This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LXYVQHRxE8MBsJJY99SgP83DIvA.roa File: LXYVQHRxE8MBsJJY99SgP83DIvA.roa (raw, json) Hash identifier: zS59mPK7oytO9xv8MpV/tZqHYuP32KbCBawg7irRIOs= Subject key identifier: 2D:76:15:40:74:71:13:C3:01:B0:92:58:F7:D4:A0:3F:CD:C3:22:F0 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A4EFC41032357A13C18095384819 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LXYVQHRxE8MBsJJY99SgP83DIvA.roa Signing time: Fri 02 Jan 2026 16:23:43 +0000 ROA not before: Fri 02 Jan 2026 16:23:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214480 IP address blocks: 2a0f:b240:6f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a4:ef:c4:10:32:35:7a:13:c1:80:95:38:48:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d761540747113c301b09258f7d4a03fcdc322f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:4b:86:98:c1:19:a8:4f:d1:dc:ab:05:31: de:99:34:19:ec:f0:18:3a:3a:7c:f5:2a:25:92:56: 4f:dd:f6:e8:27:d6:9a:7f:06:d2:ee:66:74:aa:1f: d0:d6:4d:86:e0:a0:17:23:18:35:f8:f9:5f:a4:60: 18:9d:7a:c3:cd:df:66:95:13:84:e6:4f:2c:8d:60: 19:77:b4:f9:0e:8d:b6:ef:4c:00:bc:89:ef:18:42: e8:bc:07:f1:2e:97:13:31:b2:df:7f:63:36:89:6a: c8:34:5f:e6:95:95:44:37:7c:89:a2:19:68:3b:a9: 46:69:d4:79:f3:1f:88:a1:8c:89:26:e2:5a:ce:68: a0:98:27:b2:2d:28:2b:fd:a5:5e:36:a6:75:70:24: 3d:fe:49:43:de:18:cd:5a:c2:32:a2:bc:90:3c:8e: 4f:0e:45:54:ba:79:eb:c6:28:2f:96:37:0f:e5:4d: 1a:a0:04:66:14:40:20:9e:1f:8f:44:34:71:2a:a9: 0d:e1:a2:f0:6d:d6:7d:27:19:ef:a2:4b:d2:db:9c: a1:bc:f1:4c:d4:4c:38:fb:da:44:3c:11:2c:88:d0: 04:57:6c:2d:e9:3a:3c:0d:f3:0f:39:68:e2:3d:8c: de:5f:21:c2:7b:82:ee:28:7a:08:81:ca:37:ad:25: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:15:40:74:71:13:C3:01:B0:92:58:F7:D4:A0:3F:CD:C3:22:F0 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LXYVQHRxE8MBsJJY99SgP83DIvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6f00::/40 Signature Algorithm: sha256WithRSAEncryption 60:bf:ce:72:ac:16:c0:56:ff:fd:cc:44:c2:c3:e9:33:dc:19: 81:c6:c9:a1:e2:0a:a3:ca:4e:b0:44:a6:73:82:d9:47:45:a6: 2b:52:50:5e:94:88:8e:6c:74:b0:28:61:b8:66:e7:b7:75:31: c2:2d:70:e2:d9:f6:6f:f7:da:fa:61:8d:6f:c1:d2:bb:e5:1d: e1:23:7d:f6:8e:3a:26:2d:98:62:c8:85:46:ae:e1:61:59:67: d6:9d:a0:ab:7f:5d:7e:3d:0c:d1:ab:0e:22:b5:65:a5:78:c5: 76:0a:9c:f1:85:81:d2:4e:7f:19:3e:2e:db:bd:93:9b:12:21: cf:29:1d:69:fb:09:8e:bb:69:8e:15:bf:98:7a:4a:d2:3a:39: 39:a0:7a:19:8d:44:4b:f6:70:e0:ed:0c:bb:d8:fc:26:6a:d6: b2:db:7d:29:f6:69:ee:8a:95:6d:17:b5:e9:5a:a7:75:aa:b6: 19:29:2f:8a:1b:1e:ed:67:40:bb:bb:32:55:16:14:d7:18:c5: 88:7b:83:ea:f3:2a:86:69:99:36:84:00:89:89:3b:e5:fb:16: 7d:59:5c:4c:08:5b:51:75:f9:7a:a2:af:50:5d:b6:66:3f:74: cd:1f:b6:18:4d:25:87:58:af:61:85:57:e3:c7:f0:87:13:ad: 25:8e:54:1d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/haTvxBAyNXoTwYCVOEgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc2MTU0MDc0NzExM2MzMDFiMDkyNThmN2Q0YTAzZmNkYzMyMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzRLhpjBGahP0dyrBTHemTQZ7PAY Ojp89SolklZP3fboJ9aafwbS7mZ0qh/Q1k2G4KAXIxg1+PlfpGAYnXrDzd9mlROE 5k8sjWAZd7T5Do2270wAvInvGELovAfxLpcTMbLff2M2iWrINF/mlZVEN3yJohlo O6lGadR58x+IoYyJJuJazmigmCeyLSgr/aVeNqZ1cCQ9/klD3hjNWsIyoryQPI5P DkVUunnrxigvljcP5U0aoARmFEAgnh+PRDRxKqkN4aLwbdZ9JxnvokvS25yhvPFM 1Ew4+9pEPBEsiNAEV2wt6To8DfMPOWjiPYzeXyHCe4LuKHoIgco3rSVXuQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC12FUB0cRPDAbCSWPfUoD/NwyLwMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvTFhZVlFIUnhFOE1Cc0pKWTk5U2dQODNESXZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQG8w DQYJKoZIhvcNAQELBQADggEBAGC/znKsFsBW//3MRMLD6TPcGYHGyaHiCqPKTrBE pnOC2UdFpitSUF6UiI5sdLAoYbhm57d1McItcOLZ9m/32vphjW/B0rvlHeEjffaO OiYtmGLIhUau4WFZZ9adoKt/XX49DNGrDiK1ZaV4xXYKnPGFgdJOfxk+Ltu9k5sS Ic8pHWn7CY67aY4Vv5h6StI6OTmgehmNREv2cODtDLvY/CZq1rLbfSn2ae6KlW0X telap3WqthkpL4obHu1nQLu7MlUWFNcYxYh7g+rzKoZpmTaEAImJO+X7Fn1ZXEwI W1F1+Xqir1BdtmY/dM0fthhNJYdYr2GFV+PH8IcTrSWOVB0= -----END CERTIFICATE-----Generated at Wed Jan 21 11:58:59 2026 by rpki-client