This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/LXOlrFf8_l83rpmn17vhLFJbiZM.roa File: LXOlrFf8_l83rpmn17vhLFJbiZM.roa (raw, json) Hash identifier: sNb9fSP4DWs/c7lN80M3XZoZwHMjGq02DY0II5j0Qyw= Subject key identifier: 2D:73:A5:AC:57:FC:FE:5F:37:AE:99:A7:D7:BB:E1:2C:52:5B:89:93 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7118AEEFEF46E7B6E96C366D054EF Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/LXOlrFf8_l83rpmn17vhLFJbiZM.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16099 IP address blocks: 2a01:190:15ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:8a:ee:fe:f4:6e:7b:6e:96:c3:66:d0:54:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d73a5ac57fcfe5f37ae99a7d7bbe12c525b8993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:eb:1f:8e:f9:cf:10:1d:07:38:b8:05:bc: 42:10:9c:03:53:f5:ff:1a:7d:b5:8c:2e:de:9e:c0: 95:3e:10:52:aa:a5:8c:b4:d1:45:47:0b:38:7b:da: b6:7b:d9:b2:92:67:80:9c:40:07:dd:e9:7a:69:77: 15:33:90:e8:2a:a3:fc:98:1d:f7:cd:0a:fb:56:ed: 70:69:f3:20:ae:9b:fe:2f:7d:eb:c5:3e:a3:73:1e: 95:e7:6a:97:2c:73:51:f1:10:9d:a3:f9:f6:a4:f9: 38:01:f7:3f:53:91:52:b6:a5:02:c5:ec:f0:53:ae: a5:ee:1c:ae:2e:0b:f6:e7:4c:75:5c:b9:b7:f3:24: 31:1c:6a:66:52:b5:12:a0:51:d9:dc:97:3f:87:b1: 0a:35:d2:fc:1b:f4:4d:9b:42:ec:f7:ee:f2:0c:fc: 4d:23:18:24:9b:02:c0:27:24:4c:4c:f8:fc:67:e6: 8e:e5:c2:2c:84:0a:93:6c:57:aa:c3:4f:89:20:5a: 71:f5:64:15:60:43:32:0e:56:23:4e:54:7d:07:8d: c4:41:af:8b:bb:82:15:5d:2b:78:cc:3a:16:88:26: 73:34:b7:97:5f:cb:df:9d:a0:3b:6d:bb:5b:6d:be: c0:7d:9f:89:b7:98:b6:db:0f:93:0f:50:18:a1:70: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:A5:AC:57:FC:FE:5F:37:AE:99:A7:D7:BB:E1:2C:52:5B:89:93 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/LXOlrFf8_l83rpmn17vhLFJbiZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:15ed::/48 Signature Algorithm: sha256WithRSAEncryption 02:3d:37:28:18:34:03:5e:20:52:15:2b:d7:18:e1:e9:06:09: 5d:3d:2c:a8:99:f6:a9:ce:56:f9:61:c7:5e:08:7b:26:04:29: 35:6a:14:14:1c:f6:ac:d2:ec:c8:21:8f:f5:97:a4:81:b1:7c: df:af:11:d6:ec:09:09:76:79:e8:6d:0a:47:28:71:fd:39:34: ee:f5:44:eb:14:19:d4:4a:b4:c0:f0:cc:32:e0:83:80:fd:5a: 9b:8f:59:64:ad:7f:a7:7d:c0:27:12:82:a2:86:57:65:d1:84: 84:5e:95:85:a2:23:6b:9c:44:ab:07:f2:09:46:08:28:27:79: 22:8f:eb:19:92:0e:5d:d1:9e:8b:25:79:df:93:7f:7a:5a:87: 0b:81:8d:00:5f:7a:52:65:f8:9c:08:4e:e8:f3:f5:f0:e7:d6: 8f:91:8f:67:88:fa:e8:b7:ed:8a:08:b5:9d:a7:aa:e2:07:1f: 63:90:73:ec:ca:e2:d4:82:6d:40:b7:19:e1:b3:a2:6f:70:3e: e2:2b:e5:91:3f:35:1f:67:2c:e3:e5:f6:21:84:6c:02:f7:36: a6:f5:f9:91:b5:69:d8:cf:a2:3f:c5:3a:e8:a0:10:f5:b3:f5: fc:8c:eb:76:53:9b:c1:b8:79:05:71:d2:f5:43:10:61:e5:d2: 05:1f:39:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxGK7v70bntulsNm0FTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDczYTVhYzU3ZmNmZTVmMzdhZTk5YTdkN2JiZTEyYzUyNWI4OTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PHrH475zxAdBzi4BbxCEJwDU/X/ Gn21jC7ensCVPhBSqqWMtNFFRws4e9q2e9mykmeAnEAH3el6aXcVM5DoKqP8mB33 zQr7Vu1wafMgrpv+L33rxT6jcx6V52qXLHNR8RCdo/n2pPk4Afc/U5FStqUCxezw U66l7hyuLgv250x1XLm38yQxHGpmUrUSoFHZ3Jc/h7EKNdL8G/RNm0Ls9+7yDPxN IxgkmwLAJyRMTPj8Z+aO5cIshAqTbFeqw0+JIFpx9WQVYEMyDlYjTlR9B43EQa+L u4IVXSt4zDoWiCZzNLeXX8vfnaA7bbtbbb7AfZ+Jt5i22w+TD1AYoXAJ6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC1zpaxX/P5fN66Zp9e74SxSW4mTMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvTFhPbHJGZjhfbDgzcnBtbjE3dmhMRkpiaVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBXt MA0GCSqGSIb3DQEBCwUAA4IBAQACPTcoGDQDXiBSFSvXGOHpBgldPSyomfapzlb5 YcdeCHsmBCk1ahQUHPas0uzIIY/1l6SBsXzfrxHW7AkJdnnobQpHKHH9OTTu9UTr FBnUSrTA8Mwy4IOA/Vqbj1lkrX+nfcAnEoKihldl0YSEXpWFoiNrnESrB/IJRggo J3kij+sZkg5d0Z6LJXnfk396WocLgY0AX3pSZficCE7o8/Xw59aPkY9niProt+2K CLWdp6riBx9jkHPsyuLUgm1Atxnhs6JvcD7iK+WRPzUfZyzj5fYhhGwC9zam9fmR tWnYz6I/xTrooBD1s/X8jOt2U5vBuHkFcdL1QxBh5dIFHzlR -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:44 2026 by rpki-client