This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lti_ZS1qdJ17vzlUErHLJRdShuM.roa File: lti_ZS1qdJ17vzlUErHLJRdShuM.roa (raw, json) Hash identifier: pXwn0qmcFCbouYnI/xcckKVTRJj3c7qW6G8+Sd30GnE= Subject key identifier: 96:D8:BF:65:2D:6A:74:9D:7B:BF:39:54:12:B1:CB:25:17:52:86:E3 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C75262EDDFC64D939F0B9E6BF85AC4 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lti_ZS1qdJ17vzlUErHLJRdShuM.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400039 IP address blocks: 86.104.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:62:ed:df:c6:4d:93:9f:0b:9e:6b:f8:5a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96d8bf652d6a749d7bbf395412b1cb25175286e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:e2:4a:b8:13:f5:f7:a8:44:4d:90:73:a4: 42:26:ea:e1:18:42:2c:d7:ad:e6:79:31:8a:35:e6: 88:e9:52:53:78:8f:88:3c:f5:c9:3d:d3:71:a9:6d: 9b:69:82:3e:08:32:b0:93:45:93:13:62:db:f1:05: 8d:d9:dd:b9:5a:ad:75:bf:4e:c1:c3:61:cc:c9:e9: 50:c1:ca:67:2b:b8:2a:7c:e6:59:bf:74:34:01:7e: cf:38:c8:e9:4f:ac:30:cb:b7:3b:c7:66:f4:b3:fc: c4:73:45:0b:99:57:4f:22:05:f1:27:3c:65:b1:8e: bd:84:d3:6a:d5:37:0b:78:3b:08:dd:39:7a:b6:f9: 1f:07:66:b5:4c:a5:3a:80:48:36:ee:bc:eb:06:e6: 96:d5:db:33:4b:8b:01:50:48:aa:02:10:35:e7:6e: cb:d6:a9:24:b6:a9:fe:1d:02:b4:32:f3:c1:f8:a3: d5:33:e4:52:6b:19:e2:0b:b7:d0:19:6c:a5:68:ef: e8:cb:fa:92:9d:5f:2e:d8:6e:90:79:20:18:c7:ba: 6a:10:60:a7:12:e2:00:ac:ba:23:29:9c:99:6f:37: 0a:4e:3f:65:a8:0b:b6:08:19:73:65:d4:57:d3:9b: bf:57:4d:85:3e:13:b0:cc:d7:d8:d7:54:20:25:13: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D8:BF:65:2D:6A:74:9D:7B:BF:39:54:12:B1:CB:25:17:52:86:E3 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lti_ZS1qdJ17vzlUErHLJRdShuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.209.0/24 Signature Algorithm: sha256WithRSAEncryption 71:ae:73:9b:5f:fc:c4:46:86:e0:47:cb:0b:1b:58:a6:9a:39: 8d:0c:41:3f:90:1a:30:f9:e5:e4:72:cc:3b:9e:98:d1:f4:f5: 3b:3d:79:69:86:67:0c:88:4f:a6:ec:dd:f7:04:d3:fa:61:1b: 48:5f:4c:b5:4c:2c:6b:fa:47:19:dc:59:cf:bd:98:eb:11:40: 3d:6f:5c:cc:67:bc:31:44:1d:41:dc:c1:86:f0:32:1c:6d:44: 0b:44:a5:4f:36:ef:74:76:e3:78:d9:f5:a1:cf:0a:db:23:6c: 92:d9:b7:6c:cb:bf:8d:e5:b5:9c:fd:9a:94:f0:9d:f2:74:60: e9:b6:c6:a2:17:07:b8:fd:cf:64:7f:e3:01:e0:6c:ae:5a:4b: e4:fb:94:2a:f2:32:64:82:c5:65:27:b0:ad:98:92:c2:90:82: d0:a6:d2:ba:e6:cf:e7:96:da:02:f5:ac:d0:32:e1:2e:67:77: d8:b8:e7:0b:a6:13:c3:44:4e:34:46:3b:33:a8:9f:bb:d3:9f: 34:f6:3e:52:33:5c:58:cf:bc:59:eb:a1:2a:57:d0:e1:63:3c: c0:60:b8:75:9d:b2:ad:ab:79:54:69:83:cd:b4:0c:78:a1:35: e0:6c:24:05:4b:7f:96:62:2e:b3:ab:11:1b:88:76:3d:64:2c: 9c:28:25:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1Ji7d/GTZOfC55r+FrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmQ4YmY2NTJkNmE3NDlkN2JiZjM5NTQxMmIxY2IyNTE3NTI4NmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr73iSrgT9feoRE2Qc6RCJurhGEIs 163meTGKNeaI6VJTeI+IPPXJPdNxqW2baYI+CDKwk0WTE2Lb8QWN2d25Wq11v07B w2HMyelQwcpnK7gqfOZZv3Q0AX7POMjpT6wwy7c7x2b0s/zEc0ULmVdPIgXxJzxl sY69hNNq1TcLeDsI3Tl6tvkfB2a1TKU6gEg27rzrBuaW1dszS4sBUEiqAhA1527L 1qkktqn+HQK0MvPB+KPVM+RSaxniC7fQGWylaO/oy/qSnV8u2G6QeSAYx7pqEGCn EuIArLojKZyZbzcKTj9lqAu2CBlzZdRX05u/V02FPhOwzNfY11QgJROvwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbYv2UtanSde785VBKxyyUXUobjMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvbHRpX1pTMXFkSjE3dnpsVUVySExKUmRTaHVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmjRMA0G CSqGSIb3DQEBCwUAA4IBAQBxrnObX/zERobgR8sLG1immjmNDEE/kBow+eXkcsw7 npjR9PU7PXlphmcMiE+m7N33BNP6YRtIX0y1TCxr+kcZ3FnPvZjrEUA9b1zMZ7wx RB1B3MGG8DIcbUQLRKVPNu90duN42fWhzwrbI2yS2bdsy7+N5bWc/ZqU8J3ydGDp tsaiFwe4/c9kf+MB4GyuWkvk+5Qq8jJkgsVlJ7CtmJLCkILQptK65s/nltoC9azQ MuEuZ3fYuOcLphPDRE40RjszqJ+705809j5SM1xYz7xZ66EqV9DhYzzAYLh1nbKt q3lUaYPNtAx4oTXgbCQFS3+WYi6zqxEbiHY9ZCycKCVv -----END CERTIFICATE-----Generated at Thu Jan 1 20:30:06 2026 by rpki-client