This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/lghuLDymBAtVV8bMgyPVXddGVW0.roa File: lghuLDymBAtVV8bMgyPVXddGVW0.roa (raw, json) Hash identifier: B36YhYDgnjsRZPrOKTnsUPdD0R4neS1yQGS5w0kCMHw= Subject key identifier: 96:08:6E:2C:3C:A6:04:0B:55:57:C6:CC:83:23:D5:5D:D7:46:55:6D Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A378635BF45A5F14CDF20F51D6BE20 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/lghuLDymBAtVV8bMgyPVXddGVW0.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51248 IP address blocks: 2a10:9687::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:78:63:5b:f4:5a:5f:14:cd:f2:0f:51:d6:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96086e2c3ca6040b5557c6cc8323d55dd746556d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:93:03:f5:39:0a:fc:bf:3d:24:9b:5c:59: 9c:07:16:d2:67:bc:74:51:7a:49:2b:aa:3a:01:c5: 16:20:a5:6a:c3:94:3e:6b:21:5c:64:47:4a:80:79: 94:a2:2d:7d:37:7e:c1:f4:df:53:e0:1e:f0:a3:94: 7f:d0:c9:08:3c:f8:8e:f3:71:5b:44:bb:92:55:80: db:e1:e7:b5:8a:e1:a4:3d:1c:2e:51:b9:72:91:0e: 4a:4a:b6:5f:5b:d0:42:df:73:0f:36:91:97:3f:94: 6e:94:92:9d:92:94:0c:d9:f3:55:a4:2a:a7:96:e1: 0d:a4:f7:59:00:d7:26:8d:6e:7f:90:da:56:a7:2e: b9:cd:e9:fc:90:7f:8b:81:31:ab:0f:62:8d:34:c7: a8:4c:e9:62:e1:e4:bd:5b:33:f2:40:a9:fc:03:fc: 57:0b:05:80:6e:c5:53:48:62:3a:f4:8f:33:37:0d: 8f:d1:ad:47:47:ef:75:97:3a:fe:f7:49:31:27:e9: 7b:d7:7a:7c:ef:b2:f3:a0:8b:19:0e:87:ef:60:93: 29:b1:23:dc:c6:50:51:42:1a:1d:50:51:10:d0:cc: 96:55:db:a8:f5:b0:97:a6:fd:bb:fd:37:b5:91:9d: 4b:2e:47:29:31:39:54:2d:20:b6:91:f1:00:e0:32: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:08:6E:2C:3C:A6:04:0B:55:57:C6:CC:83:23:D5:5D:D7:46:55:6D X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/lghuLDymBAtVV8bMgyPVXddGVW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:9687::/32 Signature Algorithm: sha256WithRSAEncryption 4d:1f:d0:c6:a2:36:d9:4d:aa:c4:e8:6f:37:aa:8f:d9:3f:a9: 37:98:98:d2:3f:f6:72:60:23:37:7f:f9:57:48:7d:cb:b1:c6: 8c:a3:35:f4:5f:1f:da:7e:c6:45:af:f5:ee:0f:9d:2d:6b:64: 62:94:3e:b1:41:9b:da:28:d2:43:88:4e:28:51:95:7a:d9:5a: 18:bb:2d:a5:44:28:9c:54:ea:48:c8:12:df:ad:ad:30:3a:cb: 9d:85:93:f0:ff:df:5a:ad:f5:70:b4:e0:f0:37:a7:d0:56:cd: 8f:0a:5d:f2:41:80:bf:35:36:f8:a4:4b:19:6b:a3:36:13:7f: ed:fd:52:90:22:d0:a7:2b:a3:22:67:fa:72:88:cf:2c:17:0e: 61:43:d9:e8:2b:f8:07:d9:80:64:7e:d4:fe:4d:f6:4d:40:6c: 81:d7:50:f6:1b:a9:75:40:fd:8b:81:44:38:70:0f:61:68:fb: 59:57:61:7e:fa:a3:2b:ac:ef:c8:27:81:ae:71:34:26:46:a3: 8e:30:75:2d:63:69:71:28:6d:2d:a4:55:78:27:ef:0c:3a:7f: 00:4c:3a:58:af:36:10:9a:47:62:c9:fd:45:87:80:bd:14:78: 4c:0f:a3:1e:5f:e8:e5:47:d8:2b:d8:b4:86:88:92:d8:61:bf: f0:27:d1:86 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o3hjW/RaXxTN8g9R1r4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjA4NmUyYzNjYTYwNDBiNTU1N2M2Y2M4MzIzZDU1ZGQ3NDY1NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRKTA/U5Cvy/PSSbXFmcBxbSZ7x0 UXpJK6o6AcUWIKVqw5Q+ayFcZEdKgHmUoi19N37B9N9T4B7wo5R/0MkIPPiO83Fb RLuSVYDb4ee1iuGkPRwuUblykQ5KSrZfW9BC33MPNpGXP5RulJKdkpQM2fNVpCqn luENpPdZANcmjW5/kNpWpy65zen8kH+LgTGrD2KNNMeoTOli4eS9WzPyQKn8A/xX CwWAbsVTSGI69I8zNw2P0a1HR+91lzr+90kxJ+l713p877LzoIsZDofvYJMpsSPc xlBRQhodUFEQ0MyWVduo9bCXpv27/Te1kZ1LLkcpMTlULSC2kfEA4DKnpQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJYIbiw8pgQLVVfGzIMj1V3XRlVtMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvbGdodUxEeW1CQXRWVjhiTWd5UFZYZGRHVlcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhCWhzAN BgkqhkiG9w0BAQsFAAOCAQEATR/QxqI22U2qxOhvN6qP2T+pN5iY0j/2cmAjN3/5 V0h9y7HGjKM19F8f2n7GRa/17g+dLWtkYpQ+sUGb2ijSQ4hOKFGVetlaGLstpUQo nFTqSMgS362tMDrLnYWT8P/fWq31cLTg8Den0FbNjwpd8kGAvzU2+KRLGWujNhN/ 7f1SkCLQpyujImf6cojPLBcOYUPZ6Cv4B9mAZH7U/k32TUBsgddQ9hupdUD9i4FE OHAPYWj7WVdhfvqjK6zvyCeBrnE0JkajjjB1LWNpcShtLaRVeCfvDDp/AEw6WK82 EJpHYsn9RYeAvRR4TA+jHl/o5UfYK9i0hoiS2GG/8CfRhg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:40 2026 by rpki-client