This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa File: LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa (raw, json) Hash identifier: 9TX7Fzg1+Qnk+2k2ngL2zOqaTn3qXWn6P9IDGR9xUb4= Subject key identifier: 2C:0F:D7:78:9D:97:2F:AB:AA:A8:88:C3:0B:E0:EB:15:26:3B:46:DB Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5 Certificate serial: 019B7834C6D42A560D824704676AAFF56CA9 Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202837 IP address blocks: 185.198.4.0/24 maxlen: 24 185.198.5.0/24 maxlen: 24 185.198.6.0/24 maxlen: 24 185.198.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c6:d4:2a:56:0d:82:47:04:67:6a:af:f5:6c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c0fd7789d972fabaaa888c30be0eb15263b46db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6c:2f:77:e2:45:45:91:6e:fc:b4:cd:e8:de: 7b:44:dd:df:10:59:e1:45:04:ea:18:66:a5:6e:af: 11:f7:51:dd:ad:7a:de:bb:c9:c1:70:6d:ef:b3:05: 75:54:3d:ac:be:5e:19:16:a4:73:82:9e:15:11:d6: 45:c7:ad:e6:5c:d3:42:8a:cf:a4:53:d7:45:93:d9: 94:e3:15:09:7a:8f:8c:34:f3:5c:8b:52:48:51:77: 27:e6:63:b3:b9:70:c6:a0:1d:43:5d:ed:f2:45:a3: 84:d8:e4:39:54:d7:df:67:be:0f:35:79:fd:42:18: a0:ed:a0:56:7d:82:a5:b9:dd:8b:d8:00:dc:0e:f4: 0b:fc:0b:17:e4:f9:9a:0e:1f:ce:8d:0a:42:80:ba: 75:fb:8a:a0:5b:32:61:59:b4:7c:ca:a6:a4:4a:01: c4:36:ce:ea:e3:88:83:70:90:f7:54:95:74:f5:44: 02:53:09:f3:f5:07:d1:66:c1:9e:d6:ad:51:11:4f: 4e:22:79:b7:85:0f:54:ce:52:c9:7f:44:a9:88:59: 9f:cd:29:bb:a9:80:29:88:4d:66:29:9a:64:2b:f3: b4:7a:89:dd:58:6b:5f:62:16:3a:5f:4d:74:e4:90: ed:4d:b0:2b:96:f0:9c:30:2c:e8:c0:13:e2:9b:60: 44:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:D7:78:9D:97:2F:AB:AA:A8:88:C3:0B:E0:EB:15:26:3B:46:DB X509v3 Authority Key Identifier: keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:21:0d:68:e6:ca:32:e3:f3:a0:04:fa:cd:da:1a:18:47:a4: 6b:48:30:b9:f4:d4:c8:f1:d6:c4:7b:7d:92:94:c6:22:13:85: d0:85:82:63:74:7a:21:e1:98:e4:62:d4:83:bc:b0:c0:cc:21: a9:d2:6b:25:c8:95:40:05:62:db:49:a1:16:66:bf:0f:34:72: 8e:80:8a:56:d2:74:ef:2c:ea:7c:06:f3:9d:8e:de:c7:9d:f5: 61:5c:b1:3d:61:9b:3f:a0:63:d2:87:f2:d7:96:b2:11:9c:dd: da:90:4a:ca:a9:5d:d2:ab:57:b5:c3:e6:83:00:b9:a1:ad:2c: b6:1f:4a:0e:76:c3:76:9d:9d:f7:f9:0f:53:0f:e1:0f:2a:eb: cc:66:6f:a4:6c:95:37:8b:0c:36:44:e5:1f:2a:e3:6b:c6:5a: 04:fc:c5:71:16:2e:8f:22:d3:4f:a2:8c:b2:c9:4e:e4:62:05: dc:dd:a9:02:74:39:8f:c8:a7:91:c5:44:a9:0d:93:0b:25:67: 57:f5:e9:b3:9f:6a:e1:c1:61:a2:9a:c2:36:e8:07:63:f2:d2: 72:5c:9d:e0:b2:2f:3a:09:41:ee:5e:77:11:d0:b8:fe:76:52: 89:e8:e7:bc:e1:b1:26:84:ed:f8:9b:20:da:e9:62:b9:3e:b1: f7:1d:35:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMbUKlYNgkcEZ2qv9WypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTllOWJlMWZiZDFlNjkwOWEwYmU5YTkwYjM4MGY4MjRm YWIxYTUwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzBmZDc3ODlkOTcyZmFiYWFhODg4YzMwYmUwZWIxNTI2M2I0NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42wvd+JFRZFu/LTN6N57RN3fEFnh RQTqGGalbq8R91HdrXreu8nBcG3vswV1VD2svl4ZFqRzgp4VEdZFx63mXNNCis+k U9dFk9mU4xUJeo+MNPNci1JIUXcn5mOzuXDGoB1DXe3yRaOE2OQ5VNffZ74PNXn9 Qhig7aBWfYKlud2L2ADcDvQL/AsX5PmaDh/OjQpCgLp1+4qgWzJhWbR8yqakSgHE Ns7q44iDcJD3VJV09UQCUwnz9QfRZsGe1q1REU9OInm3hQ9UzlLJf0SpiFmfzSm7 qYApiE1mKZpkK/O0eondWGtfYhY6X0105JDtTbArlvCcMCzowBPim2BEQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwP13idly+rqqiIwwvg6xUmO0bbMB8GA1UdIwQY MBaAFCVZ6b4fvR5pCaC+mpCzgPgk+rGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQt NGFhYWRhNjVkNzFjLzEvTEFfWGVKMlhMNnVxcUlqREMtRHJGU1k3UnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQtNGFhYWRhNjVkNzFj LzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucYEMA0G CSqGSIb3DQEBCwUAA4IBAQCaIQ1o5soy4/OgBPrN2hoYR6RrSDC59NTI8dbEe32S lMYiE4XQhYJjdHoh4ZjkYtSDvLDAzCGp0mslyJVABWLbSaEWZr8PNHKOgIpW0nTv LOp8BvOdjt7HnfVhXLE9YZs/oGPSh/LXlrIRnN3akErKqV3Sq1e1w+aDALmhrSy2 H0oOdsN2nZ33+Q9TD+EPKuvMZm+kbJU3iww2ROUfKuNrxloE/MVxFi6PItNPooyy yU7kYgXc3akCdDmPyKeRxUSpDZMLJWdX9emzn2rhwWGimsI26Adj8tJyXJ3gsi86 CUHuXncR0Lj+dlKJ6Oe84bEmhO34myDa6WK5PrH3HTW5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:28 2026 by rpki-client