This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/LhIT5jg_yGxoRAISWP18wq4bhvI.roa File: LhIT5jg_yGxoRAISWP18wq4bhvI.roa (raw, json) Hash identifier: 2KkNb6xo5TGd4oS/Oz0gMkR1HCZHLNRJEVQvWK1Ybvw= Subject key identifier: 2E:12:13:E6:38:3F:C8:6C:68:44:02:12:58:FD:7C:C2:AE:1B:86:F2 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BA87F02357F1D9BEB61B6AF4240BE15E1 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/LhIT5jg_yGxoRAISWP18wq4bhvI.roa Signing time: Sat 10 Jan 2026 15:20:54 +0000 ROA not before: Sat 10 Jan 2026 15:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202776 IP address blocks: 2a14:67c3:100::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a8:7f:02:35:7f:1d:9b:eb:61:b6:af:42:40:be:15:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 10 15:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1213e6383fc86c6844021258fd7cc2ae1b86f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d2:1f:22:17:31:e6:6e:90:cf:5b:74:93:fd: 14:4b:23:8e:19:51:9d:50:a0:c8:a9:30:5b:99:13: 58:68:9c:53:42:ed:ab:99:a9:dc:e0:e0:a1:26:85: 71:d8:93:6f:9f:ac:61:81:03:b9:6e:b1:7f:7c:51: 9c:06:db:ec:9b:90:a8:68:c4:ea:e3:84:e1:1f:ba: 39:09:ac:cc:8a:63:a2:ee:af:d6:2d:cd:13:76:3a: ef:e8:d8:5d:e8:d3:ce:c7:1f:84:47:1a:85:77:a4: 0d:c6:d8:8a:7f:11:58:12:77:16:63:9a:76:c9:8b: 99:74:04:46:ae:5b:06:7f:d9:e9:7d:2d:4a:2a:2c: d5:f3:2d:b3:fd:04:ef:1a:dd:80:d5:60:04:2c:83: 2a:b7:26:9d:4e:64:7f:91:dd:ce:ca:8a:cc:c5:0e: 96:92:bc:df:2e:2b:98:1c:dd:91:8e:59:f7:e3:a0: cc:f5:53:3b:7a:34:af:7e:4b:95:4c:96:bc:f9:c3: d5:31:b5:9d:0c:75:34:7b:e6:e1:b9:3e:91:64:01: 54:c7:39:5d:53:42:8c:65:50:e6:0c:c8:46:0c:fe: 0b:23:01:a4:f5:b1:1a:1e:fd:eb:c9:63:d5:f5:16: ba:55:d7:43:94:c1:16:b5:f3:cd:bf:d8:21:86:1f: 6a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:12:13:E6:38:3F:C8:6C:68:44:02:12:58:FD:7C:C2:AE:1B:86:F2 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/LhIT5jg_yGxoRAISWP18wq4bhvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:100::/44 Signature Algorithm: sha256WithRSAEncryption 43:bb:ce:7f:6d:86:bb:e4:73:89:53:54:b4:55:93:b1:fa:5c: d7:81:92:a7:81:da:89:4e:d5:05:1c:6b:1c:da:b0:af:17:85: fd:c6:ca:42:03:4a:35:49:be:60:83:10:c7:6c:3c:d4:14:5f: c2:34:50:29:58:da:27:43:6d:34:1b:ed:a6:8b:7b:18:4e:e3: 27:68:cc:cb:c2:52:28:74:ab:17:ab:be:81:c9:d6:15:f1:61: cf:54:69:40:fb:0d:ae:6d:1f:00:80:ae:b6:f3:54:32:d0:e3: a5:c0:29:1c:9b:b8:65:bd:d9:16:78:92:70:0a:a2:43:66:bb: 35:30:e2:44:01:38:32:bb:1f:64:9b:d7:a2:92:c0:d4:24:bf: 22:3c:d9:90:4c:be:46:be:38:97:58:00:99:45:26:84:96:00: 4a:42:02:fc:2c:1c:e5:58:e4:dd:38:8d:de:ef:db:2c:40:17: a6:0c:de:0e:f4:ff:31:0a:49:69:f5:41:39:d6:f2:4f:b1:32: 5a:51:77:d5:a4:38:b2:f0:32:6b:a1:ea:c0:0f:da:b1:c9:cc: 76:b7:d9:e1:26:fe:c0:c9:38:2d:d9:6b:57:8e:df:d9:3b:81: c4:5a:a0:38:51:e4:05:0e:d4:e7:27:69:3d:c3:11:ff:2d:5d: ab:39:d3:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuofwI1fx2b62G2r0JAvhXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTEwMTUyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTEyMTNlNjM4M2ZjODZjNjg0NDAyMTI1OGZkN2NjMmFlMWI4NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dIfIhcx5m6Qz1t0k/0USyOOGVGd UKDIqTBbmRNYaJxTQu2rmanc4OChJoVx2JNvn6xhgQO5brF/fFGcBtvsm5CoaMTq 44ThH7o5CazMimOi7q/WLc0Tdjrv6Nhd6NPOxx+ERxqFd6QNxtiKfxFYEncWY5p2 yYuZdARGrlsGf9npfS1KKizV8y2z/QTvGt2A1WAELIMqtyadTmR/kd3OyorMxQ6W krzfLiuYHN2Rjln346DM9VM7ejSvfkuVTJa8+cPVMbWdDHU0e+bhuT6RZAFUxzld U0KMZVDmDMhGDP4LIwGk9bEaHv3ryWPV9Ra6VddDlMEWtfPNv9ghhh9qewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC4SE+Y4P8hsaEQCElj9fMKuG4byMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvTGhJVDVqZ195R3hvUkFJU1dQMTh3cTRiaHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwEA MA0GCSqGSIb3DQEBCwUAA4IBAQBDu85/bYa75HOJU1S0VZOx+lzXgZKngdqJTtUF HGsc2rCvF4X9xspCA0o1Sb5ggxDHbDzUFF/CNFApWNonQ200G+2mi3sYTuMnaMzL wlIodKsXq76BydYV8WHPVGlA+w2ubR8AgK6281Qy0OOlwCkcm7hlvdkWeJJwCqJD Zrs1MOJEATgyux9km9eiksDUJL8iPNmQTL5GvjiXWACZRSaElgBKQgL8LBzlWOTd OI3e79ssQBemDN4O9P8xCklp9UE51vJPsTJaUXfVpDiy8DJroerAD9qxycx2t9nh Jv7AyTgt2WtXjt/ZO4HEWqA4UeQFDtTnJ2k9wxH/LV2rOdOU -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:02 2026 by rpki-client