This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa File: Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa (raw, json) Hash identifier: PF/ed+k7gtadd5HsxTcEuV0PkSMYqzIOsEkgaO30wiM= Subject key identifier: 2E:1F:70:B3:B6:71:F9:9E:3D:63:72:AA:0D:66:D0:D8:B9:BE:2D:BF Certificate issuer: /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Certificate serial: 019B7C11177E57EE65426483241390F9FAAB Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa Signing time: Fri 02 Jan 2026 00:17:33 +0000 ROA not before: Fri 02 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57698 IP address blocks: 2a10:ba80:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:17:7e:57:ee:65:42:64:83:24:13:90:f9:fa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1f70b3b671f99e3d6372aa0d66d0d8b9be2dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:ce:a0:8e:46:af:50:f7:98:3f:a2:16:3a: 96:c9:03:af:37:29:48:17:aa:dc:ff:fb:fd:3c:f5: 85:25:69:20:2b:e5:06:c1:1a:7c:f5:f7:05:47:c7: 66:86:80:f5:33:6f:32:5a:f0:34:25:28:b6:16:01: fd:31:3a:b9:44:d9:ab:68:a7:bd:69:80:e3:71:ba: 18:1c:45:a1:87:26:89:d4:01:88:d9:da:90:f0:e2: 29:62:c4:3e:fb:b9:de:2d:5c:61:a9:61:3a:7a:ff: ea:ee:33:ab:6d:b6:0d:18:d2:2b:4b:63:8f:af:65: 27:60:0f:f0:92:c2:e4:15:c5:fa:bd:b3:b5:71:fe: 9f:3c:59:3d:da:f4:13:1f:62:85:b3:c2:b0:8d:d2: 8d:f2:6c:cd:52:54:d9:4f:9e:17:f6:42:68:0a:d1: 4d:a0:80:6b:70:58:0d:64:9b:bd:b0:18:69:4b:f6: d3:98:8e:e7:de:f6:7e:43:2c:e1:10:5d:51:6a:21: d3:ae:e4:13:46:2a:a7:66:ee:8c:c6:30:9a:0c:b4: d0:dd:61:f1:e8:0f:b6:47:46:74:7d:4f:c0:f2:e1: c9:09:8b:8d:1e:15:64:53:6a:a6:f5:e8:61:82:0f: bd:d7:be:de:0a:fb:71:a9:1e:12:ef:41:80:58:f0: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:70:B3:B6:71:F9:9E:3D:63:72:AA:0D:66:D0:D8:B9:BE:2D:BF X509v3 Authority Key Identifier: keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ba80:10::/44 Signature Algorithm: sha256WithRSAEncryption bc:ab:21:70:58:25:4d:79:f5:72:47:bf:b5:d4:39:02:21:e2: d3:31:bb:d5:1e:2c:0a:31:ce:78:05:1e:73:06:93:77:eb:92: 91:4f:7e:a2:e3:26:fd:1d:77:d8:b5:30:0b:ab:3b:5f:ca:cd: 78:21:c8:71:80:eb:44:04:38:34:11:1a:f4:0a:2d:77:46:1c: 6c:24:a5:a4:9e:0d:dd:0a:2f:46:9b:50:1a:15:73:36:86:62: 6a:6d:42:53:e5:39:38:81:f5:19:45:8b:60:67:29:e2:f0:8f: 04:52:1a:30:b1:33:fb:05:3a:34:f2:24:ec:f5:f5:60:59:db: 9b:08:92:77:52:89:6d:3f:0d:49:65:39:20:41:89:53:d6:5d: 6e:63:1c:f3:17:86:84:f9:9f:65:5f:99:a7:ba:85:da:94:db: 6c:fb:ef:ce:1f:65:4c:63:31:86:61:4d:ca:c3:12:e8:77:b2: 5f:98:15:4a:71:3e:cf:00:c0:a0:be:ff:4e:cf:95:b5:e8:2c: 08:85:9c:31:52:a7:81:09:37:c4:1e:fa:93:5a:be:93:99:42: 2c:2f:83:90:ee:cf:8e:3f:00:81:c8:63:23:7d:70:81:fe:e2: 07:90:ad:24:5a:a9:62:13:5e:80:9e:b5:cd:b6:ab:6b:e8:45: 65:41:f7:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ERd+V+5lQmSDJBOQ+fqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm YzI0ZDQwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFmNzBiM2I2NzFmOTllM2Q2MzcyYWEwZDY2ZDBkOGI5YmUyZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvrOoI5Gr1D3mD+iFjqWyQOvNylI F6rc//v9PPWFJWkgK+UGwRp89fcFR8dmhoD1M28yWvA0JSi2FgH9MTq5RNmraKe9 aYDjcboYHEWhhyaJ1AGI2dqQ8OIpYsQ++7neLVxhqWE6ev/q7jOrbbYNGNIrS2OP r2UnYA/wksLkFcX6vbO1cf6fPFk92vQTH2KFs8KwjdKN8mzNUlTZT54X9kJoCtFN oIBrcFgNZJu9sBhpS/bTmI7n3vZ+QyzhEF1RaiHTruQTRiqnZu6MxjCaDLTQ3WHx 6A+2R0Z0fU/A8uHJCYuNHhVkU2qm9ehhgg+9177eCvtxqR4S70GAWPCGxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC4fcLO2cfmePWNyqg1m0Ni5vi2/MB8GA1UdIwQY MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt YmU1NTIwYTVjODIxLzEvTGg5d3M3WngtWjQ5WTNLcURXYlEyTG0tTGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhC6gAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQC8qyFwWCVNefVyR7+11DkCIeLTMbvVHiwKMc54 BR5zBpN365KRT36i4yb9HXfYtTALqztfys14IchxgOtEBDg0ERr0Ci13RhxsJKWk ng3dCi9Gm1AaFXM2hmJqbUJT5Tk4gfUZRYtgZyni8I8EUhowsTP7BTo08iTs9fVg WdubCJJ3UoltPw1JZTkgQYlT1l1uYxzzF4aE+Z9lX5mnuoXalNts++/OH2VMYzGG YU3KwxLod7JfmBVKcT7PAMCgvv9Oz5W16CwIhZwxUqeBCTfEHvqTWr6TmUIsL4OQ 7s+OPwCByGMjfXCB/uIHkK0kWqliE16AnrXNtqtr6EVlQfdR -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:54 2026 by rpki-client