This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LkMrCsRkYDIWc2eEW3TzC7rMQQQ.roa File: LkMrCsRkYDIWc2eEW3TzC7rMQQQ.roa (raw, json) Hash identifier: 8cjQvBpuHQpZuKqtC8YOFA/sgifl9zksdP3eCAy4nKc= Subject key identifier: 2E:43:2B:0A:C4:64:60:32:16:73:67:84:5B:74:F3:0B:BA:CC:41:04 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E2C326B0F2FFF15450FEF56F024A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LkMrCsRkYDIWc2eEW3TzC7rMQQQ.roa Signing time: Fri 02 Jan 2026 12:20:24 +0000 ROA not before: Fri 02 Jan 2026 12:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202941 IP address blocks: 2a0c:9a46:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e2:c3:26:b0:f2:ff:f1:54:50:fe:f5:6f:02:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e432b0ac4646032167367845b74f30bbacc4104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:18:9f:d3:64:d3:cd:4d:e9:95:4c:a4:09: 3f:d4:95:e1:91:77:81:da:13:77:1a:92:7b:02:35: be:15:07:95:b3:8d:4a:3b:8d:8c:31:48:8a:8b:05: 29:02:05:90:8c:3c:55:0e:d5:b9:45:ad:f1:f3:24: 19:9a:40:17:4b:c3:7a:83:d5:2f:30:6e:4e:7d:8f: 9d:fb:9c:8a:1c:f0:71:28:18:f6:87:eb:00:90:59: 46:ef:ec:f0:59:9a:24:d1:82:5a:47:61:51:dd:aa: 3e:11:49:2e:23:e8:a6:ca:a5:53:46:ff:51:d2:a9: 72:93:95:4e:cd:60:11:a9:bc:32:93:b1:cb:b0:18: 98:ff:b1:79:56:e9:b8:8c:c4:33:22:b8:32:49:74: 18:76:f4:7f:69:a4:48:30:b4:f8:e2:1c:5c:33:0a: 12:bd:0e:79:cc:df:a4:ad:8d:fc:fe:6f:4f:98:30: e3:29:0a:22:01:a8:2e:9d:3c:d2:9d:48:5b:5e:2c: f0:30:4d:38:68:66:e5:25:4f:3b:8e:15:b1:e7:3d: 02:08:b8:3d:35:a4:51:61:39:e8:ce:17:be:55:fc: 44:25:4e:b8:cd:62:d3:ae:ac:b4:26:6b:c3:31:82: ff:24:37:86:19:a5:34:66:8d:75:d0:2f:ed:be:a4: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:43:2B:0A:C4:64:60:32:16:73:67:84:5B:74:F3:0B:BA:CC:41:04 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LkMrCsRkYDIWc2eEW3TzC7rMQQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a46:900::/40 Signature Algorithm: sha256WithRSAEncryption c2:a5:b3:9b:b0:fa:0e:a2:3d:ef:91:c3:79:b7:56:38:e7:a1: 0d:b9:8c:db:5e:d9:97:1b:a1:48:d2:61:78:cf:e5:7b:45:81: 76:d1:2a:1d:cf:41:47:f0:56:58:27:8a:ca:a9:0d:c3:57:4c: bb:b8:16:88:e9:e0:8d:cb:55:80:44:6d:5d:06:16:3b:d2:e3: f9:98:87:28:1e:60:a3:59:3f:b5:63:f4:3f:90:ef:1d:51:f5: 02:ee:a2:c5:6c:c0:44:df:88:1c:4d:b6:99:44:78:d7:77:15: cc:ea:40:e7:85:97:2a:6b:5b:a3:f4:32:1f:f9:18:c3:d6:2a: 42:c0:bf:a2:77:98:2c:4f:0b:06:8f:89:14:bb:84:44:59:48: 52:c5:38:98:be:80:ef:8d:63:46:7c:16:c6:a4:f3:3e:24:29: 24:e8:17:2a:93:d7:6c:23:52:93:c1:9f:71:2f:e5:d7:de:a0: 00:88:7a:63:dc:a6:98:ea:21:f3:33:c9:1d:45:9e:93:9c:33: 56:27:2c:2e:de:c1:68:b5:92:46:0e:29:47:12:73:ef:49:98: 1e:97:f3:09:31:82:f5:a1:d7:ec:dc:88:df:45:32:9b:c0:24: 07:a8:7c:9a:e9:53:ea:2c:2d:ea:21:fa:42:a1:31:fa:c9:6d: cf:b2:15:03 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+puLDJrDy//FUUP71bwJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQzMmIwYWM0NjQ2MDMyMTY3MzY3ODQ1Yjc0ZjMwYmJhY2M0MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXYYn9Nk081N6ZVMpAk/1JXhkXeB 2hN3GpJ7AjW+FQeVs41KO42MMUiKiwUpAgWQjDxVDtW5Ra3x8yQZmkAXS8N6g9Uv MG5OfY+d+5yKHPBxKBj2h+sAkFlG7+zwWZok0YJaR2FR3ao+EUkuI+imyqVTRv9R 0qlyk5VOzWARqbwyk7HLsBiY/7F5Vum4jMQzIrgySXQYdvR/aaRIMLT44hxcMwoS vQ55zN+krY38/m9PmDDjKQoiAagunTzSnUhbXizwME04aGblJU87jhWx5z0CCLg9 NaRRYTnozhe+VfxEJU64zWLTrqy0JmvDMYL/JDeGGaU0Zo110C/tvqSyLwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC5DKwrEZGAyFnNnhFt08wu6zEEEMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTGtNckNzUmtZRElXYzJlRVczVHpDN3JNUVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRgkw DQYJKoZIhvcNAQELBQADggEBAMKls5uw+g6iPe+Rw3m3VjjnoQ25jNte2ZcboUjS YXjP5XtFgXbRKh3PQUfwVlgnisqpDcNXTLu4Fojp4I3LVYBEbV0GFjvS4/mYhyge YKNZP7Vj9D+Q7x1R9QLuosVswETfiBxNtplEeNd3FczqQOeFlyprW6P0Mh/5GMPW KkLAv6J3mCxPCwaPiRS7hERZSFLFOJi+gO+NY0Z8Fsak8z4kKSToFyqT12wjUpPB n3Ev5dfeoACIemPcppjqIfMzyR1FnpOcM1YnLC7ewWi1kkYOKUcSc+9JmB6X8wkx gvWh1+zciN9FMpvAJAeofJrpU+osLeoh+kKhMfrJbc+yFQM= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:17 2026 by rpki-client