This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/LBH8ztFntHz17Sq_yk4WOvpZIOI.roa File: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (raw, json) Hash identifier: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY= Subject key identifier: 2C:11:FC:CE:D1:67:B4:7C:F5:ED:2A:BF:CA:4E:16:3A:FA:59:20:E2 Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf Certificate serial: 019B7F82900C72D29FD488FF72A05421F92B Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/LBH8ztFntHz17Sq_yk4WOvpZIOI.roa Signing time: Fri 02 Jan 2026 16:20:21 +0000 ROA not before: Fri 02 Jan 2026 16:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50599 IP address blocks: 91.219.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:90:0c:72:d2:9f:d4:88:ff:72:a0:54:21:f9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf Validity Not Before: Jan 2 16:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c11fcced167b47cf5ed2abfca4e163afa5920e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:92:7a:f8:99:02:83:77:c9:8f:e8:d2:34: d8:7d:69:ca:e2:eb:a4:3c:77:49:e8:f1:2b:40:95: 9c:06:0f:0e:4e:1d:f4:df:f0:da:cb:6d:69:62:96: 3a:18:3d:a2:2e:da:7a:da:a4:be:7b:13:9f:96:a0: 82:97:42:df:f7:88:e1:4e:4a:5f:c6:19:f5:21:4e: 07:9c:42:c1:2a:b1:37:68:7d:d7:14:e8:6e:99:c2: e9:b0:a5:a4:63:7d:88:a9:e1:dc:79:90:94:0e:ba: f7:d7:1b:4e:ac:15:e6:c9:14:92:f2:6c:79:c2:de: 52:1d:ff:49:a8:9a:c1:81:33:83:17:b9:80:30:da: 5b:df:b6:4c:b9:3e:82:8d:10:94:fe:3f:b5:35:e3: ed:e5:33:e1:99:68:1a:f5:86:77:91:aa:ae:d1:b1: b6:f4:6b:a4:fb:f0:03:64:1b:e5:21:f6:62:05:fe: 46:b9:1d:a5:e0:a0:4f:8e:b1:a8:27:bc:7a:d7:e1: 00:d0:6d:bd:ef:5d:0c:91:01:5b:d5:22:41:70:fb: dd:17:75:8e:02:ad:eb:0e:57:78:89:b8:dd:25:fb: 38:23:2e:92:3c:15:4e:8c:cc:2b:e5:21:85:b9:53: 91:21:63:20:17:0b:04:fe:5c:af:81:28:6d:dd:0c: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:11:FC:CE:D1:67:B4:7C:F5:ED:2A:BF:CA:4E:16:3A:FA:59:20:E2 X509v3 Authority Key Identifier: keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/LBH8ztFntHz17Sq_yk4WOvpZIOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.184.0/22 Signature Algorithm: sha256WithRSAEncryption 60:e5:fa:10:0d:1b:14:a5:df:e0:28:24:eb:99:5c:49:f9:b7: 0f:1b:ee:a8:e0:1a:fc:37:0a:f0:77:d7:29:bd:72:d6:41:14: 68:44:6b:a2:f4:5c:04:ff:66:a7:58:3e:a8:48:39:b8:c4:ed: af:87:28:e1:15:5c:53:21:1c:2d:5c:f4:7e:3a:76:ee:a4:bf: 1a:c1:26:1d:28:c5:6d:36:8a:7f:ba:6b:06:3e:1f:07:3f:6c: f3:61:1d:5b:79:f3:56:8a:fa:49:cd:1e:b5:fa:fd:75:f7:88: c0:38:14:b3:bb:39:7e:85:d8:53:25:19:39:3c:2b:0c:0c:8f: c2:7b:da:d9:f5:a1:32:b8:50:09:9f:86:49:7b:f1:31:2a:ae: d7:8c:82:ab:56:bb:c3:64:96:96:4a:6f:bc:e5:8e:6e:bd:da: 7d:9a:bb:b9:85:69:0a:b4:7c:ab:0a:72:f5:37:b9:0d:67:26: 2e:b5:7a:2b:f9:ec:31:f7:37:09:83:2d:06:a2:bd:f5:38:f2: 3e:6f:2f:06:e6:53:f7:d2:3c:b3:72:e3:40:f0:bb:4d:4f:5f: 68:56:fd:f5:84:45:29:74:4b:49:61:05:49:88:ea:5a:33:d5: c2:8e:c1:6f:13:54:52:b0:ec:9b:8c:80:d7:2e:3b:17:46:4e: 5a:e7:81:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gpAMctKf1Ij/cqBUIfkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi OWViY2YwHhcNMjYwMTAyMTYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzExZmNjZWQxNjdiNDdjZjVlZDJhYmZjYTRlMTYzYWZhNTkyMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwraSeviZAoN3yY/o0jTYfWnK4uuk PHdJ6PErQJWcBg8OTh303/Day21pYpY6GD2iLtp62qS+exOflqCCl0Lf94jhTkpf xhn1IU4HnELBKrE3aH3XFOhumcLpsKWkY32IqeHceZCUDrr31xtOrBXmyRSS8mx5 wt5SHf9JqJrBgTODF7mAMNpb37ZMuT6CjRCU/j+1NePt5TPhmWga9YZ3kaqu0bG2 9Guk+/ADZBvlIfZiBf5GuR2l4KBPjrGoJ7x61+EA0G29710MkQFb1SJBcPvdF3WO Aq3rDld4ibjdJfs4Iy6SPBVOjMwr5SGFuVORIWMgFwsE/lyvgSht3Qy+yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwR/M7RZ7R89e0qv8pOFjr6WSDiMB8GA1UdIwQY MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt ZGZhMGI4MDUyNjE0LzEvTEJIOHp0Rm50SHoxN1NxX3lrNFdPdnBaSU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0 LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9u4MA0G CSqGSIb3DQEBCwUAA4IBAQBg5foQDRsUpd/gKCTrmVxJ+bcPG+6o4Br8Nwrwd9cp vXLWQRRoRGui9FwE/2anWD6oSDm4xO2vhyjhFVxTIRwtXPR+OnbupL8awSYdKMVt Nop/umsGPh8HP2zzYR1befNWivpJzR61+v1194jAOBSzuzl+hdhTJRk5PCsMDI/C e9rZ9aEyuFAJn4ZJe/ExKq7XjIKrVrvDZJaWSm+85Y5uvdp9mru5hWkKtHyrCnL1 N7kNZyYutXor+ewx9zcJgy0Gor31OPI+by8G5lP30jyzcuNA8LtNT19oVv31hEUp dEtJYQVJiOpaM9XCjsFvE1RSsOybjIDXLjsXRk5a54Fi -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:19 2026 by rpki-client