This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/LwRV0I5aAABSv2rkP0tPW4FRNzs.roa File: LwRV0I5aAABSv2rkP0tPW4FRNzs.roa (raw, json) Hash identifier: koEQn+aNjm6TSUwuZfgQBvNwwQjzXH0iVoRIHsH/lmI= Subject key identifier: 2F:04:55:D0:8E:5A:00:00:52:BF:6A:E4:3F:4B:4F:5B:81:51:37:3B Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55A563528EE5831FD92D9D93B318C Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/LwRV0I5aAABSv2rkP0tPW4FRNzs.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204613 IP address blocks: 2a10:4646:260::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5a:56:35:28:ee:58:31:fd:92:d9:d9:3b:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f0455d08e5a000052bf6ae43f4b4f5b8151373b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:8b:0b:83:f9:9a:a1:87:aa:2a:61:04:9d: a2:79:8c:e9:65:30:b7:6f:ad:51:f0:16:d3:b6:fc: 98:8a:8c:d5:92:13:58:57:78:b6:a0:8e:16:61:61: 8d:40:32:1a:45:46:62:a2:1a:a4:f1:4e:eb:d0:e6: b1:47:b4:24:ae:04:b7:c4:6f:e7:32:ab:34:1a:e3: d7:b7:76:41:91:19:30:27:28:aa:9e:aa:26:0a:d8: d6:a8:b3:d9:2b:5c:3a:ad:55:b4:7f:3f:5f:07:44: 51:06:86:22:1f:28:de:d9:3c:5e:d0:01:b0:15:d0: 25:ff:25:63:5b:9b:31:6e:b8:63:06:17:64:1a:a1: 11:3e:b1:3c:b6:bc:95:0d:6e:3c:5b:1a:86:30:53: ef:7a:3d:cc:13:9b:ab:c2:4f:7d:1e:f7:89:9e:53: 15:f7:60:53:89:9f:ff:8c:df:8c:13:18:00:9b:b8: a7:05:2d:02:58:54:2a:09:53:7f:6b:8d:07:70:a1: 7b:83:87:5a:28:f5:b3:01:79:b9:be:03:4d:ed:e6: 1a:17:8d:9a:03:cb:09:dc:8b:97:b9:8c:d6:4f:aa: 4c:8f:d2:b5:bf:57:af:2f:52:35:c1:49:dc:bc:ad: 3e:ea:e8:1e:6a:bf:e3:38:99:f4:80:0d:50:77:9f: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:04:55:D0:8E:5A:00:00:52:BF:6A:E4:3F:4B:4F:5B:81:51:37:3B X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/LwRV0I5aAABSv2rkP0tPW4FRNzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:260::/44 Signature Algorithm: sha256WithRSAEncryption 3a:15:9c:59:d5:ab:b9:c7:0c:7b:42:8d:0b:c4:14:bf:c8:f3: c5:cd:86:13:bd:e0:13:5a:af:3a:98:8b:dc:7d:25:f3:e1:bf: aa:fd:27:3a:6c:05:1c:8c:b4:65:2d:c1:fa:dd:d5:6b:d0:c9: 1d:f7:2e:a7:b5:1d:38:8a:65:45:72:7f:f8:de:94:2e:f9:f2: 4e:88:74:7d:d5:f0:09:61:f9:b4:10:02:ec:53:d4:02:3f:d1: c3:b4:57:a8:86:91:7c:86:c6:9e:69:51:eb:14:b7:f1:b7:25: 04:b9:9f:94:39:59:08:e8:ba:bc:d3:18:2a:0f:8f:f5:1d:f5: 48:73:81:be:51:e3:cb:65:31:84:60:27:96:97:32:40:24:79: 81:89:6b:0d:d8:36:98:7f:75:92:a0:f1:1b:78:56:a2:de:fd: 06:c2:f2:ad:d6:f2:97:6c:44:9f:01:f1:a6:59:19:48:fc:55: 12:73:eb:b0:6e:e6:59:99:8c:b9:64:9e:62:f0:82:eb:c0:be: 76:11:91:71:da:97:83:2c:f8:9a:ce:24:55:05:e7:ba:bb:4c: 3d:2d:28:c9:14:f0:09:0a:bd:41:47:c4:79:18:ad:54:a0:1f: d9:48:cf:fd:2c:e6:ec:a6:62:d9:bb:30:43:a2:47:07:7f:8e: 44:45:63:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVpWNSjuWDH9ktnZOzGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjA0NTVkMDhlNWEwMDAwNTJiZjZhZTQzZjRiNGY1YjgxNTEzNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpKLC4P5mqGHqiphBJ2ieYzpZTC3 b61R8BbTtvyYiozVkhNYV3i2oI4WYWGNQDIaRUZiohqk8U7r0OaxR7QkrgS3xG/n Mqs0GuPXt3ZBkRkwJyiqnqomCtjWqLPZK1w6rVW0fz9fB0RRBoYiHyje2Txe0AGw FdAl/yVjW5sxbrhjBhdkGqERPrE8tryVDW48WxqGMFPvej3ME5urwk99HveJnlMV 92BTiZ//jN+MExgAm7inBS0CWFQqCVN/a40HcKF7g4daKPWzAXm5vgNN7eYaF42a A8sJ3IuXuYzWT6pMj9K1v1evL1I1wUncvK0+6ugear/jOJn0gA1Qd5+gtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC8EVdCOWgAAUr9q5D9LT1uBUTc7MB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvTHdSVjBJNWFBQUJTdjJya1AwdFBXNEZSTnpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgJg MA0GCSqGSIb3DQEBCwUAA4IBAQA6FZxZ1au5xwx7Qo0LxBS/yPPFzYYTveATWq86 mIvcfSXz4b+q/Sc6bAUcjLRlLcH63dVr0Mkd9y6ntR04imVFcn/43pQu+fJOiHR9 1fAJYfm0EALsU9QCP9HDtFeohpF8hsaeaVHrFLfxtyUEuZ+UOVkI6Lq80xgqD4/1 HfVIc4G+UePLZTGEYCeWlzJAJHmBiWsN2DaYf3WSoPEbeFai3v0GwvKt1vKXbESf AfGmWRlI/FUSc+uwbuZZmYy5ZJ5i8ILrwL52EZFx2peDLPiaziRVBee6u0w9LSjJ FPAJCr1BR8R5GK1UoB/ZSM/9LObspmLZuzBDokcHf45ERWNT -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:49 2026 by rpki-client