This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/vLaBL3FQDXYxCxa5QCEYQSKizbk.roa File: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (raw, json) Hash identifier: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g= Subject key identifier: BC:B6:81:2F:71:50:0D:76:31:0B:16:B9:40:21:18:41:22:A2:CD:B9 Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019B7F812282F73D8419F636B6461473BB7A Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/vLaBL3FQDXYxCxa5QCEYQSKizbk.roa Signing time: Fri 02 Jan 2026 16:18:47 +0000 ROA not before: Fri 02 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 91.132.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:22:82:f7:3d:84:19:f6:36:b6:46:14:73:bb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Jan 2 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcb6812f71500d76310b16b94021184122a2cdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:51:bb:3f:f0:84:3c:cd:de:16:23:40:d8: 7c:f9:c9:03:a0:8b:43:97:f8:e0:d3:52:d5:3d:8e: 61:3a:91:e4:17:88:d0:c5:20:41:de:6d:dc:e6:37: d8:46:a4:e3:81:65:50:00:64:33:5c:5e:7d:54:ec: ce:05:1e:55:8a:0a:e9:50:69:b2:b1:e7:71:a3:35: 28:2f:de:58:e7:b6:a9:45:ec:74:fe:13:96:9c:31: 5b:75:ca:38:d1:f3:a9:7a:8b:42:f2:75:dd:3f:9e: 95:20:5d:21:4c:e6:8c:75:82:03:72:dd:a2:3e:ea: 94:a8:72:36:c3:ca:87:13:71:57:00:75:76:6e:a4: 2a:04:ce:e1:d3:d5:84:23:2a:f4:6b:37:4f:6a:4e: a5:84:4c:cd:0c:16:82:67:55:ca:fe:1b:9e:6d:24: f1:d4:3d:26:09:3f:86:af:de:88:e5:26:be:c0:12: 31:0a:b7:a9:98:97:58:54:b6:74:20:3c:e1:9c:dc: e9:0d:ef:d2:b9:c2:fc:38:76:b9:dc:fa:19:8c:dd: 71:6a:ef:c3:27:35:95:fc:7d:c0:59:35:31:bd:74: c8:6f:ef:83:ff:3b:df:a3:d8:ea:fc:f8:71:5c:f8: 64:60:fc:a3:32:da:b0:dc:6f:f6:a8:fa:4d:5e:dc: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B6:81:2F:71:50:0D:76:31:0B:16:B9:40:21:18:41:22:A2:CD:B9 X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/vLaBL3FQDXYxCxa5QCEYQSKizbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.180.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:8f:43:f8:9e:1c:42:e1:d8:f8:36:bf:22:8f:4f:d3:de:24: 26:74:be:92:71:42:46:40:57:61:12:ab:12:25:51:49:61:cd: 6b:53:10:4c:f9:1b:3c:f5:b9:11:26:2f:21:56:c3:8b:5b:0a: 07:a9:9b:3c:f0:72:66:7d:6d:54:91:1b:d6:34:6e:5b:ea:d3: 3f:49:ae:de:5b:df:be:7d:2a:80:ff:03:60:6e:ba:5f:89:bf: 92:cc:28:f5:6d:3c:20:74:88:30:b2:b3:aa:a0:d1:ed:b2:c2: 8e:5e:5a:b0:70:36:61:9b:2f:17:58:99:c6:0c:86:dc:58:9c: c6:86:c4:dd:37:31:9a:36:66:36:02:bf:88:db:63:a3:d5:8b: c1:30:e6:79:8c:86:41:75:25:e7:4c:35:ff:52:74:cb:aa:8c: 8f:97:84:0f:ab:e4:ce:6c:b5:62:a9:b2:bd:f8:32:ed:73:cf: e4:41:58:be:54:6a:59:c3:be:9b:43:a9:6c:3e:9e:bd:b6:1c: 80:04:7a:91:45:bd:7b:a8:81:d5:ab:82:62:6a:96:1d:22:b3: 81:44:e5:17:0c:6b:4e:d5:ac:29:af:f5:e4:c4:33:6d:a6:e7: 64:12:24:71:7b:c7:e3:d3:f1:4b:3f:43:5d:a0:ad:d2:d1:1b: 3f:08:44:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gSKC9z2EGfY2tkYUc7t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjYwMTAyMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2I2ODEyZjcxNTAwZDc2MzEwYjE2Yjk0MDIxMTg0MTIyYTJjZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSJRuz/whDzN3hYjQNh8+ckDoItD l/jg01LVPY5hOpHkF4jQxSBB3m3c5jfYRqTjgWVQAGQzXF59VOzOBR5VigrpUGmy sedxozUoL95Y57apRex0/hOWnDFbdco40fOpeotC8nXdP56VIF0hTOaMdYIDct2i PuqUqHI2w8qHE3FXAHV2bqQqBM7h09WEIyr0azdPak6lhEzNDBaCZ1XK/huebSTx 1D0mCT+Gr96I5Sa+wBIxCrepmJdYVLZ0IDzhnNzpDe/SucL8OHa53PoZjN1xau/D JzWV/H3AWTUxvXTIb++D/zvfo9jq/PhxXPhkYPyjMtqw3G/2qPpNXtwMdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLy2gS9xUA12MQsWuUAhGEEios25MB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvdkxhQkwzRlFEWFl4Q3hhNVFDRVlRU0tpemJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4S0MA0G CSqGSIb3DQEBCwUAA4IBAQAqj0P4nhxC4dj4Nr8ij0/T3iQmdL6ScUJGQFdhEqsS JVFJYc1rUxBM+Rs89bkRJi8hVsOLWwoHqZs88HJmfW1UkRvWNG5b6tM/Sa7eW9++ fSqA/wNgbrpfib+SzCj1bTwgdIgwsrOqoNHtssKOXlqwcDZhmy8XWJnGDIbcWJzG hsTdNzGaNmY2Ar+I22Oj1YvBMOZ5jIZBdSXnTDX/UnTLqoyPl4QPq+TObLViqbK9 +DLtc8/kQVi+VGpZw76bQ6lsPp69thyABHqRRb17qIHVq4JiapYdIrOBROUXDGtO 1awpr/XkxDNtpudkEiRxe8fj0/FLP0NdoK3S0Rs/CEQV -----END CERTIFICATE-----Generated at Tue Jan 13 00:08:59 2026 by rpki-client