This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa File: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (raw, json) Hash identifier: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY= Subject key identifier: 2F:9A:27:70:77:06:5F:42:59:5A:1C:8F:A5:45:64:43:61:DD:09:1A Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Certificate serial: 019B7B36C19832CB0D538F56EEF89EA204F1 Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56687 IP address blocks: 2a05:2584::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c1:98:32:cb:0d:53:8f:56:ee:f8:9e:a2:04:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f9a277077065f42595a1c8fa545644361dd091a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:fd:52:0b:b3:c4:91:4c:2d:00:c2:7b:70: 67:35:14:22:a9:76:21:61:22:2f:7d:91:79:9e:f3: 9b:ed:4e:26:39:74:b9:80:fc:cf:34:da:4e:72:cb: a6:4f:53:51:6d:9c:d7:c0:5b:f3:98:f2:cf:50:32: 09:d7:36:25:e5:c5:d1:85:97:1d:e4:50:71:32:8d: 92:8c:c1:cf:a7:fb:9e:e7:9a:ca:3d:1e:42:79:b0: da:49:f8:e2:df:3b:2c:61:72:58:24:21:73:48:71: 76:f3:67:20:da:b5:a5:3b:b9:41:95:61:b0:0c:29: 1e:ce:bd:ff:9f:83:bd:87:75:33:d3:43:e9:2a:f0: 91:29:54:6e:45:cb:11:f2:bf:81:79:51:bd:e6:6c: 9f:40:2d:a8:44:90:6c:6b:b6:10:89:47:fd:09:84: 94:dc:cb:7d:97:28:60:9a:cb:29:2d:65:58:91:07: 5b:ce:04:13:e7:77:b4:49:16:9d:2c:d0:d3:6c:e1: a6:b4:29:5d:32:a8:01:da:a6:d8:f4:73:bb:43:3e: 79:5d:9f:e1:df:20:53:37:4f:28:6d:27:30:42:21: 7c:22:4c:48:c8:2f:1c:d2:95:4b:93:e1:7d:84:3f: 57:b6:c8:a1:68:7b:ca:df:3d:77:10:5e:b5:94:9e: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9A:27:70:77:06:5F:42:59:5A:1C:8F:A5:45:64:43:61:DD:09:1A X509v3 Authority Key Identifier: keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:2584::/30 Signature Algorithm: sha256WithRSAEncryption 9b:65:9d:5a:78:4d:55:81:69:9a:c1:8f:25:ee:4c:01:02:24: d9:e4:6a:fb:a5:e3:93:fc:5f:42:a2:f7:87:19:e9:78:b9:de: e8:9d:1f:ed:02:38:70:d2:5d:9e:1f:42:25:47:d2:23:87:9e: 81:70:7e:d5:48:2e:eb:01:19:10:61:71:7e:cb:e7:3a:18:da: 42:6f:eb:8f:cf:ec:89:64:a9:5d:86:12:20:35:60:5d:83:1e: 7b:ea:f2:79:3d:dc:0a:9f:8b:8a:0e:b4:8b:a4:0b:6f:90:f0: f3:14:6d:a7:67:4e:4e:fb:22:56:95:f5:e4:e8:e7:53:84:ee: bb:35:3d:e5:78:56:80:84:84:75:cb:5d:9f:ce:b1:22:0a:f3: a4:6e:91:19:c2:9c:0c:ba:8f:69:f1:e4:29:a5:f2:29:69:fa: 00:35:f8:82:f3:e8:a9:d0:0c:db:4e:15:11:35:19:af:99:8c: d3:78:12:6e:bf:71:a5:86:10:56:e4:d0:d4:38:c1:07:3e:8d: 8b:17:b3:dd:f0:30:0c:41:cc:b9:92:f3:94:cd:d4:39:0c:64: be:ac:64:7e:1b:c3:10:3f:1f:0a:ab:81:24:94:d9:87:89:8d: b0:5c:a6:98:24:40:a9:38:1f:af:f6:51:3e:67:0f:4d:9c:c6: 72:31:e6:92 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NsGYMssNU49W7vieogTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0 YjViMTEwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjlhMjc3MDc3MDY1ZjQyNTk1YTFjOGZhNTQ1NjQ0MzYxZGQwOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFD9UguzxJFMLQDCe3BnNRQiqXYh YSIvfZF5nvOb7U4mOXS5gPzPNNpOcsumT1NRbZzXwFvzmPLPUDIJ1zYl5cXRhZcd 5FBxMo2SjMHPp/ue55rKPR5CebDaSfji3zssYXJYJCFzSHF282cg2rWlO7lBlWGw DCkezr3/n4O9h3Uz00PpKvCRKVRuRcsR8r+BeVG95myfQC2oRJBsa7YQiUf9CYSU 3Mt9lyhgmsspLWVYkQdbzgQT53e0SRadLNDTbOGmtCldMqgB2qbY9HO7Qz55XZ/h 3yBTN08obScwQiF8IkxIyC8c0pVLk+F9hD9XtsihaHvK3z13EF61lJ6ARQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC+aJ3B3Bl9CWVocj6VFZENh3QkaMB8GA1UdIwQY MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt NDkxNWZlN2Y5MmNlLzEvTDVvbmNIY0dYMEpaV2h5UHBVVmtRMkhkQ1JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgUlhDAN BgkqhkiG9w0BAQsFAAOCAQEAm2WdWnhNVYFpmsGPJe5MAQIk2eRq+6Xjk/xfQqL3 hxnpeLne6J0f7QI4cNJdnh9CJUfSI4eegXB+1Ugu6wEZEGFxfsvnOhjaQm/rj8/s iWSpXYYSIDVgXYMee+ryeT3cCp+Lig60i6QLb5Dw8xRtp2dOTvsiVpX15OjnU4Tu uzU95XhWgISEdctdn86xIgrzpG6RGcKcDLqPafHkKaXyKWn6ADX4gvPoqdAM204V ETUZr5mM03gSbr9xpYYQVuTQ1DjBBz6Nixez3fAwDEHMuZLzlM3UOQxkvqxkfhvD ED8fCquBJJTZh4mNsFymmCRAqTgfr/ZRPmcPTZzGcjHmkg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:32 2026 by rpki-client