This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/LJPLYMO5vOxs_MtRPfGWysA-2S4.roa File: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (raw, json) Hash identifier: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o= Subject key identifier: 2C:93:CB:60:C3:B9:BC:EC:6C:FC:CB:51:3D:F1:96:CA:C0:3E:D9:2E Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Certificate serial: 019B7B3649776A98E0965000CF7A47A44D33 Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/LJPLYMO5vOxs_MtRPfGWysA-2S4.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12792 IP address blocks: 2a12:300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:49:77:6a:98:e0:96:50:00:cf:7a:47:a4:4d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c93cb60c3b9bcec6cfccb513df196cac03ed92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:30:e9:4d:ae:58:be:64:3c:3b:55:a7:37: 28:9b:4c:a6:e9:e5:1e:47:1e:14:e8:7f:6e:2d:44: b6:6c:b8:3d:f6:f5:b7:10:98:bd:01:4b:fc:19:30: 14:1a:09:b1:d3:bc:0e:ba:83:c2:6b:97:7d:08:fb: d5:bd:16:f6:61:c0:03:a3:c5:69:c1:f7:cf:4d:75: bb:13:de:fe:ff:85:14:e9:c6:0c:89:b1:38:75:29: 3f:45:45:0e:d4:ac:45:57:22:aa:43:3b:5b:5a:78: b5:4f:c6:f6:f5:bf:a9:97:0e:fd:21:0d:7a:b4:45: 30:92:78:6d:87:f3:d0:b9:54:9a:26:1e:52:91:db: f2:1b:f9:89:f4:d3:08:c0:8d:d9:77:5f:49:c0:8c: b6:66:22:c3:1d:02:32:a1:79:34:48:63:2f:b4:76: b5:28:9c:55:ef:f9:70:89:c0:d6:d8:ec:a7:28:b4: ae:55:ea:09:f3:e2:cf:5e:67:92:41:e8:cb:93:f0: 31:d7:6b:91:ee:da:72:c6:6b:03:59:62:73:f2:19: 2a:09:2b:b9:4b:c8:ab:63:5b:86:95:3a:1e:5b:b6: 81:b1:06:9f:c0:26:42:9f:02:86:f5:79:83:e0:fa: 45:24:e3:a9:42:d7:fd:cd:94:63:96:b6:24:f1:ac: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:93:CB:60:C3:B9:BC:EC:6C:FC:CB:51:3D:F1:96:CA:C0:3E:D9:2E X509v3 Authority Key Identifier: keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/LJPLYMO5vOxs_MtRPfGWysA-2S4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:300::/29 Signature Algorithm: sha256WithRSAEncryption 59:ca:d2:24:2e:aa:ee:01:7e:c9:ba:aa:7f:80:9b:a4:cc:0f: fc:db:e8:6c:d3:19:e8:44:50:e0:90:8e:40:d5:02:f7:77:6e: 47:76:fb:e2:1b:6b:1f:3e:ca:b4:1b:1d:8b:b8:28:0f:f9:7a: f1:84:a8:f4:91:a2:b8:8b:e9:74:81:4d:6a:92:71:98:e2:e4: cb:f8:4f:b6:46:ce:92:7c:bb:2d:05:f4:49:20:e9:ab:ff:90: 01:a3:9e:bf:fd:04:c2:2e:6a:5e:68:8a:21:b3:e7:1c:b8:cd: 22:b2:a8:7d:4b:48:39:fc:a4:cc:0b:a2:18:81:3f:9f:8b:7e: eb:6c:ff:02:ab:c6:a4:3b:42:16:bd:ed:a9:ad:e9:e2:7d:49: ae:71:ad:10:d2:64:34:12:b0:97:6b:ea:20:24:b1:67:31:e3: 5f:d7:09:23:be:0c:8d:41:ae:64:a2:28:52:dc:a8:61:90:94: 8f:54:ec:b5:bd:51:b4:9c:6e:d0:d6:61:ca:e8:6a:31:3f:33: 5b:aa:3e:36:67:86:f2:7d:f8:e0:be:3d:be:d3:a2:6d:3f:db: 7a:84:7b:e8:c8:2c:19:a5:7b:2c:ea:c3:e9:4d:7e:14:0c:4d: 76:c3:48:c7:8b:f4:8d:cb:eb:8a:3a:db:09:20:9f:43:12:3a: 2d:44:9e:f8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nkl3apjgllAAz3pHpE0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl OWMxOWYwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzkzY2I2MGMzYjliY2VjNmNmY2NiNTEzZGYxOTZjYWMwM2VkOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaow6U2uWL5kPDtVpzcom0ym6eUe Rx4U6H9uLUS2bLg99vW3EJi9AUv8GTAUGgmx07wOuoPCa5d9CPvVvRb2YcADo8Vp wffPTXW7E97+/4UU6cYMibE4dSk/RUUO1KxFVyKqQztbWni1T8b29b+plw79IQ16 tEUwknhth/PQuVSaJh5SkdvyG/mJ9NMIwI3Zd19JwIy2ZiLDHQIyoXk0SGMvtHa1 KJxV7/lwicDW2OynKLSuVeoJ8+LPXmeSQejLk/Ax12uR7tpyxmsDWWJz8hkqCSu5 S8irY1uGlToeW7aBsQafwCZCnwKG9XmD4PpFJOOpQtf9zZRjlrYk8ay6nQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCyTy2DDubzsbPzLUT3xlsrAPtkuMB8GA1UdIwQY MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt MmM3YTJhNzQ2Mjc5LzEvTEpQTFlNTzV2T3hzX010UlBmR1d5c0EtMlM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5 LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIDADAN BgkqhkiG9w0BAQsFAAOCAQEAWcrSJC6q7gF+ybqqf4CbpMwP/NvobNMZ6ERQ4JCO QNUC93duR3b74htrHz7KtBsdi7goD/l68YSo9JGiuIvpdIFNapJxmOLky/hPtkbO kny7LQX0SSDpq/+QAaOev/0Ewi5qXmiKIbPnHLjNIrKofUtIOfykzAuiGIE/n4t+ 62z/AqvGpDtCFr3tqa3p4n1JrnGtENJkNBKwl2vqICSxZzHjX9cJI74MjUGuZKIo UtyoYZCUj1Tstb1RtJxu0NZhyuhqMT8zW6o+NmeG8n344L49vtOibT/beoR76Mgs GaV7LOrD6U1+FAxNdsNIx4v0jcvrijrbCSCfQxI6LUSe+A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:41 2026 by rpki-client