This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/LVNDdtLYnujMWbq0swLbShC0Y-g.roa File: LVNDdtLYnujMWbq0swLbShC0Y-g.roa (raw, json) Hash identifier: 8HctQXfZBPB92/kv8TD0DdrdmIMzx8hg2wfACFjK79k= Subject key identifier: 2D:53:43:76:D2:D8:9E:E8:CC:59:BA:B4:B3:02:DB:4A:10:B4:63:E8 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC882C51493271EADC8E56024DCDDA8 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/LVNDdtLYnujMWbq0swLbShC0Y-g.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216039 IP address blocks: 2a0d:d940:900b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:82:c5:14:93:27:1e:ad:c8:e5:60:24:dc:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d534376d2d89ee8cc59bab4b302db4a10b463e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:6f:b7:76:7a:54:88:e9:81:6a:6c:29:f4: dc:1c:ad:4a:29:8a:f3:3b:df:ab:c4:2c:a6:95:cb: d2:83:ca:cd:da:8a:4c:60:3f:0d:2b:a4:38:4a:6a: 04:d0:e5:05:98:ac:dc:1b:8d:1c:91:67:9a:5b:6c: cf:ba:a4:05:59:65:52:5d:a5:2e:35:9b:fb:41:a7: 72:11:7a:46:b1:91:ea:9b:cc:9b:32:21:8f:71:6d: 89:68:70:83:0e:f1:37:02:38:71:30:1a:f3:ad:4f: 20:96:25:f6:46:e5:d1:8f:be:b6:b8:f6:a5:13:81: 3e:75:5d:6c:4e:be:c2:b1:74:09:40:28:93:f9:b9: 51:bf:4c:2b:22:1b:b9:2f:47:96:a3:27:d3:22:48: b2:0c:94:a4:2b:fb:e1:b7:3f:e2:eb:d1:73:f9:31: f0:ca:56:a0:80:80:59:b5:a3:d7:72:a5:4b:20:e3: a3:f8:e6:1b:66:b6:86:7e:21:d9:50:73:cd:f5:ba: 19:15:6f:6f:cc:7a:ba:75:a0:6c:1f:80:78:a3:99: 88:05:e6:40:a6:48:6b:33:39:d1:55:dc:ae:b7:2e: 81:51:e5:8e:4d:f2:88:b1:80:65:93:f7:95:76:e2: df:f3:23:05:47:a4:ff:e1:2d:2d:43:7e:f3:d1:19: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:53:43:76:D2:D8:9E:E8:CC:59:BA:B4:B3:02:DB:4A:10:B4:63:E8 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/LVNDdtLYnujMWbq0swLbShC0Y-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:900b::/48 Signature Algorithm: sha256WithRSAEncryption 4f:b7:d9:b7:1b:98:f6:53:f8:ad:91:7b:1d:8a:64:32:21:10: 52:f6:e8:9c:af:7e:1a:14:95:cd:dd:d9:b0:28:fe:a5:f6:44: 73:b1:ed:a0:9f:3a:2b:c7:f0:de:c9:9e:40:a9:f3:eb:cd:80: 6c:5d:64:68:75:37:41:e0:66:5b:be:6d:64:d0:2f:09:e6:9f: 87:92:db:0d:0b:32:e6:4b:5c:33:80:5a:7f:5d:05:94:5f:ce: 3e:b1:0b:2c:02:c7:7a:5d:03:f5:8d:ee:7f:1e:dd:1b:02:d9: 24:77:70:59:00:48:31:1c:83:d5:cb:1d:0f:20:8c:6f:4d:0c: a4:aa:9d:05:2c:70:80:32:22:5d:1a:ca:55:84:31:55:ee:29: 71:e7:e8:8d:67:b6:4b:b4:ec:36:99:25:43:19:48:69:2b:d7: 35:8d:91:15:8a:70:f0:55:b4:3c:52:eb:86:e7:a1:72:b3:33: d2:fc:b4:9c:bc:42:f8:ad:04:41:e8:8a:bb:d8:7d:35:a9:cf: c5:ed:bd:8a:42:6c:f9:3b:3e:34:67:c2:76:6b:2e:87:5d:02: 0e:6d:78:b0:e3:fb:f5:dc:1d:8d:b7:a0:f0:85:32:6f:d5:d2: 65:f9:76:de:60:bf:0d:6f:17:71:43:b2:e9:f3:88:a1:f6:49: bf:62:bb:27 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yILFFJMnHq3I5WAk3N2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDUzNDM3NmQyZDg5ZWU4Y2M1OWJhYjRiMzAyZGI0YTEwYjQ2M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFpvt3Z6VIjpgWpsKfTcHK1KKYrz O9+rxCymlcvSg8rN2opMYD8NK6Q4SmoE0OUFmKzcG40ckWeaW2zPuqQFWWVSXaUu NZv7QadyEXpGsZHqm8ybMiGPcW2JaHCDDvE3AjhxMBrzrU8gliX2RuXRj762uPal E4E+dV1sTr7CsXQJQCiT+blRv0wrIhu5L0eWoyfTIkiyDJSkK/vhtz/i69Fz+THw ylaggIBZtaPXcqVLIOOj+OYbZraGfiHZUHPN9boZFW9vzHq6daBsH4B4o5mIBeZA pkhrMznRVdyuty6BUeWOTfKIsYBlk/eVduLf8yMFR6T/4S0tQ37z0RmDNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC1TQ3bS2J7ozFm6tLMC20oQtGPoMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvTFZORGR0TFludWpNV2JxMHN3TGJTaEMwWS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJAL MA0GCSqGSIb3DQEBCwUAA4IBAQBPt9m3G5j2U/itkXsdimQyIRBS9uicr34aFJXN 3dmwKP6l9kRzse2gnzorx/DeyZ5AqfPrzYBsXWRodTdB4GZbvm1k0C8J5p+HktsN CzLmS1wzgFp/XQWUX84+sQssAsd6XQP1je5/Ht0bAtkkd3BZAEgxHIPVyx0PIIxv TQykqp0FLHCAMiJdGspVhDFV7ilx5+iNZ7ZLtOw2mSVDGUhpK9c1jZEVinDwVbQ8 UuuG56FyszPS/LScvEL4rQRB6Iq72H01qc/F7b2KQmz5Oz40Z8J2ay6HXQIObXiw 4/v13B2Nt6DwhTJv1dJl+XbeYL8NbxdxQ7Lp84ih9km/Yrsn -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:30 2026 by rpki-client