This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/LKfnJFP3stLPWkjsWhakvnaxplg.roa File: LKfnJFP3stLPWkjsWhakvnaxplg.roa (raw, json) Hash identifier: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc= Subject key identifier: 2C:A7:E7:24:53:F7:B2:D2:CF:5A:48:EC:5A:16:A4:BE:76:B1:A6:58 Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932 Certificate serial: 019B79ED4C10C05DFA09A6351EFEED60A64E Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/LKfnJFP3stLPWkjsWhakvnaxplg.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33992 IP address blocks: 2a07:1740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4c:10:c0:5d:fa:09:a6:35:1e:fe:ed:60:a6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca7e72453f7b2d2cf5a48ec5a16a4be76b1a658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:36:49:8e:b5:88:b4:dc:40:b5:8d:7f:aa: 90:0a:8f:c9:ed:a8:6f:f2:54:14:a3:30:74:ad:77: 46:a9:da:3c:4e:5b:3d:39:7a:14:7f:ec:8a:15:b3: 8c:dc:e5:4c:c0:ed:f3:e0:18:99:ec:e6:13:db:65: 2b:e0:10:ca:02:ed:92:84:94:4a:1b:1c:63:9f:85: 9e:8f:29:39:c2:07:61:f0:d7:92:4b:ec:15:df:f4: 03:99:22:4c:c5:18:f7:37:ef:97:a6:11:e6:6d:eb: 1b:8c:ae:10:b8:45:95:98:a0:30:a7:17:87:e8:bc: 49:f2:3a:68:20:6a:08:39:6d:1d:06:d3:3c:bf:d2: 57:79:09:a6:22:5c:a3:bc:48:f2:57:d4:52:01:fc: 8a:1f:6f:93:2f:e3:4a:76:e9:be:1b:6c:ce:9a:c5: 3f:8c:2a:dd:b2:99:1d:03:ae:6b:be:61:d8:9c:e3: 21:fd:7d:ab:50:28:0b:c1:f1:fc:20:99:6b:3d:ff: 9b:15:6f:8d:da:de:a6:fe:6a:c1:91:83:fb:22:46: 15:a1:ee:af:cf:42:70:1a:03:4f:e0:47:74:76:6b: db:e2:db:d6:42:bb:b9:de:28:e4:f1:6a:50:69:a0: 07:01:49:9d:d9:c2:ad:7e:33:4f:e8:b4:7c:30:12: d2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A7:E7:24:53:F7:B2:D2:CF:5A:48:EC:5A:16:A4:BE:76:B1:A6:58 X509v3 Authority Key Identifier: keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/LKfnJFP3stLPWkjsWhakvnaxplg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:1740::/29 Signature Algorithm: sha256WithRSAEncryption 05:02:28:33:10:a1:b0:7f:b7:d2:dd:ec:c3:ea:3e:b2:3d:cf: 8d:26:2d:00:5f:89:0c:8f:40:28:79:84:c9:4d:e9:cf:15:61: 6d:80:c9:56:ab:49:6b:dc:ca:ae:fb:1b:52:dc:1c:fe:bb:db: 85:13:d4:22:0c:e2:76:08:d6:9d:b9:d6:2b:ef:a4:15:05:90: 18:32:07:2d:f1:f7:4b:21:94:af:9a:70:ab:01:e4:cc:6f:c8: 42:21:99:f0:bd:7b:42:30:41:e1:0f:92:a6:49:54:4c:70:45: de:00:d9:72:15:e0:8b:99:8e:55:d2:68:9a:e4:f7:21:bd:df: a5:8f:c4:38:ab:0d:5d:d2:f3:96:27:c0:a9:73:d8:60:11:45: ec:a7:35:f7:f2:81:c0:b1:4a:bc:06:ab:19:0a:6f:21:e2:2c: c4:7c:32:43:91:2f:7f:63:4a:20:18:d4:6d:80:58:f3:59:1a: cd:1b:22:17:d1:d2:33:a5:ea:94:57:fa:bf:22:22:43:f2:2b: f8:4c:3c:bf:10:dd:49:02:6d:6d:13:b3:15:3e:27:96:95:a0: f4:0d:f3:78:e1:26:a2:0c:f9:93:2d:8c:51:1a:5b:13:a1:8f: 77:95:2b:76:61:bc:22:f4:0b:b9:5f:0e:dc:5b:07:ca:df:3c: d5:5c:0a:09 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57UwQwF36CaY1Hv7tYKZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj ZDM5MzIwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2E3ZTcyNDUzZjdiMmQyY2Y1YTQ4ZWM1YTE2YTRiZTc2YjFhNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuc2SY61iLTcQLWNf6qQCo/J7ahv 8lQUozB0rXdGqdo8Tls9OXoUf+yKFbOM3OVMwO3z4BiZ7OYT22Ur4BDKAu2ShJRK Gxxjn4Wejyk5wgdh8NeSS+wV3/QDmSJMxRj3N++XphHmbesbjK4QuEWVmKAwpxeH 6LxJ8jpoIGoIOW0dBtM8v9JXeQmmIlyjvEjyV9RSAfyKH2+TL+NKdum+G2zOmsU/ jCrdspkdA65rvmHYnOMh/X2rUCgLwfH8IJlrPf+bFW+N2t6m/mrBkYP7IkYVoe6v z0JwGgNP4Ed0dmvb4tvWQru53ijk8WpQaaAHAUmd2cKtfjNP6LR8MBLSrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCyn5yRT97LSz1pI7FoWpL52saZYMB8GA1UdIwQY MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut NjcxODM5MjAwNjA0LzEvTEtmbkpGUDNzdExQV2tqc1doYWt2bmF4cGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0 LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgcXQDAN BgkqhkiG9w0BAQsFAAOCAQEABQIoMxChsH+30t3sw+o+sj3PjSYtAF+JDI9AKHmE yU3pzxVhbYDJVqtJa9zKrvsbUtwc/rvbhRPUIgzidgjWnbnWK++kFQWQGDIHLfH3 SyGUr5pwqwHkzG/IQiGZ8L17QjBB4Q+SpklUTHBF3gDZchXgi5mOVdJomuT3Ib3f pY/EOKsNXdLzlifAqXPYYBFF7Kc19/KBwLFKvAarGQpvIeIsxHwyQ5Evf2NKIBjU bYBY81kazRsiF9HSM6XqlFf6vyIiQ/Ir+Ew8vxDdSQJtbROzFT4nlpWg9A3zeOEm ogz5ky2MURpbE6GPd5UrdmG8IvQLuV8O3FsHyt881VwKCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:01 2026 by rpki-client