This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lnBZfuaEL1tt6yNlHZ__qKK1q_8.roa File: lnBZfuaEL1tt6yNlHZ__qKK1q_8.roa (raw, json) Hash identifier: pg7hOTAnkaf0j/nctMpgf4iCCcA6nYokQJTSfUozbGI= Subject key identifier: 96:70:59:7E:E6:84:2F:5B:6D:EB:23:65:1D:9F:FF:A8:A2:B5:AB:FF Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AC12C486CD9FFCB5937930C8621569CDE Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lnBZfuaEL1tt6yNlHZ__qKK1q_8.roa Signing time: Wed 26 Nov 2025 17:18:16 +0000 ROA not before: Wed 26 Nov 2025 17:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12926 IP address blocks: 84.232.93.0/24 maxlen: 24 84.236.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:2c:48:6c:d9:ff:cb:59:37:93:0c:86:21:56:9c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 26 17:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9670597ee6842f5b6deb23651d9fffa8a2b5abff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:38:9e:3d:3b:04:e4:c5:88:19:87:cc:bc: a8:f2:06:db:06:0d:fa:cd:e9:18:29:cd:5a:6d:6c: 6a:e9:90:d8:b4:db:6a:25:6c:62:b8:e6:fb:6f:e8: 64:9a:66:dd:47:4f:c1:d6:ba:a1:77:ea:74:4e:d7: 6a:bf:00:f3:96:5f:ff:e8:d2:0d:52:ad:50:6a:5d: a5:da:8b:61:f5:07:3b:6f:c1:0b:9f:34:0c:12:df: 4a:53:69:48:da:ba:5d:e1:b1:a8:b2:6e:15:51:28: 54:b6:aa:e0:69:fc:6e:9c:cb:38:dd:b5:a0:24:31: 84:7f:9e:9d:b2:28:c6:2b:19:71:15:aa:65:51:fc: 4c:ce:f4:b6:c7:be:6c:3d:04:89:ee:87:72:0f:88: 8a:e5:5b:51:b4:2a:49:2e:70:84:d8:08:ab:34:79: bb:40:b9:2a:c4:07:51:d4:0a:f7:55:4f:dc:50:33: 17:8a:04:bf:f7:7c:f9:e9:ee:22:d3:7d:a2:e4:97: 66:85:e3:3c:cf:9b:96:3c:07:73:3b:02:ff:1d:1c: d7:db:3d:c5:84:25:b0:3b:4f:83:45:2f:a0:49:2b: 5a:e1:1f:39:9f:13:76:50:9e:43:af:5f:ad:b5:76: 84:bb:8d:20:8a:18:c8:94:95:4c:44:13:72:34:3c: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:59:7E:E6:84:2F:5B:6D:EB:23:65:1D:9F:FF:A8:A2:B5:AB:FF X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lnBZfuaEL1tt6yNlHZ__qKK1q_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.93.0/24 84.236.184.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:c3:6b:97:1e:f8:5b:a8:4b:ac:fd:8f:5f:3c:f4:4f:71:5c: 3d:5d:b6:ac:c4:3a:e3:65:9f:4c:6a:3a:fc:90:bb:ea:ec:9f: d3:55:5f:ac:82:37:44:df:8a:03:af:08:1d:28:07:55:cc:9a: 16:82:b5:a1:ea:8f:40:06:0b:cf:88:0b:30:57:5a:b8:81:99: e1:b9:84:87:f0:30:3c:7c:1c:60:ee:88:2a:54:fa:ab:24:a6: 2a:a5:cc:3c:84:0d:36:69:e3:a7:2b:77:1d:ad:cc:f3:e1:40: cc:7e:e1:03:62:43:91:9e:97:96:9c:e5:4b:7c:15:96:78:9c: ec:e1:b4:7f:40:79:fb:e5:e2:a1:33:15:af:6f:3c:b9:5c:1f: 47:3c:de:7d:7d:44:1a:4d:91:00:14:43:f9:7d:30:61:69:bf: c6:83:e8:ee:4e:04:9c:b7:d4:6e:df:c8:c6:de:18:20:f6:3f: 13:31:1d:41:3e:1e:f6:c0:bc:44:0c:41:41:89:cb:06:dd:e0: 1b:3e:38:06:e5:d9:a3:9b:a7:5e:5b:00:59:b1:87:de:0c:6c: 9f:e1:5c:9a:47:53:d5:6e:e1:02:d7:ae:a5:83:4f:59:9a:c2: 06:9d:2a:b8:31:b1:93:54:7b:32:69:6c:4c:73:1c:12:c5:92: 63:58:c6:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrBLEhs2f/LWTeTDIYhVpzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI2MTcxODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjcwNTk3ZWU2ODQyZjViNmRlYjIzNjUxZDlmZmZhOGEyYjVhYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxww4nj07BOTFiBmHzLyo8gbbBg36 zekYKc1abWxq6ZDYtNtqJWxiuOb7b+hkmmbdR0/B1rqhd+p0TtdqvwDzll//6NIN Uq1Qal2l2oth9Qc7b8ELnzQMEt9KU2lI2rpd4bGosm4VUShUtqrgafxunMs43bWg JDGEf56dsijGKxlxFaplUfxMzvS2x75sPQSJ7odyD4iK5VtRtCpJLnCE2AirNHm7 QLkqxAdR1Ar3VU/cUDMXigS/93z56e4i032i5JdmheM8z5uWPAdzOwL/HRzX2z3F hCWwO0+DRS+gSSta4R85nxN2UJ5Dr1+ttXaEu40gihjIlJVMRBNyNDxqWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJZwWX7mhC9bbesjZR2f/6iitav/MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvbG5CWmZ1YUVMMXR0NnlObEhaX19xS0sxcV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOhdAwQA VOy4MA0GCSqGSIb3DQEBCwUAA4IBAQAOw2uXHvhbqEus/Y9fPPRPcVw9XbasxDrj ZZ9Majr8kLvq7J/TVV+sgjdE34oDrwgdKAdVzJoWgrWh6o9ABgvPiAswV1q4gZnh uYSH8DA8fBxg7ogqVPqrJKYqpcw8hA02aeOnK3cdrczz4UDMfuEDYkORnpeWnOVL fBWWeJzs4bR/QHn75eKhMxWvbzy5XB9HPN59fUQaTZEAFEP5fTBhab/Gg+juTgSc t9Ru38jG3hgg9j8TMR1BPh72wLxEDEFBicsG3eAbPjgG5dmjm6deWwBZsYfeDGyf 4VyaR1PVbuEC166lg09ZmsIGnSq4MbGTVHsyaWxMcxwSxZJjWMbT -----END CERTIFICATE-----Generated at Sat Dec 6 21:10:59 2025 by rpki-client