This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ltxvSWHMycCgw4ssNFroLBeiTPs.roa File: ltxvSWHMycCgw4ssNFroLBeiTPs.roa (raw, json) Hash identifier: LFdgLK608ocbiCtr7f/PHZMm2jGZ/2CdVE9MZ4s+sKs= Subject key identifier: 96:DC:6F:49:61:CC:C9:C0:A0:C3:8B:2C:34:5A:E8:2C:17:A2:4C:FB Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791085C35D19C17207E6AC5E25DAA0C5 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ltxvSWHMycCgw4ssNFroLBeiTPs.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48297 IP address blocks: 2a12:bec0:410::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:c3:5d:19:c1:72:07:e6:ac:5e:25:da:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96dc6f4961ccc9c0a0c38b2c345ae82c17a24cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:f4:fa:e6:69:a0:18:cd:ba:05:87:70:58: c1:74:99:61:56:30:b0:8e:21:4f:84:61:13:47:3d: 46:cc:a5:df:af:dd:69:80:99:46:41:ff:d9:0a:b6: 75:8c:10:c3:bd:b2:bd:ac:46:01:2c:30:d7:4f:2a: 6a:bd:92:ca:2b:c6:40:2d:f2:09:ec:5f:07:f3:05: 81:be:1d:e5:80:8e:c5:34:6f:3e:f9:a6:95:dd:c5: 7f:7c:cb:47:92:ed:d7:6e:0d:4d:f6:ae:96:73:c7: 55:80:89:ac:f4:74:32:a7:78:40:79:c5:25:4a:4b: 41:af:f2:e2:40:85:59:68:2e:41:fb:9a:b6:17:95: 19:23:85:b9:6c:31:63:5c:c8:6a:f3:ad:19:02:5e: 51:59:22:49:85:a5:e0:9f:63:49:1a:02:4c:54:fd: 38:89:55:e1:f0:0b:79:bc:d7:ac:2c:22:8d:0b:eb: 14:8a:60:6f:b8:0d:b3:db:6d:f0:6d:2e:a0:95:57: 58:44:df:28:33:53:99:4d:e9:ac:67:7d:2c:a1:ba: f7:55:e5:14:ca:a8:e9:7d:0c:11:e1:c5:0f:28:ff: 31:8d:f6:4c:cd:8b:92:2a:31:19:3b:b6:ed:b1:42: 75:a5:27:d5:52:cf:86:cd:9a:60:5a:4c:8d:6f:f3: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:6F:49:61:CC:C9:C0:A0:C3:8B:2C:34:5A:E8:2C:17:A2:4C:FB X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ltxvSWHMycCgw4ssNFroLBeiTPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:410::/44 Signature Algorithm: sha256WithRSAEncryption 6d:5b:99:e2:72:6a:79:66:e7:7d:d4:0b:15:20:c6:a7:dd:42: 58:0b:5d:fa:55:96:cd:17:b5:ce:e5:cb:9c:c6:69:cf:94:6b: 11:9b:e7:61:ff:07:e5:4b:f2:0d:07:c9:24:04:05:f4:5b:f2: 48:14:3e:62:c1:05:08:d9:fb:b6:bd:27:bf:bd:c5:3f:ea:84: 90:21:45:31:91:50:7d:34:59:89:41:d2:d3:29:5e:ff:d8:ba: 0b:81:99:2a:b5:03:5f:7f:56:f9:6b:63:a4:27:6a:2d:0d:a0: 69:63:ab:20:17:da:fd:af:59:78:99:a6:67:05:e4:83:a6:dc: 2b:fe:c5:72:80:fd:00:fa:f8:8a:a7:47:ea:bb:bb:64:53:4b: fa:05:2d:6a:2a:97:f8:24:3b:ca:50:2e:55:42:db:09:f0:3c: 94:12:1d:e4:43:f3:f5:f5:07:10:20:d4:ff:63:cc:a1:ac:af: f5:06:4c:c6:bc:28:be:00:a0:53:43:84:00:e5:33:ab:47:fb: 65:bf:da:d1:d3:50:e5:7f:d0:c6:ae:d0:c3:99:83:ea:eb:c8: ec:c8:4a:ae:ef:b9:69:5f:03:11:9b:f1:bc:a6:14:a7:2d:5d: 92:c6:7f:d5:a3:ae:18:9b:2a:d4:34:c7:a8:aa:3a:78:57:a8: a8:62:62:0d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EIXDXRnBcgfmrF4l2qDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRjNmY0OTYxY2NjOWMwYTBjMzhiMmMzNDVhZTgyYzE3YTI0Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nf0+uZpoBjNugWHcFjBdJlhVjCw jiFPhGETRz1GzKXfr91pgJlGQf/ZCrZ1jBDDvbK9rEYBLDDXTypqvZLKK8ZALfIJ 7F8H8wWBvh3lgI7FNG8++aaV3cV/fMtHku3Xbg1N9q6Wc8dVgIms9HQyp3hAecUl SktBr/LiQIVZaC5B+5q2F5UZI4W5bDFjXMhq860ZAl5RWSJJhaXgn2NJGgJMVP04 iVXh8At5vNesLCKNC+sUimBvuA2z223wbS6glVdYRN8oM1OZTemsZ30sobr3VeUU yqjpfQwR4cUPKP8xjfZMzYuSKjEZO7btsUJ1pSfVUs+GzZpgWkyNb/NN2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJbcb0lhzMnAoMOLLDRa6CwXokz7MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvbHR4dlNXSE15Y0NndzRzc05Gcm9MQmVpVFBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAQQ MA0GCSqGSIb3DQEBCwUAA4IBAQBtW5nicmp5Zud91AsVIMan3UJYC136VZbNF7XO 5cucxmnPlGsRm+dh/wflS/INB8kkBAX0W/JIFD5iwQUI2fu2vSe/vcU/6oSQIUUx kVB9NFmJQdLTKV7/2LoLgZkqtQNff1b5a2OkJ2otDaBpY6sgF9r9r1l4maZnBeSD ptwr/sVygP0A+viKp0fqu7tkU0v6BS1qKpf4JDvKUC5VQtsJ8DyUEh3kQ/P19QcQ INT/Y8yhrK/1BkzGvCi+AKBTQ4QA5TOrR/tlv9rR01Dlf9DGrtDDmYPq68jsyEqu 77lpXwMRm/G8phSnLV2Sxn/Vo64YmyrUNMeoqjp4V6ioYmIN -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:53 2026 by rpki-client