This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/la8gZB1qceC66CXnaIMpn1d6kfk.roa File: la8gZB1qceC66CXnaIMpn1d6kfk.roa (raw, json) Hash identifier: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4= Subject key identifier: 95:AF:20:64:1D:6A:71:E0:BA:E8:25:E7:68:83:29:9F:57:7A:91:F9 Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12B3EDEA1CFB42D4EA7A130B7697B0 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/la8gZB1qceC66CXnaIMpn1d6kfk.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150249 IP address blocks: 2a0a:280:2a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b3:ed:ea:1c:fb:42:d4:ea:7a:13:0b:76:97:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95af20641d6a71e0bae825e76883299f577a91f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:b7:34:a4:7d:be:89:da:b0:25:a5:e4:cc: 42:6d:65:4c:05:5e:fa:3f:f9:8c:a3:bf:9c:8b:13: 3f:9a:47:2f:8e:06:5b:1b:28:23:7b:a4:e3:4f:10: 85:01:9e:8c:d6:5a:d1:06:85:e6:5e:f0:15:17:14: 82:39:dd:2f:f8:e5:8e:da:24:5f:91:d8:88:19:8d: ce:91:b6:79:52:54:e7:60:7b:67:c6:10:11:ff:9d: cc:41:10:46:a2:30:31:02:55:ee:35:4a:2c:09:7c: 85:d7:97:4c:01:7a:b2:4e:60:08:6d:e7:6c:9f:01: ac:7f:14:51:a2:da:a2:91:ca:af:b7:23:8c:15:db: 7d:ff:c0:23:9e:05:92:32:64:55:c2:55:24:b6:be: fc:b3:65:87:0f:b4:15:35:b2:70:69:c5:a2:2a:61: f9:a6:be:24:fa:6c:cc:6e:2a:84:bd:15:dc:32:2e: ee:76:d1:d2:8c:26:00:3c:24:61:52:c7:30:99:5e: 72:06:c7:11:e7:0f:33:87:2a:b0:70:1f:d4:ae:4d: 2a:bc:4a:27:4d:27:c7:38:85:4b:33:29:55:d7:10: 42:c3:29:64:46:c6:5b:3d:cf:4e:f0:58:60:23:68: 12:d2:2f:99:ef:f4:e6:50:37:e9:7b:6f:d6:32:f2: 93:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:20:64:1D:6A:71:E0:BA:E8:25:E7:68:83:29:9F:57:7A:91:F9 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/la8gZB1qceC66CXnaIMpn1d6kfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:2a00::/40 Signature Algorithm: sha256WithRSAEncryption 24:25:fb:af:30:f0:7c:e5:aa:a3:83:44:f4:e4:93:87:61:89: 05:3e:e1:a5:c1:0d:2f:36:69:7f:19:d7:a8:c7:b1:80:b5:45: 0a:1c:4b:82:30:92:1d:7b:a0:d7:ea:77:75:b1:d5:57:b8:2b: 48:b9:64:92:c5:90:5d:be:0d:53:4e:4e:9b:c6:e0:d5:45:57: c9:ed:7d:be:ef:90:8d:76:db:24:83:11:03:e5:fc:9e:fc:1c: 63:c4:39:f8:5d:ca:29:8d:3f:f1:39:dd:78:36:fa:7c:a9:a6: 98:03:2a:3d:58:64:df:f7:f3:2c:6f:57:cb:af:2b:a3:2d:87: 67:7a:ba:d7:c3:ec:a9:97:03:54:35:f2:eb:8f:15:96:61:58: a7:ef:38:8a:ec:c5:51:e1:d8:9f:9c:43:8e:d4:ed:a4:f6:06: 06:0a:17:a6:22:31:dc:a7:b4:28:05:b9:e9:cd:1b:11:38:ea: cc:0d:af:c7:1c:9f:0b:ee:d8:5c:3e:52:7d:c6:1f:36:a4:5a: c4:02:db:c3:f8:47:03:0d:c4:81:82:dc:e7:81:90:3e:ae:5f: 6d:76:c6:8c:58:3f:b4:b2:a5:43:18:4c:59:1f:aa:3c:56:42: 21:c6:75:55:87:c2:76:e0:85:86:67:d0:1d:3d:e1:df:7d:84: 16:18:33:9c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8ErPt6hz7QtTqehMLdpewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWFmMjA2NDFkNmE3MWUwYmFlODI1ZTc2ODgzMjk5ZjU3N2E5MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoji3NKR9vonasCWl5MxCbWVMBV76 P/mMo7+cixM/mkcvjgZbGygje6TjTxCFAZ6M1lrRBoXmXvAVFxSCOd0v+OWO2iRf kdiIGY3OkbZ5UlTnYHtnxhAR/53MQRBGojAxAlXuNUosCXyF15dMAXqyTmAIbeds nwGsfxRRotqikcqvtyOMFdt9/8AjngWSMmRVwlUktr78s2WHD7QVNbJwacWiKmH5 pr4k+mzMbiqEvRXcMi7udtHSjCYAPCRhUscwmV5yBscR5w8zhyqwcB/Urk0qvEon TSfHOIVLMylV1xBCwylkRsZbPc9O8FhgI2gS0i+Z7/TmUDfpe2/WMvKTbQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJWvIGQdanHguugl52iDKZ9XepH5MB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvbGE4Z1pCMXFjZUM2NkNYbmFJTXBuMWQ2a2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCow DQYJKoZIhvcNAQELBQADggEBACQl+68w8HzlqqODRPTkk4dhiQU+4aXBDS82aX8Z 16jHsYC1RQocS4Iwkh17oNfqd3Wx1Ve4K0i5ZJLFkF2+DVNOTpvG4NVFV8ntfb7v kI122ySDEQPl/J78HGPEOfhdyimNP/E53Xg2+nypppgDKj1YZN/38yxvV8uvK6Mt h2d6utfD7KmXA1Q18uuPFZZhWKfvOIrsxVHh2J+cQ47U7aT2BgYKF6YiMdyntCgF uenNGxE46swNr8ccnwvu2Fw+Un3GHzakWsQC28P4RwMNxIGC3OeBkD6uX212xoxY P7SypUMYTFkfqjxWQiHGdVWHwnbghYZn0B094d99hBYYM5w= -----END CERTIFICATE-----Generated at Wed Jan 21 17:33:42 2026 by rpki-client