This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/LaeMmliZsWY4K4LpiPm1IByzCIQ.roa File: LaeMmliZsWY4K4LpiPm1IByzCIQ.roa (raw, json) Hash identifier: XWrRgKgmyBqRbAmBeJXkydMYUgvYCHe6m/cckwuOv8I= Subject key identifier: 2D:A7:8C:9A:58:99:B1:66:38:2B:82:E9:88:F9:B5:20:1C:B3:08:84 Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019AF094B858CCB51CCD0CDEDAA85210B1F7 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/LaeMmliZsWY4K4LpiPm1IByzCIQ.roa Signing time: Fri 05 Dec 2025 22:14:29 +0000 ROA not before: Fri 05 Dec 2025 22:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213449 IP address blocks: 2a10:fa82:8000::/35 maxlen: 48 2a10:fa82:8000::/44 maxlen: 44 2a10:fa82:8010::/44 maxlen: 44 2a10:fa82:8020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:94:b8:58:cc:b5:1c:cd:0c:de:da:a8:52:10:b1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Dec 5 22:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2da78c9a5899b166382b82e988f9b5201cb30884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:aa:96:b7:3e:73:7a:9d:73:76:f1:f9:1b: 05:bc:9d:74:7b:d1:91:f9:89:2e:f2:ca:37:b4:60: 2b:c9:39:65:93:24:2d:d3:2b:dd:1c:73:dd:c2:b6: af:de:49:5b:59:25:15:dc:13:cf:36:3b:68:c6:58: 8a:00:d3:a7:67:e6:fa:3f:dc:82:b5:db:27:79:a2: 78:6a:aa:91:7a:c5:39:a5:4f:ef:09:08:3b:11:7f: 53:29:eb:e4:f6:86:25:38:69:e9:2a:c3:13:9a:fe: 30:6b:a6:ea:9c:fc:33:45:49:b1:0c:ac:5f:3c:16: 36:6c:ce:5c:5f:d1:c0:ea:ba:49:44:e0:44:df:df: d5:f9:59:01:51:02:8b:d8:e9:96:3d:eb:18:70:31: fd:ca:c5:c4:23:17:89:c9:34:79:1e:57:23:57:ba: ae:d9:20:cf:18:be:e0:af:22:bd:62:7c:58:69:22: c4:86:b0:7a:9f:01:68:31:48:ec:5a:af:7e:10:d6: 5c:a1:c6:50:ed:c7:8d:8a:80:53:b9:6a:51:94:e7: 9c:9f:3e:8e:6f:ca:d4:6d:20:53:0e:17:f9:eb:57: b7:e4:5b:57:b8:50:31:10:11:02:73:ca:21:7c:ea: 5c:21:7c:51:71:b3:91:7d:d1:93:f7:0a:be:6e:72: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A7:8C:9A:58:99:B1:66:38:2B:82:E9:88:F9:B5:20:1C:B3:08:84 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/LaeMmliZsWY4K4LpiPm1IByzCIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:8000::/35 Signature Algorithm: sha256WithRSAEncryption 6a:c1:e0:dc:79:ad:13:5f:b5:b4:07:dc:a0:1a:6d:43:59:07: c7:a7:0b:ee:2c:48:29:10:e1:09:6f:85:a3:61:75:b4:fb:74: 06:78:5f:b5:b8:06:09:2a:cc:2b:70:31:10:04:9c:9c:f2:65: e9:32:05:ae:a0:c9:5d:52:dc:2e:0c:c4:ce:ce:77:fd:8a:05: 45:1a:ce:db:32:f5:c8:17:77:fd:b8:b6:c4:fc:b3:27:67:b5: a7:ab:5c:2b:ac:40:57:dc:cc:6c:a8:39:c6:ac:fe:26:9c:67: 96:9d:ce:2b:5d:1d:26:28:0c:99:f0:8a:65:ea:c6:dd:20:58: 5e:7d:42:4d:f0:39:57:9c:95:50:2d:f2:52:ff:d9:10:66:b5: c9:59:a9:02:87:22:31:27:86:88:dc:41:bd:ca:3c:a7:09:52: 25:12:a8:db:74:9e:1b:dd:34:75:7f:4f:f3:1c:d7:74:02:11: 24:18:b6:91:aa:e0:9c:14:1e:4d:dd:65:ae:fe:66:5d:16:3e: e2:30:96:01:4b:90:73:10:94:bd:fc:02:9e:a3:d8:e6:a4:2d: 48:2d:42:b3:14:66:c5:3a:18:94:d8:bc:35:22:71:5f:8e:69: f0:9d:4c:1d:f6:43:11:55:7b:4a:70:9f:b8:6b:75:ca:97:dc: 76:c5:ca:72 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrwlLhYzLUczQze2qhSELH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjUxMjA1MjIxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGE3OGM5YTU4OTliMTY2MzgyYjgyZTk4OGY5YjUyMDFjYjMwODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso2qlrc+c3qdc3bx+RsFvJ10e9GR +Yku8so3tGAryTllkyQt0yvdHHPdwrav3klbWSUV3BPPNjtoxliKANOnZ+b6P9yC tdsneaJ4aqqResU5pU/vCQg7EX9TKevk9oYlOGnpKsMTmv4wa6bqnPwzRUmxDKxf PBY2bM5cX9HA6rpJROBE39/V+VkBUQKL2OmWPesYcDH9ysXEIxeJyTR5HlcjV7qu 2SDPGL7gryK9YnxYaSLEhrB6nwFoMUjsWq9+ENZcocZQ7ceNioBTuWpRlOecnz6O b8rUbSBTDhf561e35FtXuFAxEBECc8ohfOpcIXxRcbORfdGT9wq+bnIU9wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC2njJpYmbFmOCuC6Yj5tSAcswiEMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvTGFlTW1saVpzV1k0SzRMcGlQbTFJQnl6Q0lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKhD6goAw DQYJKoZIhvcNAQELBQADggEBAGrB4Nx5rRNftbQH3KAabUNZB8enC+4sSCkQ4Qlv haNhdbT7dAZ4X7W4BgkqzCtwMRAEnJzyZekyBa6gyV1S3C4MxM7Od/2KBUUaztsy 9cgXd/24tsT8sydntaerXCusQFfczGyoOcas/iacZ5adzitdHSYoDJnwimXqxt0g WF59Qk3wOVeclVAt8lL/2RBmtclZqQKHIjEnhojcQb3KPKcJUiUSqNt0nhvdNHV/ T/Mc13QCESQYtpGq4JwUHk3dZa7+Zl0WPuIwlgFLkHMQlL38Ap6j2OakLUgtQrMU ZsU6GJTYvDUicV+OafCdTB32QxFVe0pwn7hrdcqX3HbFynI= -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:53 2025 by rpki-client