This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Lifj7KdtCy4DbieC5ykmkdWdg5c.roa File: Lifj7KdtCy4DbieC5ykmkdWdg5c.roa (raw, json) Hash identifier: eMoJQCK3AYG6H3TTPzSMarS5Ash8Y9ZNZjsxnPtKxUI= Subject key identifier: 2E:27:E3:EC:A7:6D:0B:2E:03:6E:27:82:E7:29:26:91:D5:9D:83:97 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB61C71A2A1F3F1216C43B16C3941 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Lifj7KdtCy4DbieC5ykmkdWdg5c.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211176 IP address blocks: 2a0e:aa07:e020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b6:1c:71:a2:a1:f3:f1:21:6c:43:b1:6c:39:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e27e3eca76d0b2e036e2782e7292691d59d8397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:16:d9:73:c3:de:f0:3c:fa:53:2f:29:45:6a: f0:f8:27:42:0f:dd:3c:f9:8a:f9:81:09:43:13:2d: dc:bd:b9:53:d5:2e:98:d2:be:06:0f:10:b4:ba:5b: 51:17:7d:51:cc:02:3b:da:98:24:68:55:05:91:19: 01:1d:66:f0:2d:00:52:bb:51:1c:a8:0c:77:03:a2: f4:3e:55:38:61:22:d2:2f:b6:c8:dd:fd:16:ad:2d: 66:07:f8:44:85:a1:55:1c:19:f5:2f:03:59:09:47: 65:00:12:79:f2:ff:05:83:6c:db:59:27:22:68:f9: f9:4d:5e:73:a2:aa:f2:fa:4f:76:06:a7:ad:c6:b4: 48:90:04:82:b0:c3:8d:a7:8c:d0:bb:e1:ff:42:6d: 82:14:77:57:96:25:67:1f:32:df:f6:2f:44:a9:00: 4a:31:ca:2d:a7:96:75:f1:5e:f4:6d:de:18:47:e5: c2:0b:4c:f7:37:85:a7:6a:ee:4a:7a:83:c5:28:c3: 5d:13:a4:ef:95:2a:20:19:0e:4d:10:18:0c:69:2f: 23:f7:44:18:27:aa:26:93:87:8a:d9:66:33:93:99: 4a:17:4f:b8:86:fa:7b:26:93:fc:44:0f:df:83:76: 07:db:3c:ff:3b:8e:e4:bc:96:32:25:da:4b:12:96: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:27:E3:EC:A7:6D:0B:2E:03:6E:27:82:E7:29:26:91:D5:9D:83:97 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Lifj7KdtCy4DbieC5ykmkdWdg5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e020::/48 Signature Algorithm: sha256WithRSAEncryption 50:2a:07:fc:e9:c2:9c:0a:e1:c7:c8:6a:cb:5f:53:8e:3b:d7: e6:17:61:ba:a8:37:8e:32:85:ad:02:ef:4b:86:ce:5d:12:f6: 4e:09:fc:a2:5c:98:f1:d9:29:7b:f2:be:ca:10:d3:09:97:d1: cd:30:16:75:f2:6d:78:38:7b:44:36:77:ba:35:0a:bd:83:8d: 23:9b:de:82:1d:b8:9f:02:46:91:4a:01:c5:36:77:e1:1f:a3: 1d:1a:25:cc:26:d1:91:cd:41:fe:27:f6:95:82:09:eb:45:4c: 78:41:9e:f7:7f:53:80:ba:68:c8:ee:9b:53:c8:fe:9b:03:f1: 39:bc:66:fc:22:08:76:f8:f1:e9:36:54:36:25:11:e6:ad:8b: 5c:4a:3a:f4:82:d1:51:1e:64:6e:8c:b3:00:6c:91:e8:34:be: 55:f3:d7:4a:01:04:0e:fd:1e:d8:3f:9b:c4:2b:d3:2e:43:e2: 89:cb:0a:4c:df:7e:73:b3:73:8e:1a:62:6d:b0:a6:a1:8f:a0: a3:49:86:54:28:6c:3b:26:20:1e:93:ef:b0:02:f4:a7:23:96: f7:5f:99:06:39:7a:4a:ff:96:16:16:d3:f8:c5:78:ba:a6:8d: 7c:f7:b7:6e:39:5c:a4:7f:88:9b:40:84:64:73:62:42:f9:82: 11:fa:99:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frYccaKh8/EhbEOxbDlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTI3ZTNlY2E3NmQwYjJlMDM2ZTI3ODJlNzI5MjY5MWQ1OWQ4Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hbZc8Pe8Dz6Uy8pRWrw+CdCD908 +Yr5gQlDEy3cvblT1S6Y0r4GDxC0ultRF31RzAI72pgkaFUFkRkBHWbwLQBSu1Ec qAx3A6L0PlU4YSLSL7bI3f0WrS1mB/hEhaFVHBn1LwNZCUdlABJ58v8Fg2zbWSci aPn5TV5zoqry+k92BqetxrRIkASCsMONp4zQu+H/Qm2CFHdXliVnHzLf9i9EqQBK Mcotp5Z18V70bd4YR+XCC0z3N4Wnau5KeoPFKMNdE6TvlSogGQ5NEBgMaS8j90QY J6omk4eK2WYzk5lKF0+4hvp7JpP8RA/fg3YH2zz/O47kvJYyJdpLEpY1bQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC4n4+ynbQsuA24ngucpJpHVnYOXMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTGlmajdLZHRDeTREYmllQzV5a21rZFdkZzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ag MA0GCSqGSIb3DQEBCwUAA4IBAQBQKgf86cKcCuHHyGrLX1OOO9fmF2G6qDeOMoWt Au9Lhs5dEvZOCfyiXJjx2Sl78r7KENMJl9HNMBZ18m14OHtENne6NQq9g40jm96C HbifAkaRSgHFNnfhH6MdGiXMJtGRzUH+J/aVggnrRUx4QZ73f1OAumjI7ptTyP6b A/E5vGb8Igh2+PHpNlQ2JRHmrYtcSjr0gtFRHmRujLMAbJHoNL5V89dKAQQO/R7Y P5vEK9MuQ+KJywpM335zs3OOGmJtsKahj6CjSYZUKGw7JiAek++wAvSnI5b3X5kG OXpK/5YWFtP4xXi6po1897duOVykf4ibQIRkc2JC+YIR+pl8 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client