This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/LYPFsLg-HHk-AH0q_znuAsebvZs.roa File: LYPFsLg-HHk-AH0q_znuAsebvZs.roa (raw, json) Hash identifier: LQwpVZiG9LTd+JsGkTPK0EuyocYLkODDaDYcgGaoYoA= Subject key identifier: 2D:83:C5:B0:B8:3E:1C:79:3E:00:7D:2A:FF:39:EE:02:C7:9B:BD:9B Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019B7F8436A71DEB7895CF3B70B6568FC23F Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/LYPFsLg-HHk-AH0q_znuAsebvZs.roa Signing time: Fri 02 Jan 2026 16:22:09 +0000 ROA not before: Fri 02 Jan 2026 16:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60262 IP address blocks: 2a11:cc0::/29 maxlen: 29 2a11:1900::/29 maxlen: 29 2a11:23c0::/29 maxlen: 29 2a11:3ac0::/29 maxlen: 29 2a11:4f40::/29 maxlen: 29 2a11:79c0::/29 maxlen: 29 2a11:8dc0::/29 maxlen: 29 2a11:9500::/29 maxlen: 29 2a11:9b80::/29 maxlen: 29 2a11:a200::/29 maxlen: 29 2a11:b7c0::/29 maxlen: 29 2a11:b800::/29 maxlen: 29 2a11:c400::/29 maxlen: 29 2a11:e500::/29 maxlen: 29 2a11:f5c0::/29 maxlen: 29 2a12:2a00::/29 maxlen: 29 2a12:3100::/29 maxlen: 29 2a12:5180::/29 maxlen: 29 2a12:7a00::/29 maxlen: 29 2a12:9a80::/29 maxlen: 29 2a12:cb00::/29 maxlen: 29 2a12:da80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:36:a7:1d:eb:78:95:cf:3b:70:b6:56:8f:c2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d83c5b0b83e1c793e007d2aff39ee02c79bbd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:26:e5:91:0b:c9:90:70:ca:17:fc:63:2d: 0c:0b:a5:f9:49:51:04:1f:59:19:dc:40:2e:e3:bd: 64:c9:05:4d:6c:0b:62:16:97:1a:ce:9f:b9:95:c1: e1:70:0a:3f:61:76:1d:c0:73:86:17:00:d3:76:db: 65:0e:23:9b:23:47:24:44:e7:cd:c6:8c:f5:7b:34: 8b:d4:a5:80:ad:40:e9:0d:cb:1b:b0:58:32:1a:6b: 0d:93:8c:60:ee:5f:e2:1d:fa:b7:59:73:59:d4:bf: bd:f9:37:36:0a:e6:14:91:e0:8c:1c:9e:ce:32:f8: 16:a2:1b:13:c5:12:5f:20:c6:eb:8a:3d:c0:8c:fd: d9:20:52:66:66:cc:a0:b4:4e:97:c2:3b:eb:3a:0e: f1:0b:4a:1c:ba:9c:24:aa:f6:16:ee:1b:f2:05:28: c5:60:e7:49:c6:a6:63:fe:2d:e1:eb:70:85:62:02: a2:ab:23:39:fd:1f:2f:34:4d:d6:c6:b7:66:0c:9f: 5c:bc:96:22:9a:45:78:16:c0:a2:8e:10:86:a3:8b: 8f:a2:ba:ed:15:45:73:9d:0a:6c:9f:df:4d:30:d8: 40:da:df:d6:4f:ec:8f:6a:80:25:56:84:4a:a7:8f: a2:c9:91:0b:24:8f:bb:a0:b9:a9:68:40:45:85:9c: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:83:C5:B0:B8:3E:1C:79:3E:00:7D:2A:FF:39:EE:02:C7:9B:BD:9B X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/LYPFsLg-HHk-AH0q_znuAsebvZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:cc0::/29 2a11:1900::/29 2a11:23c0::/29 2a11:3ac0::/29 2a11:4f40::/29 2a11:79c0::/29 2a11:8dc0::/29 2a11:9500::/29 2a11:9b80::/29 2a11:a200::/29 2a11:b7c0::/29 2a11:b800::/29 2a11:c400::/29 2a11:e500::/29 2a11:f5c0::/29 2a12:2a00::/29 2a12:3100::/29 2a12:5180::/29 2a12:7a00::/29 2a12:9a80::/29 2a12:cb00::/29 2a12:da80::/29 Signature Algorithm: sha256WithRSAEncryption 74:41:c8:77:f5:95:a2:b3:e3:06:3a:41:37:dd:6f:56:57:0d: 84:f8:99:7d:fb:45:84:3e:85:65:d3:61:35:a2:08:6c:68:24: 02:68:41:d1:0b:cf:17:42:3d:d5:36:3a:42:b5:a6:98:42:00: cd:76:19:81:ce:44:d8:be:3f:f0:62:f1:fd:00:58:14:7a:d0: 03:b7:7d:00:7f:14:23:54:eb:1e:b2:89:4e:e1:69:62:5b:2e: 14:9c:f0:b1:47:de:dc:be:f8:08:74:6e:bd:0d:80:7d:3a:5a: 09:90:90:45:a9:7e:49:0d:91:28:25:8e:63:3f:9e:92:de:cd: 63:4f:10:2d:92:55:d2:00:15:74:d7:f3:40:0d:b0:57:45:89: 48:0a:81:06:ac:89:d4:1a:b7:8b:25:1d:5b:be:34:3b:cc:52: 8f:83:c2:4f:ab:b6:f2:4d:4c:9a:9a:61:b6:49:07:19:b5:9e: d2:23:b8:c1:1c:04:00:1e:4c:9a:28:58:63:b6:71:98:a3:4f: 87:d9:50:6a:01:cc:81:92:8d:fc:75:b9:f7:75:c5:a9:98:d3: cf:0e:57:cc:fd:07:3e:27:1e:da:3b:71:e9:c6:37:20:b7:51: 0b:f7:09:3a:b3:6a:05:f7:b2:1d:3d:75:a0:78:b8:c5:92:30: fa:84:6b:7d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt/hDanHet4lc87cLZWj8I/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDgzYzViMGI4M2UxYzc5M2UwMDdkMmFmZjM5ZWUwMmM3OWJiZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQm5ZELyZBwyhf8Yy0MC6X5SVEE H1kZ3EAu471kyQVNbAtiFpcazp+5lcHhcAo/YXYdwHOGFwDTdttlDiObI0ckROfN xoz1ezSL1KWArUDpDcsbsFgyGmsNk4xg7l/iHfq3WXNZ1L+9+Tc2CuYUkeCMHJ7O MvgWohsTxRJfIMbrij3AjP3ZIFJmZsygtE6XwjvrOg7xC0ocupwkqvYW7hvyBSjF YOdJxqZj/i3h63CFYgKiqyM5/R8vNE3WxrdmDJ9cvJYimkV4FsCijhCGo4uPorrt FUVznQpsn99NMNhA2t/WT+yPaoAlVoRKp4+iyZELJI+7oLmpaEBFhZxCYwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFC2DxbC4Phx5PgB9Kv857gLHm72bMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvTFlQRnNMZy1ISGstQUgwcV96bnVBc2VidlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAIwgZoDBQMq EQzAAwUDKhEZAAMFAyoRI8ADBQMqETrAAwUDKhFPQAMFAyoRecADBQMqEY3AAwUD KhGVAAMFAyoRm4ADBQMqEaIAAwUDKhG3wAMFAyoRuAADBQMqEcQAAwUDKhHlAAMF AyoR9cADBQMqEioAAwUDKhIxAAMFAyoSUYADBQMqEnoAAwUDKhKagAMFAyoSywAD BQMqEtqAMA0GCSqGSIb3DQEBCwUAA4IBAQB0Qch39ZWis+MGOkE33W9WVw2E+Jl9 +0WEPoVl02E1oghsaCQCaEHRC88XQj3VNjpCtaaYQgDNdhmBzkTYvj/wYvH9AFgU etADt30AfxQjVOsesolO4WliWy4UnPCxR97cvvgIdG69DYB9OloJkJBFqX5JDZEo JY5jP56S3s1jTxAtklXSABV01/NADbBXRYlICoEGrInUGreLJR1bvjQ7zFKPg8JP q7byTUyammG2SQcZtZ7SI7jBHAQAHkyaKFhjtnGYo0+H2VBqAcyBko38dbn3dcWp mNPPDlfM/Qc+Jx7aO3Hpxjcgt1EL9wk6s2oF97IdPXWgeLjFkjD6hGt9 -----END CERTIFICATE-----Generated at Wed Jan 21 17:51:14 2026 by rpki-client