This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ld1K_xMbNn7AkPkn-KLgmFgTj7I.roa File: ld1K_xMbNn7AkPkn-KLgmFgTj7I.roa (raw, json) Hash identifier: t65t5QStPqNAbVbkeR3xs0AUH2sBM8oQ/tpKFrt1CBI= Subject key identifier: 95:DD:4A:FF:13:1B:36:7E:C0:90:F9:27:F8:A2:E0:98:58:13:8F:B2 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594A498977E6BCB9BFDCB189DA383B Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ld1K_xMbNn7AkPkn-KLgmFgTj7I.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40975 IP address blocks: 46.102.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4a:49:89:77:e6:bc:b9:bf:dc:b1:89:da:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95dd4aff131b367ec090f927f8a2e09858138fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:8b:89:cc:01:eb:b1:e8:b0:7b:15:ea:48: 3d:75:a4:72:a5:54:8c:95:10:de:8e:ca:54:c9:ca: 15:cf:d0:ab:5b:4b:7f:fb:26:f7:12:05:1d:0b:02: a0:a4:10:88:d4:c4:28:58:61:3e:ff:d2:15:f7:47: bb:07:49:dc:7b:d0:2f:7a:5b:ab:cc:bc:d4:d4:42: 09:00:41:c5:f3:58:f7:51:95:1a:ee:ac:0d:63:2b: a2:34:12:da:17:05:5c:76:c1:73:ba:00:f2:09:f3: ed:a1:a5:a9:2c:6a:f8:f7:09:5e:9d:f7:8e:d7:61: 19:84:70:91:d0:0f:cf:e8:86:37:76:68:24:17:16: 37:ad:b3:34:a0:0a:13:57:1a:ec:61:bc:ba:54:9b: 91:a3:19:2c:d2:71:2a:6d:74:a1:a1:23:11:c9:6d: 4d:8e:65:55:9b:0f:1a:27:07:74:16:9e:22:b5:2e: 3b:6d:93:64:f1:9b:68:82:3d:35:12:af:c4:2f:71: 72:9a:83:20:43:66:d9:9c:c2:52:c6:af:d9:d1:89: ff:c6:59:a1:b7:83:05:47:eb:1c:0a:74:03:a7:ab: 46:30:c0:7b:7f:a6:7a:72:33:ff:a4:82:4c:06:ce: b5:3e:5f:68:fa:5e:31:c1:16:00:ea:88:ba:5e:2b: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:4A:FF:13:1B:36:7E:C0:90:F9:27:F8:A2:E0:98:58:13:8F:B2 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ld1K_xMbNn7AkPkn-KLgmFgTj7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.235.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ed:b7:61:25:d0:13:ca:81:33:d8:63:17:ad:b9:d8:de:d3: 3f:e7:81:39:f5:f1:b6:e9:9b:48:4d:1c:84:1b:4f:77:21:7b: 6d:98:76:17:8d:65:05:d3:8f:6b:6f:a3:86:2a:89:07:83:34: 84:d4:86:a7:5f:0c:bb:b6:1b:2d:13:74:7e:08:84:7e:48:8b: 7a:0d:8c:7b:f7:d8:64:bb:0b:c7:00:13:38:b6:97:9e:69:e7: db:3e:e5:ca:dc:65:74:4b:27:7c:07:83:46:8d:d2:95:b1:1b: 63:5d:68:c4:5f:e1:a0:bf:fd:57:7a:6c:80:ce:33:8e:d7:cd: 45:2c:01:d5:19:ed:0c:0a:d9:00:4c:6b:0d:1c:e2:04:67:4a: 2e:85:be:04:9f:2c:b4:d1:ba:a3:4d:cf:83:eb:a1:63:07:d5: e9:d5:13:f3:e7:7c:7b:55:64:ce:31:75:74:da:82:8c:0a:c3: 65:9c:31:11:77:5d:48:5f:e0:cb:44:30:15:f8:65:f7:ab:9f: fb:44:67:38:12:ad:34:e0:80:40:cc:a4:30:13:97:ea:e2:4c: 6d:c2:6f:5e:20:ac:ba:f2:03:86:66:3e:b5:c4:03:8f:29:68: 4d:20:29:55:0a:d6:e7:20:a9:e8:f2:89:a9:cb:9c:49:28:f1: 86:fe:fa:46 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUpJiXfmvLm/3LGJ2jg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWRkNGFmZjEzMWIzNjdlYzA5MGY5MjdmOGEyZTA5ODU4MTM4ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9+LicwB67HosHsV6kg9daRypVSM lRDejspUycoVz9CrW0t/+yb3EgUdCwKgpBCI1MQoWGE+/9IV90e7B0nce9Avelur zLzU1EIJAEHF81j3UZUa7qwNYyuiNBLaFwVcdsFzugDyCfPtoaWpLGr49wlenfeO 12EZhHCR0A/P6IY3dmgkFxY3rbM0oAoTVxrsYby6VJuRoxks0nEqbXShoSMRyW1N jmVVmw8aJwd0Fp4itS47bZNk8Ztogj01Eq/EL3FymoMgQ2bZnMJSxq/Z0Yn/xlmh t4MFR+scCnQDp6tGMMB7f6Z6cjP/pIJMBs61Pl9o+l4xwRYA6oi6XisTpQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJXdSv8TGzZ+wJD5J/ii4JhYE4+yMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2xkMUtfeE1iTm43QWtQa24tS0xnbUZnVGo3SS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAuZusw DQYJKoZIhvcNAQELBQADggEBADHtt2El0BPKgTPYYxetudje0z/ngTn18bbpm0hN HIQbT3che22YdheNZQXTj2tvo4YqiQeDNITUhqdfDLu2Gy0TdH4IhH5Ii3oNjHv3 2GS7C8cAEzi2l55p59s+5crcZXRLJ3wHg0aN0pWxG2NdaMRf4aC//Vd6bIDOM47X zUUsAdUZ7QwK2QBMaw0c4gRnSi6FvgSfLLTRuqNNz4ProWMH1enVE/PnfHtVZM4x dXTagowKw2WcMRF3XUhf4MtEMBX4Zfern/tEZzgSrTTggEDMpDATl+riTG3Cb14g rLryA4ZmPrXEA48paE0gKVUK1ucgqejyianLnEko8Yb++kY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:30 2026 by rpki-client