This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa File: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (raw, json) Hash identifier: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY= Subject key identifier: 2C:3B:7B:81:AC:66:B7:4F:26:80:50:BE:33:85:A4:07:A4:61:D8:CE Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Certificate serial: 019B7BA390C15977E566D273BF6612AC0051 Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa Signing time: Thu 01 Jan 2026 22:17:55 +0000 ROA not before: Thu 01 Jan 2026 22:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 193.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:90:c1:59:77:e5:66:d2:73:bf:66:12:ac:00:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Validity Not Before: Jan 1 22:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3b7b81ac66b74f268050be3385a407a461d8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:0e:d5:cc:cf:d5:8c:4b:ea:1d:80:8b:20: 54:c0:01:e7:af:70:60:20:55:ea:65:6f:e7:68:7d: fc:bf:35:da:29:25:7c:60:ef:15:3f:9b:c3:1f:eb: da:c5:49:b6:56:7d:ec:b3:5f:82:57:4f:40:b4:24: dc:ba:2f:07:3a:f9:5f:31:76:fe:09:f3:0a:19:5a: ba:d1:14:57:4b:73:c3:00:ba:f0:ff:7b:d3:a2:86: 67:e6:90:23:73:ca:28:5b:5a:93:1f:5d:49:2b:ff: 72:ec:16:ca:5a:39:be:7e:dc:42:8d:2f:1f:c5:76: a9:76:2d:04:74:76:89:e8:ae:fc:90:01:56:be:60: 81:71:ad:61:9e:19:52:de:41:bf:1e:53:61:0e:14: 34:ce:03:31:da:72:0a:44:a2:3f:7a:4c:15:ee:03: 90:fb:82:4b:95:84:e4:cc:16:4b:2d:ca:51:d9:d2: 5d:23:74:ec:7c:77:c0:c8:18:49:e7:e0:7c:f8:86: a9:ea:75:ef:66:0a:85:a8:ee:4a:d5:be:98:43:3a: 38:87:71:13:94:68:6b:c0:66:c4:2e:d6:50:fb:19: 80:76:4d:dd:56:8f:69:aa:ad:f4:50:c9:f2:d4:ed: 98:21:ff:81:dc:b5:36:f5:b4:35:86:09:1b:a0:49: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3B:7B:81:AC:66:B7:4F:26:80:50:BE:33:85:A4:07:A4:61:D8:CE X509v3 Authority Key Identifier: keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.211.0/24 Signature Algorithm: sha256WithRSAEncryption 48:01:9d:fd:28:ef:f0:5d:54:bc:fb:ba:86:6a:45:0b:ff:5d: 83:12:f0:62:da:ac:e1:8f:26:f8:ba:d5:3a:68:93:49:bd:1a: c3:68:d9:ac:15:f9:32:46:62:46:a7:5b:f4:2b:ec:96:da:8c: 22:2d:9b:06:9a:f9:27:53:8b:dc:c3:2d:e7:6a:08:77:11:02: 1e:39:a6:8b:39:9a:80:4b:c8:f0:5a:fa:d9:7a:4b:f3:88:c4: 91:c6:3d:46:15:db:d4:1e:a7:be:dc:45:ec:ef:b9:da:9b:ab: b7:f3:0d:92:c8:4b:bc:d0:77:20:2b:83:80:11:08:44:73:51: c6:dd:55:52:22:2d:ae:bb:9e:89:3a:56:f1:d1:50:a7:f3:aa: 76:2a:0c:00:6e:e8:af:b5:66:7e:5a:e1:0d:35:54:9d:72:64: 64:b6:d8:49:35:63:2f:12:a4:4a:16:d0:1d:22:83:76:0a:ac: 7c:b2:e8:49:94:24:bd:ba:91:28:94:c2:cc:15:eb:8c:9a:a8: 49:65:da:26:45:08:2f:08:74:53:16:71:ca:e9:b8:f4:71:99: bd:a2:97:7e:52:4f:da:51:d6:e0:1e:ef:95:51:92:7c:ba:1b: a5:c9:41:81:0c:2d:49:d0:29:d7:41:18:fa:52:92:94:7d:a9: 95:25:01:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5DBWXflZtJzv2YSrABRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1 MWM2ZWUwHhcNMjYwMTAxMjIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzNiN2I4MWFjNjZiNzRmMjY4MDUwYmUzMzg1YTQwN2E0NjFkOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2cO1czP1YxL6h2AiyBUwAHnr3Bg IFXqZW/naH38vzXaKSV8YO8VP5vDH+vaxUm2Vn3ss1+CV09AtCTcui8HOvlfMXb+ CfMKGVq60RRXS3PDALrw/3vTooZn5pAjc8ooW1qTH11JK/9y7BbKWjm+ftxCjS8f xXapdi0EdHaJ6K78kAFWvmCBca1hnhlS3kG/HlNhDhQ0zgMx2nIKRKI/ekwV7gOQ +4JLlYTkzBZLLcpR2dJdI3TsfHfAyBhJ5+B8+Iap6nXvZgqFqO5K1b6YQzo4h3ET lGhrwGbELtZQ+xmAdk3dVo9pqq30UMny1O2YIf+B3LU29bQ1hgkboEnIlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCw7e4GsZrdPJoBQvjOFpAekYdjOMB8GA1UdIwQY MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt NzRjMTQwNWMzNDc1LzEvTER0N2dheG10MDhtZ0ZDLU00V2tCNlJoMk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1 LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUnTMA0G CSqGSIb3DQEBCwUAA4IBAQBIAZ39KO/wXVS8+7qGakUL/12DEvBi2qzhjyb4utU6 aJNJvRrDaNmsFfkyRmJGp1v0K+yW2owiLZsGmvknU4vcwy3nagh3EQIeOaaLOZqA S8jwWvrZekvziMSRxj1GFdvUHqe+3EXs77nam6u38w2SyEu80HcgK4OAEQhEc1HG 3VVSIi2uu56JOlbx0VCn86p2KgwAbuivtWZ+WuENNVSdcmRktthJNWMvEqRKFtAd IoN2Cqx8suhJlCS9upEolMLMFeuMmqhJZdomRQgvCHRTFnHK6bj0cZm9opd+Uk/a UdbgHu+VUZJ8uhulyUGBDC1J0CnXQRj6UpKUfamVJQGg -----END CERTIFICATE-----Generated at Tue Jan 13 13:25:41 2026 by rpki-client