This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa File: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (raw, json) Hash identifier: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00= Subject key identifier: 2D:D4:A9:3A:9B:32:73:EE:C1:57:70:9A:A1:47:8E:06:56:C0:1C:4E Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019B7F1556DC1751186C00C3A580D873159F Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202038 IP address blocks: 94.199.232.0/21 maxlen: 24 109.234.224.0/21 maxlen: 24 185.78.216.0/22 maxlen: 24 185.108.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:56:dc:17:51:18:6c:00:c3:a5:80:d8:73:15:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dd4a93a9b3273eec157709aa1478e0656c01c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:97:c3:1c:c1:30:12:5a:db:ba:cb:af:51: 77:e5:d2:e8:05:07:8d:ac:4c:9c:4f:b5:bb:ec:05: 78:f9:2b:cb:24:d9:7b:c7:95:0a:eb:34:ca:27:b6: 4e:af:b4:26:d1:b7:2d:63:ac:87:d7:f3:c2:24:a9: ba:63:e6:a1:3f:30:cb:6b:7a:0d:88:cb:6e:eb:42: f5:05:ac:19:88:a3:da:03:2b:62:4f:5b:86:fc:15: 2d:ce:6d:b3:5f:e8:90:95:81:e8:01:3e:dc:bf:64: e8:90:b1:06:12:aa:fc:f0:b3:3e:81:f8:7f:f6:0a: 52:ea:63:ca:54:aa:f3:04:b1:b4:53:35:ee:07:6c: d5:9e:23:0f:51:ec:a1:f7:d9:0b:39:b2:d6:3d:03: 9e:7b:e9:f5:b8:df:6c:85:8f:c0:1e:06:cf:86:37: dc:6b:b1:2a:1d:d7:93:c5:41:f3:60:27:1d:00:bd: 9b:5f:bb:fc:64:d9:ca:0e:a0:63:06:f4:ea:04:94: f5:6b:e2:a1:56:f5:48:23:46:e7:7b:f9:87:6c:df: b9:b3:24:34:46:dc:40:0d:19:6a:42:2c:d6:aa:1c: c3:d5:49:bd:86:11:76:54:46:c3:2b:3c:33:56:61: c4:6c:b8:b2:f8:ee:8d:86:3b:77:94:e8:c3:96:81: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D4:A9:3A:9B:32:73:EE:C1:57:70:9A:A1:47:8E:06:56:C0:1C:4E X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.232.0/21 109.234.224.0/21 185.78.216.0/22 185.108.92.0/22 Signature Algorithm: sha256WithRSAEncryption 00:21:4f:53:db:a0:02:33:a2:f3:51:1c:e2:5a:e6:9e:c9:ac: 92:62:fa:d3:28:3c:9f:f8:5f:3d:4a:fc:fd:df:bd:a6:99:d5: 69:4f:f0:e7:9f:93:87:ba:d7:0d:be:c2:f7:7e:42:b5:53:39: a7:67:08:e7:50:0d:1d:17:e1:66:51:d0:eb:a0:14:57:5b:aa: 65:16:d2:22:a1:6e:df:88:82:8a:44:b1:c1:88:32:8e:a7:2f: d5:23:a6:56:bd:03:9e:34:ff:6f:de:08:77:a9:c3:90:00:5c: 0a:5b:aa:54:a1:7c:7c:ef:d4:e1:16:f9:64:6b:b0:91:2f:ad: 57:7f:56:0a:b4:ff:1b:b6:6d:6d:af:cc:6e:56:f9:ea:c4:ee: c6:79:38:64:dc:0f:6b:08:27:30:e4:08:4f:8d:a7:4f:60:7f: 76:31:75:b1:e2:14:82:a2:9a:7a:1d:b7:21:68:d7:55:0c:e5: 78:66:0b:5b:e1:37:55:e6:75:95:1d:fb:5f:e5:87:7a:cb:76: d1:03:12:1c:cd:20:b8:f0:02:18:c0:94:8b:d0:5a:83:0a:0c: 5f:39:71:3f:f3:cd:07:26:70:a0:50:02:9c:bc:39:ca:51:e2: 06:c2:a8:64:b1:cb:7f:3b:1a:c9:74:3c:14:32:81:25:ea:96: 1b:c5:02:0c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FVbcF1EYbADDpYDYcxWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGQ0YTkzYTliMzI3M2VlYzE1NzcwOWFhMTQ3OGUwNjU2YzAxYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrqXwxzBMBJa27rLr1F35dLoBQeN rEycT7W77AV4+SvLJNl7x5UK6zTKJ7ZOr7Qm0bctY6yH1/PCJKm6Y+ahPzDLa3oN iMtu60L1BawZiKPaAytiT1uG/BUtzm2zX+iQlYHoAT7cv2TokLEGEqr88LM+gfh/ 9gpS6mPKVKrzBLG0UzXuB2zVniMPUeyh99kLObLWPQOee+n1uN9shY/AHgbPhjfc a7EqHdeTxUHzYCcdAL2bX7v8ZNnKDqBjBvTqBJT1a+KhVvVII0bne/mHbN+5syQ0 RtxADRlqQizWqhzD1Um9hhF2VEbDKzwzVmHEbLiy+O6Nhjt3lOjDloF2QQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFC3UqTqbMnPuwVdwmqFHjgZWwBxOMB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEvTGRTcE9wc3ljLTdCVjNDYW9VZU9CbGJBSEU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDXsfoAwQD bergAwQCuU7YAwQCuWxcMA0GCSqGSIb3DQEBCwUAA4IBAQAAIU9T26ACM6LzURzi WuaeyaySYvrTKDyf+F89Svz9372mmdVpT/Dnn5OHutcNvsL3fkK1UzmnZwjnUA0d F+FmUdDroBRXW6plFtIioW7fiIKKRLHBiDKOpy/VI6ZWvQOeNP9v3gh3qcOQAFwK W6pUoXx879ThFvlka7CRL61Xf1YKtP8btm1tr8xuVvnqxO7GeThk3A9rCCcw5AhP jadPYH92MXWx4hSCopp6HbchaNdVDOV4Zgtb4TdV5nWVHftf5Yd6y3bRAxIczSC4 8AIYwJSL0FqDCgxfOXE/880HJnCgUAKcvDnKUeIGwqhksct/OxrJdDwUMoEl6pYb xQIM -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:44 2026 by rpki-client