This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/LfPTL7ZW-A5mmvN1zdwvatohGGM.roa File: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (raw, json) Hash identifier: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI= Subject key identifier: 2D:F3:D3:2F:B6:56:F8:0E:66:9A:F3:75:CD:DC:2F:6A:DA:21:18:63 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F841E1B861EA6C1A5FC54E239B9C07A Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/LfPTL7ZW-A5mmvN1zdwvatohGGM.roa Signing time: Fri 02 Jan 2026 16:22:03 +0000 ROA not before: Fri 02 Jan 2026 16:22:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398106 IP address blocks: 2a01:488:bb1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:1e:1b:86:1e:a6:c1:a5:fc:54:e2:39:b9:c0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2df3d32fb656f80e669af375cddc2f6ada211863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:e9:52:f8:86:65:a0:aa:45:b4:28:67:a0: 6d:0e:b8:17:15:7f:e3:ae:1b:12:10:8f:1f:91:51: 60:74:d0:f1:9f:f5:08:3e:70:d7:b3:3f:24:d1:11: ef:a7:01:2a:a0:62:c8:62:61:4d:52:91:0c:2d:95: 75:db:a9:92:3c:09:95:45:87:f6:06:f1:c7:2f:0d: 17:76:b0:19:92:27:97:5b:b9:ec:f2:50:8d:f2:34: 61:d2:32:17:58:72:69:4f:59:dd:9c:c9:ce:7f:30: 97:c8:86:d0:d1:e5:44:01:1b:f8:4b:80:70:af:a4: 26:8b:b0:16:aa:50:cf:b5:09:f7:a0:e6:9e:15:2b: f3:70:92:a0:cd:f9:ee:5f:dc:93:4d:6a:09:49:83: 4f:81:fb:2d:f8:a6:09:95:37:ef:f4:94:8c:4a:11: c0:84:65:8e:e3:0d:a1:33:42:5a:9f:09:a8:79:7f: ca:00:99:df:87:cd:5a:a5:71:1a:79:f9:97:f4:0c: fb:89:d7:19:96:7f:50:28:77:b9:21:06:42:0a:0b: 82:33:66:89:31:ab:20:cf:6f:02:97:cc:a4:82:40: d9:c5:9e:33:7b:b0:51:c7:ae:62:c8:bf:bb:b4:48: d4:c7:ee:57:09:9f:05:9a:b4:7a:7d:5d:28:f8:f1: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F3:D3:2F:B6:56:F8:0E:66:9A:F3:75:CD:DC:2F:6A:DA:21:18:63 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/LfPTL7ZW-A5mmvN1zdwvatohGGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:488:bb1a::/48 Signature Algorithm: sha256WithRSAEncryption 63:26:93:cc:bb:ac:b3:c3:47:d7:9a:f9:66:4c:e5:08:d2:e6: b1:04:a6:31:07:af:8a:fa:47:a9:b9:96:1f:ce:57:74:ba:5b: 55:4c:c9:3d:d8:d0:bf:3d:ff:59:25:ac:de:ac:6b:28:ea:0e: 10:bb:b6:50:bf:f1:9a:c6:56:9d:c7:a3:53:fa:a8:78:fb:b9: b2:76:47:0f:b6:9a:9e:f0:2e:15:95:f0:28:ca:60:48:aa:72: cc:c1:de:66:a1:83:62:1d:58:5b:00:9d:31:91:44:9a:8a:bf: ac:08:ba:b3:38:a5:7d:d5:e8:27:b0:ae:cd:47:f5:d2:3d:a6: 8a:97:fe:46:3f:5b:97:66:6e:55:f4:67:fb:c7:57:ec:d2:9a: ed:07:72:6b:f8:bc:48:8b:d6:84:6f:fc:7d:34:b7:48:14:20: 09:37:02:40:ae:20:e4:6d:73:c3:57:c5:1a:49:78:16:4c:84: f8:9c:79:b4:7a:9e:43:07:bb:b2:5f:48:a7:4c:b5:72:1a:c8: f6:29:47:2b:b9:bb:df:c2:d9:1c:de:06:3f:4a:79:7f:62:e6: 0b:4a:07:e6:eb:1c:85:2b:19:d0:d3:66:1e:af:75:9a:85:cf: 09:a2:b8:fc:dc:d3:45:b0:23:59:78:a4:02:66:a3:a3:17:ca: dc:59:08:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hB4bhh6mwaX8VOI5ucB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGYzZDMyZmI2NTZmODBlNjY5YWYzNzVjZGRjMmY2YWRhMjExODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWfpUviGZaCqRbQoZ6BtDrgXFX/j rhsSEI8fkVFgdNDxn/UIPnDXsz8k0RHvpwEqoGLIYmFNUpEMLZV126mSPAmVRYf2 BvHHLw0XdrAZkieXW7ns8lCN8jRh0jIXWHJpT1ndnMnOfzCXyIbQ0eVEARv4S4Bw r6Qmi7AWqlDPtQn3oOaeFSvzcJKgzfnuX9yTTWoJSYNPgfst+KYJlTfv9JSMShHA hGWO4w2hM0JanwmoeX/KAJnfh81apXEaefmX9Az7idcZln9QKHe5IQZCCguCM2aJ Masgz28Cl8ykgkDZxZ4ze7BRx65iyL+7tEjUx+5XCZ8FmrR6fV0o+PH+VQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC3z0y+2VvgOZprzdc3cL2raIRhjMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvTGZQVEw3WlctQTVtbXZOMXpkd3ZhdG9oR0dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsa MA0GCSqGSIb3DQEBCwUAA4IBAQBjJpPMu6yzw0fXmvlmTOUI0uaxBKYxB6+K+kep uZYfzld0ultVTMk92NC/Pf9ZJazerGso6g4Qu7ZQv/Gaxladx6NT+qh4+7mydkcP tpqe8C4VlfAoymBIqnLMwd5moYNiHVhbAJ0xkUSair+sCLqzOKV91egnsK7NR/XS PaaKl/5GP1uXZm5V9Gf7x1fs0prtB3Jr+LxIi9aEb/x9NLdIFCAJNwJAriDkbXPD V8UaSXgWTIT4nHm0ep5DB7uyX0inTLVyGsj2KUcrubvfwtkc3gY/Snl/YuYLSgfm 6xyFKxnQ02Yer3Wahc8Jorj83NNFsCNZeKQCZqOjF8rcWQgR -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:38 2026 by rpki-client