This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/LIjz0LVWHyiVRe41t0otex5cgKk.roa File: LIjz0LVWHyiVRe41t0otex5cgKk.roa (raw, json) Hash identifier: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8= Subject key identifier: 2C:88:F3:D0:B5:56:1F:28:95:45:EE:35:B7:4A:2D:7B:1E:5C:80:A9 Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba Certificate serial: 019B7AC7E0BB6D9A20FF6255CCAF79428DBA Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/LIjz0LVWHyiVRe41t0otex5cgKk.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 212.146.128.0/24 maxlen: 24 212.146.129.0/24 maxlen: 24 212.146.130.0/24 maxlen: 24 212.146.131.0/24 maxlen: 24 212.146.132.0/24 maxlen: 24 212.146.133.0/24 maxlen: 24 212.146.134.0/24 maxlen: 24 212.146.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e0:bb:6d:9a:20:ff:62:55:cc:af:79:42:8d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c88f3d0b5561f289545ee35b74a2d7b1e5c80a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:cb:ce:fb:17:17:a3:f2:4e:eb:bc:6c:79: 68:41:e3:c4:25:65:9a:2d:88:10:89:e3:37:3f:6d: ca:ef:5f:6e:a6:31:1e:df:e2:9f:30:ee:72:d9:82: 06:12:30:d8:b2:26:4b:17:07:8c:2f:3a:a6:65:c7: 2d:5d:8f:fa:f1:27:a0:06:cf:73:82:de:1c:74:4c: 18:a8:93:e6:37:fa:db:7c:c7:51:b4:e7:01:2f:1b: ff:4d:81:2d:0b:4a:f2:c5:eb:ed:59:26:51:16:15: 73:de:46:a3:32:6e:ca:1d:82:04:5c:40:8b:67:97: 0a:d0:2e:16:eb:46:9b:3a:0c:95:12:4f:f3:c4:26: e4:9c:9e:7a:06:2b:90:af:1b:fc:60:6c:ef:3d:4c: 41:40:f0:e0:01:da:e5:52:e9:0d:75:d7:9b:88:35: dd:11:1e:75:2b:d0:8c:f2:4a:d8:fd:14:c4:69:ec: dd:b4:cd:82:7f:90:9c:04:97:05:92:6e:00:49:00: 1e:00:44:6f:54:28:84:e8:a5:c5:f7:1c:71:bf:b0: e0:8b:fc:b8:10:ff:32:15:21:d8:9d:c0:38:a9:a1: 90:3e:3b:e4:f6:13:d2:0c:6d:8b:d0:9f:71:e4:29: d9:70:1a:de:cb:1e:65:6e:e0:b3:f0:97:87:aa:25: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:F3:D0:B5:56:1F:28:95:45:EE:35:B7:4A:2D:7B:1E:5C:80:A9 X509v3 Authority Key Identifier: keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/LIjz0LVWHyiVRe41t0otex5cgKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.146.128.0/21 Signature Algorithm: sha256WithRSAEncryption 08:92:ed:e5:f2:9e:5e:da:ad:82:51:f2:b7:a3:75:79:1f:d6: 26:98:94:92:48:fa:e6:4c:13:55:1e:14:cf:a4:44:99:b0:eb: 74:c8:08:14:7d:75:bf:2c:67:80:2e:a5:ad:f7:2b:20:e1:4b: 71:6d:fa:f5:9c:86:7c:cb:6f:ec:ae:9d:9a:12:cc:0d:b4:ca: b7:54:fb:58:46:e3:1b:77:cd:de:f1:b7:82:d3:46:98:17:49: d3:17:ab:60:10:14:85:5d:23:16:3e:6f:ca:b9:e4:e6:a1:76: da:3e:23:5d:83:7a:c4:fc:9c:d1:0c:39:55:bc:49:ae:f5:b8: bb:5b:b8:5b:62:04:21:34:7a:50:c3:d6:74:22:10:b8:f1:56: 5c:57:84:2d:f1:e6:a8:4b:dc:b4:e3:28:77:5b:3a:a7:d3:48: c8:04:d5:a9:ab:e1:88:ac:c5:83:78:4f:23:45:b9:e9:80:46: 19:19:4e:74:9f:f3:04:85:ed:29:28:1d:d0:90:85:ba:84:e3: 7c:32:34:f9:63:d6:b6:92:29:3d:75:ee:84:fa:3a:75:d9:88: 7a:f3:e1:92:5c:79:36:33:79:fb:ef:8f:ee:66:ff:a5:36:a9: 9c:12:26:81:88:3f:ab:c6:90:89:6f:bc:c1:05:04:b1:c7:1d: 48:af:7a:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+C7bZog/2JVzK95Qo26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx MjcwYmEwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzg4ZjNkMGI1NTYxZjI4OTU0NWVlMzViNzRhMmQ3YjFlNWM4MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv3LzvsXF6PyTuu8bHloQePEJWWa LYgQieM3P23K719upjEe3+KfMO5y2YIGEjDYsiZLFweMLzqmZcctXY/68SegBs9z gt4cdEwYqJPmN/rbfMdRtOcBLxv/TYEtC0ryxevtWSZRFhVz3kajMm7KHYIEXECL Z5cK0C4W60abOgyVEk/zxCbknJ56BiuQrxv8YGzvPUxBQPDgAdrlUukNddebiDXd ER51K9CM8krY/RTEaezdtM2Cf5CcBJcFkm4ASQAeAERvVCiE6KXF9xxxv7Dgi/y4 EP8yFSHYncA4qaGQPjvk9hPSDG2L0J9x5CnZcBreyx5lbuCz8JeHqiWtYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyI89C1Vh8olUXuNbdKLXseXICpMB8GA1UdIwQY MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt ZGE4NTFhNzE1ZmE0LzEvTElqejBMVldIeWlWUmU0MXQwb3RleDVjZ0trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0 LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1JKAMA0G CSqGSIb3DQEBCwUAA4IBAQAIku3l8p5e2q2CUfK3o3V5H9YmmJSSSPrmTBNVHhTP pESZsOt0yAgUfXW/LGeALqWt9ysg4Utxbfr1nIZ8y2/srp2aEswNtMq3VPtYRuMb d83e8beC00aYF0nTF6tgEBSFXSMWPm/KueTmoXbaPiNdg3rE/JzRDDlVvEmu9bi7 W7hbYgQhNHpQw9Z0IhC48VZcV4Qt8eaoS9y04yh3Wzqn00jIBNWpq+GIrMWDeE8j RbnpgEYZGU50n/MEhe0pKB3QkIW6hON8MjT5Y9a2kik9de6E+jp12Yh68+GSXHk2 M3n774/uZv+lNqmcEiaBiD+rxpCJb7zBBQSxxx1Ir3qI -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:56 2026 by rpki-client