This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ljwpW_MXZm-BJRwn1Jjte3DRq38.roa File: ljwpW_MXZm-BJRwn1Jjte3DRq38.roa (raw, json) Hash identifier: AJnLn/P5WqYS8NOh6UP6VDDKHZJB50IROKVNlFo2134= Subject key identifier: 96:3C:29:5B:F3:17:66:6F:81:25:1C:27:D4:98:ED:7B:70:D1:AB:7F Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36ACC1455C2FB1396DAD321CEFFD1B Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ljwpW_MXZm-BJRwn1Jjte3DRq38.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34879 IP address blocks: 212.193.144.0/24 maxlen: 24 212.193.145.0/24 maxlen: 24 212.193.146.0/23 maxlen: 23 212.193.148.0/23 maxlen: 24 212.193.148.0/24 maxlen: 24 212.193.149.0/24 maxlen: 24 212.193.150.0/23 maxlen: 24 212.193.150.0/24 maxlen: 24 212.193.151.0/24 maxlen: 24 212.193.152.0/23 maxlen: 23 212.193.152.0/24 maxlen: 24 212.193.153.0/24 maxlen: 24 212.193.154.0/24 maxlen: 24 212.193.155.0/24 maxlen: 24 212.193.156.0/23 maxlen: 24 212.193.156.0/24 maxlen: 24 212.193.157.0/24 maxlen: 24 212.193.158.0/24 maxlen: 24 212.193.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:c1:45:5c:2f:b1:39:6d:ad:32:1c:ef:fd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=963c295bf317666f81251c27d498ed7b70d1ab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:57:a1:26:e6:e3:d3:70:a7:c9:9c:bd:9e: ac:1f:bf:28:74:f0:5b:bf:f0:82:dc:38:0c:c8:de: 28:65:f9:66:55:3d:a9:51:43:b2:a8:1b:d0:3d:00: af:43:f2:73:41:78:a2:05:ad:c9:b4:c0:fc:dc:27: 75:3d:56:36:32:71:02:ef:25:5d:3c:b8:28:38:a0: ad:5f:92:02:07:79:12:63:fc:a9:ca:f6:38:2c:73: c5:4a:c3:a2:29:10:bd:1b:22:4f:77:dd:92:f8:56: 1d:f7:ec:2e:a3:7a:21:a4:a7:87:d1:65:ad:c4:0c: 9c:cb:b0:e7:16:73:23:4f:b0:63:c7:54:2b:23:b7: 02:d0:65:ae:87:1e:1f:c2:c3:d0:7b:da:7e:26:45: a4:3f:94:c3:a8:79:b9:fc:c5:7d:8e:be:6b:0f:da: 3a:13:60:96:df:24:c1:19:b1:1f:9c:95:e4:bb:aa: 29:c9:61:d3:1a:4e:61:20:6a:6f:64:bb:92:b8:65: 43:22:4f:01:99:4e:cb:74:bc:2f:8a:22:dc:a1:58: 07:c9:73:39:28:ef:63:6f:1a:08:30:06:69:fd:e1: 02:17:cf:a6:cf:33:d1:db:a7:52:bf:b5:0c:82:7e: 94:de:45:45:31:ab:74:bd:7d:f9:f7:13:93:b3:70: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3C:29:5B:F3:17:66:6F:81:25:1C:27:D4:98:ED:7B:70:D1:AB:7F X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ljwpW_MXZm-BJRwn1Jjte3DRq38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.144.0/20 Signature Algorithm: sha256WithRSAEncryption c3:cc:1d:48:08:29:10:e5:d9:14:5c:f8:45:ce:94:04:68:e0: 67:fb:8d:0d:1a:e0:64:73:e6:02:1d:30:de:81:97:0a:0e:89: 89:a1:45:e7:8d:44:12:09:bf:f6:3f:cb:88:cc:76:11:4d:a0: 0b:72:04:f9:43:26:fa:96:2a:17:ce:1d:a7:7e:d7:92:b7:81: d5:21:d2:3c:d5:a8:00:53:11:86:d5:67:44:d2:c6:00:13:1d: 3b:ce:14:ab:2a:0b:6a:e8:04:06:bf:e5:18:ba:64:f2:b1:bd: 94:0b:34:b1:6d:4f:96:7a:1b:a9:fb:40:fc:10:e3:ac:09:9c: 0b:1b:1c:10:22:8c:b6:8e:4b:1a:e6:96:43:67:5d:a9:1f:a4: f1:bd:68:e4:8e:41:09:8d:be:52:7e:a0:4e:a9:33:f4:43:74: 45:5a:78:50:33:b6:d4:73:75:d1:e5:c0:7f:e5:5d:f2:5e:41: 9a:c5:1d:72:b4:a7:d2:c6:d9:43:2d:0d:0b:26:c4:e7:bf:3f: 4c:c2:c4:b4:6c:b5:c4:dc:7a:8a:b2:4f:05:14:bf:47:9f:15: 12:6c:95:0c:4c:62:2a:54:7b:63:a0:53:e0:e6:58:d8:89:64: 18:8e:f2:71:35:42:81:7e:21:90:14:b8:44:9b:9f:24:5b:7e: 43:68:e0:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqzBRVwvsTltrTIc7/0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjNjMjk1YmYzMTc2NjZmODEyNTFjMjdkNDk4ZWQ3YjcwZDFhYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sVXoSbm49Nwp8mcvZ6sH78odPBb v/CC3DgMyN4oZflmVT2pUUOyqBvQPQCvQ/JzQXiiBa3JtMD83Cd1PVY2MnEC7yVd PLgoOKCtX5ICB3kSY/ypyvY4LHPFSsOiKRC9GyJPd92S+FYd9+wuo3ohpKeH0WWt xAycy7DnFnMjT7Bjx1QrI7cC0GWuhx4fwsPQe9p+JkWkP5TDqHm5/MV9jr5rD9o6 E2CW3yTBGbEfnJXku6opyWHTGk5hIGpvZLuSuGVDIk8BmU7LdLwviiLcoVgHyXM5 KO9jbxoIMAZp/eECF8+mzzPR26dSv7UMgn6U3kVFMat0vX359xOTs3DQvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJY8KVvzF2ZvgSUcJ9SY7Xtw0at/MB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvbGp3cFdfTVhabS1CSlJ3bjFKanRlM0RScTM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1MGQMA0G CSqGSIb3DQEBCwUAA4IBAQDDzB1ICCkQ5dkUXPhFzpQEaOBn+40NGuBkc+YCHTDe gZcKDomJoUXnjUQSCb/2P8uIzHYRTaALcgT5Qyb6lioXzh2nfteSt4HVIdI81agA UxGG1WdE0sYAEx07zhSrKgtq6AQGv+UYumTysb2UCzSxbU+Wehup+0D8EOOsCZwL GxwQIoy2jksa5pZDZ12pH6TxvWjkjkEJjb5SfqBOqTP0Q3RFWnhQM7bUc3XR5cB/ 5V3yXkGaxR1ytKfSxtlDLQ0LJsTnvz9MwsS0bLXE3HqKsk8FFL9HnxUSbJUMTGIq VHtjoFPg5ljYiWQYjvJxNUKBfiGQFLhEm58kW35DaOCP -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:33 2026 by rpki-client