This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa File: LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa (raw, json) Hash identifier: R6ey8Uqth1/igLWVfN/TR2Eu26hppMIiB0ByyHlPk3A= Subject key identifier: 2C:2C:96:58:4E:D6:60:19:56:61:70:3D:03:C5:A2:6B:1C:5B:4D:4F Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Certificate serial: 019B76EB9CC9E157CA1C73C969C727A17297 Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60514 IP address blocks: 2001:67c:df4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9c:c9:e1:57:ca:1c:73:c9:69:c7:27:a1:72:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c2c96584ed660195661703d03c5a26b1c5b4d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:90:ea:1b:9c:ff:9f:5c:b1:67:d8:7f:66: 64:a9:a0:39:9f:ed:8d:c4:98:30:14:24:a0:e0:64: a5:47:d1:b5:4a:d3:c2:d1:86:88:18:8b:8b:26:7f: 90:71:8c:ab:68:f0:36:c9:8d:59:e8:b7:34:81:38: 43:9f:de:5f:8d:8d:5a:0e:56:48:b1:33:d6:be:94: 39:65:f4:d2:ac:17:8c:83:3d:ca:bb:dc:1f:ba:11: 88:83:25:39:8a:fc:c6:3d:ba:d8:c7:d1:56:88:c3: ad:54:2c:58:d2:9a:e0:fc:aa:9d:83:41:b5:6d:d6: 6a:a1:a2:83:13:06:d2:7b:72:4b:2c:e1:7c:96:b3: 3d:55:dd:44:0e:cd:79:15:14:5d:ef:17:91:ad:9d: 36:aa:b9:85:58:6d:60:4a:a4:66:fd:48:de:79:b7: fb:bd:ac:d3:97:2c:49:ab:d0:73:3c:4e:0c:d9:3e: 6c:4f:e2:44:f8:59:c8:2b:f1:6d:ea:c4:6f:e0:7b: ac:11:90:78:14:22:5f:13:d3:ba:21:a1:a6:26:bd: ed:84:04:55:63:ea:d4:4a:76:ec:ba:27:28:dd:0d: 71:cd:f0:70:c7:ed:b9:18:92:f8:c1:25:81:03:c2: ac:ee:a9:65:4d:57:c5:00:ab:22:f0:d3:ad:40:b6: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:96:58:4E:D6:60:19:56:61:70:3D:03:C5:A2:6B:1C:5B:4D:4F X509v3 Authority Key Identifier: keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:df4::/48 Signature Algorithm: sha256WithRSAEncryption 41:e5:af:12:1b:0a:51:41:75:f0:4a:96:c0:77:97:54:e3:88: 05:c2:46:70:23:9c:3e:67:d8:05:fe:79:c4:13:54:59:05:3f: 32:3b:bc:45:17:c1:44:3b:6e:3c:17:6a:90:a7:fc:d5:10:09: aa:e3:01:ec:8b:7f:fb:de:2e:72:48:45:da:9e:3c:82:b3:5f: 7f:8f:cb:20:31:b8:91:55:bb:0c:ca:cc:ee:46:d9:cb:ce:48: 09:e4:58:81:86:6f:7a:47:71:56:85:fe:f3:54:6b:89:13:3c: 93:a9:ec:2a:bb:f2:58:41:09:99:c7:3f:0e:b6:85:8a:8d:8a: 16:c8:2f:e1:cc:50:85:1e:58:c9:52:93:60:71:66:59:72:7a: 76:d9:82:a7:e0:b9:2f:d9:ea:ce:a2:27:0b:01:6b:02:9a:cd: 27:ed:22:47:6c:4b:69:f9:b4:af:0a:dc:0d:3f:01:dd:a9:21: 19:0a:f1:86:bd:ec:05:f4:c4:38:07:ed:ab:d4:8d:fd:a6:6a: 7b:ed:43:e2:1f:47:e4:53:f1:a1:17:d0:8b:ba:6b:7d:01:88: ce:15:82:17:05:65:ef:c1:c2:ff:67:bf:91:1d:8a:ca:42:ef: d4:58:7b:f5:cb:d5:c3:b2:ac:e3:42:dc:f7:92:b1:57:05:af: cf:29:91:e8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt265zJ4VfKHHPJaccnoXKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NmQ0MDBmYWE1MjY5MDk5Y2M3YjFjN2EwM2NlNjlkODM5 MWYyMWEwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzJjOTY1ODRlZDY2MDE5NTY2MTcwM2QwM2M1YTI2YjFjNWI0ZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsACQ6huc/59csWfYf2ZkqaA5n+2N xJgwFCSg4GSlR9G1StPC0YaIGIuLJn+QcYyraPA2yY1Z6Lc0gThDn95fjY1aDlZI sTPWvpQ5ZfTSrBeMgz3Ku9wfuhGIgyU5ivzGPbrYx9FWiMOtVCxY0prg/Kqdg0G1 bdZqoaKDEwbSe3JLLOF8lrM9Vd1EDs15FRRd7xeRrZ02qrmFWG1gSqRm/Ujeebf7 vazTlyxJq9BzPE4M2T5sT+JE+FnIK/Ft6sRv4HusEZB4FCJfE9O6IaGmJr3thARV Y+rUSnbsuico3Q1xzfBwx+25GJL4wSWBA8Ks7qllTVfFAKsi8NOtQLYvQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCwsllhO1mAZVmFwPQPFomscW01PMB8GA1UdIwQY MBaAFFltQA+qUmkJnMexx6A85p2DkfIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUt YzI4N2RiOTM0OTEyLzEvTEN5V1dFN1dZQmxXWVhBOUE4V2lheHhiVFU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUtYzI4N2RiOTM0OTEy LzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA30 MA0GCSqGSIb3DQEBCwUAA4IBAQBB5a8SGwpRQXXwSpbAd5dU44gFwkZwI5w+Z9gF /nnEE1RZBT8yO7xFF8FEO248F2qQp/zVEAmq4wHsi3/73i5ySEXanjyCs19/j8sg MbiRVbsMyszuRtnLzkgJ5FiBhm96R3FWhf7zVGuJEzyTqewqu/JYQQmZxz8OtoWK jYoWyC/hzFCFHljJUpNgcWZZcnp22YKn4Lkv2erOoicLAWsCms0n7SJHbEtp+bSv CtwNPwHdqSEZCvGGvewF9MQ4B+2r1I39pmp77UPiH0fkU/GhF9CLumt9AYjOFYIX BWXvwcL/Z7+RHYrKQu/UWHv1y9XDsqzjQtz3krFXBa/PKZHo -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:38 2026 by rpki-client