This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LVTNi2qvxzlezJ-JZSxPIKtIc9c.roa File: LVTNi2qvxzlezJ-JZSxPIKtIc9c.roa (raw, json) Hash identifier: hY5I8FLaob+/zN+giKae0Ey7AgOtLcwL/aAyJMq3THE= Subject key identifier: 2D:54:CD:8B:6A:AF:C7:39:5E:CC:9F:89:65:2C:4F:20:AB:48:73:D7 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71C38FABA1B822C5D758512CEDBDF Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LVTNi2qvxzlezJ-JZSxPIKtIc9c.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398549 IP address blocks: 2a0c:9a40:8d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1c:38:fa:ba:1b:82:2c:5d:75:85:12:ce:db:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d54cd8b6aafc7395ecc9f89652c4f20ab4873d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:c1:f4:11:fa:4f:60:bc:98:1d:d0:7f:ca: cc:e6:06:6c:71:94:57:5b:7e:6f:8d:f0:99:77:4f: 75:8f:03:a3:2b:72:4e:15:12:53:c3:b6:a7:fe:c4: d3:63:99:48:0d:be:83:c6:34:36:14:ef:db:e4:8c: a4:55:62:db:ea:3c:c0:c2:2d:3f:97:e9:67:e8:73: 83:ef:40:b1:23:3c:e3:ee:d0:38:e6:46:71:43:2b: 9e:3b:8b:dc:9a:cb:ed:4c:af:3f:ec:7a:92:01:bd: 6e:5e:ca:86:19:34:3e:78:04:f6:70:53:de:0f:db: 7d:a6:ed:60:4c:e8:ce:b4:bb:9d:68:74:d0:d0:e9: bd:8b:a9:55:dd:cf:41:61:5c:57:88:db:3d:97:a2: 4b:7e:02:69:93:eb:c0:7a:93:e3:a6:8d:de:d4:14: d4:b0:07:75:7a:78:d6:90:46:c0:c1:6c:e5:05:df: ae:3a:95:e0:d9:b8:50:26:d5:74:7e:b1:1e:24:ec: 58:82:86:db:f4:47:52:78:3c:b8:7b:45:45:9d:77: c2:e8:02:1e:5c:7b:a8:a0:8c:e9:bd:ce:ba:49:a4: 20:48:f3:e0:13:5c:9d:be:d6:15:95:81:4d:52:b0: 5b:91:cc:63:d5:9f:7d:2b:cb:b6:ff:8d:93:63:69: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:CD:8B:6A:AF:C7:39:5E:CC:9F:89:65:2C:4F:20:AB:48:73:D7 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LVTNi2qvxzlezJ-JZSxPIKtIc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8d00::/40 Signature Algorithm: sha256WithRSAEncryption ca:75:3b:ab:ec:7c:e9:46:5a:17:39:81:c9:ca:3b:af:43:f9: 69:9c:89:c5:c7:f3:fd:ee:eb:a8:88:e7:d6:84:3a:4c:70:55: 7c:cc:ce:bc:18:d0:1b:bd:cd:3a:bc:02:bc:3c:3b:f2:10:cb: 37:12:3c:6c:51:7b:52:df:ad:49:bd:98:b3:f7:7d:e0:cc:5f: 4d:47:93:99:fe:45:ed:47:92:c7:77:80:2f:b2:c4:95:f7:99: 60:7f:d7:9b:0e:68:96:fa:3f:cb:0c:fe:26:6c:cc:c8:5e:01: 85:e8:15:db:09:c8:f6:60:ba:4a:58:24:f9:57:8c:23:e7:f5: fb:e2:ec:a9:c2:59:22:69:b7:32:f2:54:5d:43:14:8d:5e:a6: c4:3f:74:54:e6:a9:4a:fd:3b:6d:7c:19:c8:a9:83:ec:b2:fd: 5f:a3:c6:ab:06:4d:c3:a9:04:46:04:16:89:24:5e:32:cb:d7: 4f:17:d1:c1:df:bb:c0:e5:51:9d:b0:ba:50:9b:af:24:30:16: d5:ea:ef:f0:77:6c:39:46:37:1a:6a:7e:9b:82:07:20:c9:f3: 37:6f:8c:a0:d2:3c:59:c2:e9:73:e0:0b:a2:ee:ec:51:3d:b0: ec:6a:e1:2c:b5:8a:b2:68:c9:f1:9f:bc:f6:4c:a0:a2:77:b7: a2:be:2f:f7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pxw4+robgixddYUSztvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDU0Y2Q4YjZhYWZjNzM5NWVjYzlmODk2NTJjNGYyMGFiNDg3M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlHB9BH6T2C8mB3Qf8rM5gZscZRX W35vjfCZd091jwOjK3JOFRJTw7an/sTTY5lIDb6DxjQ2FO/b5IykVWLb6jzAwi0/ l+ln6HOD70CxIzzj7tA45kZxQyueO4vcmsvtTK8/7HqSAb1uXsqGGTQ+eAT2cFPe D9t9pu1gTOjOtLudaHTQ0Om9i6lV3c9BYVxXiNs9l6JLfgJpk+vAepPjpo3e1BTU sAd1enjWkEbAwWzlBd+uOpXg2bhQJtV0frEeJOxYgobb9EdSeDy4e0VFnXfC6AIe XHuooIzpvc66SaQgSPPgE1ydvtYVlYFNUrBbkcxj1Z99K8u2/42TY2k8/wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC1UzYtqr8c5XsyfiWUsTyCrSHPXMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTFZUTmkycXZ4emxlekotSlpTeFBJS3RJYzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQI0w DQYJKoZIhvcNAQELBQADggEBAMp1O6vsfOlGWhc5gcnKO69D+WmcicXH8/3u66iI 59aEOkxwVXzMzrwY0Bu9zTq8Arw8O/IQyzcSPGxRe1LfrUm9mLP3feDMX01Hk5n+ Re1Hksd3gC+yxJX3mWB/15sOaJb6P8sM/iZszMheAYXoFdsJyPZgukpYJPlXjCPn 9fvi7KnCWSJptzLyVF1DFI1epsQ/dFTmqUr9O218Gcipg+yy/V+jxqsGTcOpBEYE FokkXjLL108X0cHfu8DlUZ2wulCbryQwFtXq7/B3bDlGNxpqfpuCByDJ8zdvjKDS PFnC6XPgC6Lu7FE9sOxq4Sy1irJoyfGfvPZMoKJ3t6K+L/c= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:13 2026 by rpki-client