This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/LlXWpROIqtL6tp6Aj-IFy29MFjs.roa File: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (raw, json) Hash identifier: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY= Subject key identifier: 2E:55:D6:A5:13:88:AA:D2:FA:B6:9E:80:8F:E2:05:CB:6F:4C:16:3B Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Certificate serial: 019B7910FB2B08127471B0037BBEA2B1D36E Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/LlXWpROIqtL6tp6Aj-IFy29MFjs.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210916 IP address blocks: 2a11:6c6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fb:2b:08:12:74:71:b0:03:7b:be:a2:b1:d3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e55d6a51388aad2fab69e808fe205cb6f4c163b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:ad:52:33:96:fa:45:ff:be:68:14:84:7e: 7d:31:e1:93:f2:70:19:1a:27:aa:37:f8:5c:06:d5: 4c:bf:1b:ab:19:01:48:6e:05:09:00:84:89:80:73: 98:9b:37:ab:f6:62:8e:cf:65:ac:f1:aa:2a:fd:64: 8a:d9:e8:f8:7f:bd:e3:51:31:8d:17:f2:c2:b9:ea: 65:72:09:c6:61:a4:f5:77:d8:f0:f2:87:f7:36:27: d9:1e:42:db:e0:21:c5:c6:b7:66:7d:82:6c:e3:6e: 89:3c:ea:4e:0d:8a:52:ee:d1:2c:c7:8a:b3:e4:12: 07:70:ba:be:ac:5f:e3:10:13:30:b9:e3:03:d3:65: f0:90:8e:dc:a4:f5:39:80:87:6b:a2:08:82:44:64: 97:5f:a5:f3:f4:33:83:e6:e4:ec:e2:d1:73:7c:21: 78:53:f2:26:85:ca:78:c7:89:fc:74:d8:79:18:bf: df:f7:f0:cb:16:70:9c:7a:09:e4:2b:63:7f:4a:67: aa:f7:6d:ac:c3:ac:61:6f:4c:2c:d8:a4:7c:ee:a9: e8:da:00:d8:4a:69:a1:1d:e7:31:57:06:b4:9b:db: f3:9e:44:84:e0:e4:3b:4e:2c:17:9d:f4:24:0a:7b: 27:42:24:c4:6d:35:11:6b:f6:b7:d0:77:70:7b:95: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:D6:A5:13:88:AA:D2:FA:B6:9E:80:8F:E2:05:CB:6F:4C:16:3B X509v3 Authority Key Identifier: keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/LlXWpROIqtL6tp6Aj-IFy29MFjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:6c6::/32 Signature Algorithm: sha256WithRSAEncryption 64:ef:bd:78:01:d8:79:23:81:58:e0:bf:e5:7b:ec:68:be:5f: 40:3f:88:18:14:0a:da:19:11:54:97:ad:0e:37:6e:10:d6:4d: b8:9b:8c:d9:b3:25:9b:0a:75:ad:7d:c8:41:25:49:cf:72:ea: 9a:e9:f4:19:a0:e1:9c:3d:65:32:57:fd:31:88:87:43:5d:b4: 7b:db:06:02:9b:4f:c8:de:83:fb:54:98:63:16:71:af:9e:f7: 5c:3e:b6:f4:73:63:17:4b:2a:71:72:8b:39:83:e6:a5:dc:32: a2:8a:97:5a:87:e2:4c:79:4d:1f:ff:27:69:0c:e8:c2:42:40: f2:46:e0:9c:54:cd:bb:10:0c:3d:e8:14:e8:55:a2:13:70:b5: 0e:c3:67:a1:dc:39:8a:b3:59:e5:ee:73:47:70:a0:1e:e0:79: e1:52:62:31:c5:11:23:cd:7d:de:60:44:12:4d:85:42:ca:74: bc:3a:f4:eb:9f:ce:06:4a:36:1e:86:7f:79:ac:7b:d2:ef:3a: 78:d5:eb:75:af:03:00:19:13:0f:bd:34:4e:71:19:29:9f:fa: 08:a3:0b:8a:30:44:42:80:f9:f8:ab:fb:9c:6d:1e:af:76:03: c5:70:1d:d8:42:de:c7:d1:b7:d2:b3:db:4a:4f:0b:93:51:51: c7:53:4d:4c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EPsrCBJ0cbADe76isdNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2 YzFhZjEwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTU1ZDZhNTEzODhhYWQyZmFiNjllODA4ZmUyMDVjYjZmNGMxNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv2tUjOW+kX/vmgUhH59MeGT8nAZ GieqN/hcBtVMvxurGQFIbgUJAISJgHOYmzer9mKOz2Ws8aoq/WSK2ej4f73jUTGN F/LCueplcgnGYaT1d9jw8of3NifZHkLb4CHFxrdmfYJs426JPOpODYpS7tEsx4qz 5BIHcLq+rF/jEBMwueMD02XwkI7cpPU5gIdrogiCRGSXX6Xz9DOD5uTs4tFzfCF4 U/Imhcp4x4n8dNh5GL/f9/DLFnCcegnkK2N/Smeq922sw6xhb0ws2KR87qno2gDY SmmhHecxVwa0m9vznkSE4OQ7TiwXnfQkCnsnQiTEbTURa/a30Hdwe5VZjwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC5V1qUTiKrS+raegI/iBctvTBY7MB8GA1UdIwQY MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt YmQ4MDlkOWRlZGI5LzEvTGxYV3BST0lxdEw2dHA2QWotSUZ5MjlNRmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5 LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEGxjAN BgkqhkiG9w0BAQsFAAOCAQEAZO+9eAHYeSOBWOC/5XvsaL5fQD+IGBQK2hkRVJet DjduENZNuJuM2bMlmwp1rX3IQSVJz3Lqmun0GaDhnD1lMlf9MYiHQ120e9sGAptP yN6D+1SYYxZxr573XD629HNjF0sqcXKLOYPmpdwyooqXWofiTHlNH/8naQzowkJA 8kbgnFTNuxAMPegU6FWiE3C1DsNnodw5irNZ5e5zR3CgHuB54VJiMcURI8193mBE Ek2FQsp0vDr065/OBko2HoZ/eax70u86eNXrda8DABkTD700TnEZKZ/6CKMLijBE QoD5+Kv7nG0er3YDxXAd2ELex9G30rPbSk8Lk1FRx1NNTA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:39 2026 by rpki-client