This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa File: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (raw, json) Hash identifier: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI= Subject key identifier: 95:97:5E:07:FC:CB:84:19:FC:3E:66:BC:56:B2:2B:4D:9F:83:2F:0D Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b Certificate serial: 019B797F2172A5BB1B20A26C01BF9BD8B840 Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203019 IP address blocks: 2001:678:1174::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:21:72:a5:bb:1b:20:a2:6c:01:bf:9b:d8:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95975e07fccb8419fc3e66bc56b22b4d9f832f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:e3:42:97:29:d2:0d:31:23:46:e0:f9:c9: fc:a7:5e:2f:e8:cd:db:a3:ae:03:e5:d5:d5:73:ea: 03:ce:8f:ab:61:0f:e1:32:35:02:b2:54:64:e0:8b: 06:ec:e4:94:f2:70:85:34:75:b8:5b:0c:ca:c9:d2: 11:c7:33:a7:59:bc:e1:b1:1c:eb:56:ae:06:e7:04: 8d:75:10:73:90:f4:51:43:8c:2d:ea:c9:b5:bd:7b: 85:72:9b:a7:38:96:4f:0c:2a:da:61:2c:d7:45:76: 63:50:69:d2:d5:c8:d4:88:12:92:65:65:0e:d6:22: 18:d9:c1:fd:03:e9:2d:76:61:c1:2c:31:90:3e:20: ff:27:35:d3:1f:cf:53:ed:13:06:11:8e:65:dc:05: 7a:19:ca:b9:0a:1f:82:79:05:59:5e:1f:89:9e:61: 18:44:07:45:3b:e4:b4:7f:39:18:82:fd:24:83:7a: 07:65:c4:09:1e:d0:25:0b:d4:a2:6e:a0:c5:2c:39: 26:29:91:22:ea:b3:39:1e:f5:fe:81:6d:a2:b8:e2: 82:a4:b3:52:7a:9b:a7:be:34:5f:92:9e:fd:94:63: 11:0c:8f:cb:83:fc:85:ef:e7:6f:a5:74:2a:49:dc: ce:99:5a:12:db:94:6d:6f:5c:a4:1c:02:bc:74:cc: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:97:5E:07:FC:CB:84:19:FC:3E:66:BC:56:B2:2B:4D:9F:83:2F:0D X509v3 Authority Key Identifier: keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1174::/48 Signature Algorithm: sha256WithRSAEncryption 28:03:bc:e4:5c:ad:e8:10:56:32:6a:d7:a5:f8:33:a6:13:9f: 35:5a:73:56:5f:0e:e3:bd:81:f2:78:56:82:6b:a9:21:d5:17: 27:54:c9:f6:6a:0f:5c:32:38:b1:b7:f7:26:f6:13:e0:68:76: af:09:f6:06:ee:df:15:10:f1:05:70:e6:92:84:cf:cf:5f:2d: 71:4c:ae:72:ed:c1:fb:d1:f1:e1:34:5d:b3:3a:3c:3c:5f:cd: 23:14:f5:29:35:cd:6d:07:a1:f5:3c:ae:1b:d6:80:e5:38:3a: 3e:27:f9:84:01:f7:36:6a:2f:0a:73:d2:7a:20:75:89:15:87: 68:71:1f:11:cd:2b:69:8f:15:d4:63:23:6f:94:63:68:52:03: 10:9e:10:d7:1b:63:9d:48:20:df:99:d8:2c:0e:fc:cb:44:77: 29:78:e4:d1:db:b9:12:2b:79:f1:02:00:fc:a6:a6:55:6f:6a: b1:02:42:55:12:4c:5d:27:a3:62:6e:74:c8:3d:d2:d0:9d:ec: c7:2c:f6:c5:ee:ea:cc:db:a6:2a:cb:bc:3c:ac:e8:ef:4e:85: a8:ad:4e:75:50:f7:91:c8:b9:a4:78:a2:b1:d5:81:aa:ab:3c: 01:2f:b4:6b:01:48:82:49:20:2d:66:28:c9:cb:4a:bf:31:60: bd:8d:88:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fyFypbsbIKJsAb+b2LhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYzRhMDg5ZjhlNjhhODMwZWI5OGE1YzFmZTI1NjA2NTFl NWIzOWIwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk3NWUwN2ZjY2I4NDE5ZmMzZTY2YmM1NmIyMmI0ZDlmODMyZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyrjQpcp0g0xI0bg+cn8p14v6M3b o64D5dXVc+oDzo+rYQ/hMjUCslRk4IsG7OSU8nCFNHW4WwzKydIRxzOnWbzhsRzr Vq4G5wSNdRBzkPRRQ4wt6sm1vXuFcpunOJZPDCraYSzXRXZjUGnS1cjUiBKSZWUO 1iIY2cH9A+ktdmHBLDGQPiD/JzXTH89T7RMGEY5l3AV6Gcq5Ch+CeQVZXh+JnmEY RAdFO+S0fzkYgv0kg3oHZcQJHtAlC9SibqDFLDkmKZEi6rM5HvX+gW2iuOKCpLNS epunvjRfkp79lGMRDI/Lg/yF7+dvpXQqSdzOmVoS25Rtb1ykHAK8dMz+0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJWXXgf8y4QZ/D5mvFayK02fgy8NMB8GA1UdIwQY MBaAFLrEoIn45oqDDrmKXB/iVgZR5bObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWU5NmEtZTkxZi00MTdiLWEzMmQt MDk2MGMxNmY3NGJmLzEvbFpkZUJfekxoQm44UG1hOFZySXJUWi1ETHcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yNWU5NmEtZTkxZi00MTdiLWEzMmQtMDk2MGMxNmY3NGJm LzEvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBF0 MA0GCSqGSIb3DQEBCwUAA4IBAQAoA7zkXK3oEFYyatel+DOmE581WnNWXw7jvYHy eFaCa6kh1RcnVMn2ag9cMjixt/cm9hPgaHavCfYG7t8VEPEFcOaShM/PXy1xTK5y 7cH70fHhNF2zOjw8X80jFPUpNc1tB6H1PK4b1oDlODo+J/mEAfc2ai8Kc9J6IHWJ FYdocR8RzStpjxXUYyNvlGNoUgMQnhDXG2OdSCDfmdgsDvzLRHcpeOTR27kSK3nx AgD8pqZVb2qxAkJVEkxdJ6NibnTIPdLQnezHLPbF7urM26Yqy7w8rOjvToWorU51 UPeRyLmkeKKx1YGqqzwBL7RrAUiCSSAtZijJy0q/MWC9jYjg -----END CERTIFICATE-----Generated at Mon Feb 2 07:58:46 2026 by rpki-client