This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LPbBC3qgzBJpfxjbOak9aqFp7nQ.roa File: LPbBC3qgzBJpfxjbOak9aqFp7nQ.roa (raw, json) Hash identifier: NVSPg++04J3D/83WSQOA6PxP73BMJGFCgeDf2nY8dJA= Subject key identifier: 2C:F6:C1:0B:7A:A0:CC:12:69:7F:18:DB:39:A9:3D:6A:A1:69:EE:74 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39601EB3D1BDBA2FD496781C4BA705 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LPbBC3qgzBJpfxjbOak9aqFp7nQ.roa Signing time: Fri 02 Jan 2026 10:20:47 +0000 ROA not before: Fri 02 Jan 2026 10:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213292 IP address blocks: 2a0c:b641:340::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:60:1e:b3:d1:bd:ba:2f:d4:96:78:1c:4b:a7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cf6c10b7aa0cc12697f18db39a93d6aa169ee74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:dd:a4:e5:47:8c:0a:41:15:7c:ba:56:0e: 4f:22:50:af:68:6f:5b:00:c2:64:8e:95:56:f7:26: de:0a:7e:11:41:39:4e:96:cc:f4:d2:ac:a4:52:0d: c9:f8:48:b8:20:73:95:3d:ea:cd:06:18:23:60:fe: c1:27:de:10:dc:92:75:29:7f:69:84:3b:64:f9:db: e2:e6:37:40:7f:ec:bb:07:da:d7:44:ba:e2:17:99: e9:57:b6:1c:12:fc:52:1a:e2:e5:f0:8e:0c:5c:12: ad:43:92:56:4b:b9:cd:ee:7c:ee:5c:60:fd:45:2d: 2a:aa:82:e1:d6:ad:a6:8e:c4:07:60:fb:4e:25:28: 27:dd:7e:9f:c5:14:d4:41:6e:61:e7:98:11:eb:c5: bb:3b:2b:9f:f8:be:d5:20:f7:21:62:17:22:83:b1: a9:b1:9b:18:47:98:2b:a4:39:e8:9b:87:6e:45:10: a3:7c:6b:93:98:cf:53:a3:0a:4c:5f:65:e6:04:d4: 8b:45:44:3e:ff:2c:80:a9:fc:44:df:96:93:cf:4f: 06:20:ec:7c:07:7c:5a:41:83:73:dc:0d:cd:02:d6: b9:fa:ff:df:e5:8a:66:21:b5:63:45:69:fd:67:2d: 7f:ba:a8:eb:2f:4c:9d:00:43:3c:1f:a1:24:0b:aa: 86:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F6:C1:0B:7A:A0:CC:12:69:7F:18:DB:39:A9:3D:6A:A1:69:EE:74 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LPbBC3qgzBJpfxjbOak9aqFp7nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:340::/44 Signature Algorithm: sha256WithRSAEncryption 11:cc:82:58:98:c8:17:d4:76:42:00:06:c4:ba:90:44:2c:08: 7a:be:56:5f:aa:a6:69:8c:35:f0:e2:68:cd:3e:87:44:35:2b: be:a6:12:0d:2d:23:a4:0e:db:f9:48:65:30:44:7d:cf:fc:3c: 54:6c:6d:90:34:8c:bb:79:28:39:ff:f6:39:99:a5:4e:30:13: 5d:35:4d:16:88:6b:2b:10:11:cc:5c:5a:ec:a3:79:15:04:06: a5:8a:7f:80:ad:ee:08:06:6d:11:2b:73:ee:49:be:88:6a:f8: 55:ab:c5:57:04:78:eb:8b:98:0d:dc:84:1c:8a:c6:35:37:ed: 27:65:16:bc:37:fb:ff:67:39:aa:9d:9d:85:69:59:88:c8:0f: fc:3a:27:c3:f4:3e:6c:09:37:28:fd:6a:e3:47:ad:c2:3b:02: ae:7c:fe:b0:fe:8a:00:36:2b:ea:d2:97:9b:dd:3b:03:fb:d6: 5d:a1:1c:68:fc:44:79:55:1d:46:50:43:fe:50:ef:46:df:b3: df:da:56:eb:5d:42:28:96:db:aa:24:bd:aa:53:0d:0d:d8:8e: 2b:db:e5:15:7c:bd:6f:6a:92:7e:97:95:06:48:1d:cb:04:5b: a7:4f:91:bc:67:f6:de:ce:bf:8e:9d:0d:92:78:71:cd:8b:17: 90:80:bd:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWAes9G9ui/UlngcS6cFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Y2YzEwYjdhYTBjYzEyNjk3ZjE4ZGIzOWE5M2Q2YWExNjllZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgrdpOVHjApBFXy6Vg5PIlCvaG9b AMJkjpVW9ybeCn4RQTlOlsz00qykUg3J+Ei4IHOVPerNBhgjYP7BJ94Q3JJ1KX9p hDtk+dvi5jdAf+y7B9rXRLriF5npV7YcEvxSGuLl8I4MXBKtQ5JWS7nN7nzuXGD9 RS0qqoLh1q2mjsQHYPtOJSgn3X6fxRTUQW5h55gR68W7Oyuf+L7VIPchYhcig7Gp sZsYR5grpDnom4duRRCjfGuTmM9TowpMX2XmBNSLRUQ+/yyAqfxE35aTz08GIOx8 B3xaQYNz3A3NAta5+v/f5YpmIbVjRWn9Zy1/uqjrL0ydAEM8H6EkC6qGrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCz2wQt6oMwSaX8Y2zmpPWqhae50MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvTFBiQkMzcWd6QkpwZnhqYk9hazlhcUZwN25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQNA MA0GCSqGSIb3DQEBCwUAA4IBAQARzIJYmMgX1HZCAAbEupBELAh6vlZfqqZpjDXw 4mjNPodENSu+phINLSOkDtv5SGUwRH3P/DxUbG2QNIy7eSg5//Y5maVOMBNdNU0W iGsrEBHMXFrso3kVBAalin+Are4IBm0RK3PuSb6IavhVq8VXBHjri5gN3IQcisY1 N+0nZRa8N/v/ZzmqnZ2FaVmIyA/8OifD9D5sCTco/WrjR63COwKufP6w/ooANivq 0peb3TsD+9ZdoRxo/ER5VR1GUEP+UO9G37Pf2lbrXUIoltuqJL2qUw0N2I4r2+UV fL1vapJ+l5UGSB3LBFunT5G8Z/bezr+OnQ2SeHHNixeQgL1H -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:54 2026 by rpki-client