This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWnrFP8w4a5Veuc-oKDjtcFgsJo.roa File: LWnrFP8w4a5Veuc-oKDjtcFgsJo.roa (raw, json) Hash identifier: MmMEPclgM+RZTMAJfsoJJDoR9Uv9PbsaQRSHwo5YtPo= Subject key identifier: 2D:69:EB:14:FF:30:E1:AE:55:7A:E7:3E:A0:A0:E3:B5:C1:60:B0:9A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE5035888383D32ACF9E24F9331A2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWnrFP8w4a5Veuc-oKDjtcFgsJo.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200581 IP address blocks: 2a0e:b107:1d90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e5:03:58:88:38:3d:32:ac:f9:e2:4f:93:31:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d69eb14ff30e1ae557ae73ea0a0e3b5c160b09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:f4:60:d5:19:a2:22:d0:28:7a:fe:77:4a: 2d:2e:07:6f:1d:32:ef:6a:18:e1:b8:19:8b:a3:78: ea:d2:b1:05:1f:4a:55:f7:77:e4:9a:97:45:32:a7: 2a:b0:97:e1:8d:f1:6a:f8:12:5d:ba:42:43:98:62: ab:c9:a2:1c:87:9f:d7:08:15:47:9b:a8:74:d5:d9: 45:c8:b5:56:0b:0c:49:c6:ca:81:d7:fc:01:29:a9: ba:1e:69:99:0b:a4:a8:a4:73:d3:ed:fd:e3:6b:1b: c0:2e:dd:f5:a6:07:e7:36:30:c2:21:41:9f:0b:1e: 85:7e:ae:96:58:a1:54:1b:31:7e:60:71:4e:af:6b: 73:8d:e1:0e:a4:70:61:dd:1f:01:a7:64:a9:e2:33: 15:f5:74:35:86:f8:bd:66:7e:35:09:a9:2e:9f:be: bd:d9:eb:9c:79:96:2f:fa:e6:76:47:2c:69:32:0b: 3a:4e:78:90:28:49:46:55:c2:aa:45:de:81:0b:9a: cb:60:21:b0:cc:91:6d:fe:e9:52:d3:a3:d2:2f:3c: 33:a6:ba:18:21:d2:54:fd:67:78:00:8d:4c:4d:a6: 35:06:33:fa:88:a5:46:c9:92:a5:bc:1a:82:36:d0: d5:99:4b:f1:27:6d:cf:e0:8c:8c:ba:c1:b2:62:23: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:EB:14:FF:30:E1:AE:55:7A:E7:3E:A0:A0:E3:B5:C1:60:B0:9A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWnrFP8w4a5Veuc-oKDjtcFgsJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d90::/48 Signature Algorithm: sha256WithRSAEncryption 1f:cd:6c:f3:87:9f:5d:ab:80:07:d3:88:11:0f:0b:16:06:c7: c0:c2:9b:de:f2:a5:7e:dc:7b:58:9e:79:e8:fd:df:07:0f:5e: 4f:bf:80:98:3b:44:8c:d3:6e:8f:52:3b:d4:c8:73:f0:85:3b: 90:d1:34:82:f4:df:33:22:15:53:d1:ed:d0:09:e2:0a:46:d7: e9:0b:99:15:5b:e4:68:aa:51:82:ac:53:80:0e:52:1f:b1:64: dd:f5:32:0b:41:d0:12:87:e0:4e:b5:c5:e6:5f:7d:70:5d:a2: 16:b4:d1:83:e1:97:0a:c7:63:16:51:b6:43:58:f9:05:6e:f7: b3:f4:3a:4f:a2:6e:ff:2b:09:b3:a3:02:cd:74:e3:f0:14:ec: a8:28:13:4e:00:20:33:29:92:c0:89:2f:24:16:0b:06:bb:af: a9:9f:46:b7:ae:06:de:01:cf:0d:9c:d4:87:4b:2c:b5:a3:23: aa:65:a6:9c:5f:96:6a:bf:4b:4e:b7:df:26:38:00:8b:2b:b0: 14:61:3e:5f:b9:8b:5e:36:82:e1:f8:4e:0d:25:e6:6e:51:13: 80:cb:84:14:83:be:1c:d3:9e:f3:c3:e3:ed:37:ff:86:a3:e1: d6:3d:02:3f:db:3f:38:9f:e3:85:81:dc:33:68:ae:85:69:03: 7f:f7:64:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOUDWIg4PTKs+eJPkzGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDY5ZWIxNGZmMzBlMWFlNTU3YWU3M2VhMGEwZTNiNWMxNjBiMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kv0YNUZoiLQKHr+d0otLgdvHTLv ahjhuBmLo3jq0rEFH0pV93fkmpdFMqcqsJfhjfFq+BJdukJDmGKryaIch5/XCBVH m6h01dlFyLVWCwxJxsqB1/wBKam6HmmZC6SopHPT7f3jaxvALt31pgfnNjDCIUGf Cx6Ffq6WWKFUGzF+YHFOr2tzjeEOpHBh3R8Bp2Sp4jMV9XQ1hvi9Zn41Cakun769 2euceZYv+uZ2RyxpMgs6TniQKElGVcKqRd6BC5rLYCGwzJFt/ulS06PSLzwzproY IdJU/Wd4AI1MTaY1BjP6iKVGyZKlvBqCNtDVmUvxJ23P4IyMusGyYiPlMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC1p6xT/MOGuVXrnPqCg47XBYLCaMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTFduckZQOHc0YTVWZXVjLW9LRGp0Y0Znc0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBx2Q MA0GCSqGSIb3DQEBCwUAA4IBAQAfzWzzh59dq4AH04gRDwsWBsfAwpve8qV+3HtY nnno/d8HD15Pv4CYO0SM026PUjvUyHPwhTuQ0TSC9N8zIhVT0e3QCeIKRtfpC5kV W+RoqlGCrFOADlIfsWTd9TILQdASh+BOtcXmX31wXaIWtNGD4ZcKx2MWUbZDWPkF bvez9DpPom7/KwmzowLNdOPwFOyoKBNOACAzKZLAiS8kFgsGu6+pn0a3rgbeAc8N nNSHSyy1oyOqZaacX5Zqv0tOt98mOACLK7AUYT5fuYteNoLh+E4NJeZuUROAy4QU g74c057zw+PtN/+Go+HWPQI/2z84n+OFgdwzaK6FaQN/92Q4 -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:58 2026 by rpki-client