This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa File: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (raw, json) Hash identifier: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8= Subject key identifier: 96:DD:2E:1D:BD:C9:6B:40:BA:10:7A:D3:D7:A0:2F:4D:40:3B:C2:D1 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B9E47585F505932340029995A1E581056 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa Signing time: Thu 08 Jan 2026 15:43:54 +0000 ROA not before: Thu 08 Jan 2026 15:43:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51517 IP address blocks: 103.251.156.0/22 maxlen: 24 185.219.6.0/24 maxlen: 24 2a10:e300::/32 maxlen: 32 2a10:e300:8411::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:47:58:5f:50:59:32:34:00:29:99:5a:1e:58:10:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 8 15:43:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96dd2e1dbdc96b40ba107ad3d7a02f4d403bc2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:9e:d2:2e:c9:a9:50:af:7e:13:9d:fd:ce: 46:f2:21:66:1d:bb:de:19:7e:da:98:11:6c:79:be: 38:7b:b9:89:b6:86:31:9e:81:38:b3:d2:38:d4:2d: 62:f8:cb:fa:37:02:b1:a3:0f:39:5b:2f:ed:a5:ac: e1:11:8c:3b:9e:51:8b:b1:76:30:33:b3:18:8f:f1: 04:19:32:54:9b:64:9a:bf:2e:35:97:c3:ab:c0:27: c9:5f:f0:08:8d:5e:8f:eb:99:77:3e:e2:fa:51:91: ec:05:6f:82:6e:ae:68:23:96:0b:99:56:86:fa:6c: ed:f5:d7:c1:15:a1:1b:30:b8:29:d8:3a:02:ee:8c: a8:ef:3c:5d:04:77:bc:d7:ae:b6:29:90:3c:2f:9a: 11:1d:d0:48:eb:59:74:8c:d2:2a:5f:c7:25:9d:e2: 19:42:6a:c9:31:06:99:ba:d9:8d:e5:0a:09:a5:ac: c2:45:b0:a8:cc:65:ac:22:75:58:a4:32:e6:66:e4: f5:73:12:60:fe:f3:ab:50:e0:76:14:92:0a:0c:bb: 8a:51:1d:51:9f:58:04:cc:17:ea:38:ad:e1:3e:c4: 24:b5:89:48:d9:c2:34:e2:17:9b:7f:b5:ec:03:18: 36:7a:7a:40:c6:9f:0c:ed:57:70:71:14:b2:03:2b: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:2E:1D:BD:C9:6B:40:BA:10:7A:D3:D7:A0:2F:4D:40:3B:C2:D1 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.156.0/22 185.219.6.0/24 IPv6: 2a10:e300::/32 Signature Algorithm: sha256WithRSAEncryption 63:15:1c:00:c6:ea:eb:ac:b9:81:79:50:df:96:97:99:85:d7: 05:b3:e3:72:ba:3e:06:e4:89:e8:de:c8:c9:5b:2a:50:0e:3f: 0c:1b:05:9f:24:87:ec:23:eb:60:52:9a:8c:ab:db:42:05:1b: 78:5b:41:06:da:3d:e8:df:5b:ba:fc:4a:ce:4d:6b:7e:32:e9: b7:e1:02:f3:28:a6:f2:19:76:50:2b:db:7a:cb:4f:b2:68:4b: 60:24:ce:c0:3c:02:82:a5:5a:be:db:0a:0d:1d:34:84:fc:2b: b1:53:69:e1:b0:e1:8b:f0:13:c3:8f:67:58:2f:45:99:cc:ae: 42:93:1a:5a:eb:ec:30:00:e2:e8:d9:fb:35:01:eb:c4:e7:b6: 05:7e:af:f2:0a:d5:36:c8:7d:8a:fb:72:f1:11:17:f7:03:79: 80:68:2a:c4:b7:3d:3b:f3:a5:62:05:76:cc:1e:b7:8b:fd:4b: 1b:4d:ea:63:4a:1f:e0:0c:30:5a:15:b2:5f:97:40:a5:2b:f1: 35:b3:04:cd:f2:b4:5c:77:d6:06:8c:55:a0:7b:2a:7d:43:5b: 00:ef:c6:31:76:73:b3:fc:68:a6:8d:f3:6a:31:8f:14:e8:1d: 59:02:3f:aa:c3:86:e7:9f:ad:61:82:06:df:ff:a1:12:30:25: 01:33:97:02 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZueR1hfUFkyNAApmVoeWBBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTA4MTU0MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRkMmUxZGJkYzk2YjQwYmExMDdhZDNkN2EwMmY0ZDQwM2JjMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoye0i7JqVCvfhOd/c5G8iFmHbve GX7amBFseb44e7mJtoYxnoE4s9I41C1i+Mv6NwKxow85Wy/tpazhEYw7nlGLsXYw M7MYj/EEGTJUm2Savy41l8OrwCfJX/AIjV6P65l3PuL6UZHsBW+Cbq5oI5YLmVaG +mzt9dfBFaEbMLgp2DoC7oyo7zxdBHe81662KZA8L5oRHdBI61l0jNIqX8clneIZ QmrJMQaZutmN5QoJpazCRbCozGWsInVYpDLmZuT1cxJg/vOrUOB2FJIKDLuKUR1R n1gEzBfqOK3hPsQktYlI2cI04hebf7XsAxg2enpAxp8M7VdwcRSyAytXuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJbdLh29yWtAuhB609egL01AO8LRMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvbHQwdUhiM0phMEM2RUhyVDE2QXZUVUE3d3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ/ucAwQA udsGMA0EAgACMAcDBQAqEOMAMA0GCSqGSIb3DQEBCwUAA4IBAQBjFRwAxurrrLmB eVDflpeZhdcFs+Nyuj4G5Ino3sjJWypQDj8MGwWfJIfsI+tgUpqMq9tCBRt4W0EG 2j3o31u6/ErOTWt+Mum34QLzKKbyGXZQK9t6y0+yaEtgJM7APAKCpVq+2woNHTSE /CuxU2nhsOGL8BPDj2dYL0WZzK5Ckxpa6+wwAOLo2fs1AevE57YFfq/yCtU2yH2K +3LxERf3A3mAaCrEtz0786ViBXbMHreL/UsbTepjSh/gDDBaFbJfl0ClK/E1swTN 8rRcd9YGjFWgeyp9Q1sA78YxdnOz/GimjfNqMY8U6B1ZAj+qw4bnn61hggbf/6ES MCUBM5cC -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:43 2026 by rpki-client