This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/lAjUh0yd7DRPhi-W3SSvqev0w_E.roa File: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (raw, json) Hash identifier: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY= Subject key identifier: 94:08:D4:87:4C:9D:EC:34:4F:86:2F:96:DD:24:AF:A9:EB:F4:C3:F1 Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Certificate serial: 019B7759156CA832BF530047CCD36354DA46 Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/lAjUh0yd7DRPhi-W3SSvqev0w_E.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33911 IP address blocks: 195.254.134.0/24 maxlen: 24 195.254.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:15:6c:a8:32:bf:53:00:47:cc:d3:63:54:da:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9408d4874c9dec344f862f96dd24afa9ebf4c3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:84:66:fc:78:9c:a2:ab:2b:6d:22:02:56: 14:0a:32:6c:40:9b:e9:81:cc:44:68:71:43:1d:1c: d6:08:30:e4:80:b2:92:8d:f2:32:ef:80:db:4e:24: 21:d8:dc:22:9d:c1:4c:a4:44:4a:06:c7:42:4e:99: 42:51:ce:5a:37:47:a5:bd:f0:f6:74:9a:a9:c4:a2: 1f:f0:45:31:b9:da:8d:c1:be:23:31:86:54:8e:70: 70:bb:37:a7:d4:03:55:bc:8e:c2:1d:c3:e5:ac:5f: c6:27:24:b6:6f:fe:d9:60:b8:37:ba:2d:ac:8b:09: a1:d0:1c:38:2b:b0:64:a2:43:a3:51:73:5f:9c:09: 3b:5c:79:6c:a7:4b:22:cf:ac:fd:eb:fb:26:04:6c: 37:58:74:ea:86:12:8d:0e:e4:9f:69:f3:a6:57:72: 2e:56:c4:d6:61:da:5e:81:d6:96:16:60:c1:9a:13: 73:91:ac:5a:bf:e6:d8:9e:cb:54:60:09:e5:5b:54: 3b:8e:2a:79:cf:ab:44:5d:c0:97:97:bf:ce:1a:88: c3:3b:b5:a5:49:4d:3a:f9:f2:df:ca:f1:f2:d5:3f: 35:77:e6:72:61:de:4c:c9:de:2b:01:67:cd:43:a7: 14:6d:03:a0:1b:23:41:e5:fa:81:fe:4d:36:4c:25: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:08:D4:87:4C:9D:EC:34:4F:86:2F:96:DD:24:AF:A9:EB:F4:C3:F1 X509v3 Authority Key Identifier: keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/lAjUh0yd7DRPhi-W3SSvqev0w_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.134.0/23 Signature Algorithm: sha256WithRSAEncryption 71:0f:a8:f3:33:9f:28:11:82:0c:8a:24:3c:6e:49:fd:9e:77: 1b:e1:4d:55:85:fc:98:41:80:b1:a3:4d:66:e8:4d:31:0f:00: 6f:c2:54:c2:69:69:e4:8a:49:9a:de:0f:24:e3:26:60:7f:8c: ac:99:55:a7:a1:42:45:fe:91:6b:93:ee:c9:03:77:62:6e:f5: d7:de:45:87:86:53:6c:84:dc:61:f1:5f:43:a2:b7:6f:a2:a0: f9:34:3e:c3:a3:0c:e1:4b:ee:77:8f:c4:1b:29:b9:73:eb:23: 3f:3c:e8:c3:37:65:85:04:a5:54:7b:c8:fb:38:b5:b8:06:3c: 69:c9:a1:12:13:c4:92:d7:12:15:e9:b5:89:81:15:9d:ea:2b: 40:60:8c:85:2c:05:b1:ca:8e:73:fd:60:29:5b:94:0c:72:97: c5:58:d1:6e:68:d6:62:9a:a6:dc:6b:2b:41:b6:cb:5d:ad:0b: 65:2b:62:e4:30:06:95:cf:5b:49:8e:02:0e:5f:b6:9f:17:d9: ae:0f:fe:40:b8:cf:e9:fb:72:6f:e3:37:ae:d0:b5:c5:fb:d5: 74:7d:4d:ad:0c:e9:85:f3:5d:d2:02:67:79:cb:c5:04:11:62: 69:33:cc:34:27:39:84:0b:9b:2b:b8:ca:96:49:ef:69:f7:9f: 35:69:95:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRVsqDK/UwBHzNNjVNpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi ODg2N2IwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDA4ZDQ4NzRjOWRlYzM0NGY4NjJmOTZkZDI0YWZhOWViZjRjM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQmEZvx4nKKrK20iAlYUCjJsQJvp gcxEaHFDHRzWCDDkgLKSjfIy74DbTiQh2NwincFMpERKBsdCTplCUc5aN0elvfD2 dJqpxKIf8EUxudqNwb4jMYZUjnBwuzen1ANVvI7CHcPlrF/GJyS2b/7ZYLg3ui2s iwmh0Bw4K7BkokOjUXNfnAk7XHlsp0siz6z96/smBGw3WHTqhhKNDuSfafOmV3Iu VsTWYdpegdaWFmDBmhNzkaxav+bYnstUYAnlW1Q7jip5z6tEXcCXl7/OGojDO7Wl SU06+fLfyvHy1T81d+ZyYd5Myd4rAWfNQ6cUbQOgGyNB5fqB/k02TCXOqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQI1IdMnew0T4Yvlt0kr6nr9MPxMB8GA1UdIwQY MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt ZGQ1MGJlMDY3NDAxLzEvbEFqVWgweWQ3RFJQaGktVzNTU3ZxZXYwd19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/6GMA0G CSqGSIb3DQEBCwUAA4IBAQBxD6jzM58oEYIMiiQ8bkn9nncb4U1VhfyYQYCxo01m 6E0xDwBvwlTCaWnkikma3g8k4yZgf4ysmVWnoUJF/pFrk+7JA3dibvXX3kWHhlNs hNxh8V9DordvoqD5ND7DowzhS+53j8QbKblz6yM/POjDN2WFBKVUe8j7OLW4Bjxp yaESE8SS1xIV6bWJgRWd6itAYIyFLAWxyo5z/WApW5QMcpfFWNFuaNZimqbcaytB tstdrQtlK2LkMAaVz1tJjgIOX7afF9muD/5AuM/p+3Jv4zeu0LXF+9V0fU2tDOmF 813SAmd5y8UEEWJpM8w0JzmEC5sruMqWSe9p9581aZXN -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:28 2026 by rpki-client