This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lTFZdKzn3PspBxqzApVeoTJOLRc.roa File: lTFZdKzn3PspBxqzApVeoTJOLRc.roa (raw, json) Hash identifier: 4dS/YzW4uk7LAHr+Sn8rrIeu0UYl54rhTMdj+EK7tUw= Subject key identifier: 95:31:59:74:AC:E7:DC:FB:29:07:1A:B3:02:95:5E:A1:32:4E:2D:17 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB071280A2B86A6C6C8FE37A99F25 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lTFZdKzn3PspBxqzApVeoTJOLRc.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47157 IP address blocks: 2a0e:b107:19f0::/48 maxlen: 48 2a0e:b107:19f1::/48 maxlen: 48 2a0e:b107:19f2::/48 maxlen: 48 2a0e:b107:19f3::/48 maxlen: 48 2a0e:b107:19fa::/48 maxlen: 48 2a0e:b107:19fb::/48 maxlen: 48 2a0e:b107:19fc::/48 maxlen: 48 2a0e:b107:19fd::/48 maxlen: 48 2a0e:b107:19fe::/48 maxlen: 48 2a0e:b107:19ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b0:71:28:0a:2b:86:a6:c6:c8:fe:37:a9:9f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95315974ace7dcfb29071ab302955ea1324e2d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:85:7d:f6:5a:df:cd:db:ad:db:3f:72:26: 1e:1c:15:19:93:5c:cf:bc:9f:29:b4:40:54:18:00: 31:41:ed:d9:16:26:64:a5:db:5a:ed:e6:d9:73:e5: d1:46:7c:b5:96:08:a7:d6:3f:15:2b:36:60:20:76: 4d:10:c8:ea:48:a7:d0:61:a8:15:a6:f4:5c:e9:aa: 9c:7e:4e:34:3e:83:34:9e:b1:81:99:2f:52:23:3a: 74:d6:ce:6f:f6:c7:10:11:a5:ef:9d:69:5e:95:51: be:f4:e4:f2:2d:d3:b9:33:c5:c8:e7:26:46:7d:33: df:3c:47:ba:ec:04:eb:7c:ae:8a:39:36:2c:5a:07: b5:5e:df:94:f0:2d:1b:8a:7c:7c:89:7c:84:aa:3a: 09:7e:c0:91:a2:9d:ee:43:4d:1f:a2:de:d0:8d:b9: 38:c2:6a:c3:bb:a7:05:ac:24:68:17:d5:03:17:8f: a3:49:d8:67:b6:41:44:f0:c6:d8:b7:b8:7c:6d:00: 00:dc:08:cc:d7:9e:3d:33:b8:c8:1f:75:89:98:bb: 5b:df:d9:19:93:45:1b:60:69:a5:18:5a:44:fb:92: 68:76:02:5e:7a:98:ae:63:bc:5f:dd:f6:a3:0d:2d: a6:dc:aa:5a:b0:27:ed:44:eb:49:9d:14:07:6d:58: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:31:59:74:AC:E7:DC:FB:29:07:1A:B3:02:95:5E:A1:32:4E:2D:17 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lTFZdKzn3PspBxqzApVeoTJOLRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:19f0::/46 2a0e:b107:19fa::-2a0e:b107:19ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b1:ba:49:ec:98:59:b8:12:32:f0:5d:92:f8:61:d4:fa:fc:20: b3:fa:29:ab:86:91:d0:ab:d1:18:f1:58:ea:a3:13:47:cf:9e: 39:ea:c9:08:a0:38:82:e3:38:33:3e:e4:31:69:18:72:10:13: ae:3a:d7:05:8f:7c:ec:cb:04:6f:35:6c:45:76:a3:35:f9:c3: 33:80:54:52:00:3a:cc:a8:d0:50:4b:7c:e3:4c:92:ef:be:bb: 78:41:20:0e:a3:33:39:a2:5f:5c:6d:20:7b:43:75:c1:1d:c0: b4:8b:f4:6e:31:b7:f1:b9:81:ff:00:87:75:8f:11:40:e4:09: 08:89:31:ec:56:3d:b6:36:ba:f2:74:6f:87:27:31:db:29:fd: a8:b1:74:08:90:2e:58:ee:1b:d5:56:b7:cc:8a:bd:23:8d:52: 21:61:00:55:7b:48:16:d9:26:b3:c3:89:57:2c:1f:d2:ca:92: 82:83:6f:b3:08:4a:d0:dc:2b:0a:c7:25:4f:f6:f3:21:bc:05: 38:32:b6:68:db:37:f7:2a:76:9d:62:75:d7:cc:e8:c1:bd:00: 79:23:7c:02:50:99:20:14:e8:5e:d1:37:ce:c1:28:f0:8c:0b: 78:ac:fb:82:3e:98:f2:7d:93:38:8a:18:13:65:bf:b9:26:f0: c7:46:e5:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XLBxKAorhqbGyP43qZ8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTMxNTk3NGFjZTdkY2ZiMjkwNzFhYjMwMjk1NWVhMTMyNGUyZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy46FffZa383brds/ciYeHBUZk1zP vJ8ptEBUGAAxQe3ZFiZkpdta7ebZc+XRRny1lgin1j8VKzZgIHZNEMjqSKfQYagV pvRc6aqcfk40PoM0nrGBmS9SIzp01s5v9scQEaXvnWlelVG+9OTyLdO5M8XI5yZG fTPfPEe67ATrfK6KOTYsWge1Xt+U8C0binx8iXyEqjoJfsCRop3uQ00fot7Qjbk4 wmrDu6cFrCRoF9UDF4+jSdhntkFE8MbYt7h8bQAA3AjM1549M7jIH3WJmLtb39kZ k0UbYGmlGFpE+5JodgJeepiuY7xf3fajDS2m3KpasCftROtJnRQHbVgjTwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJUxWXSs59z7KQcaswKVXqEyTi0XMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbFRGWmRLem4zUHNwQnhxekFwVmVvVEpPTFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwcCKg6xBxnw MBEDBwEqDrEHGfoDBgEqDrEHGDANBgkqhkiG9w0BAQsFAAOCAQEAsbpJ7JhZuBIy 8F2S+GHU+vwgs/opq4aR0KvRGPFY6qMTR8+eOerJCKA4guM4Mz7kMWkYchATrjrX BY987MsEbzVsRXajNfnDM4BUUgA6zKjQUEt840yS7767eEEgDqMzOaJfXG0ge0N1 wR3AtIv0bjG38bmB/wCHdY8RQOQJCIkx7FY9tja68nRvhycx2yn9qLF0CJAuWO4b 1Va3zIq9I41SIWEAVXtIFtkms8OJVywf0sqSgoNvswhK0NwrCsclT/bzIbwFODK2 aNs39yp2nWJ118zowb0AeSN8AlCZIBToXtE3zsEo8IwLeKz7gj6Y8n2TOIoYE2W/ uSbwx0blpQ== -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:21 2026 by rpki-client