This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/LD-3cK94EujojZ7ZiN9ZmU7leBA.roa File: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (raw, json) Hash identifier: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE= Subject key identifier: 2C:3F:B7:70:AF:78:12:E8:E8:8D:9E:D9:88:DF:59:99:4E:E5:78:10 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C67587DD05616C40A2878B5B9B631B Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/LD-3cK94EujojZ7ZiN9ZmU7leBA.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58079 IP address blocks: 46.35.180.0/23 maxlen: 24 46.35.184.0/21 maxlen: 24 93.152.241.0/24 maxlen: 24 93.152.242.0/23 maxlen: 24 93.152.244.0/23 maxlen: 24 95.158.153.0/24 maxlen: 24 95.158.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:75:87:dd:05:61:6c:40:a2:87:8b:5b:9b:63:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3fb770af7812e8e88d9ed988df59994ee57810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:ac:80:5b:16:d4:fc:2d:9c:f5:5c:64:10: ce:1c:21:5e:17:df:f4:de:ce:34:96:42:85:b1:34: 85:68:3f:ba:c7:46:85:c1:b8:0c:5e:27:d6:f5:91: 6a:2d:1f:f2:22:1b:7a:93:02:c1:24:88:b1:90:35: 2a:3a:13:dd:2e:50:bb:cd:70:12:f0:4b:58:9b:c3: d3:4c:c0:cd:1d:9f:57:25:12:69:3f:82:88:8a:ae: 98:a6:54:e6:24:dd:cb:00:59:a5:05:8e:b8:31:65: 8b:02:cc:fd:fb:34:b7:e4:c4:17:91:64:7b:22:ab: 41:fb:60:75:48:ff:ee:9f:81:45:90:77:a3:29:ff: 54:a3:f9:de:be:82:ef:e2:e0:30:8a:2e:c1:12:38: 7c:f2:7d:2e:d2:88:24:d1:26:61:d7:b4:58:5a:8c: ad:81:d2:15:18:25:3d:d6:6e:4b:b8:0a:fb:21:e1: f5:e6:ca:20:f0:c8:31:63:b3:48:16:99:49:40:be: a4:d3:fc:e5:9a:f6:1d:05:dd:68:40:80:f0:9f:5a: f4:86:41:c6:db:24:cf:1b:e5:41:44:98:5a:c4:2a: 2f:a3:30:6c:c9:82:47:69:43:e3:d4:cf:49:fb:64: 6b:de:23:59:ea:f4:ea:ad:e8:36:0a:d4:66:dc:db: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3F:B7:70:AF:78:12:E8:E8:8D:9E:D9:88:DF:59:99:4E:E5:78:10 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/LD-3cK94EujojZ7ZiN9ZmU7leBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.35.180.0/23 46.35.184.0/21 93.152.241.0-93.152.245.255 95.158.153.0/24 95.158.184.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:63:6d:42:33:69:b4:d5:1e:e7:fe:99:10:e2:aa:93:67:25: cb:2e:30:e5:a0:44:03:a0:18:a8:59:c9:16:6d:ef:86:d3:59: 8d:12:fb:be:17:c3:e6:43:cd:a4:d5:bc:a6:f5:d3:e2:0f:22: ad:9e:0f:fa:d6:dc:c2:a8:91:b2:58:34:ea:8d:40:70:c6:b1: 06:d1:14:1a:1f:b3:83:9b:69:a3:8d:f7:3a:88:d0:df:5b:ef: 95:32:f1:0a:17:8c:a5:b7:97:4e:99:c3:37:81:9c:df:58:44: 92:27:11:78:b4:9b:12:83:6a:d3:ee:4e:fc:b1:0c:e7:38:f9: 6d:84:61:07:19:e8:25:20:51:31:42:6a:6b:5b:b5:73:5b:82: 22:2c:5d:5c:a9:36:1b:c0:42:6a:d4:94:e1:8c:62:32:5e:8b: 05:81:38:ab:cb:c4:87:c9:5a:db:2b:0e:35:14:52:1b:e7:b5: 86:2a:96:24:df:80:41:92:21:58:d3:6a:e9:c7:4e:a7:72:6f: 28:6b:07:94:a5:b2:38:1c:26:77:76:b8:91:1a:24:f4:66:3a: 8a:30:7c:03:bf:3a:3e:d2:2f:81:0b:d4:be:20:e1:80:8e:c6: 8b:02:cd:34:32:4b:16:7f:b0:67:6d:79:8f:eb:6b:7d:78:75: 26:21:f1:46 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3xnWH3QVhbECih4tbm2MbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzNmYjc3MGFmNzgxMmU4ZTg4ZDllZDk4OGRmNTk5OTRlZTU3ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEasgFsW1PwtnPVcZBDOHCFeF9/0 3s40lkKFsTSFaD+6x0aFwbgMXifW9ZFqLR/yIht6kwLBJIixkDUqOhPdLlC7zXAS 8EtYm8PTTMDNHZ9XJRJpP4KIiq6YplTmJN3LAFmlBY64MWWLAsz9+zS35MQXkWR7 IqtB+2B1SP/un4FFkHejKf9Uo/nevoLv4uAwii7BEjh88n0u0ogk0SZh17RYWoyt gdIVGCU91m5LuAr7IeH15sog8MgxY7NIFplJQL6k0/zlmvYdBd1oQIDwn1r0hkHG 2yTPG+VBRJhaxCovozBsyYJHaUPj1M9J+2Rr3iNZ6vTqreg2CtRm3NuumwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCw/t3CveBLo6I2e2YjfWZlO5XgQMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvTEQtM2NLOTRFdWpvalo3WmlOOVptVTdsZUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBLiO0AwQD LiO4MAwDBABdmPEDBAFdmPQDBABfnpkDBAJfnrgwDQYJKoZIhvcNAQELBQADggEB ADpjbUIzabTVHuf+mRDiqpNnJcsuMOWgRAOgGKhZyRZt74bTWY0S+74Xw+ZDzaTV vKb10+IPIq2eD/rW3MKokbJYNOqNQHDGsQbRFBofs4ObaaON9zqI0N9b75Uy8QoX jKW3l06ZwzeBnN9YRJInEXi0mxKDatPuTvyxDOc4+W2EYQcZ6CUgUTFCamtbtXNb giIsXVypNhvAQmrUlOGMYjJeiwWBOKvLxIfJWtsrDjUUUhvntYYqliTfgEGSIVjT aunHTqdybyhrB5SlsjgcJnd2uJEaJPRmOoowfAO/Oj7SL4EL1L4g4YCOxosCzTQy SxZ/sGdteY/ra314dSYh8UY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:13 2026 by rpki-client