This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/llZMGo59gLGSTAZNJr7ReO3JJ2c.roa File: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (raw, json) Hash identifier: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU= Subject key identifier: 96:56:4C:1A:8E:7D:80:B1:92:4C:06:4D:26:BE:D1:78:ED:C9:27:67 Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Certificate serial: 019B7B3662C79A7406586564A283E28E4693 Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/llZMGo59gLGSTAZNJr7ReO3JJ2c.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43607 IP address blocks: 193.17.2.0/24 maxlen: 24 2a07:2480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:62:c7:9a:74:06:58:65:64:a2:83:e2:8e:46:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96564c1a8e7d80b1924c064d26bed178edc92767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:b1:26:6c:15:30:0d:58:19:e5:88:fe:eb: ce:de:d2:99:a2:d8:be:fb:95:a0:9b:d5:ba:8d:38: df:9c:c5:f4:fe:fd:ca:a5:e3:21:b3:10:09:93:d9: 92:17:25:b3:2e:5d:58:6f:15:fb:7b:8a:d9:79:17: 7a:a1:5d:d0:a2:35:eb:4d:96:9b:92:dc:5d:50:3f: a7:70:8e:15:d5:3b:35:2f:63:0f:f0:89:82:4c:3d: 16:4c:2d:14:0b:7e:98:a6:a7:35:25:71:9b:d8:da: 6a:55:f4:d8:ca:18:8c:1a:42:04:49:07:88:26:28: c8:45:30:85:86:12:2d:64:0c:82:33:84:6f:ec:cb: 75:74:5c:e5:5b:a1:fc:d1:d3:92:40:ef:2e:02:9a: e2:f0:b6:7f:58:02:bf:67:d8:e1:ff:1a:47:ee:94: 98:4d:75:cb:ee:d5:ce:50:2b:e6:82:e6:4a:db:0f: 5b:9e:7a:ab:f4:e2:b2:59:5a:44:74:aa:2b:ae:de: 87:05:5c:b5:ec:b0:20:33:4e:60:6f:84:ea:76:64: c0:3c:97:7d:c1:2f:88:4c:22:93:30:80:78:f1:e3: c0:aa:9c:94:db:2b:a1:bf:90:7b:75:2a:3c:34:40: 24:37:00:87:d0:a8:82:08:85:5a:14:a9:fb:87:e4: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:56:4C:1A:8E:7D:80:B1:92:4C:06:4D:26:BE:D1:78:ED:C9:27:67 X509v3 Authority Key Identifier: keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/llZMGo59gLGSTAZNJr7ReO3JJ2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.2.0/24 IPv6: 2a07:2480::/32 Signature Algorithm: sha256WithRSAEncryption 90:20:e5:86:65:cc:3c:14:c9:ae:b3:00:cd:a5:8f:24:11:02: 42:ce:89:98:11:db:46:3c:e0:84:e2:e9:ef:bc:9e:09:fc:38: 8d:88:40:5f:db:92:b8:f3:68:1a:88:9f:ce:62:8f:ef:42:c0: 0a:ba:fc:c1:58:3e:48:04:cb:5b:f8:2d:f0:83:9e:3f:34:ff: 03:3c:cc:c5:40:a6:8c:26:de:e1:cf:a2:71:8e:3c:70:2e:24: 7a:c2:d1:18:f1:06:e8:09:a1:ff:f9:dc:14:98:36:b8:6b:30: 8a:9a:81:90:86:01:9d:3c:16:7b:34:97:f5:fd:18:50:47:bd: 31:c8:61:10:38:0d:8c:5e:70:0f:8d:98:09:15:0b:e3:81:1c: 89:2c:83:1c:dd:70:79:d0:8d:95:d8:57:9d:ea:39:33:9c:fb: 30:f7:75:5a:4b:7d:40:89:83:e3:30:73:55:55:5f:b3:81:5d: 64:30:b3:6e:77:55:2b:b6:9d:4c:57:00:fe:a9:13:c8:69:96: bd:32:72:1c:18:d9:a4:e1:9f:ac:7a:92:06:51:58:08:a1:ea: 84:0e:d7:68:b1:bb:3f:59:51:11:41:2e:b8:f7:61:7a:2d:ba: d8:24:96:28:b6:03:73:af:3c:a6:41:13:20:d0:73:79:10:37: cd:61:4d:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NmLHmnQGWGVkooPijkaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh YmE1ZGEwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjU2NGMxYThlN2Q4MGIxOTI0YzA2NGQyNmJlZDE3OGVkYzkyNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS6xJmwVMA1YGeWI/uvO3tKZoti+ +5Wgm9W6jTjfnMX0/v3KpeMhsxAJk9mSFyWzLl1YbxX7e4rZeRd6oV3QojXrTZab ktxdUD+ncI4V1Ts1L2MP8ImCTD0WTC0UC36Ypqc1JXGb2NpqVfTYyhiMGkIESQeI JijIRTCFhhItZAyCM4Rv7Mt1dFzlW6H80dOSQO8uApri8LZ/WAK/Z9jh/xpH7pSY TXXL7tXOUCvmguZK2w9bnnqr9OKyWVpEdKorrt6HBVy17LAgM05gb4TqdmTAPJd9 wS+ITCKTMIB48ePAqpyU2yuhv5B7dSo8NEAkNwCH0KiCCIVaFKn7h+RkRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJZWTBqOfYCxkkwGTSa+0XjtySdnMB8GA1UdIwQY MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt Mzg0ZmZjZTc3ZjUyLzEvbGxaTUdvNTlnTEdTVEFaTkpyN1JlTzNKSjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRECMA0E AgACMAcDBQAqBySAMA0GCSqGSIb3DQEBCwUAA4IBAQCQIOWGZcw8FMmuswDNpY8k EQJCzomYEdtGPOCE4unvvJ4J/DiNiEBf25K482gaiJ/OYo/vQsAKuvzBWD5IBMtb +C3wg54/NP8DPMzFQKaMJt7hz6JxjjxwLiR6wtEY8QboCaH/+dwUmDa4azCKmoGQ hgGdPBZ7NJf1/RhQR70xyGEQOA2MXnAPjZgJFQvjgRyJLIMc3XB50I2V2Fed6jkz nPsw93VaS31AiYPjMHNVVV+zgV1kMLNud1Urtp1MVwD+qRPIaZa9MnIcGNmk4Z+s epIGUVgIoeqEDtdosbs/WVERQS6492F6LbrYJJYotgNzrzymQRMg0HN5EDfNYU0n -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:02 2026 by rpki-client