This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ladaJsKVTuv3YGDi38_Qd9THC0w.roa
File: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (raw, json)
Hash identifier: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=
Subject key identifier: 95:A7:5A:26:C2:95:4E:EB:F7:60:60:E2:DF:CF:D0:77:D4:C7:0B:4C
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019B7A5B33DFDDA95AC1F5C7A1E6CFA5AA6A
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ladaJsKVTuv3YGDi38_Qd9THC0w.roa
Signing time: Thu 01 Jan 2026 16:19:16 +0000
ROA not before: Thu 01 Jan 2026 16:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206074
IP address blocks: 2a0e:d784::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:33:df:dd:a9:5a:c1:f5:c7:a1:e6:cf:a5:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 16:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a75a26c2954eebf76060e2dfcfd077d4c70b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:4c:4c:08:01:af:50:32:9c:16:01:46:32:
95:54:66:c1:61:5c:6c:d6:5f:fc:9d:d1:70:77:19:
0f:9b:ba:66:89:a8:19:53:13:f9:3c:b0:92:f5:24:
ce:35:7b:33:c9:55:d7:ec:85:2c:20:1a:28:b6:6a:
ea:f0:cf:e6:2c:a8:e5:73:73:64:0f:7c:bb:bd:24:
33:d5:14:40:1f:a0:6a:24:b5:b7:d8:e2:1a:dc:ca:
3d:80:10:ef:b2:3c:20:3c:24:22:02:8c:8e:84:f8:
10:2f:a7:39:e2:c8:e5:61:d8:cd:89:47:93:d7:cf:
1c:8a:f0:40:6d:c8:63:91:ba:e7:58:1e:64:e2:4b:
75:54:66:9e:26:fd:b6:dd:b0:59:70:65:79:96:fb:
6e:c9:bf:a9:ae:25:94:cf:a1:26:11:a5:1f:41:2d:
ea:39:e1:bb:4e:1b:0b:d5:72:c5:5e:d9:03:3a:30:
bf:34:f1:c2:1d:28:d9:4b:17:5f:5c:b0:67:e7:ff:
64:06:d4:a6:9a:ae:5b:7c:2d:0b:8b:cf:41:1a:6b:
ed:82:11:32:15:f2:af:d6:68:e5:fe:05:a1:4c:60:
e6:50:22:e8:cc:e2:a6:9e:f0:cf:f3:e1:de:af:f1:
34:1c:99:74:98:1f:79:2b:77:6c:9a:4d:27:00:b2:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:5A:26:C2:95:4E:EB:F7:60:60:E2:DF:CF:D0:77:D4:C7:0B:4C
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ladaJsKVTuv3YGDi38_Qd9THC0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d784::/32
Signature Algorithm: sha256WithRSAEncryption
a7:a2:92:29:e7:ca:33:d6:de:d2:3b:3a:13:7d:bf:8f:92:f0:
69:45:67:a6:06:2d:a9:14:ad:7a:cb:1e:24:01:75:fb:a5:49:
99:c7:66:9d:c0:c4:f8:4f:b8:15:de:9e:bb:e2:ec:ff:28:8a:
7c:ed:44:41:7d:e2:ef:19:84:62:7b:29:e7:53:e0:fb:48:de:
e1:a5:d6:08:75:a8:f3:b7:c6:3b:55:43:97:73:b1:48:da:c3:
7c:7e:46:ea:29:1f:ee:18:2b:27:c9:97:6d:24:ae:64:35:c8:
07:8e:f4:f6:27:8a:66:34:75:e5:1e:e5:5f:dc:aa:d0:d5:08:
f4:47:f7:72:61:79:94:03:2b:47:62:b7:26:a9:96:90:52:99:
54:b0:ca:a5:ed:e4:e6:e9:70:a8:ce:a9:81:e7:b9:00:3f:df:
72:93:95:ad:40:69:6d:08:d4:1d:c9:5c:fe:8c:52:9c:80:9e:
9f:95:3e:da:16:60:27:e4:42:c9:a8:30:63:9b:95:5e:a7:31:
66:bb:e0:4e:fe:6b:35:c3:02:ef:ea:c2:84:5c:2f:d3:9b:13:
00:e6:70:2e:da:c3:9f:7e:09:b1:31:94:e0:9a:d2:f4:e4:df:
ab:de:0e:e4:b8:cf:a5:72:67:9d:ec:03:c2:e2:d5:3f:d9:a6:
c0:26:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:36 2026 by rpki-client