This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LjPmzvpwanEzWC7YwFcmuEsNkws.roa File: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (raw, json) Hash identifier: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ= Subject key identifier: 2E:33:E6:CE:FA:70:6A:71:33:58:2E:D8:C0:57:26:B8:4B:0D:93:0B Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b Certificate serial: 019B7EA56C2CD68BC456B066E5BDCD129A73 Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LjPmzvpwanEzWC7YwFcmuEsNkws.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 2a02:e00:ffe9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6c:2c:d6:8b:c4:56:b0:66:e5:bd:cd:12:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d7873416510a2fb2346ef342280155522713b Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e33e6cefa706a7133582ed8c05726b84b0d930b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:a6:e5:1a:c1:0c:b9:bb:c1:8a:9f:f0:2a: 4f:c5:98:1d:2a:5f:1a:49:82:24:38:ba:84:a9:52: 4e:7e:ec:7c:4f:80:90:65:41:f1:ec:fe:c6:72:2f: 1e:28:32:61:01:ee:16:e5:4e:4c:86:70:75:95:ca: f0:92:b1:a2:28:30:72:dc:57:c4:5b:9e:77:83:4b: af:fe:04:c9:a3:9c:a2:36:26:55:62:1f:fb:63:3d: 3c:c6:3c:1a:b9:44:84:1f:45:8d:0d:49:09:2c:60: 7f:8f:26:b3:aa:09:7f:6c:d7:d0:0c:a5:d5:68:b1: d2:f4:ea:23:fe:36:64:63:54:25:1e:51:0b:ae:e9: ef:5f:73:c7:62:3c:54:d7:46:49:c0:13:0f:a0:85: e4:ee:ee:7f:69:a9:09:df:db:0a:a6:57:6b:d8:65: a7:5f:8c:7e:0b:c2:66:99:5b:8c:6b:2a:a1:c0:b2: 5a:a1:25:35:f4:1c:49:7c:86:fc:7d:aa:0e:45:ae: ba:90:05:24:8a:b7:2d:ac:14:6b:e1:2c:7b:d4:d0: 0d:87:57:76:19:26:c1:c5:08:0e:8e:83:af:89:fa: dd:e4:2b:34:7f:84:fa:e0:47:e3:3f:26:9c:1f:6a: cd:23:b7:6f:ab:29:a8:50:e9:10:f6:67:86:c1:93: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:E6:CE:FA:70:6A:71:33:58:2E:D8:C0:57:26:B8:4B:0D:93:0B X509v3 Authority Key Identifier: keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LjPmzvpwanEzWC7YwFcmuEsNkws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e00:ffe9::/48 Signature Algorithm: sha256WithRSAEncryption 55:82:33:d2:fe:1a:47:fb:52:6b:7f:b1:33:27:18:92:2c:0a: ed:3c:94:1b:5b:0c:4d:73:ae:1d:5e:83:65:86:1a:7d:88:f5: 4c:be:8f:e1:e7:3e:d7:8b:15:0b:e3:4c:70:52:de:90:2e:d1: b9:e8:09:52:36:da:42:af:cc:48:80:12:26:2b:e8:bf:4c:7d: 82:d6:0a:1a:5a:aa:58:83:73:6e:e3:1a:e0:dd:92:bf:50:b5: 03:7f:5e:09:28:a4:6d:11:d2:55:aa:ad:6b:51:b6:66:19:7a: e4:7c:2a:bb:eb:5c:4b:27:28:e9:19:26:96:af:54:0d:d5:21: a5:b1:a7:da:69:98:f6:6d:51:0a:bd:6f:fb:cb:30:0f:91:9f: 70:98:9e:6f:36:9b:94:2d:41:8e:e3:63:61:1d:65:b4:3d:d7: c3:02:76:bf:f0:f6:0c:8e:fc:56:82:e9:d3:9f:95:0d:45:c3: 6f:3c:33:d8:d0:62:15:e3:1f:00:85:59:4d:95:8b:3e:47:17: 70:6d:a1:bf:43:03:de:94:ad:ef:28:51:1e:8d:56:5b:74:9b: 64:ac:92:b3:38:be:89:d8:56:51:93:e1:55:ce:87:bd:95:d2: 1d:2f:59:09:07:f2:8b:ab:4b:88:97:33:08:3e:99:fe:e2:e9: 14:68:f3:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWws1ovEVrBm5b3NEppzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy MjcxM2IwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTMzZTZjZWZhNzA2YTcxMzM1ODJlZDhjMDU3MjZiODRiMGQ5MzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8+m5RrBDLm7wYqf8CpPxZgdKl8a SYIkOLqEqVJOfux8T4CQZUHx7P7Gci8eKDJhAe4W5U5MhnB1lcrwkrGiKDBy3FfE W553g0uv/gTJo5yiNiZVYh/7Yz08xjwauUSEH0WNDUkJLGB/jyazqgl/bNfQDKXV aLHS9Ooj/jZkY1QlHlELrunvX3PHYjxU10ZJwBMPoIXk7u5/aakJ39sKpldr2GWn X4x+C8JmmVuMayqhwLJaoSU19BxJfIb8faoORa66kAUkirctrBRr4Sx71NANh1d2 GSbBxQgOjoOvifrd5Cs0f4T64EfjPyacH2rNI7dvqymoUOkQ9meGwZNs1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC4z5s76cGpxM1gu2MBXJrhLDZMLMB8GA1UdIwQY MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt ZTE4ZTdiMmFjNTM2LzEvTGpQbXp2cHdhbkV6V0M3WXdGY211RXNOa3dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2 LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIOAP/p MA0GCSqGSIb3DQEBCwUAA4IBAQBVgjPS/hpH+1Jrf7EzJxiSLArtPJQbWwxNc64d XoNlhhp9iPVMvo/h5z7XixUL40xwUt6QLtG56AlSNtpCr8xIgBImK+i/TH2C1goa WqpYg3Nu4xrg3ZK/ULUDf14JKKRtEdJVqq1rUbZmGXrkfCq761xLJyjpGSaWr1QN 1SGlsafaaZj2bVEKvW/7yzAPkZ9wmJ5vNpuULUGO42NhHWW0PdfDAna/8PYMjvxW gunTn5UNRcNvPDPY0GIV4x8AhVlNlYs+RxdwbaG/QwPelK3vKFEejVZbdJtkrJKz OL6J2FZRk+FVzoe9ldIdL1kJB/KLq0uIlzMIPpn+4ukUaPMY -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:20 2026 by rpki-client