This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/Lft1TVXiYVdikjn_A01iU-k02DE.roa File: Lft1TVXiYVdikjn_A01iU-k02DE.roa (raw, json) Hash identifier: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM= Subject key identifier: 2D:FB:75:4D:55:E2:61:57:62:92:39:FF:03:4D:62:53:E9:34:D8:31 Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f Certificate serial: 019B783430519926729DB8F7CBABEC5DB1C1 Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/Lft1TVXiYVdikjn_A01iU-k02DE.roa Signing time: Thu 01 Jan 2026 06:17:24 +0000 ROA not before: Thu 01 Jan 2026 06:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 130.115.248.0/22 maxlen: 24 130.115.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:30:51:99:26:72:9d:b8:f7:cb:ab:ec:5d:b1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dfb754d55e26157629239ff034d6253e934d831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:21:b8:81:9b:1d:26:ff:79:31:c9:94:e2: 2b:2d:65:3b:62:a9:a0:7b:fa:1e:65:65:66:b0:48: d7:07:57:7e:67:90:08:30:64:be:1d:4d:60:d7:b8: 7b:d3:8b:c9:76:ed:99:d9:05:7b:50:0d:7c:df:ad: 9f:32:55:e5:da:38:67:df:c6:8f:cb:dd:4e:6e:c0: cb:a0:c6:2d:28:bb:9e:24:6f:80:f9:bb:46:44:cc: 80:2b:36:30:a9:5a:f3:64:e8:a0:91:34:af:26:4d: 48:b8:7a:85:ec:d3:2d:7d:b1:77:03:65:88:a8:af: 3e:a1:a8:5c:f5:37:56:80:c2:59:29:3a:2a:a2:26: 52:f2:cb:1c:60:a4:33:2e:d2:f7:cc:37:e3:31:71: 86:76:e5:a5:e7:4b:5c:62:9f:67:e1:8f:5c:d0:7b: 53:32:8f:e2:90:1a:38:9d:55:7d:0e:87:bc:c4:40: ec:f6:e1:a3:bc:5b:04:5e:81:27:3f:08:32:07:21: d8:1d:21:ad:2b:3c:86:59:5b:2e:34:e2:b9:04:13: 16:68:23:b1:33:56:f1:6b:c7:4c:82:12:ba:84:b0: cd:78:88:a8:dd:f5:3b:a8:36:34:ab:45:f2:de:68: 60:29:15:15:5a:99:6a:39:f7:00:92:6f:7d:ac:da: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FB:75:4D:55:E2:61:57:62:92:39:FF:03:4D:62:53:E9:34:D8:31 X509v3 Authority Key Identifier: keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/Lft1TVXiYVdikjn_A01iU-k02DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.115.248.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:ad:42:38:09:05:76:ca:9e:d9:68:36:e9:98:56:02:f1:06: 90:99:30:bc:2f:50:8c:3f:90:d6:54:fc:94:c0:ae:13:1f:49: b5:d1:13:99:64:ed:cc:a5:af:3e:09:40:81:37:9c:ce:0a:d3: 86:54:28:6c:41:4d:86:99:67:f7:e9:71:0b:d5:f7:45:e2:e9: be:07:7e:1a:75:d7:4b:78:27:ff:2f:2a:89:97:3d:12:05:f4: e4:e2:b0:4b:43:2e:ee:38:37:63:aa:39:ca:b3:ad:35:e8:a5: af:3b:9b:65:25:ed:fd:f4:07:31:fc:fd:5c:27:c4:e0:3e:14: fb:a1:c3:a8:dc:c3:72:94:29:30:33:0e:f2:ce:84:0c:70:e8: d7:f9:3c:f5:20:33:99:bc:47:05:bb:af:3b:f5:80:71:e4:12: 44:b2:b7:74:ad:58:1e:29:a3:5d:94:62:ed:3d:3d:5a:73:ee: 4d:d5:43:70:08:06:f2:18:f6:0b:d6:7e:2b:f3:3d:36:ef:f3: 75:b7:c0:70:44:82:78:77:41:dd:ee:f0:79:ec:00:2e:6b:19: e8:ed:96:6f:4d:1b:e1:ca:16:b4:d3:85:24:36:9d:de:cd:3e: b7:02:11:d9:b3:65:db:ab:ef:5b:d4:7a:f2:52:97:30:0d:db: 8a:62:4f:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDBRmSZynbj3y6vsXbHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZDBiMDIwNzYwM2JlNDNkODQ5MmU5ODUxMzc4YjhiNGYw OTU5NGYwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGZiNzU0ZDU1ZTI2MTU3NjI5MjM5ZmYwMzRkNjI1M2U5MzRkODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfAhuIGbHSb/eTHJlOIrLWU7Yqmg e/oeZWVmsEjXB1d+Z5AIMGS+HU1g17h704vJdu2Z2QV7UA18362fMlXl2jhn38aP y91ObsDLoMYtKLueJG+A+btGRMyAKzYwqVrzZOigkTSvJk1IuHqF7NMtfbF3A2WI qK8+oahc9TdWgMJZKToqoiZS8sscYKQzLtL3zDfjMXGGduWl50tcYp9n4Y9c0HtT Mo/ikBo4nVV9Doe8xEDs9uGjvFsEXoEnPwgyByHYHSGtKzyGWVsuNOK5BBMWaCOx M1bxa8dMghK6hLDNeIio3fU7qDY0q0Xy3mhgKRUVWplqOfcAkm99rNq+KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC37dU1V4mFXYpI5/wNNYlPpNNgxMB8GA1UdIwQY MBaAFGDQsCB2A75D2EkumFE3i4tPCVlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDIt ZjQ5ZmVhNTQ1ZTc4LzEvTGZ0MVRWWGlZVmRpa2puX0EwMWlVLWswMkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDItZjQ5ZmVhNTQ1ZTc4 LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgnP4MA0G CSqGSIb3DQEBCwUAA4IBAQALrUI4CQV2yp7ZaDbpmFYC8QaQmTC8L1CMP5DWVPyU wK4TH0m10ROZZO3Mpa8+CUCBN5zOCtOGVChsQU2GmWf36XEL1fdF4um+B34adddL eCf/LyqJlz0SBfTk4rBLQy7uODdjqjnKs6016KWvO5tlJe399Acx/P1cJ8TgPhT7 ocOo3MNylCkwMw7yzoQMcOjX+Tz1IDOZvEcFu6879YBx5BJEsrd0rVgeKaNdlGLt PT1ac+5N1UNwCAbyGPYL1n4r8z027/N1t8BwRIJ4d0Hd7vB57AAuaxno7ZZvTRvh yha004UkNp3ezT63AhHZs2Xbq+9b1HryUpcwDduKYk8z -----END CERTIFICATE-----Generated at Mon Jan 12 01:44:04 2026 by rpki-client