This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/LTz1De3X8spC3dcHgrNN4wje9mU.roa File: LTz1De3X8spC3dcHgrNN4wje9mU.roa (raw, json) Hash identifier: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g= Subject key identifier: 2D:3C:F5:0D:ED:D7:F2:CA:42:DD:D7:07:82:B3:4D:E3:08:DE:F6:65 Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81 Certificate serial: 019B7AC7F9077AA8466D8BAA761217E31B35 Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/LTz1De3X8spC3dcHgrNN4wje9mU.roa Signing time: Thu 01 Jan 2026 18:18:04 +0000 ROA not before: Thu 01 Jan 2026 18:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12907 IP address blocks: 213.252.0.0/18 maxlen: 18 2a04:d740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f9:07:7a:a8:46:6d:8b:aa:76:12:17:e3:1b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d3cf50dedd7f2ca42ddd70782b34de308def665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:b0:01:d4:2f:e7:c5:c3:25:d4:79:8a:40: da:2f:12:a5:7a:27:f2:09:e6:fa:ea:43:f7:51:da: d0:f7:49:f0:7d:f1:10:9b:9a:0c:dd:8c:95:c2:18: 5f:fe:f7:94:3a:51:dc:7e:f0:3b:b1:33:73:17:85: 4b:a5:3d:71:fc:29:a6:62:cf:9d:f2:6c:81:10:19: 19:4c:f6:3c:3c:75:fd:9d:10:9c:5d:48:fc:3a:c4: 75:aa:86:f8:c6:c2:3d:73:7c:4f:1b:8e:f4:d7:c1: 71:c1:2b:ec:9e:1f:38:c6:86:83:9d:a0:f0:47:34: 4b:6e:a3:0a:a6:97:ab:07:db:c5:92:db:f8:9c:be: c5:f7:a3:7b:bb:ce:2f:93:a7:79:dd:bb:ca:ba:47: 4a:15:9f:7f:e8:42:76:dc:fe:72:d2:f7:6a:55:6e: bd:bc:3f:9f:5b:79:87:e4:d2:83:a3:e0:cd:48:ae: 14:65:c8:93:25:64:d0:76:d0:7f:8e:8b:68:38:b7: 53:5f:32:3f:f2:f6:38:c5:e4:be:9f:ab:54:8f:a1: 7c:4b:65:ed:5f:53:db:c9:5e:a4:84:a3:88:62:b7: 41:f9:c6:59:ba:f0:56:68:08:9b:7b:aa:5f:8a:fb: 8d:61:95:26:2b:c1:a1:8a:7c:78:ca:e6:18:c0:76: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:F5:0D:ED:D7:F2:CA:42:DD:D7:07:82:B3:4D:E3:08:DE:F6:65 X509v3 Authority Key Identifier: keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/LTz1De3X8spC3dcHgrNN4wje9mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.252.0.0/18 IPv6: 2a04:d740::/29 Signature Algorithm: sha256WithRSAEncryption 67:75:b9:e7:d2:2b:5c:52:69:f5:e0:6f:10:e0:1b:51:c1:e8: e2:0e:2c:05:5a:ea:be:0e:c8:3d:eb:d2:f4:a2:85:ed:a1:79: 91:73:ec:af:89:f8:a7:55:a1:de:26:31:1d:a5:80:e7:95:fd: 48:16:9d:0f:1a:9e:60:43:53:e1:ad:4e:71:3a:e3:f1:d3:6e: 3c:e5:5f:d3:39:d9:6f:8d:4e:40:90:16:24:5a:ef:65:5f:7f: 5d:08:95:e6:82:c8:db:fb:65:53:73:5e:bf:19:4f:7d:28:85: 05:4f:70:d7:69:7f:ec:b3:54:80:93:b0:c3:63:81:3b:02:b7: d7:f2:ac:64:ab:37:46:eb:72:b2:8a:92:6f:85:c4:31:0f:29: 22:39:fb:8d:ba:5d:7d:12:e0:5d:c6:3d:7a:fa:bf:68:f3:be: b0:ca:9b:69:5f:6d:84:34:86:48:a9:77:16:05:a0:8e:9c:24: 3b:4e:b7:29:d1:cd:63:5f:91:62:ca:7f:f7:05:f2:77:30:13: 62:80:ca:e6:01:64:08:91:4c:62:7a:b7:f1:e2:8d:3b:fe:00: ad:5e:61:37:4b:5a:89:32:ed:19:08:d4:dd:63:9e:56:05:b1: eb:21:9d:fb:bc:f2:92:21:20:9a:7c:ec:f0:95:db:ba:50:04: 85:17:34:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x/kHeqhGbYuqdhIX4xs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm N2VjODEwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDNjZjUwZGVkZDdmMmNhNDJkZGQ3MDc4MmIzNGRlMzA4ZGVmNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypSwAdQv58XDJdR5ikDaLxKleify Ceb66kP3UdrQ90nwffEQm5oM3YyVwhhf/veUOlHcfvA7sTNzF4VLpT1x/CmmYs+d 8myBEBkZTPY8PHX9nRCcXUj8OsR1qob4xsI9c3xPG47018FxwSvsnh84xoaDnaDw RzRLbqMKpperB9vFktv4nL7F96N7u84vk6d53bvKukdKFZ9/6EJ23P5y0vdqVW69 vD+fW3mH5NKDo+DNSK4UZciTJWTQdtB/jotoOLdTXzI/8vY4xeS+n6tUj6F8S2Xt X1PbyV6khKOIYrdB+cZZuvBWaAibe6pfivuNYZUmK8Ghinx4yuYYwHZmGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC089Q3t1/LKQt3XB4KzTeMI3vZlMB8GA1UdIwQY MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt MjQxZWVjZmY5YWIwLzEvTFR6MURlM1g4c3BDM2RjSGdyTk40d2plOW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQG1fwAMA0E AgACMAcDBQMqBNdAMA0GCSqGSIb3DQEBCwUAA4IBAQBndbnn0itcUmn14G8Q4BtR wejiDiwFWuq+Dsg969L0ooXtoXmRc+yvifinVaHeJjEdpYDnlf1IFp0PGp5gQ1Ph rU5xOuPx02485V/TOdlvjU5AkBYkWu9lX39dCJXmgsjb+2VTc16/GU99KIUFT3DX aX/ss1SAk7DDY4E7ArfX8qxkqzdG63KyipJvhcQxDykiOfuNul19EuBdxj16+r9o 876wyptpX22ENIZIqXcWBaCOnCQ7Trcp0c1jX5Fiyn/3BfJ3MBNigMrmAWQIkUxi erfx4o07/gCtXmE3S1qJMu0ZCNTdY55WBbHrIZ37vPKSISCafOzwldu6UASFFzRo -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:42 2026 by rpki-client