This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa File: laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa (raw, json) Hash identifier: /wFzciiClGguyVDotQvNMJ7uLZC1BigJCYVP4cmqfI0= Subject key identifier: 95:A4:E3:20:C0:3F:43:40:74:4F:43:69:C4:3B:0E:C2:E3:DB:75:0A Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54 Certificate serial: 019B7BA53A20998ED7E6BA02E08E04C255EB Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31042 IP address blocks: 24.135.0.0/16 maxlen: 17 46.17.144.0/21 maxlen: 21 46.240.128.0/17 maxlen: 17 80.93.224.0/19 maxlen: 19 82.117.192.0/19 maxlen: 24 82.117.195.0/24 maxlen: 24 87.116.128.0/18 maxlen: 24 87.116.128.0/19 maxlen: 19 87.116.140.0/24 maxlen: 24 87.116.141.0/24 maxlen: 24 87.116.160.0/19 maxlen: 19 89.216.0.0/16 maxlen: 24 91.143.208.0/20 maxlen: 20 94.189.128.0/17 maxlen: 18 94.230.176.0/20 maxlen: 20 95.180.0.0/17 maxlen: 17 178.148.0.0/15 maxlen: 16 188.2.0.0/16 maxlen: 17 188.246.32.0/19 maxlen: 19 213.244.224.0/22 maxlen: 24 2a00:1dd8::/29 maxlen: 29 2a00:1dd8::/32 maxlen: 32 2a03:87c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3a:20:99:8e:d7:e6:ba:02:e0:8e:04:c2:55:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95a4e320c03f4340744f4369c43b0ec2e3db750a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:63:03:52:6c:43:bf:c1:1d:12:d7:73:30:76: e9:5d:e5:fb:8c:f5:65:59:30:89:36:98:4d:08:b5: b1:57:45:53:ba:6c:77:ee:4d:ba:0f:20:b1:2d:c9: f9:6f:d0:3c:7e:80:5b:c8:07:55:04:45:a3:55:11: 20:29:be:d6:01:d2:29:4a:5f:1d:53:56:16:0c:28: d5:4f:5d:21:1e:f8:22:6e:00:3e:81:e1:26:5e:17: 3c:5d:57:26:13:84:d2:bc:e5:ba:d9:e8:9a:fc:63: 65:40:82:b3:52:1d:4e:4c:03:72:80:81:8b:d9:df: f9:95:8b:7a:4b:3e:54:6d:cf:ad:90:70:c9:10:35: 04:20:73:b7:33:a0:48:e2:4f:7c:d7:06:ca:28:32: 53:15:62:38:fc:e1:07:0b:25:24:79:d7:a1:97:32: 0a:54:e7:ac:4d:57:50:9f:a4:ec:b5:f8:77:25:59: d7:5a:b3:1a:d4:05:1a:1e:29:cd:9c:a6:b2:71:a4: b3:53:24:a9:d5:23:00:50:be:2e:9c:8f:35:1b:78: b7:35:17:3e:23:6c:a2:6a:34:4f:23:72:56:59:2c: e8:83:b8:82:ec:d5:87:52:c4:23:92:85:cb:7c:1e: 02:0f:08:3c:79:13:2a:99:1e:61:1a:08:ee:17:3e: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:E3:20:C0:3F:43:40:74:4F:43:69:C4:3B:0E:C2:E3:DB:75:0A X509v3 Authority Key Identifier: keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.135.0.0/16 46.17.144.0/21 46.240.128.0/17 80.93.224.0/19 82.117.192.0/19 87.116.128.0/18 89.216.0.0/16 91.143.208.0/20 94.189.128.0/17 94.230.176.0/20 95.180.0.0/17 178.148.0.0/15 188.2.0.0/16 188.246.32.0/19 213.244.224.0/22 IPv6: 2a00:1dd8::/29 2a03:87c0::/29 Signature Algorithm: sha256WithRSAEncryption 7e:f1:3c:44:c5:ce:41:b0:2e:ed:d4:dd:2b:06:f8:e0:18:89: ca:1f:5b:15:54:c6:2e:96:32:ee:24:5d:8b:c2:75:7f:03:57: 73:dd:8e:b8:df:ef:db:ab:4c:bf:2a:13:7d:59:38:85:05:72: db:92:f8:2b:2b:e5:60:61:4c:a1:f9:b1:35:19:16:68:7e:9e: a8:6b:da:ae:86:f9:77:76:4c:2f:04:95:08:cc:72:40:2a:14: 46:1f:42:6e:5f:0e:a8:8c:27:34:88:6b:c3:3f:9f:3d:1e:6f: 16:5b:21:57:5b:fc:27:f7:1e:e0:76:d7:8b:b9:b6:5d:9c:2a: 8b:e8:e8:1d:3b:5d:39:ad:13:bf:19:c2:10:46:cc:73:50:20: ed:54:c9:a2:92:07:b8:a3:bb:55:3f:e7:38:e2:25:07:1c:5c: 41:b4:10:25:df:16:1b:f2:31:cb:4d:b3:83:26:6e:0c:32:93: b4:d2:9d:6b:d0:7f:99:00:8b:e1:a3:76:fe:ed:52:c1:52:f0: 0d:9f:39:cb:1c:44:3e:9b:d1:92:93:cd:b0:c1:45:56:46:76: bf:37:1e:cb:7d:4a:58:9c:b1:be:1f:0b:e6:db:b2:2d:fc:e5: d2:9b:81:a0:dc:95:7b:57:4e:66:12:f5:ca:32:4b:f1:b9:a7: b6:b1:03:41 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt7pTogmY7X5roC4I4EwlXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5 NmJlNTQwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWE0ZTMyMGMwM2Y0MzQwNzQ0ZjQzNjljNDNiMGVjMmUzZGI3NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WMDUmxDv8EdEtdzMHbpXeX7jPVl WTCJNphNCLWxV0VTumx37k26DyCxLcn5b9A8foBbyAdVBEWjVREgKb7WAdIpSl8d U1YWDCjVT10hHvgibgA+geEmXhc8XVcmE4TSvOW62eia/GNlQIKzUh1OTANygIGL 2d/5lYt6Sz5Ubc+tkHDJEDUEIHO3M6BI4k981wbKKDJTFWI4/OEHCyUkedehlzIK VOesTVdQn6Tstfh3JVnXWrMa1AUaHinNnKaycaSzUySp1SMAUL4unI81G3i3NRc+ I2yiajRPI3JWWSzog7iC7NWHUsQjkoXLfB4CDwg8eRMqmR5hGgjuFz5/JQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFJWk4yDAP0NAdE9DacQ7DsLj23UKMB8GA1UdIwQY MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It ZDg3OWY3ZTcwOWQ2LzEvbGFUaklNQV9RMEIwVDBOcHhEc093dVBiZFFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2 LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVgMDABiHAwQD LhGQAwQHLvCAAwQFUF3gAwQFUnXAAwQGV3SAAwMAWdgDBARbj9ADBAdevYADBARe 5rADBAdftAADAwGylAMDALwCAwQFvPYgAwQC1fTgMBQEAgACMA4DBQMqAB3YAwUD KgOHwDANBgkqhkiG9w0BAQsFAAOCAQEAfvE8RMXOQbAu7dTdKwb44BiJyh9bFVTG LpYy7iRdi8J1fwNXc92OuN/v26tMvyoTfVk4hQVy25L4KyvlYGFMofmxNRkWaH6e qGvarob5d3ZMLwSVCMxyQCoURh9Cbl8OqIwnNIhrwz+fPR5vFlshV1v8J/ce4HbX i7m2XZwqi+joHTtdOa0TvxnCEEbMc1Ag7VTJopIHuKO7VT/nOOIlBxxcQbQQJd8W G/Ixy02zgyZuDDKTtNKda9B/mQCL4aN2/u1SwVLwDZ85yxxEPpvRkpPNsMFFVkZ2 vzcey31KWJyxvh8L5tuyLfzl0puBoNyVe1dOZhL1yjJL8bmntrEDQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:28 2026 by rpki-client