This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/lbOnHNG0FresIDmGPUuzesyYT-o.roa File: lbOnHNG0FresIDmGPUuzesyYT-o.roa (raw, json) Hash identifier: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s= Subject key identifier: 95:B3:A7:1C:D1:B4:16:B7:AC:20:39:86:3D:4B:B3:7A:CC:98:4F:EA Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc Certificate serial: 019B7F83F290F079F40EFE5D8D5480D2060D Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/lbOnHNG0FresIDmGPUuzesyYT-o.roa Signing time: Fri 02 Jan 2026 16:21:52 +0000 ROA not before: Fri 02 Jan 2026 16:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 62.193.24.0/22 maxlen: 22 62.193.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f2:90:f0:79:f4:0e:fe:5d:8d:54:80:d2:06:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95b3a71cd1b416b7ac2039863d4bb37acc984fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:55:44:6e:a1:9b:76:03:8b:f2:ea:ef:07: 8b:31:9c:5f:98:a0:f8:bb:32:e4:93:0a:d1:ee:7b: 14:d4:e8:15:0e:13:be:57:6e:40:a2:c6:5d:29:43: f9:2e:bf:0b:ed:24:46:b7:cb:67:7e:63:2a:2a:a3: 37:8a:4b:d2:a6:09:25:16:24:d6:24:7f:aa:cb:3e: 57:d4:84:37:c7:7b:55:15:c9:16:c4:d9:17:3a:fd: 92:f8:ac:79:cc:0c:b2:91:7d:53:68:84:65:30:de: 61:ae:7f:e8:63:57:b0:03:e0:12:92:8e:ab:a2:1e: 35:94:97:ef:97:2e:8e:e1:65:4d:dc:66:74:12:4e: 5b:3f:b9:df:54:cd:aa:b7:11:0d:cd:9c:a9:5e:16: 69:5a:9f:7b:ec:01:b7:1e:99:8d:71:a5:9c:c6:a4: ee:10:84:44:47:6e:f4:27:e1:c5:24:92:28:8a:7b: d0:f7:0b:76:86:a5:95:b8:88:8d:25:06:5f:60:1b: a7:40:c8:4e:72:d7:bc:69:41:25:48:f1:e0:da:c2: 11:2c:67:94:f6:79:54:98:99:6d:4b:13:d7:9d:f2: f6:c6:2c:b8:50:a6:c1:93:cf:29:91:8a:02:b7:3d: 5c:8e:9a:e9:fa:ab:ff:11:10:44:54:b8:fd:c9:f7: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B3:A7:1C:D1:B4:16:B7:AC:20:39:86:3D:4B:B3:7A:CC:98:4F:EA X509v3 Authority Key Identifier: keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/lbOnHNG0FresIDmGPUuzesyYT-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.193.24.0/21 Signature Algorithm: sha256WithRSAEncryption 32:99:5f:69:c4:6c:30:84:de:ce:b1:f6:25:17:5b:36:27:1d: 2b:29:22:0c:98:6a:3a:d7:84:af:62:9a:0a:c9:5f:0e:84:73: 0f:8c:9c:4d:b6:df:83:f5:5f:c1:02:7c:ac:c3:8a:1d:0a:d5: f3:d0:d2:c8:49:2d:18:74:9f:75:c4:fa:8e:5b:50:8a:9f:dc: 91:35:16:9c:bf:e6:79:c8:d5:67:75:71:c5:17:f6:96:92:4d: 40:7e:e2:30:ce:85:f4:46:52:7a:3e:ae:ca:38:99:a3:fa:9a: 93:c8:9c:5d:64:b0:fb:57:9b:e0:7d:e3:f5:e9:2b:c5:ef:86: 03:ec:f3:25:ee:46:9f:1f:1c:12:9b:36:47:7b:44:cb:e9:8a: 17:42:10:77:0e:42:c7:0e:b5:7d:42:f6:8d:c2:0e:c5:5a:58: 8c:33:3a:e8:8f:64:d8:73:40:e9:79:2d:bf:9a:c5:ee:6c:a0: db:bb:42:20:30:02:2b:d7:c2:b0:b5:d2:d9:21:d5:56:c7:23: aa:ba:ad:cf:79:76:a0:40:de:08:31:37:dd:43:d0:80:c4:e0: 9f:bf:a1:42:40:c7:b0:31:1c:78:86:3b:67:41:8e:e6:de:b0: cf:4b:cd:d7:2d:26:1c:34:b9:aa:b9:82:7e:a0:0f:39:51:87: 93:b3:fa:cd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/g/KQ8Hn0Dv5djVSA0gYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk ZGRiZGMwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWIzYTcxY2QxYjQxNmI3YWMyMDM5ODYzZDRiYjM3YWNjOTg0ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQFVRG6hm3YDi/Lq7weLMZxfmKD4 uzLkkwrR7nsU1OgVDhO+V25AosZdKUP5Lr8L7SRGt8tnfmMqKqM3ikvSpgklFiTW JH+qyz5X1IQ3x3tVFckWxNkXOv2S+Kx5zAyykX1TaIRlMN5hrn/oY1ewA+ASko6r oh41lJfvly6O4WVN3GZ0Ek5bP7nfVM2qtxENzZypXhZpWp977AG3HpmNcaWcxqTu EIRER270J+HFJJIoinvQ9wt2hqWVuIiNJQZfYBunQMhOcte8aUElSPHg2sIRLGeU 9nlUmJltSxPXnfL2xiy4UKbBk88pkYoCtz1cjprp+qv/ERBEVLj9yfdA4QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJWzpxzRtBa3rCA5hj1Ls3rMmE/qMB8GA1UdIwQY MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw LTgzYTBkOWVmZWMyZC8xL2xiT25ITkcwRnJlc0lEbUdQVXV6ZXN5WVQtby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAwLTgzYTBkOWVmZWMy ZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM+wRgw DQYJKoZIhvcNAQELBQADggEBADKZX2nEbDCE3s6x9iUXWzYnHSspIgyYajrXhK9i mgrJXw6Ecw+MnE2234P1X8ECfKzDih0K1fPQ0shJLRh0n3XE+o5bUIqf3JE1Fpy/ 5nnI1Wd1ccUX9paSTUB+4jDOhfRGUno+rso4maP6mpPInF1ksPtXm+B94/XpK8Xv hgPs8yXuRp8fHBKbNkd7RMvpihdCEHcOQscOtX1C9o3CDsVaWIwzOuiPZNhzQOl5 Lb+axe5soNu7QiAwAivXwrC10tkh1VbHI6q6rc95dqBA3ggxN91D0IDE4J+/oUJA x7AxHHiGO2dBjubesM9LzdctJhw0uaq5gn6gDzlRh5Oz+s0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:51 2026 by rpki-client