This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa File: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (raw, json) Hash identifier: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo= Subject key identifier: 2C:54:49:CE:49:A0:20:08:86:9E:95:06:4B:DF:9B:5F:3B:88:30:BB Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA51837D78BBB3ECCC5CAD60DB830BE Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57010 IP address blocks: 2a04:ac00:4::/48 maxlen: 48 2a04:ac00:5::/48 maxlen: 48 2a04:ac00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:37:d7:8b:bb:3e:cc:c5:ca:d6:0d:b8:30:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c5449ce49a02008869e95064bdf9b5f3b8830bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:d0:59:03:8b:2a:51:e0:07:5b:56:c7:7e: 47:d3:79:39:4d:a4:bd:13:86:5a:f2:cc:d3:d0:6d: 7b:24:38:cd:d7:13:2d:f6:73:a3:04:9a:0f:a9:12: 13:27:e6:9c:6b:04:24:6a:40:fd:dd:89:86:8d:95: 03:fd:4f:8a:bf:f7:9b:df:15:09:59:cd:9d:83:fe: 94:bc:f5:7e:dd:a7:d9:9b:24:b4:8f:8a:34:95:aa: 6c:1d:e4:ff:50:3a:49:29:a4:0e:46:3d:43:f6:41: 0f:df:82:16:11:c1:5a:43:6e:e3:27:41:92:7e:db: 87:f8:81:3c:a0:f6:7a:b3:e8:48:02:23:02:17:0d: 2c:0b:2a:a1:5d:fd:38:61:90:1e:36:5f:1e:fe:8e: a9:a2:af:80:35:c4:88:33:04:3a:22:10:b6:8e:c1: 93:c5:98:03:6e:a3:b9:6c:6b:19:77:e4:ac:fc:56: 53:66:17:4d:74:a5:4d:29:3a:00:b4:e6:55:f0:02: 80:5f:32:ed:97:0e:57:f5:65:f3:4c:72:6e:d1:db: 4c:ce:96:35:d7:a3:29:3e:c2:2c:d6:ee:e6:5a:0a: 97:4b:50:6f:a6:a2:f5:2e:28:b4:ea:2d:7e:60:97: 22:3f:8a:f3:2a:67:56:ee:ec:18:ca:b9:4b:74:d3: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:54:49:CE:49:A0:20:08:86:9E:95:06:4B:DF:9B:5F:3B:88:30:BB X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ac00:4::/47 2a04:ac00:8::/48 Signature Algorithm: sha256WithRSAEncryption 4e:2d:01:c5:eb:68:49:81:02:b2:c3:3f:40:61:64:e2:0a:61: df:3d:9d:6a:e9:77:86:70:f1:d5:de:a3:1b:96:a8:dd:27:82: e9:d3:9d:48:68:0c:3b:06:3c:10:33:c6:8b:93:7e:70:58:69: 98:e1:3c:c3:c0:be:5e:8f:b6:20:12:89:fd:3b:24:73:cc:53: 78:cb:e4:ec:95:6e:f2:fd:18:59:b0:1a:02:8a:a7:a9:76:fa: 5f:0e:c1:56:05:e4:45:ac:5d:af:c6:0c:a6:90:90:01:a2:08: 9d:c5:97:77:9f:af:9e:a2:6c:79:57:69:19:64:ab:8e:f8:ba: 3d:da:fb:67:c6:6c:91:6f:3d:57:be:9a:92:9b:be:a4:81:8d: e6:5a:65:a4:ca:d9:d3:1e:e2:50:c4:66:4e:da:7d:ec:2f:ae: 9b:be:ef:ce:64:e1:32:2d:77:13:57:32:31:ec:95:12:4d:cc: 38:77:67:83:ed:f6:98:0b:31:58:b0:19:52:a7:6c:e7:1c:00: a2:ce:51:b9:25:7e:90:4d:19:1d:4e:03:54:11:f4:4c:ec:d7: de:3a:ac:b9:55:ec:cf:52:6a:df:35:39:de:ec:71:db:28:07: 40:d3:08:8e:54:e4:2e:bc:29:db:44:27:33:78:d1:da:43:f2: 21:08:85:bb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pRg314u7PszFytYNuDC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzU0NDljZTQ5YTAyMDA4ODY5ZTk1MDY0YmRmOWI1ZjNiODgzMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9PQWQOLKlHgB1tWx35H03k5TaS9 E4Za8szT0G17JDjN1xMt9nOjBJoPqRITJ+acawQkakD93YmGjZUD/U+Kv/eb3xUJ Wc2dg/6UvPV+3afZmyS0j4o0lapsHeT/UDpJKaQORj1D9kEP34IWEcFaQ27jJ0GS ftuH+IE8oPZ6s+hIAiMCFw0sCyqhXf04YZAeNl8e/o6poq+ANcSIMwQ6IhC2jsGT xZgDbqO5bGsZd+Ss/FZTZhdNdKVNKToAtOZV8AKAXzLtlw5X9WXzTHJu0dtMzpY1 16MpPsIs1u7mWgqXS1BvpqL1Lii06i1+YJciP4rzKmdW7uwYyrlLdNN9QwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCxUSc5JoCAIhp6VBkvfm187iDC7MB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvTEZSSnprbWdJQWlHbnBVR1M5LWJYenVJTUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgSsAAAE AwcAKgSsAAAIMA0GCSqGSIb3DQEBCwUAA4IBAQBOLQHF62hJgQKywz9AYWTiCmHf PZ1q6XeGcPHV3qMblqjdJ4Lp051IaAw7BjwQM8aLk35wWGmY4TzDwL5ej7YgEon9 OyRzzFN4y+TslW7y/RhZsBoCiqepdvpfDsFWBeRFrF2vxgymkJABogidxZd3n6+e omx5V2kZZKuO+Lo92vtnxmyRbz1XvpqSm76kgY3mWmWkytnTHuJQxGZO2n3sL66b vu/OZOEyLXcTVzIx7JUSTcw4d2eD7faYCzFYsBlSp2znHACizlG5JX6QTRkdTgNU EfRM7NfeOqy5VezPUmrfNTne7HHbKAdA0wiOVOQuvCnbRCczeNHaQ/IhCIW7 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:32 2026 by rpki-client