This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa File: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (raw, json) Hash identifier: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4= Subject key identifier: 96:E4:C6:D7:01:10:A0:9D:82:76:5C:2B:2B:B4:AF:67:F3:F9:2E:71 Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Certificate serial: 019B7FF08D5AE3D226F225BC937D37F7BD32 Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa Signing time: Fri 02 Jan 2026 18:20:29 +0000 ROA not before: Fri 02 Jan 2026 18:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 141.138.224.0/24 maxlen: 24 2a00:10e8:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:8d:5a:e3:d2:26:f2:25:bc:93:7d:37:f7:bd:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Validity Not Before: Jan 2 18:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96e4c6d70110a09d82765c2b2bb4af67f3f92e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:a3:f1:c7:3b:e9:89:78:97:3d:ad:bf:38: 93:87:ef:57:c1:73:0e:b4:7f:9d:bb:31:bf:1c:4e: bc:17:6a:96:91:41:29:0e:7b:7c:15:ce:4c:d4:15: 5c:e5:3c:25:51:0a:fe:bc:0d:41:a5:69:17:33:f8: f8:9d:78:1b:40:b2:7f:10:ce:43:3a:6a:52:92:27: 66:cd:36:66:f9:51:d9:cf:87:f2:35:f1:d4:3e:5d: 63:d6:2f:2e:4a:fb:89:09:07:73:89:f9:49:10:48: b3:0a:45:98:15:58:d1:69:82:bc:7e:50:d2:82:df: f3:e7:18:90:32:95:e5:aa:1d:cf:ed:f0:ef:f3:d5: ef:bb:11:36:52:71:90:14:21:b9:50:4b:a0:f5:38: aa:a4:4a:47:aa:be:8a:dc:8e:e2:33:2a:4e:24:35: e4:8e:63:6c:b6:f8:1e:6f:41:b6:70:9b:98:52:5d: fc:cf:f3:c3:52:1b:21:9e:c3:19:58:e7:90:5f:86: e3:4c:26:a0:58:25:21:b8:7b:cb:73:ed:b2:44:60: 68:cd:25:8e:e7:98:7e:87:10:5a:4e:b3:52:14:2c: 31:45:8b:43:c4:f8:f1:d0:63:80:e9:1d:08:d9:5a: e8:d1:ec:03:06:59:48:5e:5d:dd:da:66:d2:15:4e: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:C6:D7:01:10:A0:9D:82:76:5C:2B:2B:B4:AF:67:F3:F9:2E:71 X509v3 Authority Key Identifier: keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.224.0/24 IPv6: 2a00:10e8:100::/48 Signature Algorithm: sha256WithRSAEncryption 9e:31:04:6c:ac:cf:8a:ab:e2:d3:cf:14:97:ee:92:45:69:72: 6f:89:5f:7e:3b:9a:5d:97:a3:1c:ab:29:5c:3d:6f:66:df:ac: f3:c2:92:73:89:1a:96:9f:24:59:0d:11:76:81:b5:a1:db:47: 82:67:33:72:b7:52:d4:41:fc:5d:b1:3e:1c:c1:0b:a4:69:a9: 96:17:5d:ed:15:4e:c8:fd:c8:a2:a3:78:af:08:df:fd:31:b9: 48:e5:a0:b8:96:c9:ff:b9:19:e0:42:22:07:b7:80:7d:cc:a1: 91:f8:fd:77:d9:0e:65:dd:32:3d:7f:b7:41:2e:cc:b0:11:49: 63:4a:90:bc:54:85:c0:43:34:46:81:79:92:bd:71:8f:18:91: ac:2e:93:f1:fb:7c:63:b1:a4:4e:75:0c:45:9f:e1:6f:df:c2: 49:a7:74:4a:72:1b:12:41:19:bf:65:b2:b1:7a:ef:5e:aa:06: 82:a9:d0:86:e6:d5:19:05:3f:d3:97:2f:d6:e8:f3:24:12:36: 16:9d:35:15:20:64:2b:89:f9:fc:c1:ca:d5:39:1b:0d:6e:fa: e3:82:55:59:91:e5:e7:8b:1a:fc:82:4d:e7:c6:8e:11:22:43: d4:dc:10:31:cc:bd:63:36:c4:cc:99:4d:a7:51:2a:89:7d:28: 02:ca:53:81 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8I1a49Im8iW8k303970yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3 YzNkZjUwHhcNMjYwMTAyMTgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmU0YzZkNzAxMTBhMDlkODI3NjVjMmIyYmI0YWY2N2YzZjkyZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVaj8cc76Yl4lz2tvziTh+9XwXMO tH+duzG/HE68F2qWkUEpDnt8Fc5M1BVc5TwlUQr+vA1BpWkXM/j4nXgbQLJ/EM5D OmpSkidmzTZm+VHZz4fyNfHUPl1j1i8uSvuJCQdziflJEEizCkWYFVjRaYK8flDS gt/z5xiQMpXlqh3P7fDv89XvuxE2UnGQFCG5UEug9TiqpEpHqr6K3I7iMypOJDXk jmNstvgeb0G2cJuYUl38z/PDUhshnsMZWOeQX4bjTCagWCUhuHvLc+2yRGBozSWO 55h+hxBaTrNSFCwxRYtDxPjx0GOA6R0I2Vro0ewDBllIXl3d2mbSFU7BswIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJbkxtcBEKCdgnZcKyu0r2fz+S5xMB8GA1UdIwQY MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt Y2Y4M2Q2ZTQwNTU4LzEvbHVURzF3RVFvSjJDZGx3cks3U3ZaX1A1TG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4 LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAjYrgMA8E AgACMAkDBwAqABDoAQAwDQYJKoZIhvcNAQELBQADggEBAJ4xBGysz4qr4tPPFJfu kkVpcm+JX347ml2XoxyrKVw9b2bfrPPCknOJGpafJFkNEXaBtaHbR4JnM3K3UtRB /F2xPhzBC6RpqZYXXe0VTsj9yKKjeK8I3/0xuUjloLiWyf+5GeBCIge3gH3MoZH4 /XfZDmXdMj1/t0EuzLARSWNKkLxUhcBDNEaBeZK9cY8Ykawuk/H7fGOxpE51DEWf 4W/fwkmndEpyGxJBGb9lsrF6716qBoKp0Ibm1RkFP9OXL9bo8yQSNhadNRUgZCuJ +fzBytU5Gw1u+uOCVVmR5eeLGvyCTefGjhEiQ9TcEDHMvWM2xMyZTadRKol9KALK U4E= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:25 2026 by rpki-client