This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/LP52qnubKxecYdQ-4Gq-g5solMI.roa File: LP52qnubKxecYdQ-4Gq-g5solMI.roa (raw, json) Hash identifier: d3Yb8p3JWql1bpnrOlZo/xmDSrsELW4S0QGufv7OyXg= Subject key identifier: 2C:FE:76:AA:7B:9B:2B:17:9C:61:D4:3E:E0:6A:BE:83:9B:28:94:C2 Certificate issuer: /CN=9cb352a5bdc622937b63787d4da8124f77201bbf Certificate serial: 019B9ED714A8CB618A2AE16A264E50CBB942 Authority key identifier: 9C:B3:52:A5:BD:C6:22:93:7B:63:78:7D:4D:A8:12:4F:77:20:1B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/LP52qnubKxecYdQ-4Gq-g5solMI.roa Signing time: Thu 08 Jan 2026 18:20:54 +0000 ROA not before: Thu 08 Jan 2026 18:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207213 IP address blocks: 2a05:cfc0:1::/48 maxlen: 48 2a05:cfc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.mft rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:d7:14:a8:cb:61:8a:2a:e1:6a:26:4e:50:cb:b9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb352a5bdc622937b63787d4da8124f77201bbf Validity Not Before: Jan 8 18:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cfe76aa7b9b2b179c61d43ee06abe839b2894c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:5a:74:c9:37:d3:29:40:f3:c9:ef:06:f3: 67:80:1d:b0:c3:a2:cb:b5:b2:95:58:58:2f:88:b2: 31:51:c3:c2:1c:e1:2a:43:ea:0b:27:fd:35:ed:d0: cb:8d:67:8e:ee:67:a2:65:7a:ab:c1:db:00:a5:f2: 3d:2e:9c:aa:8b:d2:14:e8:d4:99:c2:29:92:6b:02: ce:47:1e:4c:63:10:43:b2:bf:47:f5:d7:38:9b:4b: b8:2d:bb:71:a7:f6:be:50:6c:83:51:af:86:9a:6d: f5:70:ff:71:66:99:4f:43:bc:3b:23:a0:dc:90:80: 04:3c:da:d4:61:4e:1e:f3:66:d7:84:f1:97:89:0e: 94:25:f2:87:47:b4:57:8b:d5:48:81:05:ff:2f:63: de:30:8b:26:fe:a2:b8:83:2e:94:74:c2:a7:75:9a: d6:83:dd:80:4e:93:6e:39:3f:ad:01:72:72:9a:a6: fd:16:62:5e:44:9b:15:36:53:d0:50:96:af:42:2c: 88:df:fa:60:b5:6c:c7:bb:8c:f2:8b:ee:9a:14:73: 5c:62:c2:06:91:5a:24:58:7e:1a:2e:a4:d0:9e:93: e5:2e:73:c3:55:71:1a:1c:61:c4:1c:0b:f0:3c:8d: f6:6b:41:53:94:75:de:64:00:54:ec:d1:a0:2b:a1: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FE:76:AA:7B:9B:2B:17:9C:61:D4:3E:E0:6A:BE:83:9B:28:94:C2 X509v3 Authority Key Identifier: keyid:9C:B3:52:A5:BD:C6:22:93:7B:63:78:7D:4D:A8:12:4F:77:20:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/LP52qnubKxecYdQ-4Gq-g5solMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:cfc0:1::-2a05:cfc0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 61:ff:ad:ea:1d:ec:fa:90:bd:3a:3c:3a:a1:f8:72:30:9f:84: 92:92:b6:ad:2a:ba:57:a7:3f:f3:4e:2d:31:bc:f6:6e:f6:79: 9c:3d:ff:3e:f6:28:79:f7:f9:0f:10:20:54:10:51:fd:b1:e9: 30:39:4f:14:0e:d3:9f:20:30:5f:ab:bd:ea:df:7c:b4:56:de: dd:3d:9a:5c:b3:fd:94:16:56:7b:f4:3c:fc:c2:24:83:31:7b: 3f:a3:9f:4b:f6:9c:af:78:16:90:ff:f5:da:cd:86:ea:7f:5f: 83:16:00:4d:f8:d2:cc:2b:05:fa:a1:fc:8c:0f:46:fa:de:44: 55:1a:32:f5:d2:bf:37:26:ad:80:72:bf:e9:bb:81:60:4c:14: 76:73:67:9f:d6:98:4d:56:48:81:54:2a:5f:15:76:f2:52:be: 6a:8c:0b:9a:4b:e1:1c:63:ba:3d:b6:39:73:57:88:07:73:1d: 87:f9:23:db:00:e8:e9:72:e7:c0:63:f8:39:2d:2b:2c:c5:89: 71:e9:0b:bd:de:db:1b:a3:28:e8:76:8a:c8:9c:4c:13:5f:8b: fa:44:d3:01:8c:33:6b:1a:5f:43:ea:7c:5b:26:70:bd:c7:03: 87:fb:28:24:74:09:c8:5a:52:10:33:01:03:93:83:7d:54:11: 0f:db:3d:c0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZue1xSoy2GKKuFqJk5Qy7lCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjM1MmE1YmRjNjIyOTM3YjYzNzg3ZDRkYTgxMjRmNzcy MDFiYmYwHhcNMjYwMTA4MTgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2ZlNzZhYTdiOWIyYjE3OWM2MWQ0M2VlMDZhYmU4MzliMjg5NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoBadMk30ylA88nvBvNngB2ww6LL tbKVWFgviLIxUcPCHOEqQ+oLJ/017dDLjWeO7meiZXqrwdsApfI9Lpyqi9IU6NSZ wimSawLORx5MYxBDsr9H9dc4m0u4Lbtxp/a+UGyDUa+Gmm31cP9xZplPQ7w7I6Dc kIAEPNrUYU4e82bXhPGXiQ6UJfKHR7RXi9VIgQX/L2PeMIsm/qK4gy6UdMKndZrW g92ATpNuOT+tAXJymqb9FmJeRJsVNlPQUJavQiyI3/pgtWzHu4zyi+6aFHNcYsIG kVokWH4aLqTQnpPlLnPDVXEaHGHEHAvwPI32a0FTlHXeZABU7NGgK6HJDwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCz+dqp7mysXnGHUPuBqvoObKJTCMB8GA1UdIwQY MBaAFJyzUqW9xiKTe2N4fU2oEk93IBu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxOU3BiM0dJcE43WTNoOVRhZ1NUM2NnRzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85YjMwZDItZWZiNS00ODczLWFjNWMt MDA5NmQyYmY3ZTk4LzEvTFA1MnFudWJLeGVjWWRRLTRHcS1nNXNvbE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85YjMwZDItZWZiNS00ODczLWFjNWMtMDA5NmQyYmY3ZTk4 LzEvbkxOU3BiM0dJcE43WTNoOVRhZ1NUM2NnRzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBc/A AAEDBwAqBc/AAAIwDQYJKoZIhvcNAQELBQADggEBAGH/reod7PqQvTo8OqH4cjCf hJKStq0qulenP/NOLTG89m72eZw9/z72KHn3+Q8QIFQQUf2x6TA5TxQO058gMF+r verffLRW3t09mlyz/ZQWVnv0PPzCJIMxez+jn0v2nK94FpD/9drNhup/X4MWAE34 0swrBfqh/IwPRvreRFUaMvXSvzcmrYByv+m7gWBMFHZzZ5/WmE1WSIFUKl8VdvJS vmqMC5pL4Rxjuj22OXNXiAdzHYf5I9sA6Oly58Bj+DktKyzFiXHpC73e2xujKOh2 isicTBNfi/pE0wGMM2saX0PqfFsmcL3HA4f7KCR0CchaUhAzAQOTg31UEQ/bPcA= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:23 2026 by rpki-client