This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/La2aKUWeZDjg9QmjOG5Ypn3DLPs.roa File: La2aKUWeZDjg9QmjOG5Ypn3DLPs.roa (raw, json) Hash identifier: 0EBH5b7C6wuxTeA4u0lRX6AP5UIiFNUIOVkyZ9JGpK4= Subject key identifier: 2D:AD:9A:29:45:9E:64:38:E0:F5:09:A3:38:6E:58:A6:7D:C3:2C:FB Certificate issuer: /CN=52a65c628483a756688bb158c28ab7c0d47de27c Certificate serial: 019B77C71E61AFDD18829B1947ABE6AF166F Authority key identifier: 52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/La2aKUWeZDjg9QmjOG5Ypn3DLPs.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 31.43.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:61:af:dd:18:82:9b:19:47:ab:e6:af:16:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a65c628483a756688bb158c28ab7c0d47de27c Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dad9a29459e6438e0f509a3386e58a67dc32cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:83:de:0d:a7:b9:4a:83:b5:e9:7a:12:19: 91:5b:4a:eb:85:a7:d0:25:45:ee:32:67:31:c5:9e: d7:e5:56:26:77:96:13:27:02:1b:41:c5:54:22:5d: 8a:d6:b2:54:78:58:e3:ad:31:61:23:2d:c6:8d:7d: 35:03:bd:d4:0c:ef:81:2e:bf:4e:a4:28:f9:f8:bf: b1:6b:9f:26:c7:96:c3:78:48:99:23:73:53:bd:84: 1c:ee:95:bb:d2:4e:0b:68:f4:c8:d2:9c:d3:82:37: 5a:8f:d0:6e:7f:5b:18:11:74:a0:f8:f0:b0:bc:a4: 0a:96:0c:db:85:db:b0:7f:2e:58:a4:1a:7b:54:ff: 2f:c4:80:fb:f2:dc:a7:95:6f:27:84:b2:3e:0a:2d: 3c:ee:bd:1d:39:9c:14:e2:9c:d0:da:53:e8:85:6a: 77:18:06:90:3a:f6:d8:06:97:af:c5:62:04:58:d9: a6:9b:b6:db:9e:e7:41:ee:61:2f:40:28:0e:bf:17: 75:59:74:7f:e9:1c:7f:f3:b1:10:ae:c5:5a:f3:a3: b3:68:90:6f:e0:1c:aa:b2:39:4c:b4:aa:68:2d:27: a7:81:64:d7:8e:b2:ea:72:18:31:32:c9:aa:18:a8: 2b:57:10:3f:41:89:8c:ea:5d:70:ca:67:4e:4f:ae: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AD:9A:29:45:9E:64:38:E0:F5:09:A3:38:6E:58:A6:7D:C3:2C:FB X509v3 Authority Key Identifier: keyid:52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/La2aKUWeZDjg9QmjOG5Ypn3DLPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.160.0/23 Signature Algorithm: sha256WithRSAEncryption 82:ad:d3:78:b3:44:f1:09:40:f4:98:ab:5e:b2:db:33:89:44: e0:e6:39:8c:a4:8f:d2:13:d2:fc:63:f5:0d:dc:58:fd:a0:ba: 81:86:83:50:00:32:b5:ee:b8:2c:e4:61:cb:b4:4a:8e:ca:dc: 1d:7d:71:35:c3:be:52:65:5e:c3:8c:8f:8d:13:bb:64:1f:49: 2b:b8:e2:39:31:49:ab:fe:33:31:18:78:b2:16:9a:74:96:a8: b1:aa:64:dd:74:7e:60:d4:15:0d:31:63:ee:49:a7:a7:31:01: ec:a9:66:15:6d:14:91:21:6d:59:8a:9d:32:af:64:ae:11:66: 50:03:cd:a6:b8:d0:41:39:7c:0f:e7:a7:3a:7c:f0:d3:a0:d4: ba:8d:5b:38:c9:a3:ef:ca:e9:37:49:0d:ad:37:18:45:ac:bc: f2:79:20:bd:7b:14:eb:b6:32:4a:b8:fe:a9:54:e7:9a:12:ec: ca:5d:fa:2d:7a:24:78:fa:dd:ea:1f:8e:01:f3:8b:53:1e:80: 3b:07:16:c6:48:27:e7:3a:62:ac:09:d9:b3:09:7e:39:8d:32: 7b:6f:d4:e5:28:f2:28:db:6e:34:7b:d2:4c:8a:63:41:58:c7: 5b:5d:8a:5d:3b:a7:76:3d:31:56:ea:a6:5e:7c:8a:20:d5:7e: 89:90:cf:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx5hr90YgpsZR6vmrxZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTY1YzYyODQ4M2E3NTY2ODhiYjE1OGMyOGFiN2MwZDQ3 ZGUyN2MwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGFkOWEyOTQ1OWU2NDM4ZTBmNTA5YTMzODZlNThhNjdkYzMyY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2SD3g2nuUqDtel6EhmRW0rrhafQ JUXuMmcxxZ7X5VYmd5YTJwIbQcVUIl2K1rJUeFjjrTFhIy3GjX01A73UDO+BLr9O pCj5+L+xa58mx5bDeEiZI3NTvYQc7pW70k4LaPTI0pzTgjdaj9Buf1sYEXSg+PCw vKQKlgzbhduwfy5YpBp7VP8vxID78tynlW8nhLI+Ci087r0dOZwU4pzQ2lPohWp3 GAaQOvbYBpevxWIEWNmmm7bbnudB7mEvQCgOvxd1WXR/6Rx/87EQrsVa86OzaJBv 4ByqsjlMtKpoLSengWTXjrLqchgxMsmqGKgrVxA/QYmM6l1wymdOT66qowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2tmilFnmQ44PUJozhuWKZ9wyz7MB8GA1UdIwQY MBaAFFKmXGKEg6dWaIuxWMKKt8DUfeJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFaY1lvU0RwMVpvaTdGWXdvcTN3TlI5NG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wM2QwZTItYTQ5ZS00MzcxLWIyMWMt NTAxNWUxMjA4MTE5LzEvTGEyYUtVV2VaRGpnOVFtak9HNVlwbjNETFBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wM2QwZTItYTQ5ZS00MzcxLWIyMWMtNTAxNWUxMjA4MTE5 LzEvVXFaY1lvU0RwMVpvaTdGWXdvcTN3TlI5NG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyugMA0G CSqGSIb3DQEBCwUAA4IBAQCCrdN4s0TxCUD0mKtestsziUTg5jmMpI/SE9L8Y/UN 3Fj9oLqBhoNQADK17rgs5GHLtEqOytwdfXE1w75SZV7DjI+NE7tkH0kruOI5MUmr /jMxGHiyFpp0lqixqmTddH5g1BUNMWPuSaenMQHsqWYVbRSRIW1Zip0yr2SuEWZQ A82muNBBOXwP56c6fPDToNS6jVs4yaPvyuk3SQ2tNxhFrLzyeSC9exTrtjJKuP6p VOeaEuzKXfoteiR4+t3qH44B84tTHoA7BxbGSCfnOmKsCdmzCX45jTJ7b9TlKPIo 2240e9JMimNBWMdbXYpdO6d2PTFW6qZefIog1X6JkM93 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:21 2026 by rpki-client