This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa File: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (raw, json) Hash identifier: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU= Subject key identifier: 96:76:D1:42:6D:A0:1D:08:F3:90:2E:0F:96:37:3B:CB:07:B5:7F:37 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019B7B366A3F6ECAB4241FAAF624BEBF9C11 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39239 IP address blocks: 2a00:8860:b00::/40 maxlen: 64 2a00:8861:b00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6a:3f:6e:ca:b4:24:1f:aa:f6:24:be:bf:9c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9676d1426da01d08f3902e0f96373bcb07b57f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:69:5a:69:3a:d4:da:01:76:da:8b:58:9f:33: a6:e5:dc:0d:ea:1c:1d:b8:04:65:af:9e:c8:e3:80: 6c:af:2e:17:9f:84:bc:3b:85:9a:99:55:f7:2c:e1: a1:e1:89:05:b0:45:e5:86:97:51:00:5a:46:c4:18: 55:41:3a:46:d4:9d:0b:aa:b8:8a:ca:a3:a1:84:3a: ad:26:8c:d4:2e:2a:bc:52:c5:1e:4a:09:a2:0b:27: c5:05:7b:22:3f:b7:58:09:42:11:2b:e7:bd:dc:f3: a7:6b:10:60:82:c7:76:9c:c9:c7:d5:e4:76:ab:ba: b7:92:68:ea:54:50:89:45:9b:3c:ab:21:77:01:b6: 77:83:05:cc:ee:0f:47:ec:e1:ee:ab:c6:62:66:ef: e7:23:fc:3b:0c:5f:6b:bf:1d:cd:7f:b7:65:84:e4: 20:9f:35:8c:fe:e5:13:59:13:6c:a9:c9:d2:ee:bb: 98:89:2f:0f:37:33:66:d9:e2:fa:40:fa:d7:1e:65: 1c:26:32:1a:d1:3c:3a:41:3f:2b:e0:b0:42:13:0c: 74:54:fd:b5:cb:5c:62:f2:a3:ff:1c:8a:e1:7b:31: bd:f2:19:62:a6:3e:a1:70:2a:66:a4:3e:2d:83:c2: 3f:4d:c0:9d:4d:b0:16:e4:7a:98:17:c1:b3:df:98: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:76:D1:42:6D:A0:1D:08:F3:90:2E:0F:96:37:3B:CB:07:B5:7F:37 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8860:b00::/40 2a00:8861:b00::/40 Signature Algorithm: sha256WithRSAEncryption 68:fc:10:db:da:fd:f4:e0:ea:f1:d4:07:f4:12:8b:88:22:eb: df:10:0e:57:fc:29:7e:86:2c:f6:91:58:05:bd:a8:54:b8:51: d5:9a:72:32:63:b0:2e:0c:2a:2a:15:a4:9b:c2:19:cf:cd:2e: ed:f8:fc:6e:15:e1:ee:2e:09:35:f1:6a:84:6f:c3:7d:c5:e4: 4a:ed:6b:95:52:ea:d3:76:a5:57:ba:d5:07:47:3b:0c:f2:32: 9f:3a:60:3a:13:a7:56:52:5e:92:f7:f3:f1:4b:da:9f:99:78: fe:29:c1:bc:29:cf:cb:50:a1:38:ad:79:5c:88:ac:dc:c5:f7: e3:e4:5f:fd:ea:8d:88:b2:82:f0:18:e1:63:f8:3b:fd:b0:4a: 36:03:cc:b4:1f:49:16:d9:b3:26:ab:2f:98:bc:83:39:de:51: 22:af:7e:7e:ce:3b:82:c1:28:9f:61:fd:1b:51:95:28:77:14: 10:f5:68:1b:2f:4f:5f:a0:30:f1:a0:f1:33:06:22:bd:32:b2: 95:70:09:0f:dd:31:6d:63:d2:01:77:a2:74:4e:ad:f2:11:99: dd:e9:f5:23:31:dd:03:ce:8b:65:9a:60:98:5e:06:4f:00:46: 52:64:18:db:25:38:0d:0d:2b:db:df:e5:60:b4:50:c0:4d:07: 33:1f:0c:ef -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7Nmo/bsq0JB+q9iS+v5wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njc2ZDE0MjZkYTAxZDA4ZjM5MDJlMGY5NjM3M2JjYjA3YjU3ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2laaTrU2gF22otYnzOm5dwN6hwd uARlr57I44Bsry4Xn4S8O4WamVX3LOGh4YkFsEXlhpdRAFpGxBhVQTpG1J0LqriK yqOhhDqtJozULiq8UsUeSgmiCyfFBXsiP7dYCUIRK+e93POnaxBggsd2nMnH1eR2 q7q3kmjqVFCJRZs8qyF3AbZ3gwXM7g9H7OHuq8ZiZu/nI/w7DF9rvx3Nf7dlhOQg nzWM/uUTWRNsqcnS7ruYiS8PNzNm2eL6QPrXHmUcJjIa0Tw6QT8r4LBCEwx0VP21 y1xi8qP/HIrhezG98hlipj6hcCpmpD4tg8I/TcCdTbAW5HqYF8Gz35i5twIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFJZ20UJtoB0I85AuD5Y3O8sHtX83MB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvbG5iUlFtMmdIUWp6a0M0UGxqYzd5d2UxZnpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgCIYAsD BgAqAIhhCzANBgkqhkiG9w0BAQsFAAOCAQEAaPwQ29r99ODq8dQH9BKLiCLr3xAO V/wpfoYs9pFYBb2oVLhR1ZpyMmOwLgwqKhWkm8IZz80u7fj8bhXh7i4JNfFqhG/D fcXkSu1rlVLq03alV7rVB0c7DPIynzpgOhOnVlJekvfz8Uvan5l4/inBvCnPy1Ch OK15XIis3MX34+Rf/eqNiLKC8BjhY/g7/bBKNgPMtB9JFtmzJqsvmLyDOd5RIq9+ fs47gsEon2H9G1GVKHcUEPVoGy9PX6Aw8aDxMwYivTKylXAJD90xbWPSAXeidE6t 8hGZ3en1IzHdA86LZZpgmF4GTwBGUmQY2yU4DQ0r29/lYLRQwE0HMx8M7w== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:07 2026 by rpki-client