This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/LdJkopqk4m9ubmHzk4T29FnhG7o.roa File: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (raw, json) Hash identifier: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI= Subject key identifier: 2D:D2:64:A2:9A:A4:E2:6F:6E:6E:61:F3:93:84:F6:F4:59:E1:1B:BA Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C3450F9B74F3FCACE749F70A33F69 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/LdJkopqk4m9ubmHzk4T29FnhG7o.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201307 IP address blocks: 2a06:1e00:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:34:50:f9:b7:4f:3f:ca:ce:74:9f:70:a3:3f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dd264a29aa4e26f6e6e61f39384f6f459e11bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:98:dc:0f:c6:32:9e:8c:3e:f4:18:a2:87: 9e:b9:c7:9e:a0:3f:d0:88:0c:40:78:cf:56:7b:da: 11:4c:b6:56:5b:50:56:b9:fa:8d:8c:81:10:70:c0: 75:47:7a:0f:3b:99:bd:bb:18:0d:55:94:59:77:0d: 8a:2d:79:f0:42:8a:43:c7:b8:7f:e6:6a:67:97:22: b6:42:5e:4d:46:3b:3e:2b:62:15:da:4a:b4:34:51: d4:6a:e3:97:d5:ba:9c:98:68:f4:4f:92:22:82:09: 40:ed:fa:3b:b6:68:69:30:25:a3:46:65:8a:7e:e8: e6:f2:f8:ec:e9:97:d3:a5:43:aa:d5:c6:04:8e:3b: 3a:c9:67:7b:42:58:df:ba:93:0d:83:56:74:ce:6b: 93:73:57:52:4a:cc:c3:ff:4c:c5:28:ad:28:29:86: 97:17:18:48:3b:e0:58:dc:78:2d:d8:bb:cf:dd:04: 44:7f:82:e8:f7:0b:e9:a3:13:9f:0e:47:ba:76:2c: cb:49:df:b5:9a:9b:d1:68:d3:60:0b:be:0d:f0:b6: d5:fa:95:5f:d1:60:3c:03:e7:20:c6:87:84:0c:51: 85:b2:9d:37:ea:1a:7c:12:ac:99:d4:04:26:6c:ea: a9:38:5c:78:46:0c:21:cc:e0:a9:c9:e9:ab:36:58: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D2:64:A2:9A:A4:E2:6F:6E:6E:61:F3:93:84:F6:F4:59:E1:1B:BA X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/LdJkopqk4m9ubmHzk4T29FnhG7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1e00:70::/48 Signature Algorithm: sha256WithRSAEncryption 21:ca:9a:63:f2:72:49:02:ba:92:5f:be:fb:0a:23:9d:aa:6e: 74:a2:24:a8:37:fe:dd:31:8a:e9:65:36:9c:19:b9:44:d4:a7: 56:14:7d:96:8a:0c:d6:07:0a:f7:c8:bf:a5:c5:cb:87:99:97: 65:94:94:ca:81:d1:34:da:69:de:3e:bd:db:ee:69:aa:37:44: da:43:5d:50:08:c3:ac:a6:41:1f:49:c0:6d:63:12:4a:7a:84: 81:b3:e1:b7:52:4d:38:be:53:5c:09:6f:46:47:64:5f:6f:aa: b1:eb:0f:74:1b:75:32:ea:d0:9a:33:79:bf:4f:c6:6d:38:27: 1b:5e:c0:c9:7f:48:f7:fd:a1:89:70:dc:2b:ad:85:42:2d:f7: e5:f4:6b:27:20:8d:0e:b3:72:1d:87:f9:c9:28:82:ff:82:1e: be:7d:47:30:71:34:d7:5f:92:aa:c5:18:83:ef:51:51:5a:7a: 55:54:05:bc:2b:2b:43:18:f0:4e:0e:50:6d:37:e9:2a:66:41: 44:1d:81:f5:50:89:c4:b7:57:86:d8:62:1e:48:ec:99:55:cc: a8:9d:32:de:7a:c1:31:0a:9e:2c:29:30:21:6b:21:af:a9:fc: 83:4c:a1:87:7a:44:52:a9:af:33:bc:10:49:79:71:f7:b6:ba: 00:5e:ec:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XDRQ+bdPP8rOdJ9woz9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGQyNjRhMjlhYTRlMjZmNmU2ZTYxZjM5Mzg0ZjZmNDU5ZTExYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUiY3A/GMp6MPvQYooeeuceeoD/Q iAxAeM9We9oRTLZWW1BWufqNjIEQcMB1R3oPO5m9uxgNVZRZdw2KLXnwQopDx7h/ 5mpnlyK2Ql5NRjs+K2IV2kq0NFHUauOX1bqcmGj0T5IigglA7fo7tmhpMCWjRmWK fujm8vjs6ZfTpUOq1cYEjjs6yWd7QljfupMNg1Z0zmuTc1dSSszD/0zFKK0oKYaX FxhIO+BY3Hgt2LvP3QREf4Lo9wvpoxOfDke6dizLSd+1mpvRaNNgC74N8LbV+pVf 0WA8A+cgxoeEDFGFsp036hp8EqyZ1AQmbOqpOFx4RgwhzOCpyemrNljYXwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC3SZKKapOJvbm5h85OE9vRZ4Ru6MB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvTGRKa29wcWs0bTl1Ym1Iems0VDI5Rm5oRzdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgYeAABw MA0GCSqGSIb3DQEBCwUAA4IBAQAhyppj8nJJArqSX777CiOdqm50oiSoN/7dMYrp ZTacGblE1KdWFH2WigzWBwr3yL+lxcuHmZdllJTKgdE02mnePr3b7mmqN0TaQ11Q CMOspkEfScBtYxJKeoSBs+G3Uk04vlNcCW9GR2Rfb6qx6w90G3Uy6tCaM3m/T8Zt OCcbXsDJf0j3/aGJcNwrrYVCLffl9GsnII0Os3Idh/nJKIL/gh6+fUcwcTTXX5Kq xRiD71FRWnpVVAW8KytDGPBODlBtN+kqZkFEHYH1UInEt1eG2GIeSOyZVcyonTLe esExCp4sKTAhayGvqfyDTKGHekRSqa8zvBBJeXH3troAXuxI -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:36 2026 by rpki-client