This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa File: ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa (raw, json) Hash identifier: /beWoLO2qLG+iVsq1LgAGcDTFDHTDeaWmY9kyyThHj0= Subject key identifier: 96:D3:F2:2E:B0:A0:B6:53:25:96:C0:97:43:87:5F:49:5E:67:D6:C8 Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019B7FF1B1397EBBFFC72A9D762817CE583A Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5660 IP address blocks: 217.78.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b1:39:7e:bb:ff:c7:2a:9d:76:28:17:ce:58:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96d3f22eb0a0b6532596c09743875f495e67d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:1f:f5:fc:cc:71:90:40:1c:48:0f:2e:2b: 5d:4a:24:c1:a5:78:fb:a6:6f:5b:e1:52:81:d4:9a: 78:7a:2c:e5:9b:77:3b:23:b0:c2:49:63:6b:e3:1a: 4d:ce:18:b9:c0:58:e3:6f:31:cf:ca:23:20:b0:a3: b7:0a:fd:8b:ad:03:cf:5a:d0:6f:d5:a6:b4:fb:00: 01:f8:3c:ff:40:60:39:85:2f:2d:f0:7b:25:70:2a: ba:46:68:6e:64:f8:31:95:69:79:33:36:ed:bd:b4: 50:aa:a7:48:85:6c:e9:4d:95:50:45:92:0d:a1:2d: db:e4:d0:ad:5c:a9:b6:46:bc:9c:d0:aa:31:c2:22: b8:7a:6b:44:4f:22:ec:48:4d:ea:4e:fe:94:b9:d7: 49:f3:bd:8c:a8:2e:33:e4:15:94:6b:1e:56:63:6e: a6:02:32:00:c6:fe:bf:1e:89:a2:ed:33:df:4d:0c: 66:69:ca:a5:f0:80:fb:5f:df:48:19:41:28:f9:2c: a7:3c:dd:e2:0b:69:12:ba:b6:75:11:57:fe:f4:77: 39:e5:75:20:68:bd:dc:62:30:73:55:57:a1:43:55: 53:73:c7:2b:5c:53:2e:62:e7:e6:21:05:32:d3:1a: 19:66:3c:9e:d1:63:e6:fe:51:d8:80:b8:b7:f5:e2: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:F2:2E:B0:A0:B6:53:25:96:C0:97:43:87:5F:49:5E:67:D6:C8 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.78.40.0/21 Signature Algorithm: sha256WithRSAEncryption 57:95:5f:77:47:86:99:9a:c0:d0:fd:70:56:d2:20:b7:cc:3b: 9e:6f:11:38:1a:44:ba:ab:06:9d:cb:4b:7a:3c:59:25:e2:34: b8:a7:be:a7:f6:36:ca:72:8f:89:0e:b3:b3:c3:53:19:d7:fd: 8c:8f:31:ef:c9:6a:d6:b3:ba:7c:61:5b:68:2b:0f:7b:9b:44: 97:6b:8f:ba:ec:f6:af:b8:9a:5f:5d:e4:a9:a9:5e:58:23:08: e6:ff:e1:f0:24:d4:85:e4:f2:d6:a8:1a:62:90:17:3e:2e:2a: aa:d7:3c:05:79:53:e6:f4:86:db:30:f7:b3:72:5f:11:fd:4a: fc:79:d8:b2:50:7b:c3:c0:02:4b:6e:3c:58:df:8b:f5:37:26: 43:ea:32:a7:f8:23:b1:af:1f:07:ca:37:90:03:0d:26:cf:8d: 5f:b7:ac:52:08:9d:26:d5:61:4c:a0:4c:2c:1f:13:0c:11:73: 39:f2:61:82:a2:39:0d:e8:83:e7:1c:9f:ee:fc:89:58:e4:87: d6:7c:16:e8:c1:56:67:82:7f:87:9b:95:68:f8:e3:9f:ae:c4: 65:33:94:61:33:d4:a6:9e:75:a0:76:2e:91:4c:f0:b4:ee:58: ef:56:4c:9d:8a:01:4e:79:2e:9c:5e:5e:d4:ea:b7:2b:85:ee: 1f:4b:19:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8bE5frv/xyqddigXzlg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmQzZjIyZWIwYTBiNjUzMjU5NmMwOTc0Mzg3NWY0OTVlNjdkNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMMf9fzMcZBAHEgPLitdSiTBpXj7 pm9b4VKB1Jp4eizlm3c7I7DCSWNr4xpNzhi5wFjjbzHPyiMgsKO3Cv2LrQPPWtBv 1aa0+wAB+Dz/QGA5hS8t8HslcCq6RmhuZPgxlWl5MzbtvbRQqqdIhWzpTZVQRZIN oS3b5NCtXKm2Rryc0KoxwiK4emtETyLsSE3qTv6UuddJ872MqC4z5BWUax5WY26m AjIAxv6/Homi7TPfTQxmacql8ID7X99IGUEo+SynPN3iC2kSurZ1EVf+9Hc55XUg aL3cYjBzVVehQ1VTc8crXFMuYufmIQUy0xoZZjye0WPm/lHYgLi39eKL3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbT8i6woLZTJZbAl0OHX0leZ9bIMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvbHRQeUxyQ2d0bE1sbHNDWFE0ZGZTVjVuMXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2U4oMA0G CSqGSIb3DQEBCwUAA4IBAQBXlV93R4aZmsDQ/XBW0iC3zDuebxE4GkS6qwady0t6 PFkl4jS4p76n9jbKco+JDrOzw1MZ1/2MjzHvyWrWs7p8YVtoKw97m0SXa4+67Pav uJpfXeSpqV5YIwjm/+HwJNSF5PLWqBpikBc+Liqq1zwFeVPm9IbbMPezcl8R/Ur8 ediyUHvDwAJLbjxY34v1NyZD6jKn+COxrx8HyjeQAw0mz41ft6xSCJ0m1WFMoEws HxMMEXM58mGCojkN6IPnHJ/u/IlY5IfWfBbowVZngn+Hm5Vo+OOfrsRlM5RhM9Sm nnWgdi6RTPC07ljvVkydigFOeS6cXl7U6rcrhe4fSxl4 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:30 2026 by rpki-client