This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/_La6PtoF5jLkCWE65PAIlLKb7OM.roa File: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (raw, json) Hash identifier: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k= Subject key identifier: FC:B6:BA:3E:DA:05:E6:32:E4:09:61:3A:E4:F0:08:94:B2:9B:EC:E3 Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486 Certificate serial: 019B7DCB5D40F71FFA44B8E5C92FBF1D4A1A Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/_La6PtoF5jLkCWE65PAIlLKb7OM.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57780 IP address blocks: 91.210.153.0/24 maxlen: 24 2a06:5f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5d:40:f7:1f:fa:44:b8:e5:c9:2f:bf:1d:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb6ba3eda05e632e409613ae4f00894b29bece3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:25:87:e4:92:08:9f:2f:50:fc:9c:69:79: 6c:e2:12:2c:49:41:76:37:48:37:82:c6:98:64:79: 7e:24:1d:86:31:2b:cf:8c:a3:82:8d:9c:2f:4f:46: 6d:ba:42:cd:39:05:4d:35:68:50:49:1d:01:1f:53: aa:44:9a:60:d6:d7:7c:84:3a:90:31:88:b5:b2:a2: 02:f5:67:95:c0:36:2c:f5:9e:a2:5d:bb:57:b5:23: 24:3d:40:15:c2:17:91:04:77:20:23:2a:1d:9a:5c: 8f:5c:3d:28:16:7c:f3:aa:74:e3:be:85:6c:3d:07: f2:15:13:ef:b5:4d:92:6a:8d:e0:5d:8f:20:a1:ea: 7f:f8:17:ce:3e:fb:24:23:93:64:01:86:c8:07:c1: 0c:24:9e:bd:c9:9a:22:b5:45:10:d2:85:b1:16:61: db:f5:75:c3:ee:d1:60:97:5f:30:ee:29:6b:1b:77: 37:f0:6c:fe:63:1a:d6:cd:94:5d:b9:5f:1f:d3:be: 17:e0:59:ff:03:c2:ce:f0:f8:fb:ea:54:4e:99:22: c4:ed:d3:b5:20:ef:e0:db:7c:fa:e6:4f:f6:a6:a4: 43:71:02:0f:63:77:6b:8a:1c:4b:7c:ea:39:d1:3f: b7:6c:40:bc:3a:9b:f9:70:62:12:7b:1a:1e:eb:2d: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B6:BA:3E:DA:05:E6:32:E4:09:61:3A:E4:F0:08:94:B2:9B:EC:E3 X509v3 Authority Key Identifier: keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/_La6PtoF5jLkCWE65PAIlLKb7OM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.153.0/24 IPv6: 2a06:5f80::/32 Signature Algorithm: sha256WithRSAEncryption 87:d2:77:36:ef:7b:e5:c9:b3:4d:57:7a:41:87:25:d1:d9:44: 5d:4d:d3:c0:db:4b:75:35:3a:28:62:5d:d5:14:de:f0:a5:5a: 3a:3a:73:51:7d:04:3c:46:f5:d8:0b:83:a0:6f:5c:c6:9b:04: 29:b1:05:17:0a:06:9a:04:7a:ea:39:37:bc:0a:17:84:0a:5b: d8:87:a6:b7:39:a0:cd:b8:96:a0:07:52:ed:20:d1:bc:76:51: 6c:86:63:49:67:88:37:ec:a1:03:4f:38:e0:17:18:8d:ee:5a: 19:97:1c:4f:6c:4b:a8:8e:2c:1e:9a:ed:1d:43:45:7e:d0:a2: 4a:df:46:60:88:b5:a7:82:29:c1:fc:98:93:f3:85:c1:bf:83: 94:be:60:8e:d1:4e:d2:7e:53:82:c7:8f:d4:ea:15:ae:7f:54: 37:49:30:dd:33:7c:5e:b3:8b:d6:28:01:7a:47:77:5e:1e:ad: 9f:01:e5:d8:fe:68:2b:12:b3:43:e9:bc:6c:2e:e7:74:1f:f9: 41:ae:c2:39:dc:32:95:0e:c2:0c:69:f9:93:6b:18:22:83:3c: b1:80:61:8a:3d:ea:e3:3b:cd:0e:c4:df:90:13:45:38:2c:38: 45:a8:cf:19:81:7c:77:04:8c:e3:34:f9:74:a5:5d:81:53:72: 57:8a:ce:45 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y11A9x/6RLjlyS+/HUoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj MzU0ODYwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I2YmEzZWRhMDVlNjMyZTQwOTYxM2FlNGYwMDg5NGIyOWJlY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gUlh+SSCJ8vUPycaXls4hIsSUF2 N0g3gsaYZHl+JB2GMSvPjKOCjZwvT0ZtukLNOQVNNWhQSR0BH1OqRJpg1td8hDqQ MYi1sqIC9WeVwDYs9Z6iXbtXtSMkPUAVwheRBHcgIyodmlyPXD0oFnzzqnTjvoVs PQfyFRPvtU2Sao3gXY8goep/+BfOPvskI5NkAYbIB8EMJJ69yZoitUUQ0oWxFmHb 9XXD7tFgl18w7ilrG3c38Gz+YxrWzZRduV8f074X4Fn/A8LO8Pj76lROmSLE7dO1 IO/g23z65k/2pqRDcQIPY3drihxLfOo50T+3bEC8Opv5cGISexoe6y0aiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPy2uj7aBeYy5AlhOuTwCJSym+zjMB8GA1UdIwQY MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt YzY1NDM1NmIwN2M0LzEvX0xhNlB0b0Y1akxrQ1dFNjVQQUlsTEtiN09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0 LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9KZMA0E AgACMAcDBQAqBl+AMA0GCSqGSIb3DQEBCwUAA4IBAQCH0nc273vlybNNV3pBhyXR 2URdTdPA20t1NTooYl3VFN7wpVo6OnNRfQQ8RvXYC4Ogb1zGmwQpsQUXCgaaBHrq OTe8CheEClvYh6a3OaDNuJagB1LtING8dlFshmNJZ4g37KEDTzjgFxiN7loZlxxP bEuojiwemu0dQ0V+0KJK30ZgiLWnginB/JiT84XBv4OUvmCO0U7SflOCx4/U6hWu f1Q3STDdM3xes4vWKAF6R3deHq2fAeXY/mgrErND6bxsLud0H/lBrsI53DKVDsIM afmTaxgigzyxgGGKPerjO80OxN+QE0U4LDhFqM8ZgXx3BIzjNPl0pV2BU3JXis5F -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:34 2026 by rpki-client