This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa File: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (raw, json) Hash identifier: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw= Subject key identifier: 2D:A2:A0:4D:6A:D0:92:86:DE:55:0D:58:8C:B1:C3:EF:DC:A4:27:93 Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252 Certificate serial: 019B7CEE0629EF76199DE914D7C83342FEBF Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12886 IP address blocks: 185.255.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:06:29:ef:76:19:9d:e9:14:d7:c8:33:42:fe:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d409032818a628cd2b28383802d77e7494a252 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da2a04d6ad09286de550d588cb1c3efdca42793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0a:7d:00:e8:d3:e2:97:82:db:64:ad:c6:3b: d0:d7:8b:b2:0b:70:13:8a:d5:a8:a2:dd:84:f8:46: 0d:9c:11:56:8a:7f:5b:60:b1:f6:53:fb:72:30:a5: ba:c0:40:23:95:cd:cd:12:f3:c8:5e:3b:c0:d4:25: d1:66:fb:e2:72:ac:12:0b:8a:96:96:b4:97:7d:ac: 99:16:82:93:92:44:c1:3a:20:c0:b7:59:21:31:a8: 5b:b6:86:e5:40:9c:ed:64:49:d3:9a:f3:b5:16:6e: 2a:f4:53:54:fd:06:77:16:5c:3d:25:e5:09:05:18: e2:62:f8:9d:35:f4:46:5b:84:ef:2f:f9:1a:32:6e: b4:16:f6:f7:db:d4:5d:9b:29:b7:1d:df:f5:14:73: 1d:85:9e:f2:e5:b9:9f:d4:b6:df:6e:9b:4b:26:57: 91:a8:95:0d:b9:2b:7d:d3:44:1e:90:c0:a0:bd:e6: 95:50:ef:24:c7:a7:2c:b2:d8:2d:84:e2:ba:8e:06: ff:38:b4:e1:c2:c5:09:62:0f:27:79:d0:90:96:7f: 1a:9d:bd:d6:e9:d5:d4:a2:c6:33:f2:0d:c1:42:a2: f4:28:d9:2d:d2:4e:36:66:d2:40:c7:f9:a8:16:51: bc:06:f5:ce:1c:be:0a:76:9d:2f:4d:6a:1e:9f:e6: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:A0:4D:6A:D0:92:86:DE:55:0D:58:8C:B1:C3:EF:DC:A4:27:93 X509v3 Authority Key Identifier: keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.248.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:9f:7b:0d:50:94:a2:d6:5b:40:0a:7e:df:6f:53:ad:e2:f5: a0:37:82:15:74:08:d8:ee:2b:a5:f4:a1:1d:ce:a6:76:e5:2e: 13:d4:0c:13:f4:f4:27:cf:5a:72:3b:0e:d7:1e:f5:a7:85:c8: 06:75:6e:db:be:ba:a9:e2:4c:7e:36:db:32:94:b4:c5:2a:cd: 72:ef:73:d9:53:01:6f:33:cf:bf:5d:83:f1:ca:9a:d3:d2:84: e4:a4:1b:e4:fc:7c:3a:bd:52:9f:08:73:09:ad:0f:b5:6c:45: 66:2f:54:4e:90:b8:54:ba:af:c0:6b:5a:87:fe:2f:e4:a2:a7: 1c:e8:94:bf:e0:fe:6e:8a:bd:0c:31:d5:32:6e:d4:ca:45:64: 4f:06:3c:a2:c5:ae:44:ea:24:2d:64:6c:0a:bf:15:3c:22:e2: 1c:f3:66:f4:3a:75:39:d1:01:4f:60:80:70:8f:b2:bf:f4:70: 4d:f7:e5:58:c6:76:a5:e5:4d:76:c3:63:ec:88:44:e1:57:40: 19:cd:46:d0:32:a0:25:72:31:8a:03:dc:71:6f:ca:8a:7d:54: cf:45:d0:f7:06:ce:d1:02:93:f7:73:b0:17:2d:48:62:85:02: 96:64:cd:a5:77:6a:fe:ab:61:ff:39:8b:36:ca:fa:cc:2a:5c: 51:15:2f:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gYp73YZnekU18gzQv6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5 NGEyNTIwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGEyYTA0ZDZhZDA5Mjg2ZGU1NTBkNTg4Y2IxYzNlZmRjYTQyNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwp9AOjT4peC22StxjvQ14uyC3AT itWoot2E+EYNnBFWin9bYLH2U/tyMKW6wEAjlc3NEvPIXjvA1CXRZvvicqwSC4qW lrSXfayZFoKTkkTBOiDAt1khMahbtoblQJztZEnTmvO1Fm4q9FNU/QZ3Flw9JeUJ BRjiYvidNfRGW4TvL/kaMm60Fvb329Rdmym3Hd/1FHMdhZ7y5bmf1LbfbptLJleR qJUNuSt900QekMCgveaVUO8kx6csstgthOK6jgb/OLThwsUJYg8nedCQln8anb3W 6dXUosYz8g3BQqL0KNkt0k42ZtJAx/moFlG8BvXOHL4Kdp0vTWoen+ZWZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2ioE1q0JKG3lUNWIyxw+/cpCeTMB8GA1UdIwQY MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt MGFlYjlkMzc3ODdlLzEvTGFLZ1RXclFrb2JlVlExWWpMSEQ3OXlrSjVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf/4MA0G CSqGSIb3DQEBCwUAA4IBAQBun3sNUJSi1ltACn7fb1Ot4vWgN4IVdAjY7iul9KEd zqZ25S4T1AwT9PQnz1pyOw7XHvWnhcgGdW7bvrqp4kx+NtsylLTFKs1y73PZUwFv M8+/XYPxyprT0oTkpBvk/Hw6vVKfCHMJrQ+1bEVmL1ROkLhUuq/Aa1qH/i/koqcc 6JS/4P5uir0MMdUybtTKRWRPBjyixa5E6iQtZGwKvxU8IuIc82b0OnU50QFPYIBw j7K/9HBN9+VYxnal5U12w2PsiEThV0AZzUbQMqAlcjGKA9xxb8qKfVTPRdD3Bs7R ApP3c7AXLUhihQKWZM2ld2r+q2H/OYs2yvrMKlxRFS9g -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:24 2026 by rpki-client