This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/LdG-Kuli28HC1HbwTbHy9oEVmrs.roa File: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (raw, json) Hash identifier: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M= Subject key identifier: 2D:D1:BE:2A:E9:62:DB:C1:C2:D4:76:F0:4D:B1:F2:F6:81:15:9A:BB Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Certificate serial: 019B7C809D789DDCB566D121595F50C8A92A Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/LdG-Kuli28HC1HbwTbHy9oEVmrs.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44812 IP address blocks: 92.119.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9d:78:9d:dc:b5:66:d1:21:59:5f:50:c8:a9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dd1be2ae962dbc1c2d476f04db1f2f681159abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:d9:3d:c8:eb:4a:ba:de:2c:02:b6:c0:7a: 6b:9e:a1:6f:4a:36:3f:e0:94:4e:be:6c:d8:b8:1f: 6d:cc:d0:5a:fd:8f:3c:3e:05:6c:01:e2:5e:b8:d6: d4:94:e4:1b:53:14:b1:6b:e4:5f:bb:d8:89:9f:5b: f4:be:8d:38:9c:f3:0d:87:a6:7e:1a:41:ea:7e:97: a6:4e:67:f8:75:a8:e9:22:95:bc:9c:03:d2:e5:6b: 1c:53:f1:4d:1a:34:33:87:29:05:0a:7b:9b:01:e1: 18:a7:00:3c:64:85:51:ae:4f:67:30:ad:57:08:85: 72:8b:92:0d:80:78:25:34:a5:f3:84:23:c9:3f:85: 71:49:40:1a:17:64:d0:90:22:9b:50:98:6d:ad:4a: 87:e8:c5:44:e4:2f:57:24:b6:95:96:b8:02:0f:29: 36:8f:67:84:38:f2:74:d2:eb:5f:62:8f:5c:1f:97: 42:f3:ba:04:8c:22:eb:65:cf:e9:aa:24:aa:24:f1: 67:25:4c:96:49:63:50:33:2a:fe:b6:1e:54:d0:4d: 38:4e:a8:9a:38:9e:01:ec:51:b0:78:b1:ca:50:9c: 08:34:67:90:b8:d0:03:9b:c9:ef:ef:f8:a1:fc:1d: f2:fd:89:59:ab:82:f3:5b:2b:42:c3:c7:52:b2:70: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:BE:2A:E9:62:DB:C1:C2:D4:76:F0:4D:B1:F2:F6:81:15:9A:BB X509v3 Authority Key Identifier: keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/LdG-Kuli28HC1HbwTbHy9oEVmrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.159.0/24 Signature Algorithm: sha256WithRSAEncryption 33:17:49:59:39:b0:60:c9:98:fa:13:7b:5e:2e:46:f5:57:4e: 5e:0c:d3:fd:a5:98:a3:b2:e7:ba:f4:73:85:34:76:c2:79:ce: 28:26:9d:82:59:41:83:60:3d:0b:ce:35:3b:68:83:00:2c:e7: 2a:df:a8:79:3b:46:f0:e7:77:5f:d7:da:48:f8:07:c3:27:bf: 6b:55:1b:04:f6:a9:22:86:6e:6a:ca:b6:c5:b0:ef:3b:dd:cb: 75:2f:99:dc:4d:0d:71:c5:5d:12:88:b8:77:1b:19:10:13:89: 38:3b:0e:aa:a9:48:01:c0:bb:e3:04:d3:d8:bc:41:04:61:88: be:ec:c4:c9:3c:c0:dd:fc:ca:6b:a0:ff:a9:91:ab:69:11:f8: 65:81:56:bd:20:99:34:d2:4e:89:41:86:c5:20:4f:8c:70:5a: a1:c7:12:ab:5f:4f:04:41:ae:0a:0d:24:6c:03:fd:06:31:46: 3c:06:f0:42:c9:78:00:9c:7e:94:42:a1:0a:24:c5:f0:b3:0a: 8f:21:00:95:d3:6f:98:1e:bc:b2:04:56:a7:b3:61:28:4a:09: f5:1d:9b:1f:8e:10:ae:dd:a2:94:3e:a4:44:9b:86:52:86:93: ab:fe:5b:c3:4e:30:0e:8c:3c:7a:85:d3:6e:96:d0:0a:bd:28: a1:45:6c:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJ14ndy1ZtEhWV9QyKkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk ZGYyM2QwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGQxYmUyYWU5NjJkYmMxYzJkNDc2ZjA0ZGIxZjJmNjgxMTU5YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBPZPcjrSrreLAK2wHprnqFvSjY/ 4JROvmzYuB9tzNBa/Y88PgVsAeJeuNbUlOQbUxSxa+Rfu9iJn1v0vo04nPMNh6Z+ GkHqfpemTmf4dajpIpW8nAPS5WscU/FNGjQzhykFCnubAeEYpwA8ZIVRrk9nMK1X CIVyi5INgHglNKXzhCPJP4VxSUAaF2TQkCKbUJhtrUqH6MVE5C9XJLaVlrgCDyk2 j2eEOPJ00utfYo9cH5dC87oEjCLrZc/pqiSqJPFnJUyWSWNQMyr+th5U0E04Tqia OJ4B7FGweLHKUJwINGeQuNADm8nv7/ih/B3y/YlZq4LzWytCw8dSsnB9+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC3RvirpYtvBwtR28E2x8vaBFZq7MB8GA1UdIwQY MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct M2M1ZTE3NDRhY2RkLzEvTGRHLUt1bGkyOEhDMUhid1RiSHk5b0VWbXJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHefMA0G CSqGSIb3DQEBCwUAA4IBAQAzF0lZObBgyZj6E3teLkb1V05eDNP9pZijsue69HOF NHbCec4oJp2CWUGDYD0LzjU7aIMALOcq36h5O0bw53df19pI+AfDJ79rVRsE9qki hm5qyrbFsO873ct1L5ncTQ1xxV0SiLh3GxkQE4k4Ow6qqUgBwLvjBNPYvEEEYYi+ 7MTJPMDd/MproP+pkatpEfhlgVa9IJk00k6JQYbFIE+McFqhxxKrX08EQa4KDSRs A/0GMUY8BvBCyXgAnH6UQqEKJMXwswqPIQCV02+YHryyBFans2EoSgn1HZsfjhCu 3aKUPqREm4ZShpOr/lvDTjAOjDx6hdNultAKvSihRWx/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:28 2026 by rpki-client