This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa File: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (raw, json) Hash identifier: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk= Subject key identifier: 2C:14:ED:88:90:29:E4:EE:8E:C3:B9:04:56:9F:24:56:64:CC:EC:6C Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Certificate serial: 019B7D5BA936C14B7E5E26E00666CDFDF7C3 Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa Signing time: Fri 02 Jan 2026 06:18:37 +0000 ROA not before: Fri 02 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203055 IP address blocks: 2001:678:25c::/48 maxlen: 48 2001:67c:1998::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a9:36:c1:4b:7e:5e:26:e0:06:66:cd:fd:f7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Validity Not Before: Jan 2 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c14ed889029e4ee8ec3b904569f245664ccec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:a5:50:d5:e0:db:8d:a7:88:fe:b6:88:b8: b8:1f:3a:84:0c:49:e9:b6:81:02:ee:d8:13:38:d9: 5d:df:c7:e9:59:22:58:7e:b0:1b:02:1f:72:f3:b9: 4f:e8:07:ac:7b:1d:9d:82:c2:7a:10:c0:8a:a3:34: 01:b9:42:eb:d3:12:1e:8b:d2:00:be:1d:3d:eb:2d: dd:ef:56:bf:16:84:30:5c:ba:b1:90:eb:15:86:ca: f3:d2:4c:10:ab:c4:1d:2e:2e:4e:29:f0:85:a6:0a: de:a9:05:b4:e7:ef:f6:e5:c6:78:34:fa:5d:bf:da: fc:ef:32:c3:aa:e2:29:4d:fa:66:c0:ab:2f:66:23: 10:b6:af:b6:ed:28:88:53:67:f4:de:6f:9c:99:3c: 62:6b:a3:07:15:5f:75:7b:78:f8:63:d0:41:f3:a3: 9a:81:da:42:e0:9b:a2:0b:48:87:ed:1c:33:28:f4: 26:0c:89:8c:83:72:7f:db:a3:d6:80:21:a5:7a:c1: 92:4d:47:b8:62:b8:13:c8:88:11:0b:bd:b5:97:f9: 00:57:d8:96:36:ce:bf:b3:bb:bc:94:a0:4e:04:6e: af:31:35:da:49:bb:16:53:56:65:7a:d9:8a:f8:41: 9e:fb:7d:5c:c6:56:87:8b:4e:46:cc:28:b5:92:bd: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:14:ED:88:90:29:E4:EE:8E:C3:B9:04:56:9F:24:56:64:CC:EC:6C X509v3 Authority Key Identifier: keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:25c::/48 2001:67c:1998::/48 Signature Algorithm: sha256WithRSAEncryption 7d:82:e7:8e:0d:c4:4f:18:3d:d2:42:c2:04:fc:d0:fb:51:4e: da:ac:f7:56:50:f7:54:17:bf:00:44:c6:1b:41:8b:f6:ed:64: 5e:a0:37:b1:36:b7:a4:f8:3d:09:0a:ea:b1:43:4c:72:24:4f: f6:87:c3:20:18:28:6b:77:47:ed:57:80:b8:f3:df:0b:00:2b: c6:99:79:99:cf:5f:0c:44:08:66:a0:a2:62:6e:c2:56:31:ef: 95:14:f9:aa:95:ab:20:7c:fa:19:5f:d9:8b:ae:4c:52:33:ea: 4d:71:79:08:21:76:95:87:4e:95:60:d5:2a:f9:20:cf:75:14: 5a:9f:9f:95:1d:cf:cb:0b:93:a1:57:09:0f:73:07:a6:aa:3c: cf:67:e8:20:7f:4c:cb:86:f5:46:1c:8d:40:28:2d:55:97:64: b2:fd:37:28:a1:61:7b:94:83:e1:bc:32:38:05:46:4d:17:56: ac:e0:b2:e6:c6:27:75:94:56:f2:ff:54:ec:96:44:3f:98:72: 23:45:fe:0f:cd:ec:f1:f8:a9:c5:4a:38:9e:f0:76:4e:7d:86: b0:ea:14:c8:99:ab:78:5b:ed:ae:0a:6b:c8:9b:e2:dd:2e:4a: 1a:0f:1a:bf:3e:59:d0:d0:61:36:3f:a6:2f:4c:3e:5e:8e:15: 78:a9:52:aa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W6k2wUt+XibgBmbN/ffDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli MjA4ODcwHhcNMjYwMTAyMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzE0ZWQ4ODkwMjllNGVlOGVjM2I5MDQ1NjlmMjQ1NjY0Y2NlYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOylUNXg242niP62iLi4HzqEDEnp toEC7tgTONld38fpWSJYfrAbAh9y87lP6Aesex2dgsJ6EMCKozQBuULr0xIei9IA vh096y3d71a/FoQwXLqxkOsVhsrz0kwQq8QdLi5OKfCFpgreqQW05+/25cZ4NPpd v9r87zLDquIpTfpmwKsvZiMQtq+27SiIU2f03m+cmTxia6MHFV91e3j4Y9BB86Oa gdpC4JuiC0iH7RwzKPQmDImMg3J/26PWgCGlesGSTUe4YrgTyIgRC721l/kAV9iW Ns6/s7u8lKBOBG6vMTXaSbsWU1ZletmK+EGe+31cxlaHi05GzCi1kr12YwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCwU7YiQKeTujsO5BFafJFZkzOxsMB8GA1UdIwQY MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt ZjUzYWQ0NmNhZjNjLzEvTEJUdGlKQXA1TzZPdzdrRVZwOGtWbVRNN0d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAJc AwcAIAEGfBmYMA0GCSqGSIb3DQEBCwUAA4IBAQB9gueODcRPGD3SQsIE/ND7UU7a rPdWUPdUF78ARMYbQYv27WReoDexNrek+D0JCuqxQ0xyJE/2h8MgGChrd0ftV4C4 898LACvGmXmZz18MRAhmoKJibsJWMe+VFPmqlasgfPoZX9mLrkxSM+pNcXkIIXaV h06VYNUq+SDPdRRan5+VHc/LC5OhVwkPcwemqjzPZ+ggf0zLhvVGHI1AKC1Vl2Sy /TcooWF7lIPhvDI4BUZNF1as4LLmxid1lFby/1TslkQ/mHIjRf4Pzezx+KnFSjie 8HZOfYaw6hTImat4W+2uCmvIm+LdLkoaDxq/PlnQ0GE2P6YvTD5ejhV4qVKq -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:29 2026 by rpki-client