This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/la3id3-rhAUchL_KGeZ0yMnf8X0.roa File: la3id3-rhAUchL_KGeZ0yMnf8X0.roa (raw, json) Hash identifier: qaUS3oP54Efu+Z3rBINNpGvOkE4VkDOPHxMyht12/HM= Subject key identifier: 95:AD:E2:77:7F:AB:84:05:1C:84:BF:CA:19:E6:74:C8:C9:DF:F1:7D Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A660F8CE67BE4DFC8757D511382F Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/la3id3-rhAUchL_KGeZ0yMnf8X0.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56876 IP address blocks: 88.216.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a6:60:f8:ce:67:be:4d:fc:87:57:d5:11:38:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ade2777fab84051c84bfca19e674c8c9dff17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:68:66:f8:22:45:ef:a7:5c:c3:77:81:cc:f0: 94:5f:e6:bb:72:f1:2d:a5:b0:fc:c0:3e:0a:8b:32: bd:09:0e:0a:61:aa:21:18:ca:6d:07:85:f6:4b:87: 99:f0:7e:f5:1d:f2:4a:25:8e:85:2f:c3:2b:b3:8c: 43:55:53:e2:8c:16:06:3c:a9:f4:53:8e:aa:b3:32: 8e:e2:14:74:d9:63:de:b7:c8:8c:c2:5a:38:2c:64: 4d:71:34:10:05:7c:52:51:c1:b6:56:7a:3e:21:ae: 61:5c:a6:1d:6d:39:db:42:45:6f:70:3d:5c:5e:b5: 1f:d9:7e:64:59:81:de:f5:7f:3b:17:ea:92:9a:98: f2:9b:54:99:ed:43:0a:99:32:26:a6:59:18:62:7d: ec:02:ae:34:b1:36:43:39:b3:5c:30:91:f7:6a:bb: e4:8f:45:aa:c2:4e:0a:d4:c1:b4:77:2c:d1:ea:99: 50:4a:b7:c3:c5:01:76:36:a6:a2:46:aa:a9:5a:c3: 56:80:40:05:99:47:b7:2e:7d:16:76:4c:11:b0:76: 1f:6e:0d:a6:f2:f6:6c:d7:41:d0:24:0a:25:62:be: 06:f6:65:7f:62:08:f9:fa:7e:b0:e8:16:bf:f1:5a: 09:ae:26:15:f1:65:8f:dd:0e:7e:29:38:c5:c6:65: 8e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:E2:77:7F:AB:84:05:1C:84:BF:CA:19:E6:74:C8:C9:DF:F1:7D X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/la3id3-rhAUchL_KGeZ0yMnf8X0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.216.0/22 Signature Algorithm: sha256WithRSAEncryption 54:cc:75:fb:6a:5f:44:e2:7f:33:a0:9e:aa:03:54:24:3f:2b: 6d:72:11:34:f6:48:e5:25:61:82:9a:dd:ef:db:88:d3:28:ed: 9d:9f:a7:f9:e8:05:c0:fe:d8:59:0c:b5:84:6f:e5:2a:68:71: ae:dd:92:23:d7:f5:22:ca:0b:91:5a:13:11:f5:e6:fb:85:ad: 83:8e:22:d3:84:13:c4:e3:c7:8a:eb:65:60:77:62:25:af:a1: 79:f9:95:59:dd:30:aa:45:97:0f:35:60:7d:57:12:14:fc:e2: d4:ba:4f:c7:00:3f:ea:03:d8:65:d0:e0:cf:9b:6c:52:68:f1: 58:08:05:21:13:1b:dc:05:2c:73:5d:8e:c1:42:30:da:e4:bb: 6e:5f:4b:a0:a7:04:84:e4:6c:7a:2b:ed:be:c8:6c:4e:5f:ae: 8f:70:a0:ac:7b:95:01:57:ae:09:8e:bc:8b:95:ea:9d:3d:31: 3c:11:11:8a:8b:e4:17:5e:70:39:92:f5:03:9f:34:1c:ed:f0: 9f:d8:0b:46:97:3c:e3:a0:98:b9:73:88:75:75:90:d3:79:c2: bd:32:0b:6e:ca:01:6c:de:b6:2c:9b:b9:39:02:09:9e:c2:58: 8c:1c:34:cc:3a:38:6d:9e:94:f9:75:ad:d1:f2:d8:67:18:b1: 53:32:d9:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKZg+M5nvk38h1fVETgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWFkZTI3NzdmYWI4NDA1MWM4NGJmY2ExOWU2NzRjOGM5ZGZmMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Whm+CJF76dcw3eBzPCUX+a7cvEt pbD8wD4KizK9CQ4KYaohGMptB4X2S4eZ8H71HfJKJY6FL8Mrs4xDVVPijBYGPKn0 U46qszKO4hR02WPet8iMwlo4LGRNcTQQBXxSUcG2Vno+Ia5hXKYdbTnbQkVvcD1c XrUf2X5kWYHe9X87F+qSmpjym1SZ7UMKmTImplkYYn3sAq40sTZDObNcMJH3arvk j0Wqwk4K1MG0dyzR6plQSrfDxQF2NqaiRqqpWsNWgEAFmUe3Ln0WdkwRsHYfbg2m 8vZs10HQJAolYr4G9mV/Ygj5+n6w6Ba/8VoJriYV8WWP3Q5+KTjFxmWOewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWt4nd/q4QFHIS/yhnmdMjJ3/F9MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbGEzaWQzLXJoQVVjaExfS0dlWjB5TW5mOFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNjYMA0G CSqGSIb3DQEBCwUAA4IBAQBUzHX7al9E4n8zoJ6qA1QkPyttchE09kjlJWGCmt3v 24jTKO2dn6f56AXA/thZDLWEb+UqaHGu3ZIj1/UiyguRWhMR9eb7ha2DjiLThBPE 48eK62Vgd2Ilr6F5+ZVZ3TCqRZcPNWB9VxIU/OLUuk/HAD/qA9hl0ODPm2xSaPFY CAUhExvcBSxzXY7BQjDa5LtuX0ugpwSE5Gx6K+2+yGxOX66PcKCse5UBV64JjryL leqdPTE8ERGKi+QXXnA5kvUDnzQc7fCf2AtGlzzjoJi5c4h1dZDTecK9MgtuygFs 3rYsm7k5AgmewliMHDTMOjhtnpT5da3R8thnGLFTMtk0 -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:41 2026 by rpki-client