This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/La-MDo64ev5Gin8e0Tft-SjxXsk.roa File: La-MDo64ev5Gin8e0Tft-SjxXsk.roa (raw, json) Hash identifier: QNBJeGRyC1//h0wL93z8NCXw7eZPWVMS+1HP1LQik9o= Subject key identifier: 2D:AF:8C:0E:8E:B8:7A:FE:46:8A:7F:1E:D1:37:ED:F9:28:F1:5E:C9 Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Certificate serial: 019B7BA33AFA86C38683ED8A09553039F146 Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/La-MDo64ev5Gin8e0Tft-SjxXsk.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 45.82.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:fa:86:c3:86:83:ed:8a:09:55:30:39:f1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2daf8c0e8eb87afe468a7f1ed137edf928f15ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:c8:ad:6b:48:9b:07:95:2c:d1:a3:6c:cb: 67:94:b5:30:81:f6:33:02:77:89:82:5a:7b:04:b7: 0e:fc:da:8e:f0:f1:27:70:ee:61:44:73:8b:c4:4a: fe:72:3d:91:55:47:91:fb:ef:b0:40:a2:4a:e0:8f: 33:17:7d:04:d6:18:0b:0c:67:c8:c5:97:d2:52:b4: aa:36:b0:ab:8a:0b:84:7f:ad:27:1b:ce:ac:74:a4: 3f:1f:cb:98:f2:0f:be:02:f0:7a:d9:26:2a:e7:97: 16:19:21:33:a2:23:6d:3a:86:10:0a:67:df:be:01: a9:7e:fe:26:dd:ae:79:64:9f:84:34:45:ce:50:5f: 0a:f2:45:67:1a:43:a8:ee:dd:d7:4f:63:a7:2c:ab: d4:fd:c5:f2:eb:b3:1b:ca:ea:f4:e8:84:15:be:f2: 23:05:9d:fb:64:23:70:57:02:2c:81:d7:87:f7:7a: 63:aa:03:ce:69:e0:71:f0:8f:08:75:f8:66:c9:29: ff:2b:78:06:98:08:4c:c0:e6:ae:03:e6:89:f8:5c: 26:e5:87:00:ec:62:86:73:34:79:c0:d4:a7:a3:3b: 20:9e:d5:95:f2:4c:83:58:a9:9d:a1:da:e7:c2:0f: 95:db:37:e0:ba:1c:3e:e8:19:ab:ab:60:53:7e:28: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AF:8C:0E:8E:B8:7A:FE:46:8A:7F:1E:D1:37:ED:F9:28:F1:5E:C9 X509v3 Authority Key Identifier: keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/La-MDo64ev5Gin8e0Tft-SjxXsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.13.0/24 Signature Algorithm: sha256WithRSAEncryption 12:33:12:32:3f:22:6a:1e:88:79:40:50:37:0f:1e:4c:e3:aa: ac:a6:eb:31:0d:7f:42:de:51:f1:c4:c4:78:8a:92:b0:32:6b: e2:66:bc:ef:35:5b:a8:6e:4f:3d:bc:2a:11:ab:b7:e9:70:09: fe:bf:40:55:6e:2e:7a:d4:62:aa:30:2a:ee:64:cd:98:ed:ee: cb:2a:33:3a:b3:fc:94:33:5e:a6:fe:ba:3e:33:1d:44:dd:8b: 6f:0b:46:65:fc:b4:7f:2c:13:59:a6:81:6e:f3:2f:cf:26:07: ae:3b:54:f6:54:1a:47:49:2d:07:28:0f:b4:9c:74:83:3d:e3: c0:ef:41:31:6d:be:f8:5e:b6:c2:67:d3:57:97:bc:20:9f:c0: c3:ce:97:cc:bb:d8:01:ed:85:6a:06:9a:89:17:2b:94:b4:89: 84:1a:37:52:38:aa:ff:69:68:13:4d:99:c3:3a:e2:16:9c:d0: ca:d6:d2:22:f1:b7:72:4d:de:35:1f:29:a1:b2:04:cf:56:8e: 61:e6:1c:8b:42:86:b9:6a:96:5b:1e:e3:68:95:ac:2d:67:8c: 28:d0:96:f2:b6:1e:06:ec:1f:fa:cc:50:18:0d:01:20:ac:54: 65:23:95:6b:e1:c5:7e:e4:20:a0:c6:8a:9a:47:91:61:00:d4: e7:13:e5:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozr6hsOGg+2KCVUwOfFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx NjlmODMwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGFmOGMwZThlYjg3YWZlNDY4YTdmMWVkMTM3ZWRmOTI4ZjE1ZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05DIrWtImweVLNGjbMtnlLUwgfYz AneJglp7BLcO/NqO8PEncO5hRHOLxEr+cj2RVUeR+++wQKJK4I8zF30E1hgLDGfI xZfSUrSqNrCriguEf60nG86sdKQ/H8uY8g++AvB62SYq55cWGSEzoiNtOoYQCmff vgGpfv4m3a55ZJ+ENEXOUF8K8kVnGkOo7t3XT2OnLKvU/cXy67Mbyur06IQVvvIj BZ37ZCNwVwIsgdeH93pjqgPOaeBx8I8IdfhmySn/K3gGmAhMwOauA+aJ+Fwm5YcA 7GKGczR5wNSnozsgntWV8kyDWKmdodrnwg+V2zfguhw+6Bmrq2BTfijmGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2vjA6OuHr+Rop/HtE37fko8V7JMB8GA1UdIwQY MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt NWM0NzZlMzMyNWY1LzEvTGEtTURvNjRldjVHaW44ZTBUZnQtU2p4WHNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1 LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVINMA0G CSqGSIb3DQEBCwUAA4IBAQASMxIyPyJqHoh5QFA3Dx5M46qspusxDX9C3lHxxMR4 ipKwMmviZrzvNVuobk89vCoRq7fpcAn+v0BVbi561GKqMCruZM2Y7e7LKjM6s/yU M16m/ro+Mx1E3YtvC0Zl/LR/LBNZpoFu8y/PJgeuO1T2VBpHSS0HKA+0nHSDPePA 70Exbb74XrbCZ9NXl7wgn8DDzpfMu9gB7YVqBpqJFyuUtImEGjdSOKr/aWgTTZnD OuIWnNDK1tIi8bdyTd41HymhsgTPVo5h5hyLQoa5apZbHuNolawtZ4wo0Jbyth4G 7B/6zFAYDQEgrFRlI5Vr4cV+5CCgxoqaR5FhANTnE+VG -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:33 2026 by rpki-client