This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/LlSK3C7Q06RK5adZcbTNWRuRqec.roa File: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (raw, json) Hash identifier: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs= Subject key identifier: 2E:54:8A:DC:2E:D0:D3:A4:4A:E5:A7:59:71:B4:CD:59:1B:91:A9:E7 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B1293B24579CC4637FBF9DD9C1E88 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/LlSK3C7Q06RK5adZcbTNWRuRqec.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214515 IP address blocks: 2a05:9080:6::/48 maxlen: 48 2a05:9080:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:12:93:b2:45:79:cc:46:37:fb:f9:dd:9c:1e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e548adc2ed0d3a44ae5a75971b4cd591b91a9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:3e:91:aa:9b:4d:5a:71:b1:f2:9b:f9:f8: 68:83:f7:64:44:c5:fb:77:8b:12:f4:19:19:2c:22: db:3c:54:8e:de:0d:8a:8e:05:ba:9b:a8:7a:3d:a3: 5e:55:e0:1b:87:02:e1:d4:f6:0c:e1:a8:55:3e:b8: 11:6a:5c:e8:cb:0f:34:4a:8b:55:cb:8b:02:43:08: 24:11:a5:53:d4:83:e6:fa:79:1b:25:e7:48:e8:95: dc:4d:2f:63:b4:ed:6d:a2:6a:8a:c3:1a:39:7a:ff: 40:d4:dd:65:e2:55:b5:20:8c:01:0e:42:f1:f9:9f: fa:54:0d:8c:8a:43:b0:bd:d7:45:c2:28:5c:4b:67: 96:63:e3:db:7b:82:db:39:df:42:24:65:9e:64:2d: 97:9d:5e:fb:fa:b7:91:54:80:39:97:5b:59:1f:15: d6:5f:89:f3:83:f1:5a:bd:84:29:7e:aa:17:b0:e1: e3:5e:4f:8b:c5:ad:b2:14:d1:d8:ef:6b:7c:50:a5: 2a:da:1e:48:e9:15:cf:f2:34:22:13:bb:ed:b5:f5: 50:88:4f:46:09:3f:71:f0:79:f8:83:88:89:f0:79: a1:74:36:9f:2e:9e:bb:ef:8b:90:fd:37:8d:89:53: 95:7d:37:82:d9:21:4a:61:e5:21:6a:b6:18:31:d3: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:8A:DC:2E:D0:D3:A4:4A:E5:A7:59:71:B4:CD:59:1B:91:A9:E7 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/LlSK3C7Q06RK5adZcbTNWRuRqec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9080:6::/48 2a05:9080:16::/48 Signature Algorithm: sha256WithRSAEncryption 40:37:90:f4:b4:8e:bb:cc:a6:83:c0:29:f4:d3:87:1f:49:5a: f1:b2:4b:a9:6c:86:5a:39:fe:e9:57:14:61:51:3d:07:2a:54: 20:52:7d:8c:fc:0f:ef:58:06:b9:ff:2f:35:bb:1b:c4:2b:3c: b8:5b:23:f6:5a:ed:6b:86:8a:28:fd:e8:a9:26:ac:f3:df:05: a9:7c:89:43:a0:5a:c0:54:1c:81:4c:a0:f4:70:c9:08:9a:27: c3:0b:ad:2f:bb:ce:d5:14:ee:06:5d:0f:35:fb:b4:86:9d:87: 04:af:74:81:94:86:05:8a:1d:1c:2d:66:d9:91:84:ce:09:4d: e2:76:41:0e:75:24:98:3e:3c:ec:85:59:8b:e9:55:9a:10:13: 25:85:e0:b2:99:af:09:0d:33:46:04:ca:e0:43:9d:c9:7c:5c: 39:81:39:77:23:b8:de:9a:5a:de:f5:f3:26:3a:74:b2:9d:8a: c7:b7:48:ca:4c:08:09:b0:c5:79:fe:38:85:81:07:28:f2:b3: 5f:2b:22:a1:0b:d0:a4:eb:48:12:79:1c:4a:3b:db:3a:e0:77: 05:f7:22:66:15:e8:be:5b:f5:d3:cb:2b:22:d2:a8:14:e8:d4: 61:70:13:6c:7f:67:8e:86:97:df:de:25:d0:55:3d:f6:f2:ab: 8a:53:71:58 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WxKTskV5zEY3+/ndnB6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTU0OGFkYzJlZDBkM2E0NGFlNWE3NTk3MWI0Y2Q1OTFiOTFhOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqw+kaqbTVpxsfKb+fhog/dkRMX7 d4sS9BkZLCLbPFSO3g2KjgW6m6h6PaNeVeAbhwLh1PYM4ahVPrgRalzoyw80SotV y4sCQwgkEaVT1IPm+nkbJedI6JXcTS9jtO1tomqKwxo5ev9A1N1l4lW1IIwBDkLx +Z/6VA2MikOwvddFwihcS2eWY+Pbe4LbOd9CJGWeZC2XnV77+reRVIA5l1tZHxXW X4nzg/FavYQpfqoXsOHjXk+Lxa2yFNHY72t8UKUq2h5I6RXP8jQiE7vttfVQiE9G CT9x8Hn4g4iJ8HmhdDafLp6774uQ/TeNiVOVfTeC2SFKYeUharYYMdOFrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC5Uitwu0NOkSuWnWXG0zVkbkannMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvTGxTSzNDN1EwNlJLNWFkWmNiVE5XUnVScWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWQgAAG AwcAKgWQgAAWMA0GCSqGSIb3DQEBCwUAA4IBAQBAN5D0tI67zKaDwCn004cfSVrx skupbIZaOf7pVxRhUT0HKlQgUn2M/A/vWAa5/y81uxvEKzy4WyP2Wu1rhooo/eip Jqzz3wWpfIlDoFrAVByBTKD0cMkImifDC60vu87VFO4GXQ81+7SGnYcEr3SBlIYF ih0cLWbZkYTOCU3idkEOdSSYPjzshVmL6VWaEBMlheCyma8JDTNGBMrgQ53JfFw5 gTl3I7jemlre9fMmOnSynYrHt0jKTAgJsMV5/jiFgQco8rNfKyKhC9Ck60gSeRxK O9s64HcF9yJmFei+W/XTyysi0qgU6NRhcBNsf2eOhpff3iXQVT328quKU3FY -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:22 2026 by rpki-client