This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/LBDTvSgNLV1dqc22saIYBzgz6ZI.roa File: LBDTvSgNLV1dqc22saIYBzgz6ZI.roa (raw, json) Hash identifier: uwxIRSHkLef7aHZEVpKSmnoxBv3faRRhln6mJTPXsL4= Subject key identifier: 2C:10:D3:BD:28:0D:2D:5D:5D:A9:CD:B6:B1:A2:18:07:38:33:E9:92 Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c Certificate serial: 019A73FDB2BCECAB6E0B43602BD3BFE303F4 Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/LBDTvSgNLV1dqc22saIYBzgz6ZI.roa Signing time: Tue 11 Nov 2025 17:36:37 +0000 ROA not before: Tue 11 Nov 2025 17:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 2a0a:8f85::/32 maxlen: 32 2a0a:8f86::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:fd:b2:bc:ec:ab:6e:0b:43:60:2b:d3:bf:e3:03:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c Validity Not Before: Nov 11 17:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c10d3bd280d2d5d5da9cdb6b1a218073833e992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:2e:e8:04:55:ba:a4:17:0d:80:9a:f7:f0: 3f:e6:f2:68:1e:cd:49:57:26:44:f7:eb:c5:41:f3: 44:39:6e:7a:9b:18:bb:55:0a:05:38:b8:15:41:95: 7d:3f:98:bb:30:b3:b6:15:00:74:ed:d7:2d:4a:f4: ce:73:d5:92:e9:85:a4:cf:4f:20:ab:30:9f:6f:be: 14:7a:d3:d8:3d:15:f4:c5:02:a7:ad:98:14:47:2d: e5:c8:36:63:60:e0:0e:19:68:ae:24:33:8c:53:e0: 3c:9e:9e:7c:39:5c:e1:2f:d0:85:a0:9c:d6:57:ca: 0c:92:31:f1:8b:76:ab:c9:bf:89:09:10:77:ef:d5: fc:11:08:b6:69:97:8e:27:1a:27:ae:9a:86:14:d0: cd:b3:25:b4:7a:bc:61:26:db:26:58:33:a4:04:8b: fb:2d:bf:6d:e4:e7:a1:d7:ad:22:b9:15:52:f8:fc: 1e:f0:a5:8a:e4:5d:44:e2:5b:73:92:6c:e8:53:56: 70:ce:0f:57:e4:0d:ec:cf:51:02:a2:26:1f:23:ba: 5b:d8:b3:90:7f:69:dd:f3:0b:87:84:f7:dd:f5:a3: 54:28:17:8d:42:cc:68:5e:6c:92:ad:78:f0:ca:42: ae:d9:35:06:88:25:73:60:9a:51:f6:92:d3:82:67: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:10:D3:BD:28:0D:2D:5D:5D:A9:CD:B6:B1:A2:18:07:38:33:E9:92 X509v3 Authority Key Identifier: keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/LBDTvSgNLV1dqc22saIYBzgz6ZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:8f85::-2a0a:8f86:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 63:e6:16:0a:05:f5:e5:fe:d2:6e:64:09:8b:93:a2:47:3d:b1: 4f:c2:36:de:a6:67:93:72:c9:c9:6d:95:3a:f3:5d:80:4e:e8: 77:f1:cd:fd:14:da:28:05:25:05:ef:3e:51:f8:29:f9:35:fe: 20:27:c8:b8:d6:6c:fa:06:bf:ad:40:54:3e:a6:1b:df:ef:72: f1:99:15:49:1f:d2:b6:c2:b9:54:55:1a:fd:7e:d5:80:6b:da: 00:b6:ea:e4:8c:55:a8:14:c0:85:2e:42:89:24:30:3a:51:13: 91:1e:47:52:32:8b:6a:7d:09:c6:f9:88:c8:61:56:97:20:45: 1e:7e:9f:fa:7f:83:97:1e:b4:e7:ac:1c:06:6e:97:21:c2:d8: 9a:26:6f:c9:50:aa:69:e2:21:f0:f6:11:b3:53:65:dc:2e:5f: 05:50:41:91:e4:32:6e:e9:7f:37:ec:55:f7:13:15:d0:70:53: 67:79:51:6f:df:4c:c1:9c:33:e4:88:89:b3:1b:aa:90:83:9e: 18:fc:19:44:27:98:99:a8:28:ba:7a:76:cc:77:e5:ac:7e:0b: 92:3b:19:fd:59:7b:98:bd:31:b8:dc:e7:6d:25:1d:1f:e1:7f: 0c:bd:a3:51:1d:7e:48:f3:2d:9d:6f:a3:09:9d:e7:c2:b9:cb: 8f:09:56:8f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZpz/bK87KtuC0NgK9O/4wP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyM2I3MWJmZDc1MWMwY2YzZjcxNDM3ODZmZGE0NDMyZTdj Y2VjMmMwHhcNMjUxMTExMTczNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzEwZDNiZDI4MGQyZDVkNWRhOWNkYjZiMWEyMTgwNzM4MzNlOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWIu6ARVuqQXDYCa9/A/5vJoHs1J VyZE9+vFQfNEOW56mxi7VQoFOLgVQZV9P5i7MLO2FQB07dctSvTOc9WS6YWkz08g qzCfb74UetPYPRX0xQKnrZgURy3lyDZjYOAOGWiuJDOMU+A8np58OVzhL9CFoJzW V8oMkjHxi3aryb+JCRB379X8EQi2aZeOJxonrpqGFNDNsyW0erxhJtsmWDOkBIv7 Lb9t5Oeh160iuRVS+Pwe8KWK5F1E4ltzkmzoU1Zwzg9X5A3sz1ECoiYfI7pb2LOQ f2nd8wuHhPfd9aNUKBeNQsxoXmySrXjwykKu2TUGiCVzYJpR9pLTgmdtCwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFCwQ070oDS1dXanNtrGiGAc4M+mSMB8GA1UdIwQY MBaAFKI7cb/XUcDPP3FDeG/aRDLnzOwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMt MzU3MGQ5YmY1Njc5LzEvTEJEVHZTZ05MVjFkcWMyMnNhSVlCemd6NlpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMtMzU3MGQ5YmY1Njc5 LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqCo+F AwUAKgqPhjANBgkqhkiG9w0BAQsFAAOCAQEAY+YWCgX15f7SbmQJi5OiRz2xT8I2 3qZnk3LJyW2VOvNdgE7od/HN/RTaKAUlBe8+Ufgp+TX+ICfIuNZs+ga/rUBUPqYb 3+9y8ZkVSR/StsK5VFUa/X7VgGvaALbq5IxVqBTAhS5CiSQwOlETkR5HUjKLan0J xvmIyGFWlyBFHn6f+n+Dlx6056wcBm6XIcLYmiZvyVCqaeIh8PYRs1Nl3C5fBVBB keQybul/N+xV9xMV0HBTZ3lRb99MwZwz5IiJsxuqkIOeGPwZRCeYmagounp2zHfl rH4LkjsZ/Vl7mL0xuNznbSUdH+F/DL2jUR1+SPMtnW+jCZ3nwrnLjwlWjw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:20 2025 by rpki-client