This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/lQThS4mk1Leh8tKsh4-tfyHe4H0.roa File: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (raw, json) Hash identifier: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw= Subject key identifier: 95:04:E1:4B:89:A4:D4:B7:A1:F2:D2:AC:87:8F:AD:7F:21:DE:E0:7D Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Certificate serial: 019B79ECE105876E9C568B42ABCF305EA1E4 Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/lQThS4mk1Leh8tKsh4-tfyHe4H0.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a14:1ac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e1:05:87:6e:9c:56:8b:42:ab:cf:30:5e:a1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9504e14b89a4d4b7a1f2d2ac878fad7f21dee07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:4c:43:0b:54:5f:3e:6b:e3:06:27:64:a3: b0:62:19:4c:b7:8b:2a:d0:3c:2b:88:dd:b2:a9:76: f3:38:5e:13:d6:ae:f9:4f:81:a5:bd:d7:6e:ce:fd: ac:35:87:d5:09:45:8a:fd:f2:da:ce:72:44:66:89: 82:12:4c:2b:b9:4d:2c:0e:54:9f:3b:d0:be:9a:cf: 03:f7:dc:15:c3:79:16:ce:34:62:b5:24:55:af:f7: 48:d2:82:79:c7:8c:b6:fa:4f:3f:94:00:22:81:5a: 5f:9b:c8:da:47:62:9f:56:1d:a9:07:08:69:54:05: 5a:5a:2d:65:6d:84:e8:ba:8a:88:a7:b8:51:f7:03: df:32:46:98:51:fa:f3:98:70:b7:97:5f:93:04:c8: 32:ab:e5:89:a6:47:e0:e8:61:30:df:61:1e:d9:5b: 4f:d2:8d:19:e1:a1:ed:a7:a5:d7:9b:f9:3a:a8:da: 92:9d:98:7e:33:ef:78:bf:f5:b7:19:b3:32:5e:ec: 7f:4e:4d:34:40:ea:77:8a:a6:6a:1f:50:66:62:b8: 5a:45:f9:30:a2:d7:3a:f7:22:bb:08:89:71:a5:bd: 0b:8b:73:fa:9b:7e:c6:bf:88:e9:55:b1:23:1b:71: 53:8c:00:57:21:72:b3:87:0c:cf:a6:f0:7f:cf:16: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:E1:4B:89:A4:D4:B7:A1:F2:D2:AC:87:8F:AD:7F:21:DE:E0:7D X509v3 Authority Key Identifier: keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/lQThS4mk1Leh8tKsh4-tfyHe4H0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ac0::/29 Signature Algorithm: sha256WithRSAEncryption 23:ef:b2:9a:67:a5:52:40:b3:51:e3:47:66:f4:56:6e:a7:68: f7:07:b2:f3:a9:0b:77:ba:17:f3:62:ea:18:c5:9b:e5:19:d6: b6:48:cc:ee:0f:45:a5:a3:81:12:60:15:b2:bb:16:54:fd:a6: 16:8c:49:40:93:80:d7:1a:04:3e:5c:05:30:90:08:53:1d:6b: 44:45:83:7f:8e:0d:ea:e3:66:74:94:97:66:83:a0:f2:dc:31: 30:f4:40:74:1a:b4:d6:4f:1f:dc:41:5d:42:3b:ce:b6:a0:7f: 6e:c2:95:48:ef:11:62:5e:8a:07:b9:d8:d3:70:0f:d1:d0:d8: 82:84:2d:b0:6d:fb:d5:bf:a0:21:c0:0c:fc:9c:4f:7e:29:82: 31:62:40:f3:33:de:2a:c1:e7:f1:c6:a4:82:05:5b:67:bb:44: 73:f9:f0:04:82:b1:36:14:c2:de:c8:38:f9:0d:ca:46:07:81: 35:fe:42:a7:8a:ef:a4:e3:b9:b5:7b:66:9a:2e:4d:77:02:91: 83:d6:ff:c3:62:15:2c:9e:e8:18:f7:4c:98:95:ae:ce:60:a0: 48:e5:a9:a5:d2:1f:69:b5:db:01:6f:a6:cc:74:a9:72:0c:6f: 90:f5:2e:7f:a5:77:68:3f:02:87:a2:51:17:54:09:0f:b0:79: 94:a2:7a:49 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57OEFh26cVotCq88wXqHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5 ZTQ3YTAwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTA0ZTE0Yjg5YTRkNGI3YTFmMmQyYWM4NzhmYWQ3ZjIxZGVlMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxONMQwtUXz5r4wYnZKOwYhlMt4sq 0DwriN2yqXbzOF4T1q75T4Glvdduzv2sNYfVCUWK/fLaznJEZomCEkwruU0sDlSf O9C+ms8D99wVw3kWzjRitSRVr/dI0oJ5x4y2+k8/lAAigVpfm8jaR2KfVh2pBwhp VAVaWi1lbYTouoqIp7hR9wPfMkaYUfrzmHC3l1+TBMgyq+WJpkfg6GEw32Ee2VtP 0o0Z4aHtp6XXm/k6qNqSnZh+M+94v/W3GbMyXux/Tk00QOp3iqZqH1BmYrhaRfkw otc69yK7CIlxpb0Li3P6m37Gv4jpVbEjG3FTjABXIXKzhwzPpvB/zxakMQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJUE4UuJpNS3ofLSrIePrX8h3uB9MB8GA1UdIwQY MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt MjAyYTA5ODBjMTc2LzEvbFFUaFM0bWsxTGVoOHRLc2g0LXRmeUhlNEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2 LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQawDAN BgkqhkiG9w0BAQsFAAOCAQEAI++ymmelUkCzUeNHZvRWbqdo9wey86kLd7oX82Lq GMWb5RnWtkjM7g9FpaOBEmAVsrsWVP2mFoxJQJOA1xoEPlwFMJAIUx1rREWDf44N 6uNmdJSXZoOg8twxMPRAdBq01k8f3EFdQjvOtqB/bsKVSO8RYl6KB7nY03AP0dDY goQtsG371b+gIcAM/JxPfimCMWJA8zPeKsHn8cakggVbZ7tEc/nwBIKxNhTC3sg4 +Q3KRgeBNf5Cp4rvpOO5tXtmmi5NdwKRg9b/w2IVLJ7oGPdMmJWuzmCgSOWppdIf abXbAW+mzHSpcgxvkPUuf6V3aD8Ch6JRF1QJD7B5lKJ6SQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:41 2026 by rpki-client