This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/ltFa2izzbGOqtwBVA_TWfrJgXcI.roa File: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (raw, json) Hash identifier: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8= Subject key identifier: 96:D1:5A:DA:2C:F3:6C:63:AA:B7:00:55:03:F4:D6:7E:B2:60:5D:C2 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019B7BA543D2C6654E3D7584C79E1ED4EC6C Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/ltFa2izzbGOqtwBVA_TWfrJgXcI.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200630 IP address blocks: 109.69.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:d2:c6:65:4e:3d:75:84:c7:9e:1e:d4:ec:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96d15ada2cf36c63aab7005503f4d67eb2605dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:ae:0e:d5:99:f6:7b:c8:fc:89:04:da:3a: 2e:8c:7b:7f:29:83:df:07:6d:8c:cc:ed:51:fc:54: 26:ed:60:f4:9f:76:ad:bd:9f:a9:86:8a:a8:5d:68: f5:eb:dd:2f:2e:3c:52:b1:e3:90:c1:20:c0:b4:eb: 30:b0:6a:23:3b:2f:ff:8f:93:4a:1b:3f:f4:1d:6a: 66:c9:fc:18:63:56:27:68:4b:53:65:53:3d:21:3b: 44:cf:b4:41:70:00:6b:a9:83:e3:0c:85:29:c9:cb: 60:5f:5a:f9:3d:bf:89:e4:04:a4:5d:eb:47:64:6a: 68:ca:a8:f9:9f:39:0e:b0:3b:d6:fc:88:57:1a:80: 12:18:e4:5b:c4:61:1b:00:eb:ef:3d:f6:f1:cd:0a: 36:86:c7:41:b0:43:bf:5e:d5:4e:80:f8:81:8c:3e: 30:36:ce:91:44:8b:91:ea:d2:5d:03:8d:d5:3f:83: cc:1d:89:87:6f:f3:eb:9e:26:70:e8:b1:d8:2a:95: 0f:a4:68:09:b6:dc:04:0a:36:d7:41:27:1a:19:ae: ab:55:fb:3c:d2:43:3c:f7:d2:1e:dc:5c:a0:a6:7b: 1a:4e:dc:a5:eb:49:98:d8:16:f4:46:72:5b:49:74: 12:0f:63:ba:6e:94:c5:7a:5f:c3:c1:49:bf:a4:61: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:5A:DA:2C:F3:6C:63:AA:B7:00:55:03:F4:D6:7E:B2:60:5D:C2 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/ltFa2izzbGOqtwBVA_TWfrJgXcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.36.0/22 Signature Algorithm: sha256WithRSAEncryption 16:f4:8a:5d:04:fa:f7:8d:10:05:c3:a9:72:06:43:ff:8f:88: 9c:ee:d3:a1:e3:e5:70:67:e8:e1:47:c9:d2:16:8c:66:70:0a: 54:6d:01:8a:f3:40:32:3d:56:e2:d8:8a:1e:85:35:ca:dd:67: fc:69:db:0a:1a:52:4f:82:e8:09:b8:a4:75:cd:93:66:b0:11: af:ad:f0:50:9c:17:24:4e:12:97:e7:c6:ed:2f:cd:36:8c:08: 8b:49:d4:53:d4:4d:77:99:37:8b:9c:c5:8c:ef:f8:cd:7f:c0: 6d:1e:cc:3e:18:9d:4a:c7:87:fe:45:67:4b:71:6f:d5:ed:3e: 9c:ec:68:7b:e8:e8:b0:0f:38:00:10:d9:02:bf:0e:c6:fd:48: be:a3:99:af:3f:5a:f3:28:8d:a0:2d:1e:c3:e9:45:4b:1b:ae: 88:84:c3:51:22:ec:52:77:54:e7:6a:76:82:58:53:92:31:59: 22:4b:57:4d:ab:c3:f0:53:7d:61:c3:fd:60:78:cb:8c:0c:6c: f6:72:2d:cc:e0:4d:e3:ab:6b:a0:68:fe:7a:7a:b7:fe:d1:da: 73:f8:3c:26:6c:b4:51:5d:cd:e8:14:35:96:64:05:73:3b:53: 04:f6:41:90:89:a8:ba:e5:db:b7:36:a9:52:ee:c5:2b:48:73: 5d:7d:f2:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUPSxmVOPXWEx54e1OxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmQxNWFkYTJjZjM2YzYzYWFiNzAwNTUwM2Y0ZDY3ZWIyNjA1ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZWuDtWZ9nvI/IkE2joujHt/KYPf B22MzO1R/FQm7WD0n3atvZ+phoqoXWj1690vLjxSseOQwSDAtOswsGojOy//j5NK Gz/0HWpmyfwYY1YnaEtTZVM9ITtEz7RBcABrqYPjDIUpyctgX1r5Pb+J5ASkXetH ZGpoyqj5nzkOsDvW/IhXGoASGORbxGEbAOvvPfbxzQo2hsdBsEO/XtVOgPiBjD4w Ns6RRIuR6tJdA43VP4PMHYmHb/PrniZw6LHYKpUPpGgJttwECjbXQScaGa6rVfs8 0kM899Ie3FygpnsaTtyl60mY2Bb0RnJbSXQSD2O6bpTFel/DwUm/pGHOgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbRWtos82xjqrcAVQP01n6yYF3CMB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvbHRGYTJpenpiR09xdHdCVkFfVFdmckpnWGNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUUkMA0G CSqGSIb3DQEBCwUAA4IBAQAW9IpdBPr3jRAFw6lyBkP/j4ic7tOh4+VwZ+jhR8nS FoxmcApUbQGK80AyPVbi2IoehTXK3Wf8adsKGlJPgugJuKR1zZNmsBGvrfBQnBck ThKX58btL802jAiLSdRT1E13mTeLnMWM7/jNf8BtHsw+GJ1Kx4f+RWdLcW/V7T6c 7Gh76OiwDzgAENkCvw7G/Ui+o5mvP1rzKI2gLR7D6UVLG66IhMNRIuxSd1TnanaC WFOSMVkiS1dNq8PwU31hw/1geMuMDGz2ci3M4E3jq2ugaP56erf+0dpz+DwmbLRR Xc3oFDWWZAVzO1ME9kGQiai65du3NqlS7sUrSHNdffIU -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:44 2026 by rpki-client