This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa File: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (raw, json) Hash identifier: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo= Subject key identifier: 95:28:2C:33:51:65:9F:53:A4:7E:35:D7:6F:49:CE:43:9A:C7:EB:2C Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019B7759187B482A25172311592DC216323A Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54203 IP address blocks: 2a03:efc0:200::/40 maxlen: 40 2a03:efc0:500::/40 maxlen: 40 2a03:efc0:1300::/40 maxlen: 40 2a03:efc0:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:18:7b:48:2a:25:17:23:11:59:2d:c2:16:32:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95282c3351659f53a47e35d76f49ce439ac7eb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:88:95:fb:41:ef:a2:53:e0:2a:0a:93:00: 36:76:93:fd:cc:6b:60:e0:65:79:b4:28:79:35:e1: 65:0a:36:1d:1a:ff:fd:e0:6a:03:06:de:ef:d0:55: bc:72:21:ab:23:57:4c:88:55:fc:04:a1:68:b3:39: 6b:35:50:26:cc:0d:c3:a8:e1:bc:3b:e8:57:57:7c: 85:51:22:59:35:46:e7:da:5c:9f:3c:cb:b6:48:30: b8:9a:d3:4b:7e:b9:0c:3e:ae:a2:11:6b:93:64:11: 76:b6:40:ba:74:5e:67:c1:da:8c:36:14:f7:22:01: 6d:ae:2c:a8:5a:4a:bd:f3:fe:0a:ee:72:ca:6f:32: b0:d0:09:1f:3d:74:dc:c0:ec:9a:a3:fd:85:33:ff: 84:d3:36:b3:3a:a0:6d:83:c7:47:57:05:65:8d:31: e8:45:65:d3:2f:35:18:03:ff:81:fd:3e:41:7f:4d: 91:a2:29:69:d0:93:2e:17:be:dc:36:c7:5a:7b:49: 64:50:5a:88:83:b0:da:9e:45:ca:9b:93:0f:c1:e4: 37:4f:59:54:b7:e8:a0:15:32:a4:3d:b1:6d:13:e0: 35:58:e9:83:7b:96:57:71:8c:99:61:ae:95:fb:2e: e9:16:10:c4:36:6b:02:97:b0:3a:94:43:d4:a0:4f: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:28:2C:33:51:65:9F:53:A4:7E:35:D7:6F:49:CE:43:9A:C7:EB:2C X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:efc0:200::/40 2a03:efc0:500::/40 2a03:efc0:1300::/40 2a03:efc0:1900::/40 Signature Algorithm: sha256WithRSAEncryption a1:8e:d6:b2:12:6f:b8:09:c6:99:7c:d1:b0:25:46:3d:f2:e9: 0a:d6:98:63:b0:e4:9a:39:3c:4b:bd:c2:3a:2e:36:63:44:be: 93:6c:24:91:da:32:1d:f9:6b:9b:c6:8b:d4:61:72:19:41:02: 16:30:23:ec:3d:5f:00:a8:37:5a:4d:74:9d:88:25:88:7b:10: dd:de:85:6a:96:25:4a:66:f5:ac:82:3c:ac:29:c5:6e:9c:83: c8:f1:bb:2d:c4:6e:97:01:04:9d:6a:91:fd:26:37:fb:f5:6c: 68:f0:2e:b6:65:cc:69:df:79:58:c5:5e:62:10:9b:a2:0f:2b: b3:4e:4b:49:58:cb:48:b9:c3:a9:61:ac:ae:b1:4e:ff:63:66: c8:ad:ba:d8:ff:e8:3d:4f:65:74:20:28:46:1a:63:56:e2:1e: f5:52:95:52:56:bd:e5:90:14:07:a8:87:9e:9e:b1:3b:d6:32: 94:c4:76:da:5f:66:42:b8:50:49:9f:f2:dd:1c:f2:c6:b6:9d: 36:b1:56:a4:47:3c:7f:f1:79:05:43:63:06:59:4e:02:21:94: 2a:b2:8e:82:72:93:3d:12:88:a9:6e:7c:e1:81:c9:b9:27:60: cf:16:3c:94:11:8e:fa:9f:95:5d:57:d8:37:26:74:91:08:7b: 2d:01:2f:38 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WRh7SColFyMRWS3CFjI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI4MmMzMzUxNjU5ZjUzYTQ3ZTM1ZDc2ZjQ5Y2U0MzlhYzdlYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtyIlftB76JT4CoKkwA2dpP9zGtg 4GV5tCh5NeFlCjYdGv/94GoDBt7v0FW8ciGrI1dMiFX8BKFoszlrNVAmzA3DqOG8 O+hXV3yFUSJZNUbn2lyfPMu2SDC4mtNLfrkMPq6iEWuTZBF2tkC6dF5nwdqMNhT3 IgFtriyoWkq98/4K7nLKbzKw0AkfPXTcwOyao/2FM/+E0zazOqBtg8dHVwVljTHo RWXTLzUYA/+B/T5Bf02Roilp0JMuF77cNsdae0lkUFqIg7DankXKm5MPweQ3T1lU t+igFTKkPbFtE+A1WOmDe5ZXcYyZYa6V+y7pFhDENmsCl7A6lEPUoE/EeQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJUoLDNRZZ9TpH41129JzkOax+ssMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvbFNnc00xRmxuMU9rZmpYWGIwbk9RNXJINnl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAAjAgAwYAKgPvwAID BgAqA+/ABQMGACoD78ATAwYAKgPvwBkwDQYJKoZIhvcNAQELBQADggEBAKGO1rIS b7gJxpl80bAlRj3y6QrWmGOw5Jo5PEu9wjouNmNEvpNsJJHaMh35a5vGi9RhchlB AhYwI+w9XwCoN1pNdJ2IJYh7EN3ehWqWJUpm9ayCPKwpxW6cg8jxuy3EbpcBBJ1q kf0mN/v1bGjwLrZlzGnfeVjFXmIQm6IPK7NOS0lYy0i5w6lhrK6xTv9jZsitutj/ 6D1PZXQgKEYaY1biHvVSlVJWveWQFAeoh56esTvWMpTEdtpfZkK4UEmf8t0c8sa2 nTaxVqRHPH/xeQVDYwZZTgIhlCqyjoJykz0SiKlufOGBybknYM8WPJQRjvqflV1X 2DcmdJEIey0BLzg= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:46 2026 by rpki-client