This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa File: lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa (raw, json) Hash identifier: r9UOMYxpKdYi63IObP/C5aZuW6pYv6q+dCCfoqFrtSU= Subject key identifier: 95:33:2B:FE:D9:84:E7:37:F5:6B:C7:74:44:55:7B:B3:C0:BF:17:74 Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Certificate serial: 019BE64BB95E69AE270726314D58BD345C97 Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa Signing time: Thu 22 Jan 2026 15:21:20 +0000 ROA not before: Thu 22 Jan 2026 15:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214587 IP address blocks: 2a13:7fc0:1010::/44 maxlen: 48 2a13:7fc0:1010::/48 maxlen: 48 2a13:7fc0:101f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:4b:b9:5e:69:ae:27:07:26:31:4d:58:bd:34:5c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Validity Not Before: Jan 22 15:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95332bfed984e737f56bc77444557bb3c0bf1774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:14:5e:d4:bc:0e:48:15:38:4b:11:1d:ba: 56:32:0b:ce:3a:c7:4b:6c:18:f9:28:1a:76:57:f4: e8:86:97:55:59:47:54:4c:30:5d:fd:97:22:62:4d: 96:46:ca:1c:42:87:9f:51:0a:78:3b:1f:20:12:40: ca:79:29:a5:4a:40:bf:58:b2:dc:a2:1e:d5:41:3a: 4a:97:51:b6:0f:99:de:e5:ba:38:f3:7f:71:16:50: 3a:dc:0c:2f:ea:fe:2b:51:d0:98:35:3b:f1:25:4a: 29:81:6f:91:fb:2c:1c:28:a0:7d:e1:10:86:9d:fe: 68:f5:b1:55:3c:6b:51:31:0f:42:2f:aa:23:af:68: 0f:d4:b9:34:ae:a5:9f:6c:7b:b8:8a:d3:2f:f1:d9: 81:23:0b:48:85:22:5a:af:72:8e:48:b0:fe:28:48: a8:c8:3b:05:46:f9:8a:74:e2:35:f1:e9:aa:d2:7d: 7e:d4:29:e6:96:1b:e1:87:f5:4f:42:57:17:89:76: 88:5b:71:44:81:10:12:61:99:f0:61:f0:94:10:ff: 59:a2:4a:69:e2:fc:9b:67:27:87:5f:f1:d2:15:71: fd:e0:7b:71:9b:ab:83:c0:33:0e:d0:20:03:36:34: 16:a9:fc:42:27:d2:b4:4e:cd:57:8b:f8:31:a8:b4: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:33:2B:FE:D9:84:E7:37:F5:6B:C7:74:44:55:7B:B3:C0:BF:17:74 X509v3 Authority Key Identifier: keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:7fc0:1010::/44 Signature Algorithm: sha256WithRSAEncryption a5:57:c5:71:f6:28:c2:76:76:b2:4b:de:c4:ea:1c:74:88:06: dd:a3:a5:f2:07:17:ab:28:d7:34:5c:58:38:00:d8:30:1b:4b: 34:24:37:9a:9d:4c:67:65:70:e8:01:6b:32:23:24:67:88:eb: 86:6f:92:de:96:d6:cc:1b:82:48:a7:67:4a:d3:95:de:7c:61: 47:19:58:e2:39:a6:c4:8a:69:39:81:c8:43:27:52:e7:3e:c3: 2c:8e:30:81:e0:cc:e3:86:c6:24:be:5f:14:c6:8e:a8:a9:7b: 9a:c4:57:32:e6:7d:3c:05:20:80:06:78:e8:49:c5:cf:b7:ce: fa:fc:3e:b4:88:d3:bf:89:f0:70:cd:7d:eb:e5:48:4b:39:21: e3:f3:15:40:c3:00:9e:83:ec:fc:b3:ec:b1:1b:b1:07:79:4f: 2c:aa:d3:6a:fd:09:58:d3:f9:cb:fa:60:1c:c6:50:d1:de:76: fc:1f:4b:47:91:92:fe:c8:0b:00:f4:ef:35:de:54:1c:d2:38: f3:a6:c1:78:f9:39:48:7c:43:03:e4:75:fc:be:d0:8c:24:b8: d5:41:cc:9a:8b:e9:2f:79:de:9d:fd:97:a4:71:af:d0:d8:9f: 79:2e:b6:eb:b6:5b:4d:12:e8:6a:1e:05:35:a4:f9:5f:6b:ee: 51:8d:c5:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvmS7leaa4nByYxTVi9NFyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDRiY2NlYjljMzYzZjEzZTNhZGFhNGMwZmE1Mjc4MGYw NjQ2ODQwHhcNMjYwMTIyMTUyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTMzMmJmZWQ5ODRlNzM3ZjU2YmM3NzQ0NDU1N2JiM2MwYmYxNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooAUXtS8DkgVOEsRHbpWMgvOOsdL bBj5KBp2V/TohpdVWUdUTDBd/ZciYk2WRsocQoefUQp4Ox8gEkDKeSmlSkC/WLLc oh7VQTpKl1G2D5ne5bo4839xFlA63Awv6v4rUdCYNTvxJUopgW+R+ywcKKB94RCG nf5o9bFVPGtRMQ9CL6ojr2gP1Lk0rqWfbHu4itMv8dmBIwtIhSJar3KOSLD+KEio yDsFRvmKdOI18emq0n1+1Cnmlhvhh/VPQlcXiXaIW3FEgRASYZnwYfCUEP9Zokpp 4vybZyeHX/HSFXH94Htxm6uDwDMO0CADNjQWqfxCJ9K0Ts1Xi/gxqLTQCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJUzK/7ZhOc39WvHdERVe7PAvxd0MB8GA1UdIwQY MBaAFLUEvM65w2PxPjrapMD6UngPBkaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjkt MmEzNTFhYjNiOGY2LzEvbFRNcl90bUU1emYxYThkMFJGVjdzOENfRjNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjktMmEzNTFhYjNiOGY2 LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhN/wBAQ MA0GCSqGSIb3DQEBCwUAA4IBAQClV8Vx9ijCdnayS97E6hx0iAbdo6XyBxerKNc0 XFg4ANgwG0s0JDeanUxnZXDoAWsyIyRniOuGb5LeltbMG4JIp2dK05XefGFHGVji OabEimk5gchDJ1LnPsMsjjCB4MzjhsYkvl8Uxo6oqXuaxFcy5n08BSCABnjoScXP t876/D60iNO/ifBwzX3r5UhLOSHj8xVAwwCeg+z8s+yxG7EHeU8sqtNq/QlY0/nL +mAcxlDR3nb8H0tHkZL+yAsA9O813lQc0jjzpsF4+TlIfEMD5HX8vtCMJLjVQcya i+kved6d/Zekca/Q2J95LrbrtltNEuhqHgU1pPlfa+5RjcVH -----END CERTIFICATE-----Generated at Mon Feb 2 07:55:39 2026 by rpki-client