This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/LbYvJLBdHQvWviPwd15d9xVJqgY.roa File: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (raw, json) Hash identifier: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs= Subject key identifier: 2D:B6:2F:24:B0:5D:1D:0B:D6:BE:23:F0:77:5E:5D:F7:15:49:AA:06 Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B6A9863B20B7B0B5A7954CFCF9A50 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/LbYvJLBdHQvWviPwd15d9xVJqgY.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59542 IP address blocks: 145.7.49.0/24 maxlen: 24 145.7.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6a:98:63:b2:0b:7b:0b:5a:79:54:cf:cf:9a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2db62f24b05d1d0bd6be23f0775e5df71549aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:3c:1c:50:3f:f2:e2:d4:e4:ac:08:22:ff: 72:74:1c:5b:8a:c9:b8:7e:90:b2:e5:c3:12:4c:b1: 1d:bf:85:eb:39:b2:c0:d1:6f:17:b6:f1:9a:9e:d0: 41:c9:e9:69:0e:01:30:cf:03:7a:6a:10:c5:35:84: cc:ab:3c:74:83:0a:cf:08:5e:36:cf:53:b6:ee:ca: ae:e4:60:0e:b2:3a:1e:72:69:8a:07:82:cb:1a:af: 02:37:b4:ba:a7:f9:9f:89:32:ce:2b:8c:a8:d1:f0: 08:99:ba:b3:07:60:04:9e:18:f3:4f:0d:44:84:34: 85:43:5e:5e:a0:66:10:6d:ef:33:3a:67:0b:0e:6f: 69:8d:24:9d:7e:29:3c:d2:93:42:e0:8a:e0:f4:b4: c7:d9:24:24:cb:3f:d5:74:a3:c4:87:76:1d:83:83: c2:d1:51:60:37:85:2a:fa:a1:22:9b:0a:c0:4e:18: a5:03:f2:97:61:c0:30:fd:80:39:0a:3e:ab:0b:fb: 52:4b:bf:b9:f3:0c:0b:b1:5c:73:4e:a9:84:18:e9: d9:41:9a:e8:d7:ca:6c:86:da:61:ce:dd:d1:d7:82: 84:d4:25:e1:54:3e:ac:98:bf:ba:b1:91:4d:cb:f4: d2:05:0a:78:22:24:cb:f8:62:95:38:96:c1:fd:4a: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:2F:24:B0:5D:1D:0B:D6:BE:23:F0:77:5E:5D:F7:15:49:AA:06 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/LbYvJLBdHQvWviPwd15d9xVJqgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.7.49.0/24 145.7.56.0/21 Signature Algorithm: sha256WithRSAEncryption 12:99:bf:89:5b:af:d7:ff:ae:8f:4c:56:c4:06:bd:15:77:92: f5:43:43:62:46:82:52:f7:0e:a1:46:97:93:6f:9a:ee:b8:e2: c8:65:74:92:0e:85:08:bd:b0:71:ac:15:22:af:bb:66:3a:b5: 9d:ef:94:ac:1d:dc:73:5d:6c:97:eb:bb:5e:2f:4e:23:89:ca: 38:be:21:c5:d0:22:ad:93:bf:32:2d:19:49:ac:82:96:34:8f: fb:8e:3e:b2:b6:f0:cb:3d:49:1e:56:45:f1:4e:8d:ba:a2:30: 71:2c:83:91:75:a2:3a:d6:1d:96:42:3d:cf:92:b9:47:64:5b: 24:7c:d1:b1:5a:f8:f3:76:5a:d8:14:4f:f7:f6:4b:3e:5f:47: cb:fb:96:66:1c:c8:a4:2b:b2:cf:7a:e1:1d:b9:10:ea:96:15: 27:4f:e3:56:c4:46:f0:fd:13:e5:35:b7:5f:23:29:0a:2d:e2: b0:e3:72:f1:d9:10:c4:a7:33:41:95:c0:8d:b8:51:2e:28:79: 74:97:10:41:6b:b4:b1:a1:be:f3:55:5e:52:11:35:02:04:1d: 68:10:4e:75:f6:0a:60:11:bf:77:7c:0d:4f:57:b3:a8:e1:cd: c6:47:1c:39:64:73:f8:4e:ec:48:6e:36:82:d0:32:fe:4b:4b: af:fe:21:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W2qYY7ILewtaeVTPz5pQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGI2MmYyNGIwNWQxZDBiZDZiZTIzZjA3NzVlNWRmNzE1NDlhYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSM8HFA/8uLU5KwIIv9ydBxbism4 fpCy5cMSTLEdv4XrObLA0W8XtvGantBByelpDgEwzwN6ahDFNYTMqzx0gwrPCF42 z1O27squ5GAOsjoecmmKB4LLGq8CN7S6p/mfiTLOK4yo0fAImbqzB2AEnhjzTw1E hDSFQ15eoGYQbe8zOmcLDm9pjSSdfik80pNC4Irg9LTH2SQkyz/VdKPEh3Ydg4PC 0VFgN4Uq+qEimwrAThilA/KXYcAw/YA5Cj6rC/tSS7+58wwLsVxzTqmEGOnZQZro 18pshtphzt3R14KE1CXhVD6smL+6sZFNy/TSBQp4IiTL+GKVOJbB/UpefQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC22LySwXR0L1r4j8HdeXfcVSaoGMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvTGJZdkpMQmRIUXZXdmlQd2QxNWQ5eFZKcWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkQcxAwQD kQc4MA0GCSqGSIb3DQEBCwUAA4IBAQASmb+JW6/X/66PTFbEBr0Vd5L1Q0NiRoJS 9w6hRpeTb5ruuOLIZXSSDoUIvbBxrBUir7tmOrWd75SsHdxzXWyX67teL04jico4 viHF0CKtk78yLRlJrIKWNI/7jj6ytvDLPUkeVkXxTo26ojBxLIORdaI61h2WQj3P krlHZFskfNGxWvjzdlrYFE/39ks+X0fL+5ZmHMikK7LPeuEduRDqlhUnT+NWxEbw /RPlNbdfIykKLeKw43Lx2RDEpzNBlcCNuFEuKHl0lxBBa7Sxob7zVV5SETUCBB1o EE519gpgEb93fA1PV7Oo4c3GRxw5ZHP4TuxIbjaC0DL+S0uv/iEt -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:27 2026 by rpki-client