This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/LDECAD-lPci3yQK-UvQAfSMDH4M.roa File: LDECAD-lPci3yQK-UvQAfSMDH4M.roa (raw, json) Hash identifier: /SAx191IjZTgIiKzV24+CmkVTaa/vJnaO5g0if4GB8I= Subject key identifier: 2C:31:02:00:3F:A5:3D:C8:B7:C9:02:BE:52:F4:00:7D:23:03:1F:83 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B954EF9B4BA4C8EA940D18470A1AFFFDA Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/LDECAD-lPci3yQK-UvQAfSMDH4M.roa Signing time: Tue 06 Jan 2026 21:55:39 +0000 ROA not before: Tue 06 Jan 2026 21:55:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205911 IP address blocks: 2a13:4800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:4e:f9:b4:ba:4c:8e:a9:40:d1:84:70:a1:af:ff:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 6 21:55:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3102003fa53dc8b7c902be52f4007d23031f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:68:89:81:1d:49:35:9c:a8:3e:3a:3f:f1: 6c:b7:6a:2d:13:f4:9a:84:21:b5:95:ba:ac:e6:f8: 3a:91:c8:55:20:1e:29:3f:d7:e1:9d:54:e4:1f:54: c5:50:78:27:77:2c:2b:0b:c2:13:29:5e:b5:0e:76: a4:5a:f4:49:99:ce:6e:85:97:61:d1:45:68:e7:6f: 51:fd:68:bc:fc:bd:07:e2:18:34:c2:b1:97:a3:02: 10:b8:88:8b:1a:d1:a7:d7:31:f2:ee:31:d5:53:60: f3:25:27:69:57:9f:1a:d6:fa:98:10:8c:f8:aa:55: 92:e7:63:97:70:f8:5e:58:25:91:14:64:b5:f0:09: 10:9b:ef:68:ee:72:eb:e7:9b:75:c3:28:7c:8d:0c: f7:6a:72:f2:e6:44:3e:5a:81:cd:c0:aa:2c:84:c4: 6e:fc:b7:66:48:88:b9:75:cb:33:bc:be:f4:8d:1c: b2:bc:08:35:fd:29:62:55:e6:20:9f:f9:51:4d:7a: 4b:99:5e:65:40:6c:0d:2d:d9:d5:73:bf:55:82:be: 08:e3:ce:81:98:5b:bf:96:03:d9:da:0e:16:47:c8: 66:50:22:8f:50:12:52:42:81:cb:9b:92:9e:bf:68: c1:43:2d:63:f9:09:7b:bf:88:8d:4a:be:d5:97:9a: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:31:02:00:3F:A5:3D:C8:B7:C9:02:BE:52:F4:00:7D:23:03:1F:83 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/LDECAD-lPci3yQK-UvQAfSMDH4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:4800::/29 Signature Algorithm: sha256WithRSAEncryption 17:17:c6:a3:ac:27:b1:39:7d:16:14:16:6a:09:b1:ed:66:b4: 32:96:67:2d:ed:16:e2:e9:81:aa:b9:86:a7:a1:04:ec:e7:e8: d5:70:8e:c8:81:4c:d5:60:bf:09:08:54:cb:b9:5d:96:de:20: 9c:d4:0b:a4:5a:17:01:9f:d6:b4:91:a0:2a:ff:bc:2a:a9:31: c9:69:7b:89:8d:55:f7:12:0d:67:b2:c1:43:2d:f5:1d:92:ef: 84:d7:34:fd:95:c7:0d:88:e6:ce:e6:4a:32:87:24:c3:55:15: 2c:af:a6:d0:f7:86:50:c5:c0:bb:75:a8:20:93:e8:8c:34:6a: 92:0e:af:4f:38:ea:34:8f:7e:21:e7:d0:69:8f:91:00:a8:0d: 74:0d:dc:47:a0:0a:39:5d:3e:be:3a:50:c7:76:9e:fd:7f:8c: fc:5e:5c:94:0d:55:44:e0:d6:61:24:26:c3:a6:9b:63:61:eb: c0:2f:13:ca:23:1a:df:95:0d:87:19:c1:97:bb:1e:24:91:ba: db:b0:1f:0a:58:28:7a:f9:93:13:3e:d9:0f:c9:53:5a:6a:4d: 0a:fc:02:ef:19:10:49:8c:f2:67:c0:6d:8d:92:23:d1:b0:7a: f4:15:90:5c:11:e5:65:f9:4b:82:2c:59:22:f4:ed:80:e3:06: 2b:7f:41:77 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuVTvm0ukyOqUDRhHChr//aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTA2MjE1NTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzMxMDIwMDNmYTUzZGM4YjdjOTAyYmU1MmY0MDA3ZDIzMDMxZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeVoiYEdSTWcqD46P/Fst2otE/Sa hCG1lbqs5vg6kchVIB4pP9fhnVTkH1TFUHgndywrC8ITKV61DnakWvRJmc5uhZdh 0UVo529R/Wi8/L0H4hg0wrGXowIQuIiLGtGn1zHy7jHVU2DzJSdpV58a1vqYEIz4 qlWS52OXcPheWCWRFGS18AkQm+9o7nLr55t1wyh8jQz3anLy5kQ+WoHNwKoshMRu /LdmSIi5dcszvL70jRyyvAg1/SliVeYgn/lRTXpLmV5lQGwNLdnVc79Vgr4I486B mFu/lgPZ2g4WR8hmUCKPUBJSQoHLm5Kev2jBQy1j+Ql7v4iNSr7Vl5oA0QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCwxAgA/pT3It8kCvlL0AH0jAx+DMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvTERFQ0FELWxQY2kzeVFLLVV2UUFmU01ESDRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNIADAN BgkqhkiG9w0BAQsFAAOCAQEAFxfGo6wnsTl9FhQWagmx7Wa0MpZnLe0W4umBqrmG p6EE7Ofo1XCOyIFM1WC/CQhUy7ldlt4gnNQLpFoXAZ/WtJGgKv+8KqkxyWl7iY1V 9xINZ7LBQy31HZLvhNc0/ZXHDYjmzuZKMockw1UVLK+m0PeGUMXAu3WoIJPojDRq kg6vTzjqNI9+IefQaY+RAKgNdA3cR6AKOV0+vjpQx3ae/X+M/F5clA1VRODWYSQm w6abY2HrwC8TyiMa35UNhxnBl7seJJG627AfClgoevmTEz7ZD8lTWmpNCvwC7xkQ SYzyZ8BtjZIj0bB69BWQXBHlZflLgixZIvTtgOMGK39Bdw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:52 2026 by rpki-client