6:8b:59:52:a8:04:59:fd: 5f:9f:dd:29:8e:86:95:97:a5:32:6b:4b:01:74:ff:c9:fe:ad: 12:bf:d2:e0:f7:49:fe:17:23:87:81:0a:c1:22:0c:95:e8:1d: e3:c6:3d:7f:d6:77:1b:9d:20:75:a2:7b:d3:15:85:f3:a5:0e: 44:cd:87:f8:0b:92:f5:25:5a:8e:47:f2:39:f5:28:a9:0f:b4: 0a:83:a9:bd:5c:68:95:5e:82:61:f6:01:14:34:b4:98:0f:4e: 45:c9:07:26:0f:ae:33:36:b0:73:2a:ed:a8:2d:41:cc:e6:34: 4e:5d:f8:be -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xowCh3VFBhh4yZER+yFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWJhZTg1NWI4YTg0ZThlYTE3ZjZmMWVkOTBkMGI4NTVjZGFkM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjAYGun9GIhFJ3zN5/uCyMB0s+h4 gaDsDWW6WQnPpCs7NPd4V2/NujcieQSkMMO7GwJxlRVj7AIHLWn6BsCwu/Ts/fOK yDIERIqq8HfiHT7sYSvkyYpEN4PCzgunCDoi8P9W1oj9qeP32SNrTeGqHwkKJQzM WzUKfkyL07R1lKls/W3prcw9vw+nvzgTgditwuJgIyPt1RpAKFRjLUG7asPOIWBT a3MGxyuXgqEG3VAx2pgRP9gWhj0HtaStF6mKw0k+c8gE0C2TWc96neTF/Uytxz6g 3rYWa2DpD/oW/+Rg6ttm3az7c2ouPUvrOKCYEAbtEu3y7yMTdX66AiGIiwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJW66FW4qE6OoX9vHtkNC4Vc2tPXMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvbGJyb1ZiaW9UbzZoZjI4ZTJRMExoVnphMDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVOy0AwQA VOz6AwQBWJRgAwQAspwvMA0GCSqGSIb3DQEBCwUAA4IBAQA15g0cbIruwoT1D7lM 3dJ2D/3VacDYbACexRy8zwGI9d6il27x2KVltpKctRnuqTBGfFqgeNjgOkQkGzLU 3R8q/z3gf8HjUe1PqfmKM9vD2W4xuF3lPUpaTcv+8WIbzVAxWv9Qx5eIVFIttswa qbWo2yRBikgYsqbihVNtJrc9wmcig/S6NNBJpotZUqgEWf1fn90pjoaVl6Uya0sB dP/J/q0Sv9Lg90n+FyOHgQrBIgyV6B3jxj1/1ncbnSB1onvTFYXzpQ5EzYf4C5L1 JVqOR/I59SipD7QKg6m9XGiVXoJh9gEUNLSYD05FyQcmD64zNrBzKu2oLUHM5jRO Xfi+ -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:20 2026 by rpki-client