This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/LD4LiJakMnd2fM_muaGzK3OCDm4.roa File: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (raw, json) Hash identifier: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM= Subject key identifier: 2C:3E:0B:88:96:A4:32:77:76:7C:CF:E6:B9:A1:B3:2B:73:82:0E:6E Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BE0A0C4B1EA61042A8BB15F3B04351023 Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/LD4LiJakMnd2fM_muaGzK3OCDm4.roa Signing time: Wed 21 Jan 2026 12:56:31 +0000 ROA not before: Wed 21 Jan 2026 12:56:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207168 IP address blocks: 77.91.98.0/23 maxlen: 23 77.91.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a0:c4:b1:ea:61:04:2a:8b:b1:5f:3b:04:35:10:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 21 12:56:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3e0b8896a43277767ccfe6b9a1b32b73820e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:0d:e2:f7:02:bb:be:08:fe:e2:af:04:47: 39:93:35:b3:f6:ec:6e:be:60:a8:82:ab:97:08:56: 4c:b6:c6:8e:ac:57:e8:25:75:db:aa:09:92:68:3c: 3e:d8:1b:57:db:a8:71:29:18:4a:5b:0c:11:bb:c6: aa:89:04:a1:ac:95:08:06:4c:95:4c:0b:18:2e:ef: fe:da:78:f0:db:79:ab:a3:ab:6f:c9:0b:f8:b6:06: f4:13:0e:90:c2:68:fe:c0:d2:b0:bf:a4:49:40:9e: 3a:e4:b9:61:a8:5c:fa:89:08:c5:ce:59:10:ed:35: 6d:b5:5d:76:54:fc:7d:35:b4:c4:4d:a2:d0:21:96: f1:08:2b:91:a8:77:23:57:ed:a9:93:d8:54:f6:71: bd:f0:4f:53:79:55:fa:a9:77:b6:79:03:00:20:35: 6d:cb:29:fa:f9:22:6d:ad:7e:90:61:d1:14:d6:65: cb:ac:16:1b:1b:2c:b7:0b:66:d6:3e:b4:22:00:84: e9:63:8a:57:2c:e0:72:73:f7:5d:3b:f2:45:94:16: 22:bc:00:37:cb:df:ec:48:b0:b6:c9:c7:fa:5d:f4: ed:8c:6b:5a:f4:f7:16:3c:6e:c0:b0:c6:b6:70:ed: 89:58:8a:58:15:12:fe:e2:2e:db:0b:89:34:32:f1: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:0B:88:96:A4:32:77:76:7C:CF:E6:B9:A1:B3:2B:73:82:0E:6E X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/LD4LiJakMnd2fM_muaGzK3OCDm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.98.0/23 77.91.125.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b6:64:53:08:b0:78:68:77:81:15:e3:20:93:62:7c:04:50: d6:e6:3c:c7:0d:e2:63:3b:80:94:c3:05:a7:b1:ef:aa:a3:d6: 44:3f:6a:a5:91:dd:c8:6a:bf:83:de:74:83:9d:b8:23:66:73: 8e:e0:cb:28:9e:a9:56:50:bb:3b:49:3a:31:81:32:ce:93:07: 99:7c:fb:2f:2e:a4:7e:3c:c4:2d:3c:c4:8e:99:a7:e9:17:96: 69:6b:be:d1:19:6a:2c:07:6d:ce:c6:1f:b4:0f:03:8f:01:d0: a6:8f:87:e5:c7:b8:e0:5c:29:f8:17:06:59:82:41:51:45:ac: 77:9b:ea:88:7b:da:2c:69:32:2a:40:ba:83:8e:73:92:73:fc: 9d:8f:df:75:0c:45:57:74:c2:a2:19:d4:c6:59:1a:e0:13:ae: a7:da:1a:a8:03:7d:61:fb:77:73:8c:72:d8:43:8d:94:96:f2: 3c:d3:3c:ad:46:ae:2c:ff:2a:c5:c8:01:af:96:1f:a5:45:99: cf:69:b7:b3:36:45:7e:44:bc:89:b6:38:3d:5e:71:6d:a4:1c: 15:14:6c:9d:b3:70:31:e1:a5:a3:34:86:1b:5f:f1:bc:1a:d3: c6:2a:0a:e3:ee:1f:f7:64:36:d1:3e:90:c8:bc:b6:61:65:c0: 59:04:bd:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvgoMSx6mEEKouxXzsENRAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTIxMTI1NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzNlMGI4ODk2YTQzMjc3NzY3Y2NmZTZiOWExYjMyYjczODIwZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q8N4vcCu74I/uKvBEc5kzWz9uxu vmCogquXCFZMtsaOrFfoJXXbqgmSaDw+2BtX26hxKRhKWwwRu8aqiQShrJUIBkyV TAsYLu/+2njw23mro6tvyQv4tgb0Ew6Qwmj+wNKwv6RJQJ465LlhqFz6iQjFzlkQ 7TVttV12VPx9NbTETaLQIZbxCCuRqHcjV+2pk9hU9nG98E9TeVX6qXe2eQMAIDVt yyn6+SJtrX6QYdEU1mXLrBYbGyy3C2bWPrQiAITpY4pXLOByc/ddO/JFlBYivAA3 y9/sSLC2ycf6XfTtjGta9PcWPG7AsMa2cO2JWIpYFRL+4i7bC4k0MvFSBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCw+C4iWpDJ3dnzP5rmhsytzgg5uMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvTEQ0TGlKYWtNbmQyZk1fbXVhR3pLM09DRG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVtiAwQA TVt9MA0GCSqGSIb3DQEBCwUAA4IBAQBytmRTCLB4aHeBFeMgk2J8BFDW5jzHDeJj O4CUwwWnse+qo9ZEP2qlkd3Iar+D3nSDnbgjZnOO4MsonqlWULs7SToxgTLOkweZ fPsvLqR+PMQtPMSOmafpF5Zpa77RGWosB23Oxh+0DwOPAdCmj4flx7jgXCn4FwZZ gkFRRax3m+qIe9osaTIqQLqDjnOSc/ydj991DEVXdMKiGdTGWRrgE66n2hqoA31h +3dzjHLYQ42UlvI80zytRq4s/yrFyAGvlh+lRZnPabezNkV+RLyJtjg9XnFtpBwV FGyds3Ax4aWjNIYbX/G8GtPGKgrj7h/3ZDbRPpDIvLZhZcBZBL1T -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:06 2026 by rpki-client