This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lj_dSY7ZIGcGuwJ-9Ek4LbMcaNc.roa File: lj_dSY7ZIGcGuwJ-9Ek4LbMcaNc.roa (raw, json) Hash identifier: +EsTczvsxNvc6B6SNDmRtVGXw3IMHjBDBsMxSViid40= Subject key identifier: 96:3F:DD:49:8E:D9:20:67:06:BB:02:7E:F4:49:38:2D:B3:1C:68:D7 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF2CD8768CE2455F64C7013104458 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lj_dSY7ZIGcGuwJ-9Ek4LbMcaNc.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60024 IP address blocks: 37.123.192.0/21 maxlen: 24 82.115.30.0/23 maxlen: 24 185.148.12.0/22 maxlen: 24 185.212.60.0/22 maxlen: 24 185.218.4.0/22 maxlen: 24 212.107.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:cd:87:68:ce:24:55:f6:4c:70:13:10:44:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=963fdd498ed9206706bb027ef449382db31c68d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:4b:d9:53:27:68:fe:c2:34:17:6b:6c:fd: a8:77:4a:a1:bb:15:8b:ad:33:d4:7e:e1:31:94:16: 5e:27:9a:b5:91:b0:d0:48:e7:48:2f:8b:16:d2:4a: f2:39:12:c5:a3:5c:8b:9a:b8:0d:ed:4c:a6:78:3a: f2:5e:7d:eb:07:43:88:6a:a5:22:5b:33:74:77:a6: db:7e:89:16:71:19:bd:08:6a:a6:fc:d2:62:d6:44: 09:23:35:a7:68:91:ca:08:ae:70:c3:0f:70:4a:08: 50:89:ff:bf:11:1f:91:91:30:2f:8c:33:75:c7:3e: bb:0d:c5:9f:76:b1:70:36:0b:93:08:7f:74:c0:20: 76:a6:2d:17:39:a6:f6:a9:13:2e:6e:4a:45:2b:04: e8:8a:e3:f0:de:48:66:48:ee:e4:68:e9:07:e0:e0: d6:0d:76:8c:b9:3e:12:0f:05:74:df:0d:68:42:df: a3:34:bc:a9:2b:14:54:a0:64:eb:36:7b:55:1c:c7: 24:75:9d:6b:13:58:ed:f6:f2:fc:8b:df:29:d4:4e: 72:1d:74:36:3e:11:24:9d:cd:dd:b1:4c:35:64:c4: 13:df:a2:2c:3c:dc:50:03:69:90:87:24:59:82:b4: 17:ea:03:54:ae:b1:24:23:0b:61:6f:ee:7a:38:24: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3F:DD:49:8E:D9:20:67:06:BB:02:7E:F4:49:38:2D:B3:1C:68:D7 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lj_dSY7ZIGcGuwJ-9Ek4LbMcaNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.192.0/21 82.115.30.0/23 185.148.12.0/22 185.212.60.0/22 185.218.4.0/22 212.107.28.0/22 Signature Algorithm: sha256WithRSAEncryption 52:17:28:54:7d:3a:a5:2b:33:cf:ed:27:82:28:b3:fe:fe:12: f8:0e:0c:ca:d4:bd:48:6b:77:d6:df:0f:8e:22:50:21:11:76: d2:46:76:3a:1b:1a:ae:0d:e0:4a:ab:e6:47:23:b4:27:2f:98: d9:12:9c:94:fb:ff:b5:7a:3f:94:2c:ea:44:6b:50:09:fa:9b: 63:7b:e1:dc:9a:cd:e5:18:34:81:a7:c3:43:2a:15:50:22:2c: 67:38:3b:f3:9d:75:22:b8:2c:fe:78:48:d1:84:74:62:62:3b: 4f:60:e0:55:33:fe:60:bd:d2:d9:90:46:27:86:6b:cf:01:45: bb:b7:45:5d:c8:6c:17:81:35:e2:1d:20:db:80:b6:50:4d:f2: 83:9a:b8:73:67:89:ba:32:d4:11:dc:a4:dc:44:93:cb:fb:78: fe:fb:9e:df:bc:48:d2:f8:15:e3:eb:6d:dc:f3:69:b9:04:8d: 9d:02:78:3a:9c:ed:24:e7:ee:e3:37:2a:df:b2:91:50:8d:63: 07:05:69:ac:c4:e1:98:f4:a4:ba:56:15:d2:c9:2e:a9:8c:cc: a6:db:3d:36:f6:77:de:2c:c7:9d:fb:52:4f:2c:6a:4f:eb:37: 85:ce:76:89:03:49:90:e9:96:b5:d3:4d:86:67:8a:61:61:a2: dd:4b:cf:3e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt26vLNh2jOJFX2THATEERYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjNmZGQ0OThlZDkyMDY3MDZiYjAyN2VmNDQ5MzgyZGIzMWM2OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r9L2VMnaP7CNBdrbP2od0qhuxWL rTPUfuExlBZeJ5q1kbDQSOdIL4sW0kryORLFo1yLmrgN7UymeDryXn3rB0OIaqUi WzN0d6bbfokWcRm9CGqm/NJi1kQJIzWnaJHKCK5www9wSghQif+/ER+RkTAvjDN1 xz67DcWfdrFwNguTCH90wCB2pi0XOab2qRMubkpFKwToiuPw3khmSO7kaOkH4ODW DXaMuT4SDwV03w1oQt+jNLypKxRUoGTrNntVHMckdZ1rE1jt9vL8i98p1E5yHXQ2 PhEknc3dsUw1ZMQT36IsPNxQA2mQhyRZgrQX6gNUrrEkIwthb+56OCSTCwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJY/3UmO2SBnBrsCfvRJOC2zHGjXMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvbGpfZFNZN1pJR2NHdXdKLTlFazRMYk1jYU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDJXvAAwQB UnMeAwQCuZQMAwQCudQ8AwQCudoEAwQC1GscMA0GCSqGSIb3DQEBCwUAA4IBAQBS FyhUfTqlKzPP7SeCKLP+/hL4DgzK1L1Ia3fW3w+OIlAhEXbSRnY6GxquDeBKq+ZH I7QnL5jZEpyU+/+1ej+ULOpEa1AJ+ptje+Hcms3lGDSBp8NDKhVQIixnODvznXUi uCz+eEjRhHRiYjtPYOBVM/5gvdLZkEYnhmvPAUW7t0VdyGwXgTXiHSDbgLZQTfKD mrhzZ4m6MtQR3KTcRJPL+3j++57fvEjS+BXj623c82m5BI2dAng6nO0k5+7jNyrf spFQjWMHBWmsxOGY9KS6VhXSyS6pjMym2z029nfeLMed+1JPLGpP6zeFznaJA0mQ 6Za1002GZ4phYaLdS88+ -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:05 2026 by rpki-client