This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Lc1GuVjjApGSdMl5cDRvuL9C63E.roa File: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (raw, json) Hash identifier: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw= Subject key identifier: 2D:CD:46:B9:58:E3:02:91:92:74:C9:79:70:34:6F:B8:BF:42:EB:71 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B79111BE9F9379CCA310EB3B5B96B2111 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Lc1GuVjjApGSdMl5cDRvuL9C63E.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25057 IP address blocks: 2a0a:ab00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1b:e9:f9:37:9c:ca:31:0e:b3:b5:b9:6b:21:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dcd46b958e302919274c97970346fb8bf42eb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:c7:e3:0e:94:09:19:e4:cb:aa:02:98:ce: 37:65:98:6f:be:8b:e0:b0:f8:cc:08:bb:f6:58:31: f8:1e:5c:b1:dc:4a:d2:5b:76:84:cb:2b:c2:2e:cd: 56:29:33:5e:a5:da:5e:89:12:8e:9e:99:37:95:41: cf:15:22:81:c1:b8:dc:1a:0f:29:af:80:14:f3:74: 0a:6f:ba:5c:4a:66:75:b9:f6:f4:ae:34:8c:ea:c6: ad:2d:bd:d2:96:04:29:3d:33:d0:8b:8d:c6:60:b0: 68:9c:fe:7e:d8:12:63:74:f6:9b:19:de:e4:07:af: 98:07:0d:18:84:27:ec:f0:e1:ea:59:0b:5c:31:47: de:3a:12:03:6d:64:cd:a5:c8:0f:d7:73:fc:7e:e7: cf:ed:02:b9:28:78:5b:3c:ba:10:a7:b2:11:00:35: 77:5e:77:02:09:b4:8f:28:a5:95:92:e9:40:7e:1d: 6a:11:c7:4b:4d:7c:20:4a:79:5f:9c:9a:1b:b3:71: 55:f0:fe:13:a3:ee:1e:0f:d9:42:ab:8c:78:c9:de: 8f:6c:e0:06:b4:9b:d9:7c:17:80:0a:6e:e6:98:2f: b4:9a:a0:e3:dd:2a:d0:04:9c:3f:ec:96:9c:5d:a4: 44:ea:26:44:2c:ff:1a:cb:66:89:ed:56:ff:41:c8: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:46:B9:58:E3:02:91:92:74:C9:79:70:34:6F:B8:BF:42:EB:71 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Lc1GuVjjApGSdMl5cDRvuL9C63E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:ab00::/29 Signature Algorithm: sha256WithRSAEncryption ad:cb:25:64:cb:5b:80:7c:45:1d:d6:58:92:ea:df:f3:c8:e5: 41:9d:02:3e:e6:1a:1f:06:e2:aa:5b:14:8b:51:7d:9b:e8:3d: 42:7c:19:15:d0:a1:47:89:1f:d3:5e:e4:01:4d:f1:27:09:11: d2:97:91:3d:b4:72:00:fe:7c:67:1d:a2:75:04:8f:74:96:68: 1c:eb:ec:6f:98:ab:d4:e4:5b:ef:9c:5a:dd:c7:10:98:43:6d: 76:02:19:d8:a1:ed:64:b6:c8:a6:1c:22:00:55:8f:be:61:04: 13:89:75:ca:2a:ed:69:94:fe:02:a1:6e:90:6e:4f:2c:41:03: e1:6f:e7:e2:ee:8e:03:43:f2:72:7e:4a:84:4c:91:a7:d1:85: 96:83:00:0a:9e:4f:89:95:fd:79:5e:78:f8:75:73:1c:32:3a: e2:14:4a:24:04:c5:d7:3b:25:2e:59:da:b3:09:43:f4:b2:35: f0:32:ab:6c:09:e6:70:c4:4c:d5:9c:59:85:c6:db:b3:f6:1b: df:12:8c:ca:aa:ff:c9:30:8a:57:27:b6:e3:45:30:ae:b9:45: eb:95:da:9c:fe:53:59:43:8c:83:9f:3e:cd:f6:fe:50:bf:ef: 1b:7c:ed:36:05:da:4f:db:5b:0a:6f:0e:72:3e:af:26:1a:02: 08:2c:2e:66 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ERvp+TecyjEOs7W5ayERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGNkNDZiOTU4ZTMwMjkxOTI3NGM5Nzk3MDM0NmZiOGJmNDJlYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuojH4w6UCRnky6oCmM43ZZhvvovg sPjMCLv2WDH4Hlyx3ErSW3aEyyvCLs1WKTNepdpeiRKOnpk3lUHPFSKBwbjcGg8p r4AU83QKb7pcSmZ1ufb0rjSM6satLb3SlgQpPTPQi43GYLBonP5+2BJjdPabGd7k B6+YBw0YhCfs8OHqWQtcMUfeOhIDbWTNpcgP13P8fufP7QK5KHhbPLoQp7IRADV3 XncCCbSPKKWVkulAfh1qEcdLTXwgSnlfnJobs3FV8P4To+4eD9lCq4x4yd6PbOAG tJvZfBeACm7mmC+0mqDj3SrQBJw/7JacXaRE6iZELP8ay2aJ7Vb/QchcrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC3NRrlY4wKRknTJeXA0b7i/QutxMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvTGMxR3VWampBcEdTZE1sNWNEUnZ1TDlDNjNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgqrADAN BgkqhkiG9w0BAQsFAAOCAQEArcslZMtbgHxFHdZYkurf88jlQZ0CPuYaHwbiqlsU i1F9m+g9QnwZFdChR4kf017kAU3xJwkR0peRPbRyAP58Zx2idQSPdJZoHOvsb5ir 1ORb75xa3ccQmENtdgIZ2KHtZLbIphwiAFWPvmEEE4l1yirtaZT+AqFukG5PLEED 4W/n4u6OA0Pycn5KhEyRp9GFloMACp5PiZX9eV54+HVzHDI64hRKJATF1zslLlna swlD9LI18DKrbAnmcMRM1ZxZhcbbs/Yb3xKMyqr/yTCKVye240UwrrlF65XanP5T WUOMg58+zfb+UL/vG3ztNgXaT9tbCm8Ocj6vJhoCCCwuZg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:12 2026 by rpki-client