This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa File: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (raw, json) Hash identifier: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs= Subject key identifier: 2F:81:55:2F:E2:0E:BD:EE:98:84:15:99:F2:3C:FC:36:8A:F4:72:FE Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B7C1271BAC5BCCE252446DB906C68D563 Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133398 IP address blocks: 2a10:1fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:71:ba:c5:bc:ce:25:24:46:db:90:6c:68:d5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f81552fe20ebdee98841599f23cfc368af472fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:e0:45:17:62:cf:86:d2:98:68:af:82:c8: 75:97:53:dd:0d:88:e7:85:fa:f8:93:9b:f2:a6:b8: 9d:6e:55:7e:83:4f:cd:c2:84:7d:c4:95:5f:3c:67: fb:39:c7:89:88:cf:1b:2b:07:ca:02:93:c9:51:06: 8c:e1:4e:31:c2:80:1d:20:7f:08:31:62:52:f0:0d: 84:2d:ef:ce:88:c8:01:4d:b5:5b:33:eb:4e:d9:20: bb:53:d1:9c:b1:0b:cb:d3:9a:d2:14:aa:c4:35:96: 18:2d:a5:c6:c1:70:56:b9:82:b5:10:e2:bb:dd:66: c0:d8:27:41:69:d0:b7:1a:d5:0a:0a:b1:50:81:89: 6c:97:db:b5:15:f1:76:19:88:74:dd:07:c6:fe:19: c4:2d:63:eb:4c:29:83:2f:01:6e:b6:b5:e5:8f:47: 2c:d4:5e:42:8e:12:b0:27:ed:7d:b5:99:ad:c3:a8: 74:cd:ce:79:3f:f8:48:93:18:54:30:d1:41:40:9d: cd:e6:7c:28:be:4f:ea:da:eb:df:c1:1d:76:fc:ba: e8:1b:c8:b4:51:ea:52:a0:65:f7:e6:f3:a0:da:2b: 56:a1:ab:7e:73:3d:80:32:f9:32:49:e1:6c:29:bc: 1a:13:94:23:25:2f:d6:79:b0:87:74:da:54:39:70: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:55:2F:E2:0E:BD:EE:98:84:15:99:F2:3C:FC:36:8A:F4:72:FE X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:1fc0::/48 Signature Algorithm: sha256WithRSAEncryption 63:13:aa:7e:99:a2:e4:b5:d7:d3:03:d1:49:8a:a0:cb:a4:f6: 8b:2f:9d:52:ca:1d:b5:c3:44:72:82:90:2e:5a:12:55:0a:7f: 10:92:c4:60:29:0a:ed:0e:9f:f9:a8:cf:bf:08:fd:3e:9a:f4: 9f:31:53:6c:22:58:81:fe:39:7b:81:9b:2a:a3:a2:82:f7:44: 78:37:3e:a5:8a:b6:75:29:ec:f2:6a:43:3e:e4:36:19:32:d4: 0c:61:85:0c:7d:51:a7:2b:d4:b5:78:8e:38:00:90:03:37:dd: c7:8f:49:ba:22:a6:2c:e4:5d:8a:19:0d:5e:88:ee:aa:e2:b7: 78:32:64:58:70:1e:65:13:77:6f:00:48:c5:67:26:f2:49:d6: 5e:62:b2:d1:96:9b:a8:b8:f9:95:13:5b:ae:a5:0a:84:46:1a: b9:bd:e7:23:1b:9a:94:37:0b:3c:7e:97:c7:43:b4:44:99:9c: 7b:bc:be:b2:60:33:f6:9c:df:70:28:e7:1c:89:f5:00:5d:c0: a9:23:ae:bf:26:a8:6e:4e:d1:ea:9e:34:f0:dc:aa:29:58:d1: 50:c3:88:98:1f:99:7c:e4:6e:58:a7:6c:5c:5f:36:22:bf:fb: 5a:36:ef:95:e9:17:af:01:7c:b6:97:f1:c5:0e:d7:2a:2b:1a: 44:1a:d3:90 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EnG6xbzOJSRG25BsaNVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgxNTUyZmUyMGViZGVlOTg4NDE1OTlmMjNjZmMzNjhhZjQ3MmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPfgRRdiz4bSmGivgsh1l1PdDYjn hfr4k5vypridblV+g0/NwoR9xJVfPGf7OceJiM8bKwfKApPJUQaM4U4xwoAdIH8I MWJS8A2ELe/OiMgBTbVbM+tO2SC7U9GcsQvL05rSFKrENZYYLaXGwXBWuYK1EOK7 3WbA2CdBadC3GtUKCrFQgYlsl9u1FfF2GYh03QfG/hnELWPrTCmDLwFutrXlj0cs 1F5CjhKwJ+19tZmtw6h0zc55P/hIkxhUMNFBQJ3N5nwovk/q2uvfwR12/LroG8i0 UepSoGX35vOg2itWoat+cz2AMvkySeFsKbwaE5QjJS/WebCHdNpUOXBnFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC+BVS/iDr3umIQVmfI8/DaK9HL+MB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvTDRGVkwtSU92ZTZZaEJXWjhqejhOb3IwY3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAfwAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBjE6p+maLktdfTA9FJiqDLpPaLL51Syh21w0Ry gpAuWhJVCn8QksRgKQrtDp/5qM+/CP0+mvSfMVNsIliB/jl7gZsqo6KC90R4Nz6l irZ1KezyakM+5DYZMtQMYYUMfVGnK9S1eI44AJADN93Hj0m6IqYs5F2KGQ1eiO6q 4rd4MmRYcB5lE3dvAEjFZybySdZeYrLRlpuouPmVE1uupQqERhq5vecjG5qUNws8 fpfHQ7REmZx7vL6yYDP2nN9wKOccifUAXcCpI66/JqhuTtHqnjTw3KopWNFQw4iY H5l85G5Yp2xcXzYiv/taNu+V6RevAXy2l/HFDtcqKxpEGtOQ -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client