This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa File: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (raw, json) Hash identifier: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E= Subject key identifier: 95:F6:C0:60:A5:57:31:D6:78:D9:4F:7F:4F:D0:BC:39:97:65:00:5A Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Certificate serial: 019B7A5AC56F50966203410EFC192064966C Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209383 IP address blocks: 91.217.30.0/23 maxlen: 23 91.223.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c5:6f:50:96:62:03:41:0e:fc:19:20:64:96:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95f6c060a55731d678d94f7f4fd0bc399765005a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:f8:97:a6:7b:01:f0:ff:54:a5:a5:1d:0f: c1:ff:f4:14:03:1c:f5:1e:73:5c:50:ae:18:90:08: 8e:4a:b7:75:86:9c:8f:ec:14:6a:8c:73:9a:a9:a5: 66:ae:89:4c:6a:1d:fd:09:5e:e1:6e:9e:f5:80:30: 79:b8:34:00:2b:72:1f:c4:6d:0b:9f:c8:2a:2a:4c: b0:67:6f:02:11:4f:51:12:1f:9c:61:d5:66:cb:1c: 28:9b:38:fe:c4:c9:5f:f2:b6:45:0a:e0:6a:b4:54: 53:63:27:dc:02:00:5a:85:b8:1e:92:b4:5f:2b:ce: a2:3e:c6:6f:e8:0a:36:0e:bd:84:a8:6d:69:21:1b: 48:47:a1:b5:76:0e:9f:5d:69:cd:f4:fe:79:d2:e1: 0c:a0:da:dd:e9:de:f2:28:bd:b9:3a:2e:be:9d:13: 0d:8b:e7:48:40:0f:77:d9:5e:00:95:0b:5d:d4:f3: 40:97:21:8f:42:cd:51:94:7d:93:72:49:cc:63:13: 72:28:ba:c6:43:3f:7e:96:23:83:3c:c7:cb:42:af: 90:81:d4:9a:c8:92:c0:3d:51:62:16:2e:f2:0d:38: 62:bf:fa:f0:1f:ad:df:6f:a7:ce:79:ff:61:ff:2f: 09:0f:b3:e6:9f:97:7a:59:24:26:23:04:41:51:6e: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:C0:60:A5:57:31:D6:78:D9:4F:7F:4F:D0:BC:39:97:65:00:5A X509v3 Authority Key Identifier: keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.30.0/23 91.223.140.0/24 Signature Algorithm: sha256WithRSAEncryption 98:e5:15:4e:11:ee:76:f6:4d:f0:a3:cf:42:dd:49:28:5a:68: 56:7c:e3:47:41:27:46:3c:fb:60:e4:5f:f4:d6:d4:2f:e0:cc: e8:5a:f4:0a:ca:ee:ca:62:7d:2f:3c:99:83:0a:4f:1f:eb:29: 4a:6f:7d:73:35:8e:b5:62:5c:54:dc:39:3b:59:49:1a:a1:6f: 4e:c7:30:28:11:51:1c:af:60:78:4a:c4:66:84:49:54:e9:5d: f7:aa:fe:7d:99:c6:fd:90:1d:28:6d:c5:7d:e0:db:c5:91:3c: cb:46:2e:3e:e8:cf:fc:75:8b:14:aa:67:0e:44:ff:80:a4:a0: 08:99:54:e3:75:7f:10:e4:1b:fd:77:6c:97:bc:46:2e:db:69: 6c:34:59:ec:ce:d6:3c:ec:ee:ac:f9:00:fc:bf:80:1d:22:03: 15:c6:50:9d:9a:5d:49:a5:e2:f8:97:85:3b:6b:c1:cf:07:a9: 95:65:89:2b:7a:db:46:db:36:06:2c:58:ab:fe:46:44:8e:ed: b9:47:dd:a1:cd:4f:8d:82:e2:b6:ce:0a:ac:0a:cd:8d:d7:cd: 44:16:65:64:9b:6c:2a:e1:a5:41:5c:eb:ef:06:50:bc:6d:c0: 3b:dc:aa:35:b6:dd:03:af:88:5e:c5:bb:7f:01:2a:62:b4:c6: 13:78:c8:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WsVvUJZiA0EO/BkgZJZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3 ZmEwMWUwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWY2YzA2MGE1NTczMWQ2NzhkOTRmN2Y0ZmQwYmMzOTk3NjUwMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIz4l6Z7AfD/VKWlHQ/B//QUAxz1 HnNcUK4YkAiOSrd1hpyP7BRqjHOaqaVmrolMah39CV7hbp71gDB5uDQAK3IfxG0L n8gqKkywZ28CEU9REh+cYdVmyxwomzj+xMlf8rZFCuBqtFRTYyfcAgBahbgekrRf K86iPsZv6Ao2Dr2EqG1pIRtIR6G1dg6fXWnN9P550uEMoNrd6d7yKL25Oi6+nRMN i+dIQA932V4AlQtd1PNAlyGPQs1RlH2TcknMYxNyKLrGQz9+liODPMfLQq+QgdSa yJLAPVFiFi7yDThiv/rwH63fb6fOef9h/y8JD7Pmn5d6WSQmIwRBUW5xnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJX2wGClVzHWeNlPf0/QvDmXZQBaMB8GA1UdIwQY MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt NTEwY2YyNmJjYTY1LzEvbGZiQVlLVlhNZFo0MlU5X1Q5QzhPWmRsQUZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1 LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9keAwQA W9+MMA0GCSqGSIb3DQEBCwUAA4IBAQCY5RVOEe529k3wo89C3UkoWmhWfONHQSdG PPtg5F/01tQv4MzoWvQKyu7KYn0vPJmDCk8f6ylKb31zNY61YlxU3Dk7WUkaoW9O xzAoEVEcr2B4SsRmhElU6V33qv59mcb9kB0obcV94NvFkTzLRi4+6M/8dYsUqmcO RP+ApKAImVTjdX8Q5Bv9d2yXvEYu22lsNFnsztY87O6s+QD8v4AdIgMVxlCdml1J peL4l4U7a8HPB6mVZYkrettG2zYGLFir/kZEju25R92hzU+NguK2zgqsCs2N181E FmVkm2wq4aVBXOvvBlC8bcA73Ko1tt0Dr4hexbt/ASpitMYTeMik -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:31 2026 by rpki-client