This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/lvjXs-MIPCkpvks5PHkIN5Ickrg.roa File: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (raw, json) Hash identifier: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q= Subject key identifier: 96:F8:D7:B3:E3:08:3C:29:29:BE:4B:39:3C:79:08:37:92:1C:92:B8 Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3 Certificate serial: 019B76EABF6F825A611AC0009864EA0EF50B Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/lvjXs-MIPCkpvks5PHkIN5Ickrg.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31078 IP address blocks: 2a0f:6040:7966::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bf:6f:82:5a:61:1a:c0:00:98:64:ea:0e:f5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96f8d7b3e3083c2929be4b393c790837921c92b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:b4:66:18:2d:0e:56:b8:a4:7c:87:40:cc: 04:76:98:91:54:e4:76:83:e5:00:3f:28:d5:1d:25: b4:d7:3f:50:74:17:9f:5e:63:cd:7f:6c:4a:55:aa: 12:c1:43:05:25:bf:05:86:4b:ed:f4:5b:ee:81:09: e0:ef:8e:22:93:b3:1a:11:07:50:70:46:65:bd:57: bd:21:92:40:d4:f1:da:2f:fa:fb:8d:ad:c2:5b:7b: e4:66:2d:4b:d0:bf:23:f0:59:b0:7f:73:62:db:0c: 97:b0:69:95:83:78:4c:9c:1f:3d:8c:87:cb:81:57: 38:fb:0f:96:68:71:ad:dd:77:2c:cd:43:ed:3f:12: 54:c8:e4:d6:28:8a:ee:15:94:34:ed:87:6d:ab:1d: 74:e0:dd:7c:31:99:8a:35:18:ef:bd:b3:26:c6:3a: 9f:16:01:53:c1:e4:9b:75:54:43:74:23:12:2c:dd: 53:ea:b0:02:ec:2c:a1:d7:28:bc:4f:89:fe:21:2d: 4d:7b:14:c7:69:5a:ab:e2:46:3f:02:10:b0:fd:c1: 59:16:23:29:ba:8c:74:bf:04:16:68:f7:0d:4c:db: 64:1d:29:fc:6a:de:2d:fb:b3:db:e8:cd:03:2f:01: 27:99:ad:e6:a3:40:24:31:76:98:2f:f9:87:77:af: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F8:D7:B3:E3:08:3C:29:29:BE:4B:39:3C:79:08:37:92:1C:92:B8 X509v3 Authority Key Identifier: keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/lvjXs-MIPCkpvks5PHkIN5Ickrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6040:7966::/48 Signature Algorithm: sha256WithRSAEncryption 67:c9:4b:5b:dc:8a:55:75:4b:55:49:46:bb:30:b1:49:2b:fc: d4:c6:1f:cd:1d:bf:6a:b7:48:71:fa:30:f2:da:3e:12:44:49: e5:b7:9e:19:28:71:3a:ff:d1:e0:52:c6:38:7c:2c:e3:77:9d: 0f:65:73:91:21:cd:d2:e1:cf:45:ee:15:a0:0b:03:66:16:d2: 47:eb:b3:e1:40:1a:19:ec:30:02:51:56:5f:43:b0:36:c9:fa: 17:66:5f:de:2e:8c:0a:c7:29:62:fa:b7:62:c5:21:69:d0:21: 88:67:39:00:fb:00:9f:c1:a8:45:33:27:76:78:a2:bc:91:68: 7a:10:c8:52:b0:c3:ed:ac:a9:3a:df:0d:dc:02:ec:fb:f4:cb: d4:d4:53:e1:cf:84:82:95:ad:72:30:7f:75:b7:b7:7a:a7:15: 46:9f:5b:ab:22:f6:69:e8:55:8c:b4:dc:eb:0d:07:80:fb:d2: 30:d1:ac:ca:05:18:38:ab:df:b9:8b:7c:bb:be:2a:21:37:75: 84:64:59:6e:5c:06:26:e3:b3:65:55:82:83:53:04:19:41:32: 5f:a1:c6:e7:89:ca:56:0e:4b:71:a6:75:ae:d8:86:90:de:90: 1a:02:70:db:d8:c1:c9:d9:cd:41:26:d6:52:d7:06:c0:f5:c0: 1b:63:f8:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26r9vglphGsAAmGTqDvULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh NDI4YzMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmY4ZDdiM2UzMDgzYzI5MjliZTRiMzkzYzc5MDgzNzkyMWM5MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk560ZhgtDla4pHyHQMwEdpiRVOR2 g+UAPyjVHSW01z9QdBefXmPNf2xKVaoSwUMFJb8Fhkvt9FvugQng744ik7MaEQdQ cEZlvVe9IZJA1PHaL/r7ja3CW3vkZi1L0L8j8Fmwf3Ni2wyXsGmVg3hMnB89jIfL gVc4+w+WaHGt3XcszUPtPxJUyOTWKIruFZQ07Ydtqx104N18MZmKNRjvvbMmxjqf FgFTweSbdVRDdCMSLN1T6rAC7Cyh1yi8T4n+IS1NexTHaVqr4kY/AhCw/cFZFiMp uox0vwQWaPcNTNtkHSn8at4t+7Pb6M0DLwEnma3mo0AkMXaYL/mHd6/IRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJb417PjCDwpKb5LOTx5CDeSHJK4MB8GA1UdIwQY MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt YmU5YWQyYmY3MjVmLzEvbHZqWHMtTUlQQ2twdmtzNVBIa0lONUlja3JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9gQHlm MA0GCSqGSIb3DQEBCwUAA4IBAQBnyUtb3IpVdUtVSUa7MLFJK/zUxh/NHb9qt0hx +jDy2j4SREnlt54ZKHE6/9HgUsY4fCzjd50PZXORIc3S4c9F7hWgCwNmFtJH67Ph QBoZ7DACUVZfQ7A2yfoXZl/eLowKxyli+rdixSFp0CGIZzkA+wCfwahFMyd2eKK8 kWh6EMhSsMPtrKk63w3cAuz79MvU1FPhz4SCla1yMH91t7d6pxVGn1urIvZp6FWM tNzrDQeA+9Iw0azKBRg4q9+5i3y7viohN3WEZFluXAYm47NlVYKDUwQZQTJfocbn icpWDktxpnWu2IaQ3pAaAnDb2MHJ2c1BJtZS1wbA9cAbY/i8 -----END CERTIFICATE-----Generated at Wed Jan 21 14:47:07 2026 by rpki-client