This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/LO4YOUMQSFJh66TMDDMwnUwbqCo.roa File: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (raw, json) Hash identifier: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ= Subject key identifier: 2C:EE:18:39:43:10:48:52:61:EB:A4:CC:0C:33:30:9D:4C:1B:A8:2A Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95 Certificate serial: 019B7F145E9E1A3F04C8E87227559197BF5B Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/LO4YOUMQSFJh66TMDDMwnUwbqCo.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29107 IP address blocks: 141.98.109.0/24 maxlen: 24 2a07:76c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5e:9e:1a:3f:04:c8:e8:72:27:55:91:97:bf:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95 Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cee18394310485261eba4cc0c33309d4c1ba82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:ff:9a:7b:54:70:8d:e6:84:e9:73:a1:0c: 19:0a:c8:15:a2:7b:e4:b8:1c:d0:70:2a:99:e7:83: 45:87:c8:42:7a:5e:62:07:ad:1c:b6:a4:9e:f6:1e: 2f:25:cd:da:1a:94:22:09:25:a1:32:62:27:48:30: b1:a7:33:af:3b:43:cc:f5:4e:1d:a1:be:fe:39:13: 76:2b:65:37:78:2e:9a:24:5d:1f:44:b3:f6:4f:20: 1e:97:24:66:1e:fa:0e:0b:1d:ba:96:f2:73:c2:18: c2:56:03:c5:9b:8a:f5:98:f5:7d:31:a0:84:1f:9e: da:aa:e5:84:a5:1a:61:7a:ff:89:f7:e0:2f:51:94: d9:a4:88:cc:99:20:5b:32:24:40:96:d9:b2:28:bd: e7:ae:2f:e8:76:bf:f7:35:3a:ee:1b:ca:49:8f:17: 48:e3:f2:0d:7a:4e:0e:c1:d5:63:ed:a0:0a:59:d9: 7c:fd:64:53:65:5f:8e:b4:c0:30:79:a2:eb:d1:9a: 33:69:32:8c:86:a6:dc:60:c1:bf:57:03:99:b4:10: 49:ee:3a:62:f3:df:d1:fe:19:1f:9f:3a:44:43:1e: c1:19:a5:bb:7f:37:27:8d:54:ff:4f:25:aa:08:26: 4a:da:30:c6:30:81:5e:e4:48:f9:da:48:b1:8d:6d: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EE:18:39:43:10:48:52:61:EB:A4:CC:0C:33:30:9D:4C:1B:A8:2A X509v3 Authority Key Identifier: keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/LO4YOUMQSFJh66TMDDMwnUwbqCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.109.0/24 IPv6: 2a07:76c0:2::/48 Signature Algorithm: sha256WithRSAEncryption a1:2c:45:59:70:92:57:86:5b:94:38:00:49:88:2f:23:54:e2: b9:e0:80:2e:cf:6a:03:88:5a:45:b7:c7:f7:22:db:d9:fd:fe: 64:b6:e0:0f:14:0b:fa:98:5a:1b:84:a5:5c:5d:0d:4f:62:f2: 5f:d1:24:42:cb:01:c8:a3:fe:31:ac:55:5e:47:6e:13:cb:2f: 76:54:fe:53:71:6a:7e:5f:17:4f:3d:0c:7f:cb:3e:ca:3f:4f: 69:a7:1e:3e:2b:9f:7d:8b:36:94:a3:d3:ba:fe:dd:8b:eb:e5: f6:5f:46:96:09:52:90:82:ab:d7:1b:e1:2b:e4:ad:55:e8:4f: 8e:35:3f:37:fd:af:30:f7:9f:99:8e:4a:32:03:02:fd:e1:a5: 3c:7b:af:49:ee:fe:b7:e7:57:da:be:cb:dd:8c:cd:e3:a9:f8: 46:fb:2f:83:e3:fd:63:ac:be:08:92:d4:0b:de:42:c5:33:ec: a4:72:a0:fd:2b:6f:ea:eb:a9:fe:2f:28:8a:33:c0:f6:11:74: 9f:4d:56:c9:92:7f:fd:21:a4:5e:a0:95:65:41:ac:a1:2f:e5: 30:82:63:43:0e:e8:d0:27:66:fd:3c:7f:3f:e3:3c:80:fe:d1: 41:c1:2f:36:6c:b9:bb:ec:1a:db:b6:42:c2:0c:34:e1:88:f1: 5e:e5:67:f5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FF6eGj8EyOhyJ1WRl79bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh ZmViOTUwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2VlMTgzOTQzMTA0ODUyNjFlYmE0Y2MwYzMzMzA5ZDRjMWJhODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxln/mntUcI3mhOlzoQwZCsgVonvk uBzQcCqZ54NFh8hCel5iB60ctqSe9h4vJc3aGpQiCSWhMmInSDCxpzOvO0PM9U4d ob7+ORN2K2U3eC6aJF0fRLP2TyAelyRmHvoOCx26lvJzwhjCVgPFm4r1mPV9MaCE H57aquWEpRphev+J9+AvUZTZpIjMmSBbMiRAltmyKL3nri/odr/3NTruG8pJjxdI 4/INek4OwdVj7aAKWdl8/WRTZV+OtMAweaLr0ZozaTKMhqbcYMG/VwOZtBBJ7jpi 89/R/hkfnzpEQx7BGaW7fzcnjVT/TyWqCCZK2jDGMIFe5Ej52kixjW1+JQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCzuGDlDEEhSYeukzAwzMJ1MG6gqMB8GA1UdIwQY MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct N2Q1OTMwMzNkMDA1LzEvTE80WU9VTVFTRkpoNjZUTURETXduVXdicUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1 LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAjWJtMA8E AgACMAkDBwAqB3bAAAIwDQYJKoZIhvcNAQELBQADggEBAKEsRVlwkleGW5Q4AEmI LyNU4rnggC7PagOIWkW3x/ci29n9/mS24A8UC/qYWhuEpVxdDU9i8l/RJELLAcij /jGsVV5HbhPLL3ZU/lNxan5fF089DH/LPso/T2mnHj4rn32LNpSj07r+3Yvr5fZf RpYJUpCCq9cb4SvkrVXoT441Pzf9rzD3n5mOSjIDAv3hpTx7r0nu/rfnV9q+y92M zeOp+Eb7L4Pj/WOsvgiS1AveQsUz7KRyoP0rb+rrqf4vKIozwPYRdJ9NVsmSf/0h pF6glWVBrKEv5TCCY0MO6NAnZv08fz/jPID+0UHBLzZsubvsGtu2QsIMNOGI8V7l Z/U= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:09 2026 by rpki-client