This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa File: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (raw, json) Hash identifier: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE= Subject key identifier: 2C:17:A5:E2:3E:83:2D:95:55:7D:11:B3:FB:4F:A2:43:E8:E6:B1:B6 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE348C9670D464BDF18E5FB62A9A2 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa Signing time: Fri 02 Jan 2026 04:17:38 +0000 ROA not before: Fri 02 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61292 IP address blocks: 185.12.56.0/24 maxlen: 24 185.152.34.0/24 maxlen: 24 2a02:ed03::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e3:48:c9:67:0d:46:4b:df:18:e5:fb:62:a9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c17a5e23e832d95557d11b3fb4fa243e8e6b1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:71:86:e4:b8:5a:69:6d:ef:e4:17:fe:ec: 63:57:20:63:bb:2e:c3:2c:7f:e7:fd:7a:c8:cc:b6: 80:27:5c:0f:3a:99:f9:44:e6:cf:e8:86:d7:04:e8: fc:ab:72:1a:fa:f5:8a:c1:6a:cb:d1:7e:a2:26:2e: f5:25:53:97:71:fd:d9:5b:a8:e7:ba:08:1b:da:cc: d6:31:b0:ef:2a:24:0b:40:de:17:cd:d2:b1:ec:57: 93:a2:7f:0c:b4:d4:b7:eb:8c:b6:8a:bb:0f:6c:45: 87:d7:9d:83:dd:df:bc:ef:1c:48:61:49:74:77:22: 98:ad:7b:fb:3d:29:7d:c6:65:4d:87:46:6d:6a:51: 77:4e:92:63:a9:04:9b:10:d9:0e:10:9a:78:92:dc: 45:9b:91:c1:57:7b:b6:30:45:36:a4:35:e1:5a:6e: 08:20:67:04:f8:35:d8:02:ef:91:c2:1e:7a:31:3c: 56:91:26:c1:53:fa:f1:69:ee:d8:fe:f1:20:17:e2: 78:7a:e4:fd:d6:62:c2:e0:b5:8a:3f:6d:47:e4:1f: d4:d4:7a:b7:03:72:08:8d:e9:51:69:da:02:bf:01: e1:52:de:43:4e:f7:c5:41:3c:09:4b:61:8e:55:37: 91:4d:ea:e3:a8:ef:c1:34:1a:da:27:41:0e:48:d1: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:A5:E2:3E:83:2D:95:55:7D:11:B3:FB:4F:A2:43:E8:E6:B1:B6 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.56.0/24 185.152.34.0/24 IPv6: 2a02:ed03::/32 Signature Algorithm: sha256WithRSAEncryption 30:0a:82:77:be:8c:bd:48:d8:f6:49:0d:ab:72:a6:8e:57:c6: 23:b5:1b:f4:8e:69:f3:a8:db:c9:22:05:0e:86:bd:bf:13:48: 27:4d:da:0a:26:ee:a8:f0:85:d7:91:fc:d5:be:ca:2d:ba:4a: e7:0c:68:aa:ab:89:3e:be:3d:bb:1e:a6:02:8e:c1:e4:06:59: 76:a5:ad:73:58:7f:66:95:1f:34:5a:a8:ce:f1:3c:2e:0a:89: 0f:ed:37:8d:9f:92:fd:fa:52:cd:49:0a:21:ab:16:e4:48:3d: a3:93:d4:c4:fc:80:3b:d5:dd:d2:14:45:a5:ff:af:11:2e:05: 3a:b9:83:c2:e2:e4:c9:d3:f4:5f:5f:e9:fe:34:ba:21:a6:79: f3:94:40:e2:1b:46:85:3e:96:ea:06:ec:ab:50:1a:d7:2f:9b: 2c:03:ad:8c:07:85:7c:a4:b8:17:e7:31:ea:73:64:21:57:8c: 02:cb:4d:41:9e:d4:16:b3:dc:81:f1:96:39:b8:a3:c9:4f:34: b5:d3:15:3b:e3:0b:5e:a2:c4:6c:5e:75:a2:f2:4e:82:14:fa: f3:5f:7a:10:c1:2c:4b:7a:36:39:d7:d4:c7:2c:a8:de:b5:5f: 36:d5:63:7b:b6:22:dc:b7:60:b3:4d:e4:e0:eb:5e:2a:0f:06: ac:89:22:d0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87ONIyWcNRkvfGOX7YqmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzE3YTVlMjNlODMyZDk1NTU3ZDExYjNmYjRmYTI0M2U4ZTZiMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrlxhuS4Wmlt7+QX/uxjVyBjuy7D LH/n/XrIzLaAJ1wPOpn5RObP6IbXBOj8q3Ia+vWKwWrL0X6iJi71JVOXcf3ZW6jn uggb2szWMbDvKiQLQN4XzdKx7FeTon8MtNS364y2irsPbEWH152D3d+87xxIYUl0 dyKYrXv7PSl9xmVNh0ZtalF3TpJjqQSbENkOEJp4ktxFm5HBV3u2MEU2pDXhWm4I IGcE+DXYAu+Rwh56MTxWkSbBU/rxae7Y/vEgF+J4euT91mLC4LWKP21H5B/U1Hq3 A3IIjelRadoCvwHhUt5DTvfFQTwJS2GOVTeRTerjqO/BNBraJ0EOSNF+SQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCwXpeI+gy2VVX0Rs/tPokPo5rG2MB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvTEJlbDRqNkRMWlZWZlJHei0wLWlRLWptc2JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuQw4AwQA uZgiMA0EAgACMAcDBQAqAu0DMA0GCSqGSIb3DQEBCwUAA4IBAQAwCoJ3voy9SNj2 SQ2rcqaOV8YjtRv0jmnzqNvJIgUOhr2/E0gnTdoKJu6o8IXXkfzVvsotukrnDGiq q4k+vj27HqYCjsHkBll2pa1zWH9mlR80WqjO8TwuCokP7TeNn5L9+lLNSQohqxbk SD2jk9TE/IA71d3SFEWl/68RLgU6uYPC4uTJ0/RfX+n+NLohpnnzlEDiG0aFPpbq BuyrUBrXL5ssA62MB4V8pLgX5zHqc2QhV4wCy01BntQWs9yB8ZY5uKPJTzS10xU7 4wteosRsXnWi8k6CFPrzX3oQwSxLejY519THLKjetV821WN7tiLct2CzTeTg614q DwasiSLQ -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:45 2026 by rpki-client