This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa File: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (raw, json) Hash identifier: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg= Subject key identifier: 2C:48:8B:2E:AF:6B:D5:53:B9:FC:EB:F9:23:A0:D8:90:D7:89:B8:84 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E4214D3C230926245BFFDDBC668E7 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198814 IP address blocks: 2a02:17a6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:42:14:d3:c2:30:92:62:45:bf:fd:db:c6:68:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c488b2eaf6bd553b9fcebf923a0d890d789b884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:83:66:c5:fd:f9:cd:23:2c:89:1b:c8:7e: c4:98:5b:68:6f:68:78:6f:bf:11:76:5f:1b:6b:af: f0:29:de:a0:e5:a1:1f:96:38:26:cb:a2:7f:8d:f7: f0:b5:b5:8c:95:88:e3:89:83:0a:28:ad:05:a0:36: d2:37:ac:fa:ff:40:b8:be:c3:74:1a:51:30:03:4d: ee:15:c9:68:eb:d0:1a:74:dc:2b:49:c4:38:40:73: cd:22:3f:0f:90:db:d2:36:a9:ce:dd:b0:25:a1:44: d7:b4:8e:d0:f2:f3:a8:b7:e9:d8:d9:06:76:59:31: 63:96:fc:a5:5b:96:3c:87:fd:eb:d2:d8:0f:47:24: 8d:6f:3c:57:e2:b5:f8:e2:67:ac:2d:ab:fd:f9:b3: ac:0e:88:a2:53:e5:57:23:a5:56:8c:f9:be:e8:2b: 55:53:52:f9:ee:6e:8b:19:e9:97:51:61:a1:02:7c: 43:d4:c8:43:9c:31:13:72:69:a2:7b:8b:3a:9c:1f: 17:45:8c:90:2c:05:ba:d7:2d:31:07:d1:29:3a:37: a4:4c:b6:4a:c8:53:76:d2:58:be:20:49:33:fd:b0: 71:1f:b2:4d:8b:03:f1:c1:1d:89:84:da:ca:dc:2c: bb:03:8e:c1:00:cf:8d:f9:f5:08:10:59:c5:93:7e: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:48:8B:2E:AF:6B:D5:53:B9:FC:EB:F9:23:A0:D8:90:D7:89:B8:84 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:17a6::/32 Signature Algorithm: sha256WithRSAEncryption 3e:81:91:f7:a8:86:e6:bd:19:06:7e:d8:6c:21:e1:ed:db:8e: a6:3a:32:ad:79:7e:52:1a:b8:0b:09:ba:48:5a:b2:ab:04:39: d6:c1:0d:53:20:16:04:a7:50:22:fe:94:58:80:a4:c0:3b:36: e1:b0:fb:f5:4a:33:b5:75:5f:0d:be:76:c5:18:16:cb:51:ea: 3d:e1:f0:4d:89:ce:ee:dc:55:50:01:2d:e4:70:51:30:e8:2c: 85:d1:62:69:e3:8c:f0:12:0c:c7:96:9b:8e:2e:86:16:77:18: a6:1c:62:86:1a:12:18:9a:02:28:58:1f:e9:e3:e1:a6:02:52: b5:ec:34:2b:75:9d:70:01:cf:1f:da:2e:b3:3f:d4:c0:ca:da: 85:66:a8:be:0e:60:b2:f7:e8:79:bf:f5:dc:ef:79:55:a0:16: cb:32:75:42:4a:63:4a:17:63:0d:5d:c3:41:bb:a6:ba:37:a0: ae:0a:8c:87:fd:a8:ee:46:49:a6:90:cf:4e:23:d6:0d:48:cb: 03:de:ab:06:84:78:77:36:68:ac:57:0a:d9:59:34:8d:0d:c5: 94:30:29:b2:7a:30:5d:9f:61:2a:bc:76:83:eb:5f:a2:73:3f: 08:0a:09:92:17:2f:e7:8b:84:15:ef:ec:b3:be:72:be:58:8e: 2b:15:de:bd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fkIU08IwkmJFv/3bxmjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzQ4OGIyZWFmNmJkNTUzYjlmY2ViZjkyM2EwZDg5MGQ3ODliODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZeDZsX9+c0jLIkbyH7EmFtob2h4 b78Rdl8ba6/wKd6g5aEfljgmy6J/jffwtbWMlYjjiYMKKK0FoDbSN6z6/0C4vsN0 GlEwA03uFclo69AadNwrScQ4QHPNIj8PkNvSNqnO3bAloUTXtI7Q8vOot+nY2QZ2 WTFjlvylW5Y8h/3r0tgPRySNbzxX4rX44mesLav9+bOsDoiiU+VXI6VWjPm+6CtV U1L57m6LGemXUWGhAnxD1MhDnDETcmmie4s6nB8XRYyQLAW61y0xB9EpOjekTLZK yFN20li+IEkz/bBxH7JNiwPxwR2JhNrK3Cy7A47BAM+N+fUIEFnFk37yFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCxIiy6va9VTufzr+SOg2JDXibiEMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTEVpTExxOXIxVk81X092NUk2RFlrTmVKdUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIXpjAN BgkqhkiG9w0BAQsFAAOCAQEAPoGR96iG5r0ZBn7YbCHh7duOpjoyrXl+Uhq4Cwm6 SFqyqwQ51sENUyAWBKdQIv6UWICkwDs24bD79UoztXVfDb52xRgWy1HqPeHwTYnO 7txVUAEt5HBRMOgshdFiaeOM8BIMx5abji6GFncYphxihhoSGJoCKFgf6ePhpgJS tew0K3WdcAHPH9ousz/UwMrahWaovg5gsvfoeb/13O95VaAWyzJ1QkpjShdjDV3D QbumujegrgqMh/2o7kZJppDPTiPWDUjLA96rBoR4dzZorFcK2Vk0jQ3FlDApsnow XZ9hKrx2g+tfonM/CAoJkhcv54uEFe/ss75yvliOKxXevQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:38 2026 by rpki-client