This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa File: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (raw, json) Hash identifier: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k= Subject key identifier: 97:1D:89:F5:63:AC:5F:63:39:E2:DF:3E:27:E2:29:97:8F:D7:50:CE Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Certificate serial: 019B7A59CB8CD4C17B5C838F4FE63440CD8F Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa Signing time: Thu 01 Jan 2026 16:17:43 +0000 ROA not before: Thu 01 Jan 2026 16:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215389 IP address blocks: 2001:67c:280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:cb:8c:d4:c1:7b:5c:83:8f:4f:e6:34:40:cd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Validity Not Before: Jan 1 16:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=971d89f563ac5f6339e2df3e27e229978fd750ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:a7:8a:1d:c0:d1:5a:fc:6a:c1:ac:90:a1: da:33:3f:bd:6d:aa:b6:45:83:0a:56:6e:3d:10:97: 13:84:73:42:4e:91:1c:19:c7:51:df:a3:a2:63:2e: 20:3a:b7:7c:ff:f0:aa:60:e8:18:67:b9:6c:28:67: 8a:51:b7:6f:81:0f:98:91:28:ca:03:39:85:7e:be: 40:8e:38:c6:79:4a:8f:12:c0:12:3b:b1:c3:23:cc: 3f:6f:b1:39:77:5a:23:7a:31:83:3f:f8:d5:6e:20: 99:d4:d5:3d:c5:7d:19:1e:7d:45:65:36:d2:25:17: 64:84:d8:99:2f:ea:69:c0:39:41:df:36:c5:98:ca: e7:3e:e1:88:51:0d:f4:42:9a:e4:1a:e2:6d:ef:64: f6:a7:c3:d9:b4:68:1c:a9:32:d6:06:51:9b:4f:9d: c0:e7:a6:1d:3a:dc:1c:ec:fd:d5:e7:87:be:22:02: a7:87:66:35:3d:2e:79:1d:15:7b:86:16:e5:84:f4: 10:71:d5:7c:88:43:67:b2:63:b9:f0:41:fa:9c:8d: 73:25:18:a4:ea:02:96:d8:1a:16:6c:79:98:81:2c: 32:a4:ab:b6:78:51:86:f5:32:0c:07:d4:7c:71:74: 74:76:cd:9d:0f:90:23:ec:04:b9:d9:03:e9:cd:d8: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1D:89:F5:63:AC:5F:63:39:E2:DF:3E:27:E2:29:97:8F:D7:50:CE X509v3 Authority Key Identifier: keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:280::/48 Signature Algorithm: sha256WithRSAEncryption 01:7d:56:0c:b1:c8:1e:ef:2d:88:d9:64:64:9e:c8:83:e7:41: 9f:ad:c3:08:59:ae:f8:94:7b:b0:ff:3d:df:05:bd:8d:75:53: d2:0f:e0:99:2b:f0:da:b7:1c:04:86:7f:1c:fc:a2:df:84:69: 49:07:10:bd:a1:50:67:ae:d9:88:09:2c:d5:48:12:b7:ab:d3: 46:a0:7a:fb:48:ed:67:ec:6a:53:0a:8b:9c:03:14:4c:7e:68: 04:10:a3:4b:08:9b:0c:e6:c0:5a:1d:bd:2f:ae:c8:ff:c2:58: d1:b7:e5:96:cb:74:e8:19:16:e4:fb:60:93:8c:1d:0d:41:cb: 62:b2:3e:27:58:64:2c:eb:e1:df:d3:23:2c:9b:3e:57:8c:d5: f1:e0:2f:7d:bb:81:3e:8f:0a:d2:55:ec:56:66:41:0c:dc:52: bf:a2:e0:b8:88:77:3f:8e:a6:33:ee:73:5e:24:55:57:60:db: 7f:54:c2:dd:4e:92:a7:69:25:97:26:18:46:ee:b4:ff:db:68: 34:2d:58:c0:90:19:50:97:8f:25:04:c0:95:3b:ab:72:07:5d: 96:25:7a:97:37:0e:2c:7c:ea:57:41:8c:bb:e9:38:93:5d:0d: a4:f6:0a:79:6f:60:84:8d:b7:b5:ac:45:d2:2b:67:d4:3d:c0: d9:02:8f:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WcuM1MF7XIOPT+Y0QM2PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZWIzZmFhODM4ODU0OWI1NWNiM2YzYWJkNGM2YzE1MTA2 Y2Y1M2IwHhcNMjYwMTAxMTYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzFkODlmNTYzYWM1ZjYzMzllMmRmM2UyN2UyMjk5NzhmZDc1MGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvROnih3A0Vr8asGskKHaMz+9baq2 RYMKVm49EJcThHNCTpEcGcdR36OiYy4gOrd8//CqYOgYZ7lsKGeKUbdvgQ+YkSjK AzmFfr5AjjjGeUqPEsASO7HDI8w/b7E5d1ojejGDP/jVbiCZ1NU9xX0ZHn1FZTbS JRdkhNiZL+ppwDlB3zbFmMrnPuGIUQ30QprkGuJt72T2p8PZtGgcqTLWBlGbT53A 56YdOtwc7P3V54e+IgKnh2Y1PS55HRV7hhblhPQQcdV8iENnsmO58EH6nI1zJRik 6gKW2BoWbHmYgSwypKu2eFGG9TIMB9R8cXR0ds2dD5Aj7AS52QPpzdivPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJcdifVjrF9jOeLfPifiKZeP11DOMB8GA1UdIwQY MBaAFB3rP6qDiFSbVcs/Or1MbBUQbPU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGIt NTAyYTk1N2ZkYWY4LzEvbHgySjlXT3NYMk01NHQ4LUotSXBsNF9YVU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGItNTAyYTk1N2ZkYWY4 LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAKA MA0GCSqGSIb3DQEBCwUAA4IBAQABfVYMscge7y2I2WRknsiD50GfrcMIWa74lHuw /z3fBb2NdVPSD+CZK/DatxwEhn8c/KLfhGlJBxC9oVBnrtmICSzVSBK3q9NGoHr7 SO1n7GpTCoucAxRMfmgEEKNLCJsM5sBaHb0vrsj/wljRt+WWy3ToGRbk+2CTjB0N Qctisj4nWGQs6+Hf0yMsmz5XjNXx4C99u4E+jwrSVexWZkEM3FK/ouC4iHc/jqYz 7nNeJFVXYNt/VMLdTpKnaSWXJhhG7rT/22g0LVjAkBlQl48lBMCVO6tyB12WJXqX Nw4sfOpXQYy76TiTXQ2k9gp5b2CEjbe1rEXSK2fUPcDZAo8s -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:15 2026 by rpki-client