This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa File: lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa (raw, json) Hash identifier: MgQdaG1666kHidH2vRjUNtiAJVGqpfkJRhC7xtWbkDs= Subject key identifier: 95:AA:41:0D:02:25:21:D0:E6:F0:4E:17:9C:47:7E:6C:C5:B6:20:B4 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55E82CA2473C349D5991835C45FB1 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211617 IP address blocks: 2a10:4646:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5e:82:ca:24:73:c3:49:d5:99:18:35:c4:5f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95aa410d022521d0e6f04e179c477e6cc5b620b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:56:73:26:ed:e6:61:df:d6:71:21:7c:eb: d3:73:ee:b4:05:96:e7:c3:ef:ea:99:68:a8:c1:09: 09:d5:15:97:1e:f5:79:a3:77:17:24:df:a0:2d:5d: de:d8:c1:79:7c:d6:9d:26:7b:13:d6:dc:bb:4f:e5: 83:aa:b2:6f:66:ae:69:83:f1:f4:d2:0f:d3:9a:66: 48:96:0d:2d:46:62:ad:bd:30:f3:b0:e0:33:e8:51: b7:83:21:1f:27:10:63:05:c3:36:2f:9b:9c:bf:7d: 6e:4a:53:cd:60:50:ec:8a:c3:6d:2b:d9:b9:b5:b9: 81:23:18:ef:51:be:23:4c:45:f1:12:f6:08:d4:e7: 7e:96:9b:94:ec:df:0d:78:74:1b:f5:bb:ed:85:25: 17:c8:86:9c:41:35:68:85:66:12:69:2b:1c:d2:43: 2b:cd:82:bf:59:31:c7:02:bc:c2:07:fb:f2:a5:b7: f4:83:00:b8:d3:58:10:e9:ac:23:22:09:c5:c1:ad: d6:77:22:47:97:28:c5:97:33:71:c8:a3:75:79:92: a7:d6:28:32:cd:70:2b:a1:b6:7c:fe:77:1c:8d:07: cb:e1:2a:14:50:6c:ee:d2:a4:14:09:f4:73:e8:2a: cd:b6:42:2d:26:3c:5c:f4:00:5a:9e:bc:19:ba:72: 25:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AA:41:0D:02:25:21:D0:E6:F0:4E:17:9C:47:7E:6C:C5:B6:20:B4 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:40::/44 Signature Algorithm: sha256WithRSAEncryption 3a:d7:a4:f5:32:7c:02:60:2e:52:5f:a7:10:ec:a0:2f:26:4f: 94:c6:84:b7:f5:1a:28:24:4d:37:43:ce:b8:6d:a5:83:01:bb: 86:97:05:15:35:81:ae:ba:5f:4d:30:16:c1:0c:aa:76:90:25: c7:bf:1b:d4:d3:79:90:c5:04:76:d3:b5:32:d1:e3:79:2f:f9: 1e:8c:6c:47:21:56:a8:e7:ae:ae:68:b0:d1:f0:c1:f0:5e:59: cf:bb:aa:2a:1e:44:94:84:fb:a3:33:0a:ba:f1:b6:b0:f4:b4: 05:73:18:cf:4a:d7:a6:d1:57:a2:b9:ff:70:bf:d1:c0:ca:68: 99:b9:24:c6:d6:06:56:3e:5b:0c:da:54:c3:22:99:0b:28:03: fa:0d:ed:b3:36:3d:6a:14:38:80:bd:c3:39:fa:5c:97:57:56: 7f:60:5a:79:31:d7:32:93:ba:73:f0:31:fa:50:36:72:14:eb: 1e:d9:a1:6c:35:fd:14:5c:5f:de:cf:5c:d5:c4:b3:fd:fa:71: 7a:07:f4:ca:c0:28:c5:d1:63:28:80:47:2f:3d:1f:90:ad:21: 75:e1:fd:df:0d:45:a8:ef:b5:e9:47:a4:8b:5d:50:fd:ae:67: cc:4e:78:a7:a4:e6:df:2f:e7:1a:43:05:99:c0:17:bb:bc:76: 1c:57:76:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pV6CyiRzw0nVmRg1xF+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWFhNDEwZDAyMjUyMWQwZTZmMDRlMTc5YzQ3N2U2Y2M1YjYyMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFdWcybt5mHf1nEhfOvTc+60BZbn w+/qmWiowQkJ1RWXHvV5o3cXJN+gLV3e2MF5fNadJnsT1ty7T+WDqrJvZq5pg/H0 0g/TmmZIlg0tRmKtvTDzsOAz6FG3gyEfJxBjBcM2L5ucv31uSlPNYFDsisNtK9m5 tbmBIxjvUb4jTEXxEvYI1Od+lpuU7N8NeHQb9bvthSUXyIacQTVohWYSaSsc0kMr zYK/WTHHArzCB/vypbf0gwC401gQ6awjIgnFwa3WdyJHlyjFlzNxyKN1eZKn1igy zXArobZ8/nccjQfL4SoUUGzu0qQUCfRz6CrNtkItJjxc9ABanrwZunIlYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJWqQQ0CJSHQ5vBOF5xHfmzFtiC0MB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvbGFwQkRRSWxJZERtOEU0WG5FZC1iTVcySUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgBA MA0GCSqGSIb3DQEBCwUAA4IBAQA616T1MnwCYC5SX6cQ7KAvJk+UxoS39RooJE03 Q864baWDAbuGlwUVNYGuul9NMBbBDKp2kCXHvxvU03mQxQR207Uy0eN5L/kejGxH IVao566uaLDR8MHwXlnPu6oqHkSUhPujMwq68baw9LQFcxjPStem0Veiuf9wv9HA ymiZuSTG1gZWPlsM2lTDIpkLKAP6De2zNj1qFDiAvcM5+lyXV1Z/YFp5Mdcyk7pz 8DH6UDZyFOse2aFsNf0UXF/ez1zVxLP9+nF6B/TKwCjF0WMogEcvPR+QrSF14f3f DUWo77XpR6SLXVD9rmfMTninpObfL+caQwWZwBe7vHYcV3Yi -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:47 2026 by rpki-client