This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa File: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (raw, json) Hash identifier: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ= Subject key identifier: 2C:9E:E7:99:74:9F:99:DC:1B:25:24:8F:45:0C:94:6B:25:2D:6C:5E Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7756BC69C22E210AE342AF0AE9556 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43877 IP address blocks: 87.99.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:6b:c6:9c:22:e2:10:ae:34:2a:f0:ae:95:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c9ee799749f99dc1b25248f450c946b252d6c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:c4:91:38:70:d3:0c:82:6a:57:f2:06:0f: 83:05:c4:95:30:6e:87:dc:92:fc:f2:3d:00:3e:59: c4:e9:0d:79:6a:aa:41:41:c2:35:c5:06:0d:fd:a8: 29:16:39:47:2f:7d:f9:c1:dc:e0:96:43:16:c3:9b: f9:47:74:f8:e4:8e:81:cc:74:2d:c5:a0:99:69:ca: 29:1d:bb:e1:b9:04:36:56:58:7f:c5:41:b5:cb:80: 26:9d:62:0d:05:ef:ed:ec:4d:eb:f0:e0:70:95:c2: 1c:0c:58:33:00:e9:04:25:0b:17:2c:b3:df:73:9a: 5e:d7:7e:a8:21:c2:0f:58:31:ca:1e:f6:e9:f0:3a: 75:46:46:e9:fc:ed:93:f9:b4:10:e8:69:56:8e:e5: a1:22:94:7b:58:10:f5:51:c8:2b:25:20:9a:f9:f1: 0f:ce:3d:9c:ad:2e:a4:f3:41:34:69:0b:39:4e:c7: 10:2b:f5:c0:82:d0:fc:af:35:de:30:dc:8c:c6:28: 17:92:ef:1e:5b:7c:28:87:dc:0a:f7:57:38:1f:a6: 7f:1a:a8:a7:b1:62:e3:9a:8d:38:fc:6a:32:e7:09: 63:85:d0:53:0f:b5:86:ef:ff:c5:c7:ae:66:22:bc: 69:2f:82:d9:d3:ae:c2:b1:5f:9e:af:02:a0:60:d2: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:E7:99:74:9F:99:DC:1B:25:24:8F:45:0C:94:6B:25:2D:6C:5E X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.99.77.0/24 Signature Algorithm: sha256WithRSAEncryption 39:80:ac:4f:17:4a:32:10:dc:2f:0f:6b:53:86:0a:52:f0:3f: eb:98:d8:e7:74:03:ef:76:86:55:92:98:18:13:da:bb:52:7c: 3e:d7:2e:a7:6d:5b:5d:20:42:40:2e:f8:67:ef:ee:ae:16:0a: 5f:f4:59:51:f2:20:5b:99:50:c4:4a:b0:62:e4:43:88:1b:ea: 6f:11:4c:b9:20:76:50:c3:38:59:ce:a7:9f:88:f4:eb:a8:0e: 7d:cf:60:29:8f:78:9d:ff:2f:87:25:81:f5:b5:8d:ff:84:1a: 6c:59:bd:2f:47:bc:06:ef:88:91:ce:40:cc:05:18:6b:d1:d5: 38:8d:93:2c:ca:8c:06:3c:e2:ef:c6:e4:a1:97:d6:1c:44:4d: 56:ed:8f:6b:ee:3c:00:3b:cc:b7:e0:86:0f:17:34:a8:28:9f: 2f:4c:00:de:8c:6d:11:42:7c:d0:b2:d5:7a:60:53:c2:3e:ec: 77:f4:29:26:b6:b1:16:95:bd:a8:9e:52:0e:24:1a:69:01:fe: 72:f9:ca:57:7f:2a:ae:28:41:5c:1d:2a:38:f1:bd:45:39:3a: d3:9c:22:26:7d:b1:8c:bb:1a:0b:3c:a5:f4:3e:1e:99:63:28: ca:5b:59:98:21:dd:4e:6f:26:ed:00:9b:98:28:17:91:db:52: 5d:47:c2:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3Vrxpwi4hCuNCrwrpVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzllZTc5OTc0OWY5OWRjMWIyNTI0OGY0NTBjOTQ2YjI1MmQ2YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdzEkThw0wyCalfyBg+DBcSVMG6H 3JL88j0APlnE6Q15aqpBQcI1xQYN/agpFjlHL335wdzglkMWw5v5R3T45I6BzHQt xaCZacopHbvhuQQ2Vlh/xUG1y4AmnWINBe/t7E3r8OBwlcIcDFgzAOkEJQsXLLPf c5pe136oIcIPWDHKHvbp8Dp1Rkbp/O2T+bQQ6GlWjuWhIpR7WBD1UcgrJSCa+fEP zj2crS6k80E0aQs5TscQK/XAgtD8rzXeMNyMxigXku8eW3woh9wK91c4H6Z/Gqin sWLjmo04/Goy5wljhdBTD7WG7//Fx65mIrxpL4LZ067CsV+erwKgYNJwPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCye55l0n5ncGyUkj0UMlGslLWxeMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvTEo3bm1YU2ZtZHdiSlNTUFJReVVheVV0YkY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2NNMA0G CSqGSIb3DQEBCwUAA4IBAQA5gKxPF0oyENwvD2tThgpS8D/rmNjndAPvdoZVkpgY E9q7Unw+1y6nbVtdIEJALvhn7+6uFgpf9FlR8iBbmVDESrBi5EOIG+pvEUy5IHZQ wzhZzqefiPTrqA59z2Apj3id/y+HJYH1tY3/hBpsWb0vR7wG74iRzkDMBRhr0dU4 jZMsyowGPOLvxuShl9YcRE1W7Y9r7jwAO8y34IYPFzSoKJ8vTADejG0RQnzQstV6 YFPCPux39CkmtrEWlb2onlIOJBppAf5y+cpXfyquKEFcHSo48b1FOTrTnCImfbGM uxoLPKX0Ph6ZYyjKW1mYId1ObybtAJuYKBeR21JdR8Jz -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:17 2026 by rpki-client