This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/LA3jFcuaqgILmHo9nTpg4K4H2wU.roa File: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (raw, json) Hash identifier: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0= Subject key identifier: 2C:0D:E3:15:CB:9A:AA:02:0B:98:7A:3D:9D:3A:60:E0:AE:07:DB:05 Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Certificate serial: 019B7F83DF3A3BF1F6C2B432DAB078CD89E5 Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/LA3jFcuaqgILmHo9nTpg4K4H2wU.roa Signing time: Fri 02 Jan 2026 16:21:47 +0000 ROA not before: Fri 02 Jan 2026 16:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 92.42.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:df:3a:3b:f1:f6:c2:b4:32:da:b0:78:cd:89:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Validity Not Before: Jan 2 16:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c0de315cb9aaa020b987a3d9d3a60e0ae07db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ab:8e:e0:68:5a:1d:85:99:40:05:26:34:e0: 95:62:2d:23:21:ff:bb:be:19:d1:07:e6:07:c7:01: bc:5d:c9:a5:db:be:4f:1d:0a:29:91:4c:83:87:a6: 15:83:7a:4e:cd:f9:31:8f:30:71:c4:19:3f:eb:46: 2f:09:ab:21:34:99:e1:b9:9c:32:88:c3:95:27:60: c3:71:5d:6e:c4:cb:05:c8:3d:e8:16:df:09:3d:02: 49:fd:93:ef:0d:00:ce:a0:5e:ac:49:f0:b6:85:39: ff:df:99:07:ad:14:cb:2e:74:8c:eb:cc:a8:f9:20: 63:45:94:45:f6:7d:af:f2:31:49:a0:ce:3a:9a:7f: 53:29:1d:5f:db:7d:12:e6:9e:24:7b:d7:f9:82:c7: 12:e0:f7:88:c0:43:44:b3:9f:c5:1d:41:5e:24:41: 1e:39:2c:02:81:2c:48:67:08:1b:6e:ab:7b:cb:0c: d2:4e:35:e2:f2:ff:8f:ad:6e:f5:cd:b8:e2:db:88: f7:90:c3:9d:52:bf:ce:02:60:fb:77:5b:5e:c5:f4: 0f:a0:ad:ca:0c:72:6f:cb:89:b2:a7:35:de:c3:47: 98:e9:f9:ff:09:ec:9b:90:55:65:1c:b3:0d:fc:29: a4:07:2f:18:9b:34:f8:40:5c:48:4c:81:7a:26:86: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0D:E3:15:CB:9A:AA:02:0B:98:7A:3D:9D:3A:60:E0:AE:07:DB:05 X509v3 Authority Key Identifier: keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/LA3jFcuaqgILmHo9nTpg4K4H2wU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.99.0/24 Signature Algorithm: sha256WithRSAEncryption 19:53:dc:08:d6:b5:5e:35:51:49:25:df:21:c9:7d:9b:16:aa: 11:7d:16:54:7e:59:cb:7f:cc:7e:49:25:cd:99:fc:f1:e6:2b: d8:8f:2a:0b:14:e4:6f:1f:d9:da:4f:6e:ee:5f:46:06:48:f9: c8:46:37:4b:96:b9:d1:77:20:3a:a4:8f:d6:82:c6:82:f7:3c: d4:7d:42:47:a4:d3:b6:f7:55:71:b8:fd:88:15:2e:af:ab:1b: f0:a2:a9:cb:7a:18:48:d9:ff:76:7c:b4:19:3d:93:b5:3c:a9: 38:1a:01:b8:a1:33:50:4f:d5:8e:0e:6b:a9:aa:b2:e8:c7:fc: c1:a7:df:7d:05:bf:d3:ec:3d:07:73:d9:91:20:9b:90:75:ec: 44:f8:43:a7:3e:ae:95:aa:ed:93:79:6b:6a:7b:1b:b1:34:3c: 61:db:f6:33:1d:d1:d7:81:2a:8c:3c:c0:bb:bc:1c:dd:66:6d: e3:2e:96:61:02:1e:ab:06:aa:10:ca:ca:d7:4e:91:03:d5:c3: 36:0e:84:87:5a:53:97:c6:d3:7b:9d:b7:81:33:a2:95:f5:cf: c7:90:d1:88:13:8a:8b:0e:53:85:b0:4c:e1:bc:18:d1:d5:05: ba:85:73:c7:71:32:14:2d:c7:9d:61:8a:f4:da:9f:c9:21:7c: 1b:6d:51:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g986O/H2wrQy2rB4zYnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi MTZmNTgwHhcNMjYwMTAyMTYyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzBkZTMxNWNiOWFhYTAyMGI5ODdhM2Q5ZDNhNjBlMGFlMDdkYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKuO4GhaHYWZQAUmNOCVYi0jIf+7 vhnRB+YHxwG8Xcml275PHQopkUyDh6YVg3pOzfkxjzBxxBk/60YvCashNJnhuZwy iMOVJ2DDcV1uxMsFyD3oFt8JPQJJ/ZPvDQDOoF6sSfC2hTn/35kHrRTLLnSM68yo +SBjRZRF9n2v8jFJoM46mn9TKR1f230S5p4ke9f5gscS4PeIwENEs5/FHUFeJEEe OSwCgSxIZwgbbqt7ywzSTjXi8v+PrW71zbji24j3kMOdUr/OAmD7d1texfQPoK3K DHJvy4mypzXew0eY6fn/CeybkFVlHLMN/CmkBy8YmzT4QFxITIF6JoY91QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwN4xXLmqoCC5h6PZ06YOCuB9sFMB8GA1UdIwQY MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct ZGE1ZjZhNjU4ZjhiLzEvTEEzakZjdWFxZ0lMbUhvOW5UcGc0SzRIMndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCpjMA0G CSqGSIb3DQEBCwUAA4IBAQAZU9wI1rVeNVFJJd8hyX2bFqoRfRZUflnLf8x+SSXN mfzx5ivYjyoLFORvH9naT27uX0YGSPnIRjdLlrnRdyA6pI/WgsaC9zzUfUJHpNO2 91VxuP2IFS6vqxvwoqnLehhI2f92fLQZPZO1PKk4GgG4oTNQT9WODmupqrLox/zB p999Bb/T7D0Hc9mRIJuQdexE+EOnPq6Vqu2TeWtqexuxNDxh2/YzHdHXgSqMPMC7 vBzdZm3jLpZhAh6rBqoQysrXTpED1cM2DoSHWlOXxtN7nbeBM6KV9c/HkNGIE4qL DlOFsEzhvBjR1QW6hXPHcTIULcedYYr02p/JIXwbbVFS -----END CERTIFICATE-----Generated at Wed Jan 21 20:24:09 2026 by rpki-client