This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LLFRNpxOHXVkru4xh6SKkbU1hMQ.roa File: LLFRNpxOHXVkru4xh6SKkbU1hMQ.roa (raw, json) Hash identifier: 2k66fRcsVdkPPQR7aTg6V2kNq6DI2F4fC5myVth39Qs= Subject key identifier: 2C:B1:51:36:9C:4E:1D:75:64:AE:EE:31:87:A4:8A:91:B5:35:84:C4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D03B46FD64F90B2AFCD9E2B2FB088 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LLFRNpxOHXVkru4xh6SKkbU1hMQ.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205977 IP address blocks: 2a0e:b107:760::/44 maxlen: 48 2a0e:b107:760::/48 maxlen: 48 2a0e:b107:761::/48 maxlen: 48 2a0e:b107:762::/48 maxlen: 48 2a0e:b107:763::/48 maxlen: 48 2a0e:b107:764::/48 maxlen: 48 2a0e:b107:765::/48 maxlen: 48 2a0e:b107:766::/48 maxlen: 48 2a0e:b107:767::/48 maxlen: 48 2a0e:b107:768::/45 maxlen: 48 2a0e:b107:768::/48 maxlen: 48 2a10:2f00:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:03:b4:6f:d6:4f:90:b2:af:cd:9e:2b:2f:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cb151369c4e1d7564aeee3187a48a91b53584c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:7a:b7:41:02:90:b7:be:35:8a:c9:95:e6: 05:87:ad:8e:4a:bf:5e:7e:ae:58:cf:88:49:5b:78: 9e:63:07:91:47:86:9e:94:0f:7a:b1:4c:4a:10:55: 1d:96:5d:57:08:ca:03:bc:ce:b1:49:ae:55:6e:98: 1d:26:8e:a7:83:52:ef:38:4e:71:c2:b0:85:d5:a8: 76:6a:64:ef:4d:0f:94:5a:23:86:c1:71:de:38:b2: 93:38:47:8c:86:55:53:c9:bd:14:c1:cf:91:42:7b: d1:14:e3:cc:e6:a6:b8:d6:03:a8:c8:51:08:9f:33: 36:71:de:4b:4d:37:bb:05:b1:c6:a9:7c:a1:2b:23: 9b:07:08:cd:97:00:b9:ef:09:e9:6b:dc:51:84:73: 5b:31:84:80:53:78:b0:c1:03:ea:67:77:fb:e6:af: 4d:7b:89:f4:cf:f0:29:09:6e:19:c5:27:d5:0f:30: 6f:5a:df:17:ea:09:b2:7f:95:11:71:17:4b:a4:ad: 46:56:6d:ef:62:e2:36:78:d2:a2:7e:53:a0:45:16: ec:8a:5d:aa:10:e9:a9:4a:97:ca:31:d5:17:1d:18: d0:c8:44:12:6b:8b:9d:17:e8:6c:5e:d9:f9:fb:ed: 41:0e:dc:d3:cf:56:af:ae:4f:33:ea:69:c1:c7:eb: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B1:51:36:9C:4E:1D:75:64:AE:EE:31:87:A4:8A:91:B5:35:84:C4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LLFRNpxOHXVkru4xh6SKkbU1hMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:760::/44 2a10:2f00:120::/48 Signature Algorithm: sha256WithRSAEncryption 2e:f9:d0:03:8e:a1:e5:fa:ca:95:fc:50:5e:7b:d8:6b:ed:d6: 74:66:b7:50:4a:c5:0d:6a:f1:51:14:07:85:b3:7e:e2:b6:21: 5a:b8:3d:8c:ce:63:92:39:1e:27:8f:b7:48:c6:a4:34:d7:13: 39:fa:dc:84:ed:52:dd:7c:78:98:d0:6e:e6:8f:c3:a8:d3:66: 31:94:ab:ed:cd:99:14:36:ee:dc:76:74:8c:87:a2:07:a8:33: 16:c4:8d:ab:d4:7f:b9:8c:21:0b:09:31:e7:fb:97:d8:bb:ef: 69:28:fb:b1:ef:4b:c6:48:82:cf:d8:76:a9:5c:88:ad:50:16: 64:75:57:49:b7:aa:1a:4e:b9:94:35:07:ab:36:21:5f:c2:7c: 91:ca:bf:9c:89:a4:e7:d8:36:6a:82:c7:55:e6:f6:93:c1:24: 55:8c:32:a6:29:04:bc:bf:74:6c:4c:1a:a5:bd:25:de:5a:84: 62:ce:34:36:f6:a5:f9:6c:7c:60:46:8c:f5:b5:ad:52:00:89: 60:4a:a1:6a:74:7f:eb:43:4b:81:84:d8:b1:48:27:7e:41:e7: 65:bc:5c:db:5d:33:ed:8a:bb:5b:24:7f:48:11:45:d2:ca:d8: 70:69:c2:f6:8f:45:e8:96:ac:06:fc:1c:0f:66:e9:d5:38:ed: dc:65:df:3b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XQO0b9ZPkLKvzZ4rL7CIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2IxNTEzNjljNGUxZDc1NjRhZWVlMzE4N2E0OGE5MWI1MzU4NGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xh6t0ECkLe+NYrJleYFh62OSr9e fq5Yz4hJW3ieYweRR4aelA96sUxKEFUdll1XCMoDvM6xSa5VbpgdJo6ng1LvOE5x wrCF1ah2amTvTQ+UWiOGwXHeOLKTOEeMhlVTyb0Uwc+RQnvRFOPM5qa41gOoyFEI nzM2cd5LTTe7BbHGqXyhKyObBwjNlwC57wnpa9xRhHNbMYSAU3iwwQPqZ3f75q9N e4n0z/ApCW4ZxSfVDzBvWt8X6gmyf5URcRdLpK1GVm3vYuI2eNKiflOgRRbsil2q EOmpSpfKMdUXHRjQyEQSa4udF+hsXtn5++1BDtzTz1avrk8z6mnBx+vXrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCyxUTacTh11ZK7uMYekipG1NYTEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTExGUk5weE9IWFZrcnU0eGg2U0trYlUxaE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBwdg AwcAKhAvAAEgMA0GCSqGSIb3DQEBCwUAA4IBAQAu+dADjqHl+sqV/FBee9hr7dZ0 ZrdQSsUNavFRFAeFs37itiFauD2MzmOSOR4nj7dIxqQ01xM5+tyE7VLdfHiY0G7m j8Oo02YxlKvtzZkUNu7cdnSMh6IHqDMWxI2r1H+5jCELCTHn+5fYu+9pKPux70vG SILP2HapXIitUBZkdVdJt6oaTrmUNQerNiFfwnyRyr+ciaTn2DZqgsdV5vaTwSRV jDKmKQS8v3RsTBqlvSXeWoRizjQ29qX5bHxgRoz1ta1SAIlgSqFqdH/rQ0uBhNix SCd+QedlvFzbXTPtirtbJH9IEUXSythwacL2j0XolqwG/BwPZunVOO3cZd87 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:26 2026 by rpki-client