This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LTa925C06RnX8spacptWWifK-H4.roa File: LTa925C06RnX8spacptWWifK-H4.roa (raw, json) Hash identifier: WDCxv50Gj+CFUcsM/BosZw29JTKAyduG01VtH6I5dB8= Subject key identifier: 2D:36:BD:DB:90:B4:E9:19:D7:F2:CA:5A:72:9B:56:5A:27:CA:F8:7E Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3918F644039CCCF9F3D9A223A5A9DF Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LTa925C06RnX8spacptWWifK-H4.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 163.5.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:18:f6:44:03:9c:cc:f9:f3:d9:a2:23:a5:a9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d36bddb90b4e919d7f2ca5a729b565a27caf87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:d8:9d:31:05:6a:f3:77:af:c5:c8:cd:d4: 43:1e:c2:f5:e8:ce:3a:ce:ea:1f:1d:4c:02:91:0b: 3c:34:1f:52:7f:b3:f6:71:25:b5:ab:0a:3a:0a:5b: df:63:a1:a1:10:29:c3:7c:61:38:04:17:25:06:fd: a2:a8:18:06:a6:e9:6e:0e:75:a9:cc:46:19:06:a7: 95:8e:c2:6a:b0:a7:62:bb:07:79:5f:86:0a:1b:86: e1:49:a3:fb:53:31:5d:3c:81:68:07:d1:95:fd:f1: a7:69:a3:1f:f7:cb:04:14:9b:de:6c:e1:68:5a:8b: 0d:92:38:0e:3c:a6:eb:ee:1e:5a:ad:95:ca:48:5f: 70:bf:fe:14:cd:70:7d:87:05:32:bf:b1:44:95:eb: 79:f4:36:d3:8a:90:b1:3b:19:ac:6b:06:2f:ab:c9: c6:3e:83:cf:5a:61:31:33:be:e1:04:d1:4f:7a:ac: b2:c1:71:51:89:89:89:a9:22:ca:06:77:ad:8e:2e: 5e:d4:18:26:68:6d:a9:b5:51:59:5b:85:c7:c7:65: 28:79:af:c4:0b:87:9c:35:44:e0:57:23:65:65:45: b0:23:36:52:3f:19:1e:cc:0f:09:c1:a7:20:43:18: aa:77:ce:e4:bc:c0:2f:4f:74:a1:dd:99:c7:23:8b: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:BD:DB:90:B4:E9:19:D7:F2:CA:5A:72:9B:56:5A:27:CA:F8:7E X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LTa925C06RnX8spacptWWifK-H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.94.0/24 Signature Algorithm: sha256WithRSAEncryption 40:03:a8:29:44:18:44:5a:fa:c8:c3:7b:bb:d4:08:e2:d1:8f: e6:a7:8a:c7:01:b9:dc:c1:b7:f3:13:93:a4:71:bf:01:d9:35: 6d:04:56:69:c8:38:e6:4f:10:0b:ba:59:5f:ac:b9:c7:b1:61: c3:67:cb:de:e3:b4:fc:49:02:b6:1a:f3:ab:8c:69:27:52:48: 25:5b:70:8e:49:b4:e8:08:a2:c0:1f:f3:d3:cd:e2:a9:32:3c: a8:f5:3b:a0:bb:2d:91:d5:f0:df:51:cd:05:ac:f3:f9:31:62: c3:a0:c7:4f:76:6b:6a:7f:53:5a:58:8b:38:81:3b:e3:fb:73: 1a:e6:89:05:f0:5c:dd:b2:9b:2a:7f:05:48:0f:1d:3a:c1:39: ff:74:b5:9e:4f:7c:f1:ca:02:a4:9d:1b:f2:73:81:e6:3e:61: f7:91:86:37:03:39:ad:6c:0e:48:1b:8f:b2:23:dc:12:ec:23: 5c:07:25:b0:7b:28:d0:4e:a2:76:51:ac:6a:aa:ac:1a:79:67: bb:1e:d3:0d:ff:34:27:e4:c8:f7:a9:59:1a:69:b1:62:48:ff: 6e:93:56:1a:83:ca:b0:58:92:80:04:8b:a0:b0:88:f9:a5:8f: 61:e0:fa:38:9e:cf:c1:81:ea:1e:1d:72:19:fa:37:44:b6:89: 40:d0:06:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORj2RAOczPnz2aIjpanfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDM2YmRkYjkwYjRlOTE5ZDdmMmNhNWE3MjliNTY1YTI3Y2FmODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAHYnTEFavN3r8XIzdRDHsL16M46 zuofHUwCkQs8NB9Sf7P2cSW1qwo6ClvfY6GhECnDfGE4BBclBv2iqBgGpuluDnWp zEYZBqeVjsJqsKdiuwd5X4YKG4bhSaP7UzFdPIFoB9GV/fGnaaMf98sEFJvebOFo WosNkjgOPKbr7h5arZXKSF9wv/4UzXB9hwUyv7FElet59DbTipCxOxmsawYvq8nG PoPPWmExM77hBNFPeqyywXFRiYmJqSLKBnetji5e1BgmaG2ptVFZW4XHx2Uoea/E C4ecNUTgVyNlZUWwIzZSPxkezA8JwacgQxiqd87kvMAvT3Sh3ZnHI4vKqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC02vduQtOkZ1/LKWnKbVlonyvh+MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTFRhOTI1QzA2Um5YOHNwYWNwdFdXaWZLLUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVeMA0G CSqGSIb3DQEBCwUAA4IBAQBAA6gpRBhEWvrIw3u71Aji0Y/mp4rHAbncwbfzE5Ok cb8B2TVtBFZpyDjmTxALullfrLnHsWHDZ8ve47T8SQK2GvOrjGknUkglW3COSbTo CKLAH/PTzeKpMjyo9Tuguy2R1fDfUc0FrPP5MWLDoMdPdmtqf1NaWIs4gTvj+3Ma 5okF8FzdspsqfwVIDx06wTn/dLWeT3zxygKknRvyc4HmPmH3kYY3AzmtbA5IG4+y I9wS7CNcByWweyjQTqJ2UaxqqqwaeWe7HtMN/zQn5Mj3qVkaabFiSP9uk1Yag8qw WJKABIugsIj5pY9h4Po4ns/BgeoeHXIZ+jdEtolA0AZn -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:21 2026 by rpki-client