This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/LSXBvQHAo4zp0AtEmHoZVaivySk.roa File: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (raw, json) Hash identifier: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU= Subject key identifier: 2D:25:C1:BD:01:C0:A3:8C:E9:D0:0B:44:98:7A:19:55:A8:AF:C9:29 Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019B7F82C8AEBF8538A4BC3C7E4BECC30613 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/LSXBvQHAo4zp0AtEmHoZVaivySk.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47787 IP address blocks: 2001:b18::/32 maxlen: 48 2001:b18:1005::/48 maxlen: 48 2001:b18:1009::/48 maxlen: 48 2001:b18:1014::/48 maxlen: 48 2001:b18:1019::/48 maxlen: 48 2a0d:82c0::/29 maxlen: 48 2a0d:82c7:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c8:ae:bf:85:38:a4:bc:3c:7e:4b:ec:c3:06:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d25c1bd01c0a38ce9d00b44987a1955a8afc929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:38:8f:98:cb:3e:c9:2c:4e:8b:ae:da:05: 1e:01:7c:1a:bd:c8:7a:47:ff:75:e4:7b:02:89:0d: 17:04:e6:9e:06:e4:d4:33:34:4f:d0:3c:ab:66:4d: f2:71:02:5f:c2:b6:e7:78:fa:89:dc:af:44:e1:0d: 92:ae:ba:77:b0:47:a9:4f:c9:74:78:7e:1e:2c:d0: 85:d0:ec:4a:6a:e7:c3:32:68:9d:1c:21:89:07:e9: 5e:af:dc:0c:40:e4:42:6b:8e:dc:32:27:ea:d0:f7: 8a:b9:9a:8d:7b:ef:a5:7e:66:15:02:9f:2c:73:dc: fd:f9:72:54:99:6d:b5:f3:5c:29:c1:86:40:e5:eb: 53:64:e3:d2:a7:04:70:a8:72:d5:d7:a7:0e:fe:a4: 85:e3:3a:9f:e7:84:a4:d1:0d:aa:10:c2:22:be:53: 04:ed:be:79:5d:16:49:3e:ab:33:2d:f2:26:ef:a0: c0:8d:14:90:0e:4a:50:c9:84:d2:62:ff:db:1d:12: 0d:2f:6f:2c:8d:73:f9:ca:23:55:4d:97:4e:1e:35: 68:41:e7:13:b2:9e:e3:86:39:7d:38:d7:73:de:6c: 5d:b0:1c:21:34:8c:42:f5:7d:9c:1d:05:d0:ec:43: 5b:00:3d:81:82:ec:32:03:31:d0:29:5e:2a:3d:3d: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:25:C1:BD:01:C0:A3:8C:E9:D0:0B:44:98:7A:19:55:A8:AF:C9:29 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/LSXBvQHAo4zp0AtEmHoZVaivySk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:b18::/32 2a0d:82c0::/29 Signature Algorithm: sha256WithRSAEncryption 3c:e4:45:ec:c0:74:f7:01:6f:57:05:13:ad:ed:df:bb:00:95: e1:0a:41:16:6c:08:0d:0d:58:c1:cb:fd:55:50:aa:12:d0:25: 0f:00:4c:ab:af:b2:42:84:a9:db:19:8b:88:ad:7e:70:c0:64: 8e:d6:7f:e1:38:f8:87:4e:ed:5a:df:83:f7:ed:74:a1:e4:a3: 15:78:ce:f3:be:6c:a6:25:39:8a:d9:1a:6f:13:f0:d1:2e:08: 98:1e:53:3a:b5:60:47:1a:f4:06:44:be:97:68:40:63:b3:74: f9:76:d4:4a:05:a4:12:b7:64:96:04:ad:ee:83:3c:a0:52:8b: dd:12:94:0c:d5:46:99:f0:a7:28:a3:c3:23:7e:c3:97:c4:8a: 9c:74:81:b4:d3:2e:ca:4f:17:5b:f4:64:dd:2b:24:82:ea:5c: d0:07:71:1b:43:6f:14:5d:75:4e:67:73:f6:17:33:d9:59:1b: f9:bd:67:c7:aa:27:c4:04:9b:65:d8:66:a5:59:20:ff:f1:bd: a3:e5:cf:fc:48:71:13:56:be:5b:5f:44:01:3b:b5:17:90:cc: d9:93:e3:aa:12:26:46:a2:54:4c:04:74:bb:20:42:f7:9f:20: 5e:81:85:ad:6a:04:56:29:94:63:f1:11:12:f9:47:8e:2c:a5: 90:75:6f:99 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gsiuv4U4pLw8fkvswwYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDI1YzFiZDAxYzBhMzhjZTlkMDBiNDQ5ODdhMTk1NWE4YWZjOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdM4j5jLPsksTouu2gUeAXwavch6 R/915HsCiQ0XBOaeBuTUMzRP0DyrZk3ycQJfwrbnePqJ3K9E4Q2Srrp3sEepT8l0 eH4eLNCF0OxKaufDMmidHCGJB+ler9wMQORCa47cMifq0PeKuZqNe++lfmYVAp8s c9z9+XJUmW2181wpwYZA5etTZOPSpwRwqHLV16cO/qSF4zqf54Sk0Q2qEMIivlME 7b55XRZJPqszLfIm76DAjRSQDkpQyYTSYv/bHRINL28sjXP5yiNVTZdOHjVoQecT sp7jhjl9ONdz3mxdsBwhNIxC9X2cHQXQ7ENbAD2BguwyAzHQKV4qPT3unQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC0lwb0BwKOM6dALRJh6GVWor8kpMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvTFNYQnZRSEFvNHpwMEF0RW1Ib1pWYWl2eVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAELGAMF AyoNgsAwDQYJKoZIhvcNAQELBQADggEBADzkRezAdPcBb1cFE63t37sAleEKQRZs CA0NWMHL/VVQqhLQJQ8ATKuvskKEqdsZi4itfnDAZI7Wf+E4+IdO7Vrfg/ftdKHk oxV4zvO+bKYlOYrZGm8T8NEuCJgeUzq1YEca9AZEvpdoQGOzdPl21EoFpBK3ZJYE re6DPKBSi90SlAzVRpnwpyijwyN+w5fEipx0gbTTLspPF1v0ZN0rJILqXNAHcRtD bxRddU5nc/YXM9lZG/m9Z8eqJ8QEm2XYZqVZIP/xvaPlz/xIcRNWvltfRAE7tReQ zNmT46oSJkaiVEwEdLsgQvefIF6Bha1qBFYplGPxERL5R44spZB1b5k= -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:42 2026 by rpki-client