This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/lrba9KQ5bVLiK8rXzMWhNdIXCXk.roa File: lrba9KQ5bVLiK8rXzMWhNdIXCXk.roa (raw, json) Hash identifier: rlOLsWnjrmK3yp2cm0AiuUrxhUln/r6tAwXnNcCVZW8= Subject key identifier: 96:B6:DA:F4:A4:39:6D:52:E2:2B:CA:D7:CC:C5:A1:35:D2:17:09:79 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EADFF1423D47A14FAA56FD8561C7C0 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/lrba9KQ5bVLiK8rXzMWhNdIXCXk.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400529 IP address blocks: 45.8.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:df:f1:42:3d:47:a1:4f:aa:56:fd:85:61:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96b6daf4a4396d52e22bcad7ccc5a135d2170979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:bb:4a:47:4e:5e:fd:2f:e5:de:ad:ee:40: d2:8e:37:0c:6e:37:d7:b4:27:65:b9:a0:27:c1:d0: a5:d3:fb:08:7b:54:31:fb:92:46:68:27:31:41:8e: bb:ec:cd:4f:aa:64:31:3d:9b:ca:89:67:90:34:d0: ec:73:2e:1c:fd:f9:eb:f5:9d:7e:aa:a1:36:e4:38: 3d:c0:64:ef:2d:ec:ad:7d:bc:6f:1c:70:ea:69:6b: 4a:24:33:0a:e0:08:2f:f8:03:ab:a3:18:74:29:e8: 71:49:6b:27:ad:19:8b:15:67:e3:d8:37:1d:84:49: ba:e7:90:99:a8:e2:f5:33:8f:28:77:fb:69:e3:70: ad:d0:90:4e:13:31:10:f1:98:b3:29:d5:7e:c7:09: 8c:91:f9:db:c3:94:f0:a9:78:4e:fb:06:01:9b:9c: 41:ba:f8:79:7e:bb:36:ad:d2:99:8c:32:6e:89:33: ef:64:f5:26:f5:10:b5:94:a7:b8:b3:a1:e5:bd:e7: a3:83:bc:5a:05:05:2c:29:b5:1b:24:41:6d:6e:65: 26:ce:b9:de:7e:77:36:31:6e:6e:fd:c4:31:d1:8e: 14:c7:f6:ef:ef:7a:23:dd:0e:33:71:d1:10:7e:3b: cf:6f:ba:86:0f:f2:fa:6f:43:cd:34:27:d8:d0:c0: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B6:DA:F4:A4:39:6D:52:E2:2B:CA:D7:CC:C5:A1:35:D2:17:09:79 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/lrba9KQ5bVLiK8rXzMWhNdIXCXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.201.0/24 Signature Algorithm: sha256WithRSAEncryption d3:83:51:b9:78:1b:9c:0a:e5:e6:57:ac:74:78:3c:96:0b:ea: 35:1a:9c:d2:cd:c8:78:7c:7f:4a:48:32:35:0f:6d:e7:09:05: 99:22:8d:c7:09:fe:b9:8b:6d:a9:4f:83:90:ae:1d:73:63:53: d0:d3:88:23:30:2e:17:d5:3f:9c:df:e0:3a:1f:00:21:37:be: d4:da:2f:51:42:16:a0:fc:08:10:ff:5a:3e:41:3c:a0:d9:aa: b3:33:f3:b0:43:0a:7d:c6:43:3a:c9:25:af:68:ea:f9:7c:80: 5d:c8:ff:6f:a3:84:12:93:89:96:4f:c8:54:f2:6e:43:ab:80: 99:00:9c:03:d6:87:23:41:4f:6a:28:1f:73:30:92:b7:3c:9b: 01:bb:cd:8c:85:4d:a2:f1:8b:de:b4:c6:b0:ed:86:20:bd:88: 82:67:fe:89:9f:77:5b:5f:23:ff:17:0a:4a:07:d5:16:6a:d5: a3:33:ef:6a:f1:84:40:a1:1a:cf:92:d2:89:aa:c4:11:b1:fb: d4:7c:48:1b:a6:0d:bc:3c:69:31:e8:98:c3:5d:a3:cc:b4:e5: 4a:86:74:19:3a:d4:57:86:23:bd:f0:8e:2f:a2:09:53:5a:63: 19:75:4e:9d:2c:52:36:c3:d0:17:97:90:65:74:cc:46:26:44: 86:24:65:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26t/xQj1HoU+qVv2FYcfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmI2ZGFmNGE0Mzk2ZDUyZTIyYmNhZDdjY2M1YTEzNWQyMTcwOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR27SkdOXv0v5d6t7kDSjjcMbjfX tCdluaAnwdCl0/sIe1Qx+5JGaCcxQY677M1PqmQxPZvKiWeQNNDscy4c/fnr9Z1+ qqE25Dg9wGTvLeytfbxvHHDqaWtKJDMK4Agv+AOroxh0KehxSWsnrRmLFWfj2Dcd hEm655CZqOL1M48od/tp43Ct0JBOEzEQ8ZizKdV+xwmMkfnbw5TwqXhO+wYBm5xB uvh5frs2rdKZjDJuiTPvZPUm9RC1lKe4s6Hlveejg7xaBQUsKbUbJEFtbmUmzrne fnc2MW5u/cQx0Y4Ux/bv73oj3Q4zcdEQfjvPb7qGD/L6b0PNNCfY0MC+qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJa22vSkOW1S4ivK18zFoTXSFwl5MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvbHJiYTlLUTViVkxpSzhyWHpNV2hOZElYQ1hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjJMA0G CSqGSIb3DQEBCwUAA4IBAQDTg1G5eBucCuXmV6x0eDyWC+o1GpzSzch4fH9KSDI1 D23nCQWZIo3HCf65i22pT4OQrh1zY1PQ04gjMC4X1T+c3+A6HwAhN77U2i9RQhag /AgQ/1o+QTyg2aqzM/OwQwp9xkM6ySWvaOr5fIBdyP9vo4QSk4mWT8hU8m5Dq4CZ AJwD1ocjQU9qKB9zMJK3PJsBu82MhU2i8YvetMaw7YYgvYiCZ/6Jn3dbXyP/FwpK B9UWatWjM+9q8YRAoRrPktKJqsQRsfvUfEgbpg28PGkx6JjDXaPMtOVKhnQZOtRX hiO98I4voglTWmMZdU6dLFI2w9AXl5BldMxGJkSGJGU5 -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:03 2026 by rpki-client