This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lxuV_YzDmFZg9zzWPe1tJoh1NkU.roa File: lxuV_YzDmFZg9zzWPe1tJoh1NkU.roa (raw, json) Hash identifier: dBbRBpU5Rlfs+zHFFnm+BJc0ci0X3jh5X3G5AeTmYJ0= Subject key identifier: 97:1B:95:FD:8C:C3:98:56:60:F7:3C:D6:3D:ED:6D:26:88:75:36:45 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFE1F4DE0884DD82790DB47093F3D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lxuV_YzDmFZg9zzWPe1tJoh1NkU.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204882 IP address blocks: 2a10:cc40:1b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:1f:4d:e0:88:4d:d8:27:90:db:47:09:3f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=971b95fd8cc3985660f73cd63ded6d2688753645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:08:54:0e:47:1c:e2:83:a0:d0:0c:8b:db: ac:6f:db:fd:56:33:27:7b:ba:cf:69:24:b2:df:09: c7:31:af:85:9f:de:3b:1d:72:34:5b:1c:eb:8e:3e: 56:d4:2b:14:da:bd:66:10:3a:e6:39:92:1b:56:25: dd:97:94:a2:c0:7b:42:72:70:56:18:aa:97:8b:2a: 2e:30:18:77:e5:4a:fd:2d:ef:62:da:d1:53:7f:95: 7c:06:84:b8:ca:69:dc:84:da:c7:17:7f:aa:2e:3f: ff:9b:53:1d:5f:4c:df:71:85:5f:b7:e9:73:16:41: cc:fb:ad:77:2e:75:e0:29:55:36:7c:a5:c3:89:2f: 78:bc:18:32:92:3b:d7:51:85:ac:9d:c2:1c:31:4d: 45:ca:8a:02:33:be:a1:8d:f8:3a:fe:23:22:1a:86: 42:13:fb:06:27:e6:49:1e:38:d2:e6:ed:1b:7f:cc: d7:41:e3:51:39:34:dd:68:2e:66:b6:84:78:af:96: 50:53:4e:e2:42:16:b2:f4:87:c8:b8:4a:7e:36:9c: 9e:6a:b3:a0:36:ed:7f:47:63:10:55:d9:76:86:93: 7e:8c:da:7d:7f:02:ea:70:10:8d:f9:18:be:e3:d2: 87:aa:f1:cd:2a:7f:bf:57:56:88:61:65:7a:2b:83: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1B:95:FD:8C:C3:98:56:60:F7:3C:D6:3D:ED:6D:26:88:75:36:45 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lxuV_YzDmFZg9zzWPe1tJoh1NkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cc40:1b0::/44 Signature Algorithm: sha256WithRSAEncryption c2:f9:a4:68:12:2d:e5:22:42:34:de:36:26:3b:c1:04:38:e3: f1:68:c8:fd:96:0a:76:11:ce:b6:ab:29:10:5a:09:cb:70:6b: 6a:e2:d0:a1:db:2c:fd:2b:14:ab:07:5e:2c:54:13:e9:f4:79: eb:34:c5:25:a7:68:05:1c:aa:e6:85:f4:f8:29:ae:72:7f:70: 78:60:10:cb:8c:a2:ad:9d:53:1a:30:ee:2a:e5:c3:94:ec:c4: e1:79:58:9c:40:25:a4:83:80:6e:c6:f5:b7:cd:22:6e:83:75: 14:12:92:3e:f9:79:a0:b4:d2:b6:4f:89:5d:11:85:08:60:8d: 39:bb:f5:f0:28:c3:85:2c:40:76:f4:16:72:e4:64:23:53:ea: 71:fb:d9:82:0f:bb:f0:28:18:9a:51:56:4a:8b:ae:7b:0d:1b: 0d:cc:74:af:75:eb:5a:8d:21:9d:fa:65:d8:9f:50:f9:33:27: 5f:27:3e:5a:70:8b:d6:f2:ad:2e:45:04:29:02:fc:17:ab:b6: ad:24:e1:5f:08:8d:0b:fe:e5:fc:9c:d6:13:94:c2:7b:bc:da: 55:26:47:86:23:ab:e4:fb:86:83:de:dd:59:68:cf:39:19:31: 7d:76:97:61:a2:d2:7b:cf:6c:f2:0c:62:cb:4a:0d:f2:ad:fd: 10:e2:8d:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XP4fTeCITdgnkNtHCT89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzFiOTVmZDhjYzM5ODU2NjBmNzNjZDYzZGVkNmQyNjg4NzUzNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+EIVA5HHOKDoNAMi9usb9v9VjMn e7rPaSSy3wnHMa+Fn947HXI0Wxzrjj5W1CsU2r1mEDrmOZIbViXdl5SiwHtCcnBW GKqXiyouMBh35Ur9Le9i2tFTf5V8BoS4ymnchNrHF3+qLj//m1MdX0zfcYVft+lz FkHM+613LnXgKVU2fKXDiS94vBgykjvXUYWsncIcMU1FyooCM76hjfg6/iMiGoZC E/sGJ+ZJHjjS5u0bf8zXQeNROTTdaC5mtoR4r5ZQU07iQhay9IfIuEp+NpyearOg Nu1/R2MQVdl2hpN+jNp9fwLqcBCN+Ri+49KHqvHNKn+/V1aIYWV6K4PRQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJcblf2Mw5hWYPc81j3tbSaIdTZFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbHh1Vl9ZekRtRlpnOXp6V1BlMXRKb2gxTmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAGw MA0GCSqGSIb3DQEBCwUAA4IBAQDC+aRoEi3lIkI03jYmO8EEOOPxaMj9lgp2Ec62 qykQWgnLcGtq4tCh2yz9KxSrB14sVBPp9HnrNMUlp2gFHKrmhfT4Ka5yf3B4YBDL jKKtnVMaMO4q5cOU7MTheVicQCWkg4BuxvW3zSJug3UUEpI++XmgtNK2T4ldEYUI YI05u/XwKMOFLEB29BZy5GQjU+px+9mCD7vwKBiaUVZKi657DRsNzHSvdetajSGd +mXYn1D5MydfJz5acIvW8q0uRQQpAvwXq7atJOFfCI0L/uX8nNYTlMJ7vNpVJkeG I6vk+4aD3t1ZaM85GTF9dpdhotJ7z2zyDGLLSg3yrf0Q4o2B -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:43 2026 by rpki-client