This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lt9paldk3sHBgLPbHf-yGka4mH0.roa File: lt9paldk3sHBgLPbHf-yGka4mH0.roa (raw, json) Hash identifier: kTFZkrrsLAw0AGPqIZ+cLgHCYnjch+SVe6TbDCx3nHQ= Subject key identifier: 96:DF:69:6A:57:64:DE:C1:C1:80:B3:DB:1D:FF:B2:1A:46:B8:98:7D Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85430DB467B7D9A62A7E5E60822FC5 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lt9paldk3sHBgLPbHf-yGka4mH0.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 195.58.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:43:0d:b4:67:b7:d9:a6:2a:7e:5e:60:82:2f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96df696a5764dec1c180b3db1dffb21a46b8987d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:6c:a9:fc:0a:1e:9f:da:de:da:c7:15:9d: d8:be:6d:6b:d3:d4:2d:87:ff:ee:10:c0:74:74:b7: 15:49:a9:18:8a:51:5e:92:e0:4d:5d:12:ec:fc:b2: 79:70:72:6b:8f:ed:47:5a:6e:92:c6:30:c6:6f:48: 1b:bc:c0:7e:1d:86:cc:f7:5a:ce:04:8d:3a:12:f3: a6:fd:51:3d:a4:c4:12:c5:2c:95:39:d6:9d:17:6c: 55:89:54:d2:5f:7a:bd:a8:50:ab:e7:f5:da:bd:78: d8:04:9b:b9:23:70:96:57:cf:72:7a:71:5e:4d:be: 48:41:6d:ca:f2:e1:ff:37:bb:10:8d:27:e2:db:48: 71:92:c9:d2:16:70:fa:bb:1a:63:59:7d:37:ef:75: c5:f3:3c:fb:cc:a3:63:05:86:69:1a:10:32:ba:a3: 14:23:50:44:1d:9b:6f:bd:1e:33:96:d6:0a:b3:c5: c5:b9:04:b3:05:0a:ee:fe:1e:f5:bb:94:ae:a9:af: 24:ca:ca:03:f1:87:ac:4f:db:15:57:7f:c0:78:1f: 96:1a:4b:c6:1d:2d:23:79:b4:0e:e1:2d:f3:76:32: 94:b6:72:7d:6f:73:28:b2:31:a2:d7:1a:33:6b:21: 01:4d:44:5c:ad:13:9e:5e:2e:5d:cd:41:69:cd:7e: a7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:69:6A:57:64:DE:C1:C1:80:B3:DB:1D:FF:B2:1A:46:B8:98:7D X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lt9paldk3sHBgLPbHf-yGka4mH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.58.40.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:cc:ae:48:07:d7:e0:e6:14:9a:4e:32:4e:e2:e4:ac:c1:25: 1e:c2:d3:95:6c:93:09:96:f6:aa:e0:cc:e9:b1:ef:38:fc:c7: c4:02:c8:18:3c:43:65:18:4e:ee:05:44:dc:6b:54:a8:41:c6: f7:90:ce:6f:d1:b4:57:e8:30:ce:3f:ae:1d:66:74:18:06:a7: 4f:fc:0f:02:50:d6:2c:bf:71:30:74:d6:6b:66:39:15:8c:c3: cb:9a:76:f6:b8:71:4d:94:ef:83:33:d0:8a:de:0b:14:06:f3: d7:e0:c2:84:67:6a:f3:a7:cd:b2:e2:9b:4e:fb:3a:dc:ea:91: 83:3b:58:22:86:17:25:6e:76:4f:9f:fe:d9:6b:9b:c1:98:78: 0e:69:27:6c:2c:59:3a:aa:d6:b7:77:58:1b:7b:ed:55:0d:86: ff:21:01:5b:de:8d:9d:1a:f4:78:68:cd:19:65:a8:8b:2a:50: 4e:e1:4d:5d:fd:21:61:c3:9b:04:fe:af:d8:ed:27:29:c4:82: 46:a6:3b:a0:15:cd:a8:31:46:f5:c0:67:09:0e:53:36:d3:7e: 57:09:be:64:ac:36:77:68:f5:04:bd:46:38:6a:6d:98:46:4c: 39:c0:2c:48:d4:16:8e:0e:70:85:1d:f1:28:0c:78:6a:5c:87: 06:5d:75:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUMNtGe32aYqfl5ggi/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRmNjk2YTU3NjRkZWMxYzE4MGIzZGIxZGZmYjIxYTQ2Yjg5ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBsqfwKHp/a3trHFZ3Yvm1r09Qt h//uEMB0dLcVSakYilFekuBNXRLs/LJ5cHJrj+1HWm6SxjDGb0gbvMB+HYbM91rO BI06EvOm/VE9pMQSxSyVOdadF2xViVTSX3q9qFCr5/XavXjYBJu5I3CWV89yenFe Tb5IQW3K8uH/N7sQjSfi20hxksnSFnD6uxpjWX0373XF8zz7zKNjBYZpGhAyuqMU I1BEHZtvvR4zltYKs8XFuQSzBQru/h71u5Suqa8kysoD8YesT9sVV3/AeB+WGkvG HS0jebQO4S3zdjKUtnJ9b3MosjGi1xozayEBTURcrROeXi5dzUFpzX6nfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbfaWpXZN7BwYCz2x3/shpGuJh9MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvbHQ5cGFsZGszc0hCZ0xQYkhmLXlHa2E0bUgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwzooMA0G CSqGSIb3DQEBCwUAA4IBAQCPzK5IB9fg5hSaTjJO4uSswSUewtOVbJMJlvaq4Mzp se84/MfEAsgYPENlGE7uBUTca1SoQcb3kM5v0bRX6DDOP64dZnQYBqdP/A8CUNYs v3EwdNZrZjkVjMPLmnb2uHFNlO+DM9CK3gsUBvPX4MKEZ2rzp82y4ptO+zrc6pGD O1gihhclbnZPn/7Za5vBmHgOaSdsLFk6qta3d1gbe+1VDYb/IQFb3o2dGvR4aM0Z ZaiLKlBO4U1d/SFhw5sE/q/Y7ScpxIJGpjugFc2oMUb1wGcJDlM2035XCb5krDZ3 aPUEvUY4am2YRkw5wCxI1BaODnCFHfEoDHhqXIcGXXX5 -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:51 2026 by rpki-client