This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/LSs7jJVtuYrRTPczs6ZkVJL73zs.roa File: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (raw, json) Hash identifier: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI= Subject key identifier: 2D:2B:3B:8C:95:6D:B9:8A:D1:4C:F7:33:B3:A6:64:54:92:FB:DF:3B Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B7C110B7EB204459D749BA7A783218FA5 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/LSs7jJVtuYrRTPczs6ZkVJL73zs.roa Signing time: Fri 02 Jan 2026 00:17:30 +0000 ROA not before: Fri 02 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 2a0e:ec01::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0b:7e:b2:04:45:9d:74:9b:a7:a7:83:21:8f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Jan 2 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d2b3b8c956db98ad14cf733b3a6645492fbdf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:46:ca:fc:2e:fb:1e:10:35:29:52:4d:c2: 99:c1:49:e5:93:5d:e7:b5:17:d5:c6:e1:b0:89:d3: df:34:e2:65:b1:08:43:2e:ea:b4:68:e1:39:28:ae: f8:55:3a:d3:08:f0:79:d5:7f:08:0c:53:e2:b2:a8: 52:df:27:23:87:2e:bf:84:b0:eb:be:55:71:36:40: 0b:4e:11:b7:0e:aa:e1:ba:5a:4a:08:f5:50:27:21: 8f:09:55:9c:72:c8:f7:f8:56:f7:12:a3:0d:21:08: e5:23:13:e9:4f:d6:03:a5:fb:7e:ec:0c:76:6c:92: bc:cc:82:82:22:aa:7f:c3:f2:e9:7c:79:58:94:e5: 95:58:73:69:1e:0f:66:b6:f3:d7:5c:24:e6:f2:3a: 71:49:24:67:c7:9a:94:09:77:39:a2:33:b1:e9:97: db:2d:ff:6e:cc:c3:5e:cf:b3:97:d0:e6:82:f1:2e: 7c:38:c6:7c:b1:fe:93:5d:11:45:6b:7d:92:c6:29: e7:4f:97:81:ef:53:73:99:e5:9a:98:4b:75:96:80: 29:28:2f:5f:8d:0a:8e:cd:76:9a:4c:1f:88:22:d7: 32:0e:6a:92:01:3e:36:a8:b1:6f:3d:a2:33:fb:43: ee:66:69:d4:f1:cf:c9:b8:8d:88:e6:59:11:82:32: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2B:3B:8C:95:6D:B9:8A:D1:4C:F7:33:B3:A6:64:54:92:FB:DF:3B X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/LSs7jJVtuYrRTPczs6ZkVJL73zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:ec01::/32 Signature Algorithm: sha256WithRSAEncryption 14:fc:f4:f7:6a:12:d7:75:86:bb:6c:68:93:17:20:b0:5a:ad: 2e:be:b9:27:3e:f2:7d:8d:8c:6e:e5:a4:30:23:07:eb:4a:96: 5a:4f:50:94:b1:8f:11:1f:73:37:53:ba:6b:06:da:4e:58:da: 2e:ca:18:f8:51:47:a2:a3:59:31:44:cd:14:cc:40:a1:7b:f1: 93:74:54:78:a5:23:78:94:06:ac:41:66:fc:18:ca:31:64:76: d7:fe:25:a8:07:4e:6e:e7:45:79:7b:19:54:89:aa:d7:d4:00: d8:67:46:bb:3a:30:9f:29:39:c9:9e:f4:7a:c5:89:62:0a:7f: 75:69:17:53:a7:c8:4b:12:2d:99:f7:6e:81:44:96:eb:0f:76: f5:37:fd:5e:98:6a:c3:a6:74:68:dc:81:ef:37:a0:8d:7d:93: 4b:e4:64:01:0f:7a:4e:f5:8d:e2:2f:4c:1e:bd:00:b6:af:27: 29:7b:7c:7d:b3:e0:59:9c:32:48:76:7e:73:2b:65:79:9c:b6: 8a:5f:a4:27:15:a1:bd:3f:8f:9f:51:8e:1b:4b:47:61:b1:65: df:30:51:07:12:18:28:ff:61:bf:11:13:2b:7b:f0:0a:62:97: 63:52:0e:f3:47:99:61:c0:b2:0b:a9:01:bd:12:7f:f7:b6:6f: d5:7e:a0:1d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EQt+sgRFnXSbp6eDIY+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjYwMTAyMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDJiM2I4Yzk1NmRiOThhZDE0Y2Y3MzNiM2E2NjQ1NDkyZmJkZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7xGyvwu+x4QNSlSTcKZwUnlk13n tRfVxuGwidPfNOJlsQhDLuq0aOE5KK74VTrTCPB51X8IDFPisqhS3ycjhy6/hLDr vlVxNkALThG3DqrhulpKCPVQJyGPCVWccsj3+Fb3EqMNIQjlIxPpT9YDpft+7Ax2 bJK8zIKCIqp/w/LpfHlYlOWVWHNpHg9mtvPXXCTm8jpxSSRnx5qUCXc5ojOx6Zfb Lf9uzMNez7OX0OaC8S58OMZ8sf6TXRFFa32SxinnT5eB71NzmeWamEt1loApKC9f jQqOzXaaTB+IItcyDmqSAT42qLFvPaIz+0PuZmnU8c/JuI2I5lkRgjKK2QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC0rO4yVbbmK0Uz3M7OmZFSS+987MB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvTFNzN2pKVnR1WXJSVFBjenM2WmtWSkw3M3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7sATAN BgkqhkiG9w0BAQsFAAOCAQEAFPz092oS13WGu2xokxcgsFqtLr65Jz7yfY2MbuWk MCMH60qWWk9QlLGPER9zN1O6awbaTljaLsoY+FFHoqNZMUTNFMxAoXvxk3RUeKUj eJQGrEFm/BjKMWR21/4lqAdObudFeXsZVImq19QA2GdGuzownyk5yZ70esWJYgp/ dWkXU6fISxItmfdugUSW6w929Tf9Xphqw6Z0aNyB7zegjX2TS+RkAQ96TvWN4i9M Hr0Atq8nKXt8fbPgWZwySHZ+cytleZy2il+kJxWhvT+Pn1GOG0tHYbFl3zBRBxIY KP9hvxETK3vwCmKXY1IO80eZYcCyC6kBvRJ/97Zv1X6gHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:58 2026 by rpki-client