This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa File: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (raw, json) Hash identifier: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk= Subject key identifier: 95:3B:78:6F:A9:D3:6F:37:4F:03:64:61:BF:BF:41:F5:21:10:90:62 Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Certificate serial: 019B7B366469138C834BAC324B00CBCDD660 Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215849 IP address blocks: 2a07:2486:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:64:69:13:8c:83:4b:ac:32:4b:00:cb:cd:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=953b786fa9d36f374f036461bfbf41f521109062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:63:0a:58:5e:94:59:c6:05:33:11:0f:2c: ef:57:85:1e:22:90:b3:44:19:50:00:39:6c:ca:c9: 61:68:07:c5:98:bf:52:91:be:d6:c1:09:6e:fd:95: 57:66:c2:ff:c5:f0:ed:f8:6d:b4:f6:11:c7:6c:82: fb:85:22:2f:8c:62:37:81:0f:79:db:3f:70:5a:72: 55:1c:26:3c:2c:9c:60:a1:a6:02:1d:84:08:19:04: 0c:1e:e4:11:93:a4:78:f2:7c:bb:d7:69:d3:3c:90: a4:be:35:fb:f9:67:6c:44:1a:6f:18:91:91:e4:f5: e7:c8:fb:50:e0:b5:f0:de:54:64:a6:2f:0e:f3:ca: 64:0d:7d:8d:a0:ec:d4:05:12:aa:17:4b:d8:f2:ab: 06:62:d7:fc:6d:44:e9:54:42:fa:39:d3:94:b0:30: fc:de:30:46:c8:10:85:fc:d8:8f:d3:11:03:c1:4b: 78:56:af:a6:a5:10:f8:12:91:f5:fd:bd:94:4b:0e: d0:77:bc:0e:98:29:f9:9b:15:d7:b3:0b:cc:d9:d2: 5e:c3:ef:09:9e:a0:08:40:6b:61:5e:42:f4:89:c0: 94:fe:2f:98:81:4d:11:da:62:1b:05:18:2a:f0:45: f8:9f:93:36:c5:32:e1:d3:db:c1:97:6a:b1:fb:23: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3B:78:6F:A9:D3:6F:37:4F:03:64:61:BF:BF:41:F5:21:10:90:62 X509v3 Authority Key Identifier: keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2486:e000::/36 Signature Algorithm: sha256WithRSAEncryption 00:90:17:30:a1:33:77:d2:0e:0b:eb:aa:cc:b5:ff:96:24:c4: b8:16:f5:08:7a:c0:aa:4d:cb:71:5a:55:86:d7:00:64:9a:f1: a2:87:03:11:45:96:fc:a3:78:d1:8d:a8:2b:25:ee:97:a9:9e: ab:94:f9:f9:03:e0:a9:f5:9e:d8:9a:51:32:d2:32:d6:2f:fd: 59:64:87:de:fb:e4:f4:13:f8:24:5b:fd:7b:8e:51:96:d1:e5: 2d:db:bc:29:8c:44:43:41:5e:10:09:4a:f1:72:8a:24:f1:42: fe:be:81:c2:dc:01:b1:b1:e4:dd:53:61:d3:81:87:9d:52:56: cf:ab:58:33:bc:fe:3d:87:70:b6:10:dd:dd:7d:b5:7b:dc:e3: b2:98:16:bd:75:7d:d1:a6:81:26:28:3b:0e:d1:82:95:c1:c1: 38:e6:30:a1:80:8a:19:35:3e:bb:6a:be:b7:c6:48:d6:4a:6b: 9f:2e:3f:57:7c:53:e2:69:36:7f:d2:a7:d6:b6:2d:94:df:40: c4:32:13:e0:c4:ba:f8:63:3c:9e:e1:f0:ba:9d:a1:82:4e:5c: 4c:9a:d2:9e:d1:75:10:6f:1f:83:fb:d4:51:37:d2:9b:2f:29: e6:48:4e:52:fe:a5:09:6a:9e:b1:61:fc:2c:a9:82:41:25:03: d8:87:33:c1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NmRpE4yDS6wySwDLzdZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh YmE1ZGEwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTNiNzg2ZmE5ZDM2ZjM3NGYwMzY0NjFiZmJmNDFmNTIxMTA5MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KFjClhelFnGBTMRDyzvV4UeIpCz RBlQADlsyslhaAfFmL9Skb7WwQlu/ZVXZsL/xfDt+G209hHHbIL7hSIvjGI3gQ95 2z9wWnJVHCY8LJxgoaYCHYQIGQQMHuQRk6R48ny712nTPJCkvjX7+WdsRBpvGJGR 5PXnyPtQ4LXw3lRkpi8O88pkDX2NoOzUBRKqF0vY8qsGYtf8bUTpVEL6OdOUsDD8 3jBGyBCF/NiP0xEDwUt4Vq+mpRD4EpH1/b2USw7Qd7wOmCn5mxXXswvM2dJew+8J nqAIQGthXkL0icCU/i+YgU0R2mIbBRgq8EX4n5M2xTLh09vBl2qx+yN9nwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJU7eG+p0283TwNkYb+/QfUhEJBiMB8GA1UdIwQY MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt Mzg0ZmZjZTc3ZjUyLzEvbFR0NGI2blRiemRQQTJSaHY3OUI5U0VRa0dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgckhuAw DQYJKoZIhvcNAQELBQADggEBAACQFzChM3fSDgvrqsy1/5YkxLgW9Qh6wKpNy3Fa VYbXAGSa8aKHAxFFlvyjeNGNqCsl7pepnquU+fkD4Kn1ntiaUTLSMtYv/Vlkh977 5PQT+CRb/XuOUZbR5S3bvCmMRENBXhAJSvFyiiTxQv6+gcLcAbGx5N1TYdOBh51S Vs+rWDO8/j2HcLYQ3d19tXvc47KYFr11fdGmgSYoOw7RgpXBwTjmMKGAihk1Prtq vrfGSNZKa58uP1d8U+JpNn/Sp9a2LZTfQMQyE+DEuvhjPJ7h8LqdoYJOXEya0p7R dRBvH4P71FE30psvKeZITlL+pQlqnrFh/CypgkElA9iHM8E= -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:44 2026 by rpki-client