This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/lbtclL0UM1z5nc3LW9XvtOxRP9Y.roa File: lbtclL0UM1z5nc3LW9XvtOxRP9Y.roa (raw, json) Hash identifier: WIIlf9vdT1PUSuW+vzygtIp1nFQYVicKNdDqfIcunuU= Subject key identifier: 95:BB:5C:94:BD:14:33:5C:F9:9D:CD:CB:5B:D5:EF:B4:EC:51:3F:D6 Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627 Certificate serial: 019B78A2C0F0422B0EAA11D034FBDE3ABF59 Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/lbtclL0UM1z5nc3LW9XvtOxRP9Y.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62597 IP address blocks: 163.114.192.0/18 maxlen: 24 163.114.233.0/24 maxlen: 24 185.103.32.0/22 maxlen: 24 185.103.32.0/24 maxlen: 24 185.103.33.0/24 maxlen: 24 185.103.34.0/24 maxlen: 24 185.103.35.0/24 maxlen: 24 2a00:edc0::/32 maxlen: 32 2a00:edc0:100::/44 maxlen: 48 2a00:edc0:107::/48 maxlen: 48 2a00:edc0:10f::/48 maxlen: 48 2a00:edc0:136::/48 maxlen: 48 2a00:edc0:137::/48 maxlen: 48 2a00:edc0:1f0::/44 maxlen: 48 2a00:edc0:469::/48 maxlen: 48 2a00:edc0:1000::/48 maxlen: 48 2a00:edc0:1001::/48 maxlen: 48 2a00:edc0:1002::/48 maxlen: 48 2a00:edc0:1003::/48 maxlen: 48 2a00:edc0:1004::/48 maxlen: 48 2a00:edc0:1005::/48 maxlen: 48 2a00:edc0:1010::/48 maxlen: 48 2a00:edc0:6000::/48 maxlen: 48 2a00:edc0:6259::/48 maxlen: 48 2a00:edc0:7ffe::/48 maxlen: 48 2a00:edc0:7fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c0:f0:42:2b:0e:aa:11:d0:34:fb:de:3a:bf:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95bb5c94bd14335cf99dcdcb5bd5efb4ec513fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:e8:eb:04:5b:fd:0d:a8:21:58:2f:32:28: 22:5f:39:73:74:57:ff:e9:90:75:a4:13:31:2f:76: d0:b5:e3:69:20:4d:c6:27:54:2c:83:22:dd:84:ff: 31:73:32:88:63:a5:2b:cf:4e:de:57:0f:0e:84:dc: 87:c9:9e:2e:31:1a:c1:25:44:f0:b1:b9:26:6d:45: c5:f4:8a:f1:d5:f0:29:a4:97:8d:6f:da:65:a9:eb: 4e:05:d4:fc:3a:41:73:d1:ed:0c:b8:d3:1e:be:65: 96:f9:b8:b9:f1:d0:b4:d1:38:f7:30:d0:ab:ab:b9: 37:dd:f7:8a:60:7d:51:b0:42:d3:53:97:f7:1b:36: 14:6c:f7:6b:cc:6b:43:86:68:85:e6:b9:3e:07:30: 76:82:8b:af:bb:78:cf:34:80:c9:e5:ed:99:29:9b: 5e:20:b2:fb:3d:97:59:4b:70:6a:4b:c5:c0:32:fc: 36:9a:d9:ef:d9:92:2d:51:7a:22:df:be:79:c5:e8: c6:b6:62:e5:42:4c:37:1f:3e:da:e0:19:04:34:7f: 12:d5:18:a6:c0:51:40:9c:a0:8b:94:1d:b8:71:1c: c5:22:54:63:a8:af:1c:5a:46:01:30:dc:65:a2:7f: 36:c8:0a:9f:08:45:71:04:5c:6e:d1:78:6b:3a:87: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:5C:94:BD:14:33:5C:F9:9D:CD:CB:5B:D5:EF:B4:EC:51:3F:D6 X509v3 Authority Key Identifier: keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/lbtclL0UM1z5nc3LW9XvtOxRP9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.114.192.0/18 185.103.32.0/22 IPv6: 2a00:edc0::/32 Signature Algorithm: sha256WithRSAEncryption cc:21:63:05:36:7b:34:23:eb:18:c7:55:6b:50:e9:4d:82:30: e2:d3:b4:fa:e2:3c:12:b0:11:af:cb:a9:9b:42:1f:72:44:20: bf:aa:0e:14:4a:0a:a1:3a:fb:d7:03:ea:ab:62:d4:e6:6b:e2: fa:f3:f5:db:5e:91:3a:60:77:bd:52:97:34:ca:aa:e4:2a:e2: 38:e1:b6:21:3d:2c:78:ed:28:c8:f0:7e:53:a7:8b:65:aa:b7: 72:2a:25:5b:31:22:8c:82:e3:5d:34:14:0e:fc:5e:fa:e9:78: 6d:47:68:3b:ec:18:53:44:e1:f8:cc:d9:e2:2c:9c:25:d3:27: 80:a1:59:b1:35:71:d4:08:7e:8f:de:80:9d:61:9b:04:dc:e1: 79:8a:30:86:f7:dc:68:95:e2:84:b5:4f:9c:86:95:52:2c:25: 1b:a9:70:d6:52:54:5d:a3:36:fc:c2:4f:69:7c:89:de:c2:63: 24:c9:3c:a1:28:b1:8f:a0:2a:0f:e8:0e:56:7f:f4:ba:46:dc: 9b:1f:c3:30:55:e8:7e:18:f9:f5:f1:e5:9f:8e:b8:b1:08:59: 7e:64:bd:ec:ea:a1:06:4e:fa:99:f2:0c:28:23:8b:d5:4f:f6: 66:f3:bc:5e:c0:5d:79:1a:9f:c3:f0:3e:05:d7:6b:67:64:d0: b8:f9:ea:ff -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4osDwQisOqhHQNPveOr9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5 NDg2MjcwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWJiNWM5NGJkMTQzMzVjZjk5ZGNkY2I1YmQ1ZWZiNGVjNTEzZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC3o6wRb/Q2oIVgvMigiXzlzdFf/ 6ZB1pBMxL3bQteNpIE3GJ1QsgyLdhP8xczKIY6Urz07eVw8OhNyHyZ4uMRrBJUTw sbkmbUXF9Irx1fAppJeNb9plqetOBdT8OkFz0e0MuNMevmWW+bi58dC00Tj3MNCr q7k33feKYH1RsELTU5f3GzYUbPdrzGtDhmiF5rk+BzB2gouvu3jPNIDJ5e2ZKZte ILL7PZdZS3BqS8XAMvw2mtnv2ZItUXoi3755xejGtmLlQkw3Hz7a4BkENH8S1Rim wFFAnKCLlB24cRzFIlRjqK8cWkYBMNxlon82yAqfCEVxBFxu0XhrOocPnQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJW7XJS9FDNc+Z3Ny1vV77TsUT/WMB8GA1UdIwQY MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt NTkzM2EwOWY3MmQxLzEvbGJ0Y2xMMFVNMXo1bmMzTFc5WHZ0T3hSUDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGo3LAAwQC uWcgMA0EAgACMAcDBQAqAO3AMA0GCSqGSIb3DQEBCwUAA4IBAQDMIWMFNns0I+sY x1VrUOlNgjDi07T64jwSsBGvy6mbQh9yRCC/qg4USgqhOvvXA+qrYtTma+L68/Xb XpE6YHe9Upc0yqrkKuI44bYhPSx47SjI8H5Tp4tlqrdyKiVbMSKMguNdNBQO/F76 6XhtR2g77BhTROH4zNniLJwl0yeAoVmxNXHUCH6P3oCdYZsE3OF5ijCG99xoleKE tU+chpVSLCUbqXDWUlRdozb8wk9pfInewmMkyTyhKLGPoCoP6A5Wf/S6RtybH8Mw Veh+GPn18eWfjrixCFl+ZL3s6qEGTvqZ8gwoI4vVT/Zm87xewF15Gp/D8D4F12tn ZNC4+er/ -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:45 2026 by rpki-client