This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/LTfWXRthcASup-DyG7vEDraK0EY.roa File: LTfWXRthcASup-DyG7vEDraK0EY.roa (raw, json) Hash identifier: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI= Subject key identifier: 2D:37:D6:5D:1B:61:70:04:AE:A7:E0:F2:1B:BB:C4:0E:B6:8A:D0:46 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D195EA80F92654613A312E82A5641 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/LTfWXRthcASup-DyG7vEDraK0EY.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20594 IP address blocks: 2a01:8180:2000::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:19:5e:a8:0f:92:65:46:13:a3:12:e8:2a:56:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d37d65d1b617004aea7e0f21bbbc40eb68ad046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:4a:8e:da:0f:19:70:d4:56:51:e7:50:a8: fa:0e:de:f7:b4:36:1f:0a:cd:8d:a6:0a:e0:cf:65: 9e:7e:28:4a:66:d9:4f:a0:31:75:0f:72:21:3d:a9: 13:23:a2:66:b4:d9:26:74:fb:26:ef:5e:4e:ca:5c: 1b:e0:76:a3:23:0c:fb:e6:08:44:b2:e7:51:e3:d2: f5:e1:fb:46:0e:01:15:7a:96:90:b7:7a:94:b3:c6: 26:e4:12:f5:48:a5:5d:8f:64:a3:73:26:d3:41:31: d6:a9:43:65:b9:91:6d:c2:3d:57:95:d5:f2:3d:2e: 3e:ff:31:5b:dc:a2:84:ee:11:ff:43:96:54:9a:3d: 31:db:74:2c:ad:cc:bd:b4:8e:f3:ef:00:f0:87:c7: de:84:ac:aa:34:fb:9e:b2:a6:d0:04:9e:ab:90:83: 1c:40:d1:a7:9a:a3:0c:dc:b3:0b:a8:28:6e:0f:dd: 7f:c1:d0:af:60:39:52:30:69:cd:8b:8a:d8:b5:a0: a5:34:35:8a:f2:d3:1b:82:05:53:97:34:a5:06:1c: 07:6f:2e:11:4b:db:83:cd:62:94:1d:07:34:00:ec: 28:93:cf:c6:fa:dc:51:91:cd:f7:46:2a:20:cb:a6: 00:6c:2e:f6:db:27:df:c1:56:14:a0:42:93:59:74: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:37:D6:5D:1B:61:70:04:AE:A7:E0:F2:1B:BB:C4:0E:B6:8A:D0:46 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/LTfWXRthcASup-DyG7vEDraK0EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8180:2000::/36 Signature Algorithm: sha256WithRSAEncryption 7a:fa:b8:0d:be:a5:2b:4c:bf:5d:d7:b9:91:d7:c5:7a:5c:e3: 86:25:ed:8b:ab:dc:25:aa:b2:8c:4a:30:aa:c8:8d:f8:88:f0: cb:1f:72:8a:b1:98:a8:c5:ef:4d:9c:03:15:a3:d5:aa:75:b5: 11:1a:c2:a2:3a:a2:90:0d:cc:46:86:1e:bd:6c:37:1c:17:52: 16:1f:a4:41:6b:27:4d:3e:d2:4b:4d:ee:1e:2d:ce:ed:d8:45: b8:5f:98:32:55:60:09:bb:ce:4a:46:fd:11:83:01:81:39:8a: ff:92:5d:84:10:d7:c3:6a:81:60:b9:7d:a7:21:3c:25:7a:18: 9f:43:c9:ae:36:b2:f0:7b:6a:e2:fd:97:30:38:02:0a:03:28: e5:5a:2a:83:89:6d:c5:31:6e:d5:a9:8b:80:91:b0:09:89:8a: be:9d:27:97:b9:9c:66:c2:5f:ba:e1:67:27:ca:c5:f1:64:59: 8a:89:55:16:d4:ef:7e:41:3f:8a:2c:f3:36:60:fb:21:12:25: 55:bc:ad:2b:71:32:da:8c:54:08:9d:1a:39:d0:88:42:66:5d: c6:02:5c:26:09:9a:3d:90:34:a2:4c:a7:6e:42:43:02:e3:b6: 72:c3:65:7d:0f:9f:dd:fb:9a:0f:d4:09:8e:3e:54:2b:14:e6: 2c:0a:aa:57 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XRleqA+SZUYToxLoKlZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDM3ZDY1ZDFiNjE3MDA0YWVhN2UwZjIxYmJiYzQwZWI2OGFkMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdKjtoPGXDUVlHnUKj6Dt73tDYf Cs2Npgrgz2WefihKZtlPoDF1D3IhPakTI6JmtNkmdPsm715Oylwb4HajIwz75ghE sudR49L14ftGDgEVepaQt3qUs8Ym5BL1SKVdj2SjcybTQTHWqUNluZFtwj1XldXy PS4+/zFb3KKE7hH/Q5ZUmj0x23Qsrcy9tI7z7wDwh8fehKyqNPuesqbQBJ6rkIMc QNGnmqMM3LMLqChuD91/wdCvYDlSMGnNi4rYtaClNDWK8tMbggVTlzSlBhwHby4R S9uDzWKUHQc0AOwok8/G+txRkc33Riogy6YAbC722yffwVYUoEKTWXSd1QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC031l0bYXAErqfg8hu7xA62itBGMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvTFRmV1hSdGhjQVN1cC1EeUc3dkVEcmFLMEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgGBgCAw DQYJKoZIhvcNAQELBQADggEBAHr6uA2+pStMv13XuZHXxXpc44Yl7Yur3CWqsoxK MKrIjfiI8MsfcoqxmKjF702cAxWj1ap1tREawqI6opANzEaGHr1sNxwXUhYfpEFr J00+0ktN7h4tzu3YRbhfmDJVYAm7zkpG/RGDAYE5iv+SXYQQ18NqgWC5fachPCV6 GJ9Dya42svB7auL9lzA4AgoDKOVaKoOJbcUxbtWpi4CRsAmJir6dJ5e5nGbCX7rh ZyfKxfFkWYqJVRbU735BP4os8zZg+yESJVW8rStxMtqMVAidGjnQiEJmXcYCXCYJ mj2QNKJMp25CQwLjtnLDZX0Pn937mg/UCY4+VCsU5iwKqlc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:33 2026 by rpki-client