This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/LJc4xny-NiHIVSL68IVZ4XTj6Jg.roa File: LJc4xny-NiHIVSL68IVZ4XTj6Jg.roa (raw, json) Hash identifier: AamZndOHPqaQSB83PXvUvHWPSG8HTmIvo2+7QUnEhhs= Subject key identifier: 2C:97:38:C6:7C:BE:36:21:C8:55:22:FA:F0:85:59:E1:74:E3:E8:98 Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a Certificate serial: 019B7C12D0612FBBC33659A7FAAD2980DD49 Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/LJc4xny-NiHIVSL68IVZ4XTj6Jg.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 91.223.121.0/24 maxlen: 24 2001:67c:2f70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d0:61:2f:bb:c3:36:59:a7:fa:ad:29:80:dd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b13e05669f556662bec5664e101659f966c826a Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c9738c67cbe3621c85522faf08559e174e3e898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c6:ad:a5:d0:f8:19:fc:2d:59:ce:89:22:17: 8d:8f:a8:57:76:1e:af:23:76:f4:8a:10:e6:0c:72: 76:67:68:62:a4:c2:4e:99:61:21:c6:bc:de:63:37: e8:ee:12:f3:69:a6:b4:d9:e2:77:a3:0d:47:d0:68: ca:a7:e9:42:94:c4:2c:e2:57:33:79:a3:d5:15:26: db:0f:1a:24:77:4c:5a:98:82:f4:40:ad:81:8d:5d: b3:64:45:52:1d:57:30:b0:14:a4:52:ef:c1:86:03: 0d:a2:be:c0:f3:3e:d8:a5:fb:74:88:ec:57:06:22: bd:06:7d:87:81:14:f9:cd:cc:3d:6c:5c:bb:ad:b2: d8:6a:53:c7:d0:66:2c:40:24:88:0b:03:7d:eb:6e: aa:84:58:a9:a5:d0:10:cd:e5:49:da:ae:57:d4:93: af:ab:62:00:e0:e2:12:2a:a8:23:62:42:fa:42:b6: fd:1a:59:4f:6d:e2:98:57:35:08:c1:7f:54:17:32: c6:43:25:13:f4:4e:82:82:07:28:a8:1f:8d:70:9d: be:af:04:cc:66:82:3f:e0:42:c6:94:1e:9f:ca:23: 3e:d2:cb:f6:72:7b:ba:f7:54:b8:d2:4b:70:20:16: 67:f8:dd:e4:40:f8:83:4d:0c:59:62:03:98:ae:da: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:38:C6:7C:BE:36:21:C8:55:22:FA:F0:85:59:E1:74:E3:E8:98 X509v3 Authority Key Identifier: keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/LJc4xny-NiHIVSL68IVZ4XTj6Jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.121.0/24 IPv6: 2001:67c:2f70::/48 Signature Algorithm: sha256WithRSAEncryption 86:9d:8e:06:40:6f:d1:7f:32:e2:be:fb:4e:ee:53:15:1f:58: 99:44:b2:02:b2:c2:10:d4:56:a2:fa:68:eb:3b:b7:a3:91:66: 24:79:92:91:86:45:d7:5c:4a:61:1a:43:25:f0:49:a5:a1:b8: fb:f8:63:a3:80:32:76:e1:b4:b2:e2:3a:c9:cc:30:fd:92:fa: f1:d7:c8:43:98:bf:ef:6f:93:cc:f8:23:8a:18:80:91:5c:b8: 24:25:cb:56:c6:2f:2e:bc:3a:f3:0a:44:62:b3:e0:06:b6:4d: 88:4e:8d:92:ba:1e:d6:ab:d8:dd:ea:b7:26:98:ea:a9:54:6b: c7:1b:74:0e:f0:55:c6:00:72:7d:df:cf:77:25:09:7a:cd:6e: d9:29:34:ab:8e:ce:04:5b:31:aa:13:00:c7:72:70:fd:3e:68: 46:f6:8c:36:41:ba:08:b6:df:93:2d:c1:35:3c:4d:e5:e8:e3: db:93:dc:16:2b:b9:3b:02:e1:9b:ea:7b:d5:fc:b7:8d:0d:e9: df:25:1b:6d:12:c4:8d:84:b1:40:ca:6f:df:ea:df:cd:80:fb: b3:63:62:66:b1:fd:06:45:57:cc:f8:ef:27:98:59:96:a6:93: 17:1f:21:b9:46:a6:c3:84:7f:f1:35:2b:a5:9b:99:81:a0:a4: a3:ad:15:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EtBhL7vDNlmn+q0pgN1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTNlMDU2NjlmNTU2NjYyYmVjNTY2NGUxMDE2NTlmOTY2 YzgyNmEwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzk3MzhjNjdjYmUzNjIxYzg1NTIyZmFmMDg1NTllMTc0ZTNlODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksatpdD4GfwtWc6JIheNj6hXdh6v I3b0ihDmDHJ2Z2hipMJOmWEhxrzeYzfo7hLzaaa02eJ3ow1H0GjKp+lClMQs4lcz eaPVFSbbDxokd0xamIL0QK2BjV2zZEVSHVcwsBSkUu/BhgMNor7A8z7Ypft0iOxX BiK9Bn2HgRT5zcw9bFy7rbLYalPH0GYsQCSICwN9626qhFippdAQzeVJ2q5X1JOv q2IA4OISKqgjYkL6Qrb9GllPbeKYVzUIwX9UFzLGQyUT9E6CggcoqB+NcJ2+rwTM ZoI/4ELGlB6fyiM+0sv2cnu691S40ktwIBZn+N3kQPiDTQxZYgOYrtqJ1QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCyXOMZ8vjYhyFUi+vCFWeF04+iYMB8GA1UdIwQY MBaAFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEt OTRjNzMzNDZjMGVhLzEvTEpjNHhueS1OaUhJVlNMNjhJVlo0WFRqNkpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEtOTRjNzMzNDZjMGVh LzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW995MA8E AgACMAkDBwAgAQZ8L3AwDQYJKoZIhvcNAQELBQADggEBAIadjgZAb9F/MuK++07u UxUfWJlEsgKywhDUVqL6aOs7t6ORZiR5kpGGRddcSmEaQyXwSaWhuPv4Y6OAMnbh tLLiOsnMMP2S+vHXyEOYv+9vk8z4I4oYgJFcuCQly1bGLy68OvMKRGKz4Aa2TYhO jZK6Htar2N3qtyaY6qlUa8cbdA7wVcYAcn3fz3clCXrNbtkpNKuOzgRbMaoTAMdy cP0+aEb2jDZBugi235MtwTU8TeXo49uT3BYruTsC4Zvqe9X8t40N6d8lG20SxI2E sUDKb9/q382A+7NjYmax/QZFV8z47yeYWZamkxcfIblGpsOEf/E1K6WbmYGgpKOt FWg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:10 2026 by rpki-client