This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/LaX0lyqKrqlT3r9SHamEM4riiNo.roa File: LaX0lyqKrqlT3r9SHamEM4riiNo.roa (raw, json) Hash identifier: TKkGVqyflJt8lKShYqOWxFh/whKCp40LQwjc681HFfA= Subject key identifier: 2D:A5:F4:97:2A:8A:AE:A9:53:DE:BF:52:1D:A9:84:33:8A:E2:88:DA Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d Certificate serial: 019B7C7FD577ACE33F71D026A66D90A345BD Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/LaX0lyqKrqlT3r9SHamEM4riiNo.roa Signing time: Fri 02 Jan 2026 02:18:31 +0000 ROA not before: Fri 02 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49638 IP address blocks: 91.213.30.0/24 maxlen: 24 2001:67c:137c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d5:77:ac:e3:3f:71:d0:26:a6:6d:90:a3:45:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da5f4972a8aaea953debf521da984338ae288da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:52:4c:e8:51:0c:31:31:1e:2a:64:5d:fa: 59:a5:21:22:1f:5d:e4:6d:05:00:b2:8e:6c:84:60: 87:fe:f2:2d:a5:38:c0:79:0d:4b:6f:a4:57:b5:ba: 67:49:8d:c7:df:bb:7e:e1:5a:c8:20:ce:1c:47:3e: e1:c3:e5:d5:38:06:e2:89:f5:bd:22:82:59:1a:9b: ed:e1:18:e1:14:85:2f:5b:36:6a:76:2a:7a:72:e7: f9:b1:55:8e:6d:e2:81:b7:d1:d1:7a:8b:f4:40:13: 8b:5f:cd:54:9c:95:07:10:37:61:94:9b:ee:33:b0: f8:75:85:62:f7:0f:d1:a7:0d:38:f0:88:54:cd:db: c1:04:62:51:28:5f:34:d6:c9:1e:0b:7e:63:35:2e: 93:4d:b2:88:ba:f1:d1:f7:b7:4c:81:90:32:f0:9b: e9:8e:90:a7:07:33:19:d9:41:43:75:f9:bd:c5:8a: 8f:40:61:60:f1:61:1c:67:1a:78:f2:82:e1:98:b9: 2a:e8:ae:70:69:bf:e5:2a:29:9b:d6:6d:df:2c:51: f0:12:46:65:0c:75:b0:9d:71:e4:c8:ef:99:f0:64: 64:53:5e:a5:cd:69:7b:b7:39:6c:e1:1e:e0:ef:02: d3:6e:02:6c:f4:aa:a9:a3:86:aa:96:06:6d:f8:88: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A5:F4:97:2A:8A:AE:A9:53:DE:BF:52:1D:A9:84:33:8A:E2:88:DA X509v3 Authority Key Identifier: keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/LaX0lyqKrqlT3r9SHamEM4riiNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.30.0/24 IPv6: 2001:67c:137c::/48 Signature Algorithm: sha256WithRSAEncryption bd:bc:fe:03:74:33:5a:03:3e:61:a2:b9:a5:47:07:11:cb:6c: c1:d0:e0:5b:98:23:52:52:3c:59:5b:f1:32:d1:ac:43:fb:48: 7e:b5:4d:85:9b:2e:65:39:e1:12:14:d5:7a:a1:b7:ec:4a:3e: 1c:49:ac:f5:5a:a1:bf:a0:29:36:8d:99:51:67:b5:5f:e7:f6: 09:49:a9:74:df:e7:83:43:de:59:92:2d:1a:0f:21:9c:a2:f8: 24:65:30:6c:fc:80:ae:47:a2:88:35:e7:86:65:d9:b8:62:e8: 97:7a:6e:5f:2f:96:e7:9d:10:5e:2e:55:c6:ae:f1:7e:28:5d: 83:af:8f:8e:0d:88:f6:2b:b9:a7:d0:6a:33:7d:71:20:a5:5a: 2b:95:89:c9:24:1e:b7:11:94:e1:88:39:69:01:02:a6:fb:83: f6:1e:dd:da:95:d6:eb:dc:8a:2f:d6:76:55:62:3d:9c:39:90: 5c:41:b0:12:52:b0:e4:d8:f8:c9:e2:ab:12:e2:ad:29:28:be: 47:cc:9f:4f:c9:2d:09:8c:d1:6e:e9:2e:18:1d:a2:9b:68:25: 5f:44:11:a5:fc:4d:5c:d1:34:9d:fe:90:33:8a:5d:04:b5:be: 82:0e:ef:44:57:7a:2b:1c:5e:27:0a:c5:61:6e:2c:22:df:91: ff:5f:42:7d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f9V3rOM/cdAmpm2Qo0W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYzQ1MWZiZGZhYTEyZWZjMzUyYTU5YjAwN2IwYTg4MjNi OGU2NWQwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGE1ZjQ5NzJhOGFhZWE5NTNkZWJmNTIxZGE5ODQzMzhhZTI4OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquxSTOhRDDExHipkXfpZpSEiH13k bQUAso5shGCH/vItpTjAeQ1Lb6RXtbpnSY3H37t+4VrIIM4cRz7hw+XVOAbiifW9 IoJZGpvt4RjhFIUvWzZqdip6cuf5sVWObeKBt9HReov0QBOLX81UnJUHEDdhlJvu M7D4dYVi9w/Rpw048IhUzdvBBGJRKF801skeC35jNS6TTbKIuvHR97dMgZAy8Jvp jpCnBzMZ2UFDdfm9xYqPQGFg8WEcZxp48oLhmLkq6K5wab/lKimb1m3fLFHwEkZl DHWwnXHkyO+Z8GRkU16lzWl7tzls4R7g7wLTbgJs9Kqpo4aqlgZt+IjGwQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC2l9Jcqiq6pU96/Uh2phDOK4ojaMB8GA1UdIwQY MBaAFBzEUfvfqhLvw1KlmwB7CogjuOZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMt ODMyZGI5ZWJlYmFmLzEvTGFYMGx5cUtycWxUM3I5U0hhbUVNNHJpaU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMtODMyZGI5ZWJlYmFm LzEvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UeMA8E AgACMAkDBwAgAQZ8E3wwDQYJKoZIhvcNAQELBQADggEBAL28/gN0M1oDPmGiuaVH BxHLbMHQ4FuYI1JSPFlb8TLRrEP7SH61TYWbLmU54RIU1Xqht+xKPhxJrPVaob+g KTaNmVFntV/n9glJqXTf54ND3lmSLRoPIZyi+CRlMGz8gK5Hoog154Zl2bhi6Jd6 bl8vluedEF4uVcau8X4oXYOvj44NiPYruafQajN9cSClWiuVickkHrcRlOGIOWkB Aqb7g/Ye3dqV1uvcii/WdlViPZw5kFxBsBJSsOTY+MniqxLirSkovkfMn0/JLQmM 0W7pLhgdoptoJV9EEaX8TVzRNJ3+kDOKXQS1voIO70RXeiscXicKxWFuLCLfkf9f Qn0= -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:20 2026 by rpki-client