This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lb_izJkCnPTpbBtHc1D2YIxOXms.roa File: lb_izJkCnPTpbBtHc1D2YIxOXms.roa (raw, json) Hash identifier: ABSH9WDdC/4xKuL3JUjEtz64uppY1qM7NyRqwu9dErA= Subject key identifier: 95:BF:E2:CC:99:02:9C:F4:E9:6C:1B:47:73:50:F6:60:8C:4E:5E:6B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA6960F98E4BB6AB5E8BCF4C792EE Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lb_izJkCnPTpbBtHc1D2YIxOXms.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 2a0e:97c0:aba::/48 maxlen: 48 2a0e:b107:19::/48 maxlen: 48 2a0e:b107:360::/48 maxlen: 48 2a0e:b107:361::/48 maxlen: 48 2a0e:b107:362::/48 maxlen: 48 2a0e:b107:363::/48 maxlen: 48 2a0e:b107:364::/48 maxlen: 48 2a0e:b107:365::/48 maxlen: 48 2a0e:b107:367::/48 maxlen: 48 2a0e:b107:f50::/44 maxlen: 48 2a0e:b107:1d13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a6:96:0f:98:e4:bb:6a:b5:e8:bc:f4:c7:92:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95bfe2cc99029cf4e96c1b477350f6608c4e5e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:39:05:64:68:ed:47:71:2b:e0:f2:35:7b: da:88:34:02:5b:e7:f1:c6:dc:4d:cf:d3:d2:5f:03: 1b:60:d0:77:89:72:1a:c8:75:f1:ce:d5:dc:01:31: a3:ad:ce:c5:b0:e1:b2:55:88:cb:ce:13:11:71:bf: 5d:b1:1f:3a:cf:23:e6:cd:fe:82:d1:9a:5c:45:e1: b3:92:e9:8e:b4:94:9f:e5:fe:2b:21:fb:0e:77:2b: 78:20:f0:99:cc:8a:91:28:26:0a:4c:2b:18:77:aa: fe:84:bc:01:c9:db:d4:98:7e:5d:6c:54:4f:0a:4a: 34:4c:35:6d:d4:88:59:66:6f:1e:02:09:37:a7:a3: 08:08:23:62:fb:b6:20:fa:e9:bf:5d:ea:38:ab:cd: cd:fe:f1:30:04:7b:05:5f:63:6d:bd:9a:88:1d:8d: 0d:9a:22:49:36:45:21:9b:f0:1f:e7:67:37:6f:da: 23:f9:72:4e:9f:db:c3:1f:9a:a5:19:8a:4b:f3:1a: f1:e7:0c:79:b7:6b:a5:ef:7e:2d:fd:82:c4:0b:72: 06:9c:d4:2b:a9:87:24:ae:bf:b7:99:43:96:25:f5: 02:bb:2a:61:52:37:3a:ab:1c:1c:05:23:3d:73:0f: 60:25:3a:e7:30:55:ce:f2:d7:ae:2e:ab:b4:26:0d: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BF:E2:CC:99:02:9C:F4:E9:6C:1B:47:73:50:F6:60:8C:4E:5E:6B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lb_izJkCnPTpbBtHc1D2YIxOXms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:aba::/48 2a0e:b107:19::/48 2a0e:b107:360::-2a0e:b107:365:ffff:ffff:ffff:ffff:ffff 2a0e:b107:367::/48 2a0e:b107:f50::/44 2a0e:b107:1d13::/48 Signature Algorithm: sha256WithRSAEncryption 28:2f:53:53:b4:19:c6:83:2c:79:34:74:6b:00:1d:37:d6:cb: 6b:ca:54:37:d3:bc:15:cf:59:3e:73:1d:06:56:7d:64:ed:a5: 9f:45:e6:18:c8:e7:67:76:08:83:7b:7a:e6:d6:91:81:02:5f: 3c:cb:df:7e:31:7c:ca:61:3b:4c:35:06:b2:b0:8f:ca:63:40: 68:56:7b:27:c1:8b:89:0a:a0:29:0d:b2:65:26:32:a3:04:9e: 7e:dd:a5:71:54:9c:d4:60:95:26:05:44:ed:e0:20:38:92:ae: 69:71:39:dc:92:7c:26:ab:20:97:ac:d6:53:00:2e:16:f2:55: 9e:ac:64:c4:49:ad:46:ab:70:56:c2:fe:ec:95:0b:e5:02:27: 89:98:42:3f:c3:04:d2:31:43:4d:8b:a1:c6:48:e8:58:96:ca: fd:70:5b:9e:32:0e:de:0c:08:0f:2f:10:90:64:68:34:ac:ef: 6b:9b:d3:e8:c5:66:b3:ab:29:7e:be:11:e8:80:7c:ba:af:b4: 6a:71:45:85:39:32:98:55:ab:ae:89:e0:dc:49:d5:35:26:ba: 45:97:6d:f8:ba:74:ce:7d:dc:90:46:2a:9d:9f:be:3e:67:23: c8:49:2e:75:6f:dd:63:de:64:40:2d:80:29:a0:1b:39:79:e5: 54:7d:c0:bc -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt9XKaWD5jku2q16Lz0x5LuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWJmZTJjYzk5MDI5Y2Y0ZTk2YzFiNDc3MzUwZjY2MDhjNGU1ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKU5BWRo7UdxK+DyNXvaiDQCW+fx xtxNz9PSXwMbYNB3iXIayHXxztXcATGjrc7FsOGyVYjLzhMRcb9dsR86zyPmzf6C 0ZpcReGzkumOtJSf5f4rIfsOdyt4IPCZzIqRKCYKTCsYd6r+hLwBydvUmH5dbFRP Cko0TDVt1IhZZm8eAgk3p6MICCNi+7Yg+um/Xeo4q83N/vEwBHsFX2NtvZqIHY0N miJJNkUhm/Af52c3b9oj+XJOn9vDH5qlGYpL8xrx5wx5t2ul734t/YLEC3IGnNQr qYckrr+3mUOWJfUCuyphUjc6qxwcBSM9cw9gJTrnMFXO8teuLqu0Jg1jfQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFJW/4syZApz06WwbR3NQ9mCMTl5rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbGJfaXpKa0NuUFRwYkJ0SGMxRDJZSXhPWG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAAjBBAwcAKg6XwAq6 AwcAKg6xBwAZMBIDBwUqDrEHA2ADBwEqDrEHA2QDBwAqDrEHA2cDBwQqDrEHD1AD BwAqDrEHHRMwDQYJKoZIhvcNAQELBQADggEBACgvU1O0GcaDLHk0dGsAHTfWy2vK VDfTvBXPWT5zHQZWfWTtpZ9F5hjI52d2CIN7eubWkYECXzzL334xfMphO0w1BrKw j8pjQGhWeyfBi4kKoCkNsmUmMqMEnn7dpXFUnNRglSYFRO3gIDiSrmlxOdySfCar IJes1lMALhbyVZ6sZMRJrUarcFbC/uyVC+UCJ4mYQj/DBNIxQ02LocZI6FiWyv1w W54yDt4MCA8vEJBkaDSs72ub0+jFZrOrKX6+EeiAfLqvtGpxRYU5MphVq66J4NxJ 1TUmukWXbfi6dM593JBGKp2fvj5nI8hJLnVv3WPeZEAtgCmgGzl55VR9wLw= -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:26 2026 by rpki-client