This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/LjrShwCoJZxaBMCU_xgtQ0ssv44.roa File: LjrShwCoJZxaBMCU_xgtQ0ssv44.roa (raw, json) Hash identifier: HEF1Y2WFhMnB9/CRA48ookYnYxu+ItuM7lAcrIlWSPE= Subject key identifier: 2E:3A:D2:87:00:A8:25:9C:5A:04:C0:94:FF:18:2D:43:4B:2C:BF:8E Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Certificate serial: 019B7FF1F43CFF6FEB4D5A51A9A483A78F68 Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/LjrShwCoJZxaBMCU_xgtQ0ssv44.roa Signing time: Fri 02 Jan 2026 18:22:01 +0000 ROA not before: Fri 02 Jan 2026 18:22:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208802 IP address blocks: 45.84.200.0/22 maxlen: 22 45.84.200.0/23 maxlen: 23 45.84.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f4:3c:ff:6f:eb:4d:5a:51:a9:a4:83:a7:8f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Validity Not Before: Jan 2 18:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e3ad28700a8259c5a04c094ff182d434b2cbf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:33:03:9b:6c:40:3d:aa:ad:7b:ad:16:80: f8:16:ed:c3:39:9f:9c:79:e4:74:d8:98:e5:ea:0f: ce:96:d1:56:31:51:c1:b2:73:60:50:eb:7e:67:bf: 7f:f7:32:97:a4:05:34:72:0f:2d:59:90:2e:ec:78: d1:f4:11:32:77:31:7d:a5:e2:4d:dd:8d:85:88:3c: 62:ad:f4:15:26:e8:39:39:cc:27:50:77:de:90:e4: 11:ee:0d:56:f0:8a:2a:c5:3d:0e:98:3e:36:84:23: 47:d4:99:3d:28:cb:d0:59:d4:13:34:54:fc:af:45: d3:2b:bd:df:95:57:bd:65:54:45:fe:ba:95:cd:be: 2a:a2:39:c5:40:28:59:f0:fd:49:4e:54:11:11:23: 55:df:df:10:73:9a:9e:f8:d7:20:f0:de:f0:b7:54: 51:ff:1b:21:42:dc:e7:92:3f:5e:e1:0e:27:14:32: 8c:b1:26:37:45:86:4e:28:a6:7c:aa:02:62:51:71: 03:3e:d8:3f:45:1f:0e:cc:32:77:4d:61:09:01:ba: a8:a0:ec:30:85:6d:20:40:ce:c6:04:a3:34:ea:cf: c6:7e:58:87:f3:20:88:65:8e:4e:cf:7c:af:9c:99: 0e:2a:ef:75:5e:6e:cb:48:c2:c1:4c:4e:11:5b:6a: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3A:D2:87:00:A8:25:9C:5A:04:C0:94:FF:18:2D:43:4B:2C:BF:8E X509v3 Authority Key Identifier: keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/LjrShwCoJZxaBMCU_xgtQ0ssv44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.200.0/22 Signature Algorithm: sha256WithRSAEncryption 10:ab:cc:09:8f:0e:d5:f9:d4:92:26:d6:35:93:92:6e:a6:7b: 0b:9e:40:7f:6e:65:12:00:d7:8f:66:3a:bd:32:95:a2:e8:73: 06:50:df:6c:c1:e0:b1:20:c8:fc:ad:7b:33:47:c7:ed:5e:79: 07:72:7d:17:47:0a:ed:58:91:24:2f:64:86:bb:e1:bb:00:4b: af:f1:95:e6:3f:94:8a:e9:12:e3:e0:3b:3e:7b:6c:b0:44:6a: 58:fd:ed:87:cd:7d:3d:8b:f2:f3:bc:51:12:88:a4:46:62:51: b9:b3:c7:64:32:e6:a8:a5:27:b9:d9:d8:a4:1c:8c:fc:4e:62: fd:67:d2:d2:be:47:b4:11:a2:4a:5b:f3:24:61:59:b0:8e:99: 47:78:9f:8d:3d:25:d2:7a:07:46:dd:81:f8:58:5f:df:86:e0: 95:ba:2b:f5:d3:3a:24:88:ef:5f:a7:04:a5:a7:c9:30:1e:84: 34:0a:5d:79:b6:10:8d:8c:d2:dc:16:d9:85:43:3f:db:ea:a0: 49:0a:f9:67:38:d7:1f:27:0e:a8:d3:79:d3:ae:00:2e:93:12: 9b:1e:5e:f2:23:50:b8:a3:e8:f5:14:f8:10:82:e1:a7:48:59: 99:89:28:cd:89:90:f6:96:17:a2:48:c2:da:28:8b:44:4a:72: 1a:6b:58:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8fQ8/2/rTVpRqaSDp49oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm YWQyZjcwHhcNMjYwMTAyMTgyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTNhZDI4NzAwYTgyNTljNWEwNGMwOTRmZjE4MmQ0MzRiMmNiZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEYzA5tsQD2qrXutFoD4Fu3DOZ+c eeR02Jjl6g/OltFWMVHBsnNgUOt+Z79/9zKXpAU0cg8tWZAu7HjR9BEydzF9peJN 3Y2FiDxirfQVJug5OcwnUHfekOQR7g1W8IoqxT0OmD42hCNH1Jk9KMvQWdQTNFT8 r0XTK73flVe9ZVRF/rqVzb4qojnFQChZ8P1JTlQRESNV398Qc5qe+Ncg8N7wt1RR /xshQtznkj9e4Q4nFDKMsSY3RYZOKKZ8qgJiUXEDPtg/RR8OzDJ3TWEJAbqooOww hW0gQM7GBKM06s/GfliH8yCIZY5Oz3yvnJkOKu91Xm7LSMLBTE4RW2phfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC460ocAqCWcWgTAlP8YLUNLLL+OMB8GA1UdIwQY MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt MjQ4YzQ3YjNjN2Q4LzEvTGpyU2h3Q29KWnhhQk1DVV94Z3RRMHNzdjQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4 LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVTIMA0G CSqGSIb3DQEBCwUAA4IBAQAQq8wJjw7V+dSSJtY1k5JupnsLnkB/bmUSANePZjq9 MpWi6HMGUN9sweCxIMj8rXszR8ftXnkHcn0XRwrtWJEkL2SGu+G7AEuv8ZXmP5SK 6RLj4Ds+e2ywRGpY/e2HzX09i/LzvFESiKRGYlG5s8dkMuaopSe52dikHIz8TmL9 Z9LSvke0EaJKW/MkYVmwjplHeJ+NPSXSegdG3YH4WF/fhuCVuiv10zokiO9fpwSl p8kwHoQ0Cl15thCNjNLcFtmFQz/b6qBJCvlnONcfJw6o03nTrgAukxKbHl7yI1C4 o+j1FPgQguGnSFmZiSjNiZD2lheiSMLaKItESnIaa1gF -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:58 2026 by rpki-client