This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/ljr109WhqKfeYcH-MhSgPoSjR9U.roa File: ljr109WhqKfeYcH-MhSgPoSjR9U.roa (raw, json) Hash identifier: RdTZwN02aq7Yl4Y75F8xayBDhsLyfJXGJDu35AD1V7M= Subject key identifier: 96:3A:F5:D3:D5:A1:A8:A7:DE:61:C1:FE:32:14:A0:3E:84:A3:47:D5 Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2 Certificate serial: 019B77C686107255DD38942624267331374E Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/ljr109WhqKfeYcH-MhSgPoSjR9U.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201854 IP address blocks: 185.57.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:10:72:55:dd:38:94:26:24:26:73:31:37:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=963af5d3d5a1a8a7de61c1fe3214a03e84a347d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:b9:b3:d5:d3:bb:c5:49:7c:70:25:e1:22: bb:ea:db:db:41:78:e6:b6:9b:1e:d3:71:d5:a1:fe: 20:8d:f0:fb:a6:5f:c4:44:c1:36:f7:78:57:07:d7: 25:e5:5b:58:99:5e:bc:07:07:23:28:0f:1e:3b:4e: bd:f4:2c:b1:24:d3:0d:6a:57:06:2e:87:fb:ee:f8: 84:a8:0b:6a:f2:e8:c6:21:7f:79:f1:bb:9d:c1:e0: 36:16:0a:50:f1:4e:a2:7a:f4:6c:4b:16:03:22:f6: f6:a1:78:ec:db:28:ae:6e:94:1f:4b:61:4f:cb:62: 03:0d:6e:ce:bf:cb:e7:62:59:75:4f:8b:d0:c8:f0: f7:da:ae:c8:98:fb:57:77:76:bd:25:8e:41:a3:5c: 8c:95:41:95:8b:b6:9e:04:46:01:3d:ce:4d:7f:c8: 4c:d4:11:30:19:3e:99:a0:c9:c1:12:6f:f4:a8:b1: 52:5f:83:b6:cf:50:06:a5:0d:0c:da:17:b7:ba:e4: b0:84:bd:31:29:32:72:4f:e0:25:1c:ce:5b:8b:ef: 1a:79:e4:34:f2:c5:39:85:6a:59:76:1f:40:3a:3f: 69:13:ca:c5:43:78:87:15:d3:60:37:3d:60:56:d6: 3e:34:11:08:56:87:ef:e3:65:29:c8:e7:fd:8e:be: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:F5:D3:D5:A1:A8:A7:DE:61:C1:FE:32:14:A0:3E:84:A3:47:D5 X509v3 Authority Key Identifier: keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/ljr109WhqKfeYcH-MhSgPoSjR9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.78.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:70:fe:ea:63:7b:8a:45:e7:8f:b5:3e:85:a4:72:e0:8b:fa: f3:db:3e:f3:3b:80:76:ef:38:2c:83:4d:71:d0:6c:7d:ba:ca: 8d:af:53:8f:2a:f3:db:8d:4d:01:9b:57:6e:93:5f:0b:98:27: b6:ff:a0:34:59:b4:77:ba:17:42:5f:8c:ee:19:ba:32:f4:0b: ab:35:58:86:50:92:e3:c9:6a:0f:fe:06:fb:c1:59:a6:ca:24: 07:c8:34:95:05:72:a2:c1:08:df:f9:d7:59:1f:8e:2e:b6:2e: ee:c2:f4:82:9a:4e:e3:14:cb:3c:35:80:78:95:00:ff:b7:d3: 0f:77:3e:5b:b9:d4:a4:00:29:ed:c2:0f:84:3d:f5:66:13:c7: a5:df:0c:c5:db:29:25:e7:bd:70:c9:23:b4:4f:63:8a:9f:c4: 45:6d:09:6f:c3:28:b8:64:6d:03:8c:d8:df:ef:66:83:33:22: 6c:1c:1e:3a:4a:01:1d:6b:7b:33:bf:e2:39:02:86:df:75:c3: 41:be:54:51:f4:42:37:b6:c5:1c:f4:53:ad:b3:12:d3:71:ff: 71:fe:55:d3:d4:5d:39:34:9f:db:45:00:48:d9:33:3f:e1:18: a9:dc:2a:13:b5:44:f2:fa:49:38:fc:dc:7e:78:cb:eb:6a:d3: 2e:b3:4a:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xoYQclXdOJQmJCZzMTdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODYyM2VjYzhkY2I5MTNkMTAyMjhhOTQ2MGE4NmU2NjBj YjhmYjIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjNhZjVkM2Q1YTFhOGE3ZGU2MWMxZmUzMjE0YTAzZTg0YTM0N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnS5s9XTu8VJfHAl4SK76tvbQXjm tpse03HVof4gjfD7pl/ERME293hXB9cl5VtYmV68BwcjKA8eO0699CyxJNMNalcG Lof77viEqAtq8ujGIX958budweA2FgpQ8U6ievRsSxYDIvb2oXjs2yiubpQfS2FP y2IDDW7Ov8vnYll1T4vQyPD32q7ImPtXd3a9JY5Bo1yMlUGVi7aeBEYBPc5Nf8hM 1BEwGT6ZoMnBEm/0qLFSX4O2z1AGpQ0M2he3uuSwhL0xKTJyT+AlHM5bi+8aeeQ0 8sU5hWpZdh9AOj9pE8rFQ3iHFdNgNz1gVtY+NBEIVofv42UpyOf9jr6/RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJY69dPVoain3mHB/jIUoD6Eo0fVMB8GA1UdIwQY MBaAFCWGI+zI3LkT0QIoqUYKhuZgy4+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUt NTY4OWVlMDZlMTRjLzEvbGpyMTA5V2hxS2ZlWWNILU1oU2dQb1NqUjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUtNTY4OWVlMDZlMTRj LzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTlOMA0G CSqGSIb3DQEBCwUAA4IBAQBtcP7qY3uKReePtT6FpHLgi/rz2z7zO4B27zgsg01x 0Gx9usqNr1OPKvPbjU0Bm1duk18LmCe2/6A0WbR3uhdCX4zuGboy9AurNViGUJLj yWoP/gb7wVmmyiQHyDSVBXKiwQjf+ddZH44uti7uwvSCmk7jFMs8NYB4lQD/t9MP dz5budSkACntwg+EPfVmE8el3wzF2ykl571wySO0T2OKn8RFbQlvwyi4ZG0DjNjf 72aDMyJsHB46SgEda3szv+I5AobfdcNBvlRR9EI3tsUc9FOtsxLTcf9x/lXT1F05 NJ/bRQBI2TM/4Rip3CoTtUTy+kk4/Nx+eMvratMus0q0 -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:25 2026 by rpki-client