This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lONan7CyonjmbWy9Gec-2gQ2k1A.roa File: lONan7CyonjmbWy9Gec-2gQ2k1A.roa (raw, json) Hash identifier: TPFD8mM175Vum2cW1p/dDPiEwak+4mrhdO81vWSrPWA= Subject key identifier: 94:E3:5A:9F:B0:B2:A2:78:E6:6D:6C:BD:19:E7:3E:DA:04:36:93:50 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB7A593AAF2D39E61F323810106889 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lONan7CyonjmbWy9Gec-2gQ2k1A.roa Signing time: Fri 02 Jan 2026 08:20:45 +0000 ROA not before: Fri 02 Jan 2026 08:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204909 IP address blocks: 2a0d:7140::/29 maxlen: 29 2a0d:97c0::/29 maxlen: 29 2a0e:19c2::/32 maxlen: 32 2a11:9900::/29 maxlen: 29 2a11:a2c0::/29 maxlen: 29 2a11:c2c0::/29 maxlen: 29 2a12:d380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7a:59:3a:af:2d:39:e6:1f:32:38:10:10:68:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94e35a9fb0b2a278e66d6cbd19e73eda04369350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:56:7f:68:fc:d6:4f:ff:ae:e8:db:91:1e: 80:c1:c1:f8:35:67:94:cf:1a:2f:e3:7d:4a:2a:ff: 37:94:03:65:fd:0b:2c:ab:75:59:9e:8f:94:3c:ff: 56:7a:a0:75:59:a1:5b:d0:88:3f:81:64:c1:92:5a: 71:0e:57:28:b4:81:20:37:1a:95:3b:3a:69:97:a5: c3:49:c9:ad:a2:a3:c8:d2:80:d8:bc:88:88:27:e7: 4c:30:71:5b:9c:54:a6:ec:4e:ea:af:30:96:b1:6f: 0a:e7:30:14:fb:f4:46:73:ad:6c:ca:32:13:f8:6b: 16:48:55:24:72:d4:b3:f7:6e:f8:86:37:fb:cb:61: 38:a1:25:aa:aa:6c:b8:c9:c9:d0:ab:6a:53:b1:66: f3:36:20:92:e9:28:2e:1a:89:65:a1:75:69:42:80: 7f:69:d5:06:3b:cf:49:ac:e4:00:c8:de:4f:9b:ac: 04:f1:b0:e0:c3:2e:45:f9:de:c3:ff:4e:67:68:0a: ac:9b:04:f8:95:db:d9:94:ae:c6:ac:32:58:1a:db: 43:b1:24:86:b0:64:e0:d2:bc:76:21:55:ba:2c:4b: 6c:d8:d4:2b:a2:0c:15:39:ae:2f:7b:9d:e3:7c:3a: a4:f0:5f:50:5f:28:c9:1a:54:6d:9b:6e:4d:f8:c3: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E3:5A:9F:B0:B2:A2:78:E6:6D:6C:BD:19:E7:3E:DA:04:36:93:50 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lONan7CyonjmbWy9Gec-2gQ2k1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7140::/29 2a0d:97c0::/29 2a0e:19c2::/32 2a11:9900::/29 2a11:a2c0::/29 2a11:c2c0::/29 2a12:d380::/29 Signature Algorithm: sha256WithRSAEncryption 85:fc:07:11:63:d7:f6:e7:bb:41:cd:24:69:ed:fb:00:0c:40: 23:39:74:f2:a0:5a:38:79:ca:fb:eb:c5:e4:07:b4:7f:63:f9: f9:f0:64:a6:71:7d:fa:ae:e2:2e:b1:60:6f:2d:d7:5c:b4:a7: 5b:02:2b:3f:5b:b4:1d:f3:93:2a:c5:cf:b0:42:87:98:ba:6e: 20:a3:88:55:a9:1d:66:52:35:8a:a3:c6:8f:6d:2c:f8:1d:52: bd:54:63:21:e1:20:81:60:c2:e2:33:86:04:d6:c5:58:4c:d9: b1:e2:f0:68:99:48:f5:50:c8:96:09:70:0f:de:67:73:ec:db: 5b:65:3c:7c:94:67:ba:de:f2:88:83:b4:18:51:9d:a4:12:44: 55:ff:26:23:33:af:32:04:e9:32:82:97:4e:3d:49:29:1f:d3: 67:13:f3:b7:6f:3a:ab:f3:58:d2:06:49:01:a3:17:d9:4c:fc: 6b:b5:5a:7c:be:89:6f:9a:76:6e:c0:c9:00:c4:ae:7a:f1:f2: e5:30:7f:eb:a0:87:ef:8f:ba:07:f5:54:e8:42:96:05:97:0d: ef:e2:61:aa:0f:f8:27:3b:3b:c3:74:1e:e2:9f:ed:8d:9c:e0: 38:91:34:05:33:1d:89:91:8a:47:6e:94:c6:39:68:36:5c:fe: ad:86:e3:7d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt9y3pZOq8tOeYfMjgQEGiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGUzNWE5ZmIwYjJhMjc4ZTY2ZDZjYmQxOWU3M2VkYTA0MzY5MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy1Wf2j81k//rujbkR6AwcH4NWeU zxov431KKv83lANl/Qssq3VZno+UPP9WeqB1WaFb0Ig/gWTBklpxDlcotIEgNxqV Ozppl6XDScmtoqPI0oDYvIiIJ+dMMHFbnFSm7E7qrzCWsW8K5zAU+/RGc61syjIT +GsWSFUkctSz9274hjf7y2E4oSWqqmy4ycnQq2pTsWbzNiCS6SguGolloXVpQoB/ adUGO89JrOQAyN5Pm6wE8bDgwy5F+d7D/05naAqsmwT4ldvZlK7GrDJYGttDsSSG sGTg0rx2IVW6LEts2NQrogwVOa4ve53jfDqk8F9QXyjJGlRtm25N+MOFXwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFJTjWp+wsqJ45m1svRnnPtoENpNQMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvbE9OYW43Q3lvbmptYld5OUdlYy0yZ1EyazFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKg1xQAMF AyoNl8ADBQAqDhnCAwUDKhGZAAMFAyoRosADBQMqEcLAAwUDKhLTgDANBgkqhkiG 9w0BAQsFAAOCAQEAhfwHEWPX9ue7Qc0kae37AAxAIzl08qBaOHnK++vF5Ae0f2P5 +fBkpnF9+q7iLrFgby3XXLSnWwIrP1u0HfOTKsXPsEKHmLpuIKOIVakdZlI1iqPG j20s+B1SvVRjIeEggWDC4jOGBNbFWEzZseLwaJlI9VDIlglwD95nc+zbW2U8fJRn ut7yiIO0GFGdpBJEVf8mIzOvMgTpMoKXTj1JKR/TZxPzt286q/NY0gZJAaMX2Uz8 a7VafL6Jb5p2bsDJAMSuevHy5TB/66CH74+6B/VU6EKWBZcN7+Jhqg/4Jzs7w3Qe 4p/tjZzgOJE0BTMdiZGKR26UxjloNlz+rYbjfQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client