This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/LeZJUNccie_e2eoHQDe1WERBbSM.roa File: LeZJUNccie_e2eoHQDe1WERBbSM.roa (raw, json) Hash identifier: 6yTDam5z5E6DaJFilsdxAiIalvNncOrIIxGnMBnOld0= Subject key identifier: 2D:E6:49:50:D7:1C:89:EF:DE:D9:EA:07:40:37:B5:58:44:41:6D:23 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAFA903A371A43FC173D1D984F509 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/LeZJUNccie_e2eoHQDe1WERBbSM.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208993 IP address blocks: 2a0e:aa07:f040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:af:a9:03:a3:71:a4:3f:c1:73:d1:d9:84:f5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2de64950d71c89efded9ea074037b55844416d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:b1:75:bd:e0:7e:9d:b4:e7:2c:c5:91:90: f1:57:fc:2b:ae:2e:df:85:11:c9:3f:04:4d:1c:c8: 91:3a:69:ab:a8:c8:3e:9e:98:a7:4a:b2:38:50:bb: 08:35:c1:bd:4b:62:14:ba:3e:0d:e1:5f:ad:10:dd: 7b:bb:34:c1:a9:07:f6:14:43:8d:9c:e9:7c:93:02: 81:63:e8:ed:49:93:b2:15:36:9c:24:2c:cc:a1:5f: 51:ec:4b:81:ea:38:98:80:c0:c8:7e:ea:3b:a5:ca: 19:15:81:34:38:0b:bb:ef:33:1c:ae:2e:10:19:78: 1e:ec:84:49:de:ec:f2:ff:62:f3:ce:1b:e7:90:8a: ba:9a:52:74:38:79:41:88:6a:e3:ca:b7:b5:21:21: 6f:8b:05:52:66:7d:2e:86:bd:b5:de:07:03:b7:78: 6e:1a:fd:69:ee:ab:8a:a4:6c:25:42:b9:90:cf:87: 47:ae:fe:47:30:cb:4e:83:50:8e:a4:36:1b:48:85: 0c:5a:a7:0b:06:59:12:b1:cd:c3:92:c1:1d:de:00: 8a:45:e5:67:9e:ea:45:58:bf:96:8d:7a:6c:8a:e1: c1:d3:34:25:df:87:8f:17:01:51:4a:12:71:47:f1: 73:68:33:88:2d:8f:29:b3:9b:3c:ba:6d:53:3e:49: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:49:50:D7:1C:89:EF:DE:D9:EA:07:40:37:B5:58:44:41:6D:23 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/LeZJUNccie_e2eoHQDe1WERBbSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:f040::/44 Signature Algorithm: sha256WithRSAEncryption 68:9c:d1:02:6d:84:93:7b:1a:b6:20:b9:24:99:b5:a5:e2:66: 17:85:dd:b4:a9:d0:0a:40:39:fc:25:79:88:15:73:51:24:e6: 8f:7e:1a:21:5e:b1:00:f7:39:bb:41:16:df:77:b3:02:3c:cf: 45:12:8b:f7:42:42:c0:e3:72:31:0e:30:63:b4:8d:21:e1:b1: 92:1f:22:60:d0:a7:20:cc:11:e2:c1:4d:01:ba:ab:47:7a:f3: 0e:45:1c:01:09:b1:78:16:e5:8c:80:8e:1a:79:12:d3:e0:9c: f0:5e:af:86:86:8a:fb:a1:95:6a:1a:c8:ed:60:e1:94:16:00: 82:f6:01:4c:e1:d0:d5:6b:6a:b7:1d:48:69:b0:cb:0b:63:02: 2b:b9:e5:33:e4:c7:8b:39:9e:42:6a:da:20:55:c1:00:99:4a: 7f:30:11:75:b9:13:46:f3:85:f9:da:c6:7e:8a:b9:a5:a3:6c: 4a:b8:4b:54:a2:ce:76:6a:da:bf:fa:7d:2c:fe:ba:97:81:1d: 47:e1:8b:56:8b:cd:bc:5e:8e:77:ee:ca:84:52:f0:ae:9a:9c: cc:96:5c:0a:cd:50:11:62:f2:ba:fc:57:63:58:0f:d6:51:43: 69:d3:f9:41:87:dd:9e:86:38:f1:ec:a1:d8:45:a7:79:ef:f9: 2a:f2:1b:37 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fq+pA6NxpD/Bc9HZhPUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGU2NDk1MGQ3MWM4OWVmZGVkOWVhMDc0MDM3YjU1ODQ0NDE2ZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+xdb3gfp205yzFkZDxV/wrri7f hRHJPwRNHMiROmmrqMg+npinSrI4ULsINcG9S2IUuj4N4V+tEN17uzTBqQf2FEON nOl8kwKBY+jtSZOyFTacJCzMoV9R7EuB6jiYgMDIfuo7pcoZFYE0OAu77zMcri4Q GXge7IRJ3uzy/2LzzhvnkIq6mlJ0OHlBiGrjyre1ISFviwVSZn0uhr213gcDt3hu Gv1p7quKpGwlQrmQz4dHrv5HMMtOg1COpDYbSIUMWqcLBlkSsc3DksEd3gCKReVn nupFWL+WjXpsiuHB0zQl34ePFwFRShJxR/FzaDOILY8ps5s8um1TPkmmawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC3mSVDXHInv3tnqB0A3tVhEQW0jMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTGVaSlVOY2NpZV9lMmVvSFFEZTFXRVJCYlNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB/BA MA0GCSqGSIb3DQEBCwUAA4IBAQBonNECbYSTexq2ILkkmbWl4mYXhd20qdAKQDn8 JXmIFXNRJOaPfhohXrEA9zm7QRbfd7MCPM9FEov3QkLA43IxDjBjtI0h4bGSHyJg 0KcgzBHiwU0BuqtHevMORRwBCbF4FuWMgI4aeRLT4JzwXq+Ghor7oZVqGsjtYOGU FgCC9gFM4dDVa2q3HUhpsMsLYwIrueUz5MeLOZ5CatogVcEAmUp/MBF1uRNG84X5 2sZ+irmlo2xKuEtUos52atq/+n0s/rqXgR1H4YtWi828Xo537sqEUvCumpzMllwK zVARYvK6/FdjWA/WUUNp0/lBh92ehjjx7KHYRad57/kq8hs3 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client