This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/LaRldTJgB7M8pfC0fMXyfAvixcw.roa File: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (raw, json) Hash identifier: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8= Subject key identifier: 2D:A4:65:75:32:60:07:B3:3C:A5:F0:B4:7C:C5:F2:7C:0B:E2:C5:CC Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Certificate serial: 019B7CEE692EFE5329447384E5BA5F8C0F6A Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/LaRldTJgB7M8pfC0fMXyfAvixcw.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198627 IP address blocks: 2001:67c:ca0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:69:2e:fe:53:29:44:73:84:e5:ba:5f:8c:0f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da46575326007b33ca5f0b47cc5f27c0be2c5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:55:28:5f:9e:5f:5c:cb:16:53:6b:f7:20: 55:73:2a:f7:d7:9e:79:4d:72:f3:2b:4a:2e:8d:16: 83:2a:2b:e7:1a:c7:a8:3d:5a:ee:08:68:8d:86:6b: 9d:35:75:aa:b2:92:4e:fa:9b:49:0c:52:fa:52:c3: 12:bd:d9:ec:8e:cd:1b:0b:8a:b1:1a:36:a6:8c:d8: b9:23:bb:64:8a:93:0c:47:b3:2e:5d:66:42:b1:c0: 4c:75:68:7f:95:2d:79:30:ee:d4:00:ed:87:86:f1: 53:d9:20:34:ca:45:6e:66:87:98:29:2c:f1:08:68: bf:e1:ac:d5:da:aa:79:94:84:d8:bc:b9:b0:4f:78: b5:76:42:0b:c0:b6:84:4b:9f:52:5f:3f:62:fe:3b: 9b:c4:3b:01:61:d2:4c:a8:6f:5b:4f:a5:f9:9f:5d: 3d:f7:0f:5c:00:30:ae:fc:43:2a:12:48:f6:ea:5a: 1c:4a:18:1f:be:6e:f2:be:69:26:ed:d1:89:be:5a: 19:5b:3e:a9:ee:86:f8:8f:bd:3d:1a:c6:f6:ea:3a: 78:a6:39:0d:2c:0a:e6:f2:e5:91:a1:b4:7b:81:1c: 85:97:ee:e9:4e:5b:f4:f8:16:ca:8e:73:90:e8:25: 97:a6:99:65:47:62:42:4d:a8:80:38:f8:4d:0a:b4: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A4:65:75:32:60:07:B3:3C:A5:F0:B4:7C:C5:F2:7C:0B:E2:C5:CC X509v3 Authority Key Identifier: keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/LaRldTJgB7M8pfC0fMXyfAvixcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ca0::/48 Signature Algorithm: sha256WithRSAEncryption 1f:ff:6c:41:3c:a7:3f:8c:fa:c2:f6:73:ff:82:ce:38:6a:6c: 98:61:8c:4b:0f:0d:be:84:93:c8:7a:c6:2c:b3:dd:83:59:4d: 5e:ba:56:1d:6d:40:34:78:ac:d4:a2:39:b0:dd:8f:09:01:d2: 07:9a:0f:3d:30:ae:82:ff:c0:4e:0d:90:46:c8:81:72:26:5d: 9e:4e:ff:c4:c1:9c:2c:c2:cd:31:3d:86:b4:92:3c:42:bf:8a: 8b:eb:85:19:6b:b8:06:6a:ed:d8:27:d9:fc:ab:c3:20:d2:97: 4a:67:03:33:37:54:f6:90:f6:1c:5c:fc:cf:01:5e:a9:ae:ef: 32:3f:f2:11:82:e4:1b:f8:6c:ed:5f:94:69:a1:02:0c:e5:3b: 09:00:62:1f:3c:84:18:bf:80:0e:e0:1f:34:20:16:87:e2:ad: 70:05:35:de:3b:73:43:f8:e7:11:a0:fd:05:3c:27:31:38:a0: 26:4b:68:d5:66:7b:b2:e2:3d:c7:03:e6:9e:c6:29:61:8f:d1: 58:f3:bc:c1:bf:38:b7:75:f8:fe:df:4d:38:df:6f:5e:02:54: f3:6f:0a:57:a6:6c:0d:68:a0:51:0a:ce:43:e5:23:70:9f:6d: 10:18:3a:19:48:88:cc:dc:a5:cc:d7:3e:5f:45:1b:51:2c:13: 5c:eb:4b:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87mku/lMpRHOE5bpfjA9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4 NzJiMDUwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGE0NjU3NTMyNjAwN2IzM2NhNWYwYjQ3Y2M1ZjI3YzBiZTJjNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVhVKF+eX1zLFlNr9yBVcyr31555 TXLzK0oujRaDKivnGseoPVruCGiNhmudNXWqspJO+ptJDFL6UsMSvdnsjs0bC4qx GjamjNi5I7tkipMMR7MuXWZCscBMdWh/lS15MO7UAO2HhvFT2SA0ykVuZoeYKSzx CGi/4azV2qp5lITYvLmwT3i1dkILwLaES59SXz9i/jubxDsBYdJMqG9bT6X5n109 9w9cADCu/EMqEkj26locShgfvm7yvmkm7dGJvloZWz6p7ob4j709Gsb26jp4pjkN LArm8uWRobR7gRyFl+7pTlv0+BbKjnOQ6CWXppllR2JCTaiAOPhNCrRtHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC2kZXUyYAezPKXwtHzF8nwL4sXMMB8GA1UdIwQY MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et YmE0ZmJkOGQ1ZDhlLzEvTGFSbGRUSmdCN004cGZDMGZNWHlmQXZpeGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAyg MA0GCSqGSIb3DQEBCwUAA4IBAQAf/2xBPKc/jPrC9nP/gs44amyYYYxLDw2+hJPI esYss92DWU1eulYdbUA0eKzUojmw3Y8JAdIHmg89MK6C/8BODZBGyIFyJl2eTv/E wZwsws0xPYa0kjxCv4qL64UZa7gGau3YJ9n8q8Mg0pdKZwMzN1T2kPYcXPzPAV6p ru8yP/IRguQb+GztX5RpoQIM5TsJAGIfPIQYv4AO4B80IBaH4q1wBTXeO3ND+OcR oP0FPCcxOKAmS2jVZnuy4j3HA+aexilhj9FY87zBvzi3dfj+3004329eAlTzbwpX pmwNaKBRCs5D5SNwn20QGDoZSIjM3KXM1z5fRRtRLBNc60uJ -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:47 2026 by rpki-client