This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/LadvVkKu3wXT617aXlUlsKUiwvs.roa File: LadvVkKu3wXT617aXlUlsKUiwvs.roa (raw, json) Hash identifier: 5tkpntbZyp0kecx0i9/sz7tiG+x/tBJaYqWhzJ+ue10= Subject key identifier: 2D:A7:6F:56:42:AE:DF:05:D3:EB:5E:DA:5E:55:25:B0:A5:22:C2:FB Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Certificate serial: 019B7CED0565901FD81F847235C24CC8E841 Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/LadvVkKu3wXT617aXlUlsKUiwvs.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209253 IP address blocks: 2a09:d1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:05:65:90:1f:d8:1f:84:72:35:c2:4c:c8:e8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da76f5642aedf05d3eb5eda5e5525b0a522c2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:8d:cc:04:7c:24:cf:df:39:c6:90:9c:d4: 74:c9:7a:b3:5e:1a:43:99:ce:9b:73:4f:f5:01:62: 93:a0:a8:d0:bd:17:e9:d1:97:20:b8:29:db:59:3f: 6f:96:50:f5:76:ca:1f:62:38:31:48:13:b1:1c:2f: 6d:bf:14:35:1e:dc:af:a9:94:84:50:30:24:9b:f1: d8:80:fa:e8:67:b7:ee:fc:a0:f2:0e:c6:35:db:56: 89:63:d3:88:06:bb:83:fc:32:a8:52:f3:0b:c1:86: 88:5d:16:59:43:cf:64:86:93:da:1f:2f:16:28:39: b5:f9:a0:57:27:f8:8e:c9:37:46:f5:f8:3b:f2:b3: 77:5b:5c:24:c5:c8:66:57:0d:a3:55:90:76:62:59: 2a:0e:2d:08:0b:a6:4d:cb:11:4a:40:66:d3:b8:cd: ac:dc:b5:0e:f1:67:b2:50:b5:e1:08:3f:53:5f:56: a1:d1:c9:32:32:7d:af:48:5c:09:31:cc:02:8e:40: 62:ad:6b:05:0b:35:5e:f5:cc:94:c5:36:ae:9b:8a: 09:8f:33:a8:47:76:f2:f2:ea:41:c5:a4:4e:7a:6c: b7:7a:97:ce:9e:d2:0a:80:df:58:e0:8e:14:45:8c: bc:f7:be:0e:9c:ca:37:5e:79:ef:ea:e2:e9:f5:9f: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A7:6F:56:42:AE:DF:05:D3:EB:5E:DA:5E:55:25:B0:A5:22:C2:FB X509v3 Authority Key Identifier: keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/LadvVkKu3wXT617aXlUlsKUiwvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:d1c0::/29 Signature Algorithm: sha256WithRSAEncryption 39:5d:27:17:fe:84:c1:3f:28:71:18:ad:58:4d:0e:00:50:4e: 44:bf:f4:5b:4d:cc:da:57:de:35:2c:41:01:4d:db:d8:33:86: 48:69:40:be:a3:ae:00:27:bb:c3:2e:0e:0d:51:f2:f5:50:26: 38:33:f7:fa:f0:6c:67:85:81:62:70:a0:a6:1f:b5:59:16:c5: 5b:d2:ef:9a:54:19:62:e1:4c:75:6e:27:78:ad:fa:d5:0f:c0: 48:e2:c9:56:92:17:b6:ec:0d:f8:11:7a:63:58:1c:1d:e8:1c: 6a:00:f4:82:c4:2d:5c:6c:86:10:64:0d:b9:4e:2d:12:7d:72: 87:2b:e6:42:ef:72:f7:a0:6b:93:ae:d0:21:4a:1c:cb:a1:cc: 74:8f:92:7f:08:ea:25:99:2c:ff:78:40:11:9e:6d:74:1f:b6: f1:dc:9a:b5:46:45:27:75:0f:0a:c0:f1:91:53:d2:85:98:4c: 95:ef:b9:56:73:fc:6a:b0:f7:32:3d:3e:56:ea:44:fb:d5:39: 02:f6:ec:ab:ad:b2:f5:db:7b:19:1d:05:c7:82:0b:74:0f:db: 3f:f5:b1:a5:cc:1e:0c:05:e4:91:dd:73:73:d8:7f:fd:6f:39: 92:4d:be:58:0e:5c:d4:71:36:65:d2:1d:dc:2b:af:04:99:c7: c3:ff:05:19 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87QVlkB/YH4RyNcJMyOhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh YWUxNGYwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGE3NmY1NjQyYWVkZjA1ZDNlYjVlZGE1ZTU1MjViMGE1MjJjMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKqNzAR8JM/fOcaQnNR0yXqzXhpD mc6bc0/1AWKToKjQvRfp0ZcguCnbWT9vllD1dsofYjgxSBOxHC9tvxQ1HtyvqZSE UDAkm/HYgProZ7fu/KDyDsY121aJY9OIBruD/DKoUvMLwYaIXRZZQ89khpPaHy8W KDm1+aBXJ/iOyTdG9fg78rN3W1wkxchmVw2jVZB2YlkqDi0IC6ZNyxFKQGbTuM2s 3LUO8WeyULXhCD9TX1ah0ckyMn2vSFwJMcwCjkBirWsFCzVe9cyUxTaum4oJjzOo R3by8upBxaROemy3epfOntIKgN9Y4I4URYy8974OnMo3Xnnv6uLp9Z+UWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC2nb1ZCrt8F0+te2l5VJbClIsL7MB8GA1UdIwQY MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct ZDRmMTJiMzdhMzE4LzEvTGFkdlZrS3Uzd1hUNjE3YVhsVWxzS1Vpd3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4 LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgnRwDAN BgkqhkiG9w0BAQsFAAOCAQEAOV0nF/6EwT8ocRitWE0OAFBORL/0W03M2lfeNSxB AU3b2DOGSGlAvqOuACe7wy4ODVHy9VAmODP3+vBsZ4WBYnCgph+1WRbFW9LvmlQZ YuFMdW4neK361Q/ASOLJVpIXtuwN+BF6Y1gcHegcagD0gsQtXGyGEGQNuU4tEn1y hyvmQu9y96Brk67QIUocy6HMdI+SfwjqJZks/3hAEZ5tdB+28dyatUZFJ3UPCsDx kVPShZhMle+5VnP8arD3Mj0+VupE+9U5Avbsq62y9dt7GR0Fx4ILdA/bP/Wxpcwe DAXkkd1zc9h//W85kk2+WA5c1HE2ZdId3CuvBJnHw/8FGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:37 2026 by rpki-client