This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa File: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (raw, json) Hash identifier: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0= Subject key identifier: 2E:A1:99:E1:8F:CB:62:9D:8C:65:73:1B:96:40:39:7A:35:53:26:36 Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Certificate serial: 019B7B3664130B4CA9C4CD960ACA1A1BFB62 Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215569 IP address blocks: 2a07:2486:4010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:64:13:0b:4c:a9:c4:cd:96:0a:ca:1a:1b:fb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ea199e18fcb629d8c65731b9640397a35532636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:5c:08:01:c9:c3:3c:ca:7a:51:a5:28:8c: 2b:7f:8d:28:f9:26:a8:ff:12:7f:b5:c6:0e:77:7d: 36:f9:9d:b7:51:6b:c1:e0:c8:6c:f6:f4:ad:98:8f: 6b:37:6a:4c:56:5d:90:60:9a:5f:11:c1:2f:7b:d6: e7:2a:9b:9f:70:3d:02:eb:6a:a0:fd:f7:c8:dd:23: ec:fe:c6:13:17:f2:80:39:1c:d9:e5:a8:a6:c6:c8: 08:a8:52:b2:f6:ba:67:86:76:09:6d:34:a9:bd:b2: 01:29:ef:fb:18:f0:cb:42:14:da:be:37:e7:60:b9: 20:93:5b:5b:6a:75:e1:c5:13:02:59:86:43:b8:04: b3:dc:10:bd:6e:c7:5a:16:e2:39:27:2b:ce:ce:e2: db:c0:4d:19:fb:4b:c6:cc:02:6f:15:3c:1a:9f:4a: 1c:ce:a3:33:5e:30:18:e3:ff:29:af:b5:e1:dd:3b: b1:92:55:86:1e:07:7f:ba:a4:30:3b:75:cc:62:e8: 83:d3:08:71:75:4b:cd:08:4b:e6:9b:47:3d:eb:a0: 81:a8:df:21:be:33:34:3f:c8:fc:4b:dd:8d:51:25: 5b:92:32:8a:05:09:25:7c:86:44:9f:63:f7:36:1f: 84:c8:6b:8b:33:14:85:a0:c8:c1:cd:39:91:31:e7: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A1:99:E1:8F:CB:62:9D:8C:65:73:1B:96:40:39:7A:35:53:26:36 X509v3 Authority Key Identifier: keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2486:4010::/44 Signature Algorithm: sha256WithRSAEncryption be:20:b1:42:35:d1:a5:71:24:68:74:23:b6:3c:99:a2:20:9b: 54:28:6b:ec:45:30:93:00:7b:7a:45:d2:67:53:47:2e:41:5f: 5b:f6:19:be:69:ad:40:da:89:79:3e:3a:31:0e:9f:cf:6c:c6: f9:02:9c:91:5f:de:1f:8f:63:f3:dd:83:31:45:63:26:ed:e3: 1d:89:d2:0d:e4:d7:40:3b:c9:ff:9d:17:52:50:2c:4e:17:2c: 1d:22:c1:91:47:fb:a1:cc:f6:61:cb:5f:26:82:b4:46:3a:92: 5a:30:05:0c:de:9e:bc:76:21:07:d6:57:b8:f2:9d:0e:ef:d5: fb:12:88:8f:c0:ec:28:0f:b3:6e:f2:f2:4b:5f:20:e6:2e:45: 26:53:ab:6d:68:95:50:86:22:c5:01:a2:f9:d6:ff:f3:15:2c: de:3e:33:10:f6:25:5f:17:b2:08:5f:39:82:b5:0a:18:f7:5d: 47:07:ea:db:3d:9c:67:6a:16:5f:93:e1:70:09:db:77:bc:98: c3:e5:27:6f:f7:ad:17:35:37:32:07:98:ea:e6:24:1d:cd:09: 55:bd:af:e1:63:eb:c2:79:b4:06:50:12:40:c6:1f:b4:7c:f4: 05:af:8a:c3:16:81:d4:76:e0:d3:f8:42:be:0e:95:47:86:3e: 13:13:51:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NmQTC0ypxM2WCsoaG/tiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh YmE1ZGEwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWExOTllMThmY2I2MjlkOGM2NTczMWI5NjQwMzk3YTM1NTMyNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxRcCAHJwzzKelGlKIwrf40o+Sao /xJ/tcYOd302+Z23UWvB4Mhs9vStmI9rN2pMVl2QYJpfEcEve9bnKpufcD0C62qg /ffI3SPs/sYTF/KAORzZ5aimxsgIqFKy9rpnhnYJbTSpvbIBKe/7GPDLQhTavjfn YLkgk1tbanXhxRMCWYZDuASz3BC9bsdaFuI5JyvOzuLbwE0Z+0vGzAJvFTwan0oc zqMzXjAY4/8pr7Xh3TuxklWGHgd/uqQwO3XMYuiD0whxdUvNCEvmm0c966CBqN8h vjM0P8j8S92NUSVbkjKKBQklfIZEn2P3Nh+EyGuLMxSFoMjBzTmRMedDvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC6hmeGPy2KdjGVzG5ZAOXo1UyY2MB8GA1UdIwQY MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt Mzg0ZmZjZTc3ZjUyLzEvTHFHWjRZX0xZcDJNWlhNYmxrQTVlalZUSmpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgckhkAQ MA0GCSqGSIb3DQEBCwUAA4IBAQC+ILFCNdGlcSRodCO2PJmiIJtUKGvsRTCTAHt6 RdJnU0cuQV9b9hm+aa1A2ol5PjoxDp/PbMb5ApyRX94fj2Pz3YMxRWMm7eMdidIN 5NdAO8n/nRdSUCxOFywdIsGRR/uhzPZhy18mgrRGOpJaMAUM3p68diEH1le48p0O 79X7EoiPwOwoD7Nu8vJLXyDmLkUmU6ttaJVQhiLFAaL51v/zFSzePjMQ9iVfF7II XzmCtQoY911HB+rbPZxnahZfk+FwCdt3vJjD5Sdv960XNTcyB5jq5iQdzQlVva/h Y+vCebQGUBJAxh+0fPQFr4rDFoHUduDT+EK+DpVHhj4TE1Eu -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:59 2026 by rpki-client