This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ly4jAghIqZcQUeWo_GsyRA8lugc.roa File: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (raw, json) Hash identifier: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y= Subject key identifier: 97:2E:23:02:08:48:A9:97:10:51:E5:A8:FC:6B:32:44:0F:25:BA:07 Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019B7EA595EE5EDF4A344841B3683F794588 Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ly4jAghIqZcQUeWo_GsyRA8lugc.roa Signing time: Fri 02 Jan 2026 12:18:59 +0000 ROA not before: Fri 02 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202914 IP address blocks: 91.229.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:95:ee:5e:df:4a:34:48:41:b3:68:3f:79:45:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Jan 2 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=972e23020848a9971051e5a8fc6b32440f25ba07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:40:05:85:98:76:be:8d:3a:78:51:05:6f: 5a:f9:93:92:20:18:5c:d5:93:73:b8:93:9d:b2:30: a8:9a:98:65:59:06:7d:d1:d7:74:2b:9e:6f:2b:2c: 2b:2f:11:6a:8b:db:46:13:ed:49:20:13:f7:9b:fb: 04:b2:2d:03:c5:27:e4:17:b3:d1:5b:03:1e:f4:dc: 27:6c:19:31:56:da:fc:5a:4c:78:87:f4:af:a1:1e: 4b:58:ec:a1:2b:7d:5e:88:3b:a0:06:2a:a6:13:47: aa:a0:4e:f2:35:e2:8c:c6:bc:c9:52:80:45:78:29: 20:86:e7:f6:0c:98:84:98:17:49:84:81:40:6e:e2: f2:b2:a3:ed:7d:b3:0b:fe:37:5f:9b:09:0b:71:d1: 0b:74:2e:00:0e:e5:b0:e2:54:e3:f2:b3:46:3b:9e: 02:bb:c4:da:a3:27:35:c8:4a:7d:52:57:9c:66:62: f3:59:90:1e:63:8d:04:3c:2a:47:eb:0d:d7:73:f3: 97:19:f2:a6:78:1a:ed:7c:9e:41:58:0f:02:44:7e: 47:3c:8c:55:d2:d1:1e:7b:ae:cc:e5:be:eb:67:b1: e2:b8:fc:84:b9:61:87:e2:62:de:f6:d7:ee:d6:6e: ab:e1:cc:7f:b0:54:1b:20:bb:7c:0d:0a:52:1e:0a: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2E:23:02:08:48:A9:97:10:51:E5:A8:FC:6B:32:44:0F:25:BA:07 X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ly4jAghIqZcQUeWo_GsyRA8lugc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.236.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:77:8a:6d:42:89:a1:6c:c2:b3:c8:75:55:d1:90:68:5d:a3: 31:72:6b:1a:25:e0:7f:b1:ac:12:e7:6c:74:13:9a:ae:36:dd: 98:00:52:fb:57:77:5c:3a:1f:e5:d7:84:bc:0b:1a:d7:0f:4e: 41:04:4b:74:97:db:39:6a:3c:6a:f4:aa:e0:60:dd:f9:3c:82: 4b:f9:3c:09:c1:f1:98:99:e1:f0:76:ed:89:b7:f2:d0:82:ab: e6:63:b9:de:bb:f5:78:d9:00:4c:92:01:ce:46:95:99:0c:ed: e3:b1:72:a6:8e:c1:d6:43:97:95:78:32:6e:e5:c0:f6:30:3d: ec:a4:20:8f:13:40:6d:dc:c0:df:3e:02:92:c3:c8:b4:67:2f: e0:de:8b:6e:d6:75:63:da:17:35:3e:2c:05:d4:f2:42:b7:a8: 6c:42:a4:2e:53:04:ea:fc:65:04:c7:39:ef:1e:2d:85:82:33: 5b:3d:83:66:4a:cd:01:c6:b7:a3:37:a4:d3:33:c6:96:a7:94: 41:7f:7b:9a:b7:a5:e9:3c:fa:92:03:12:f1:13:66:9a:57:6d: 16:2d:b2:6a:f1:6f:6c:16:85:c9:db:13:1a:23:8e:70:b8:01: 65:52:16:09:e2:0a:a9:0a:43:c9:50:cf:75:9c:96:52:3f:d0: 81:de:3e:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pZXuXt9KNEhBs2g/eUWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjYwMTAyMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzJlMjMwMjA4NDhhOTk3MTA1MWU1YThmYzZiMzI0NDBmMjViYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD9ABYWYdr6NOnhRBW9a+ZOSIBhc 1ZNzuJOdsjComphlWQZ90dd0K55vKywrLxFqi9tGE+1JIBP3m/sEsi0DxSfkF7PR WwMe9NwnbBkxVtr8Wkx4h/SvoR5LWOyhK31eiDugBiqmE0eqoE7yNeKMxrzJUoBF eCkghuf2DJiEmBdJhIFAbuLysqPtfbML/jdfmwkLcdELdC4ADuWw4lTj8rNGO54C u8Taoyc1yEp9UlecZmLzWZAeY40EPCpH6w3Xc/OXGfKmeBrtfJ5BWA8CRH5HPIxV 0tEee67M5b7rZ7HiuPyEuWGH4mLe9tfu1m6r4cx/sFQbILt8DQpSHgpJYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJcuIwIISKmXEFHlqPxrMkQPJboHMB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEvbHk0akFnaElxWmNRVWVXb19Hc3lSQThsdWdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+XsMA0G CSqGSIb3DQEBCwUAA4IBAQBtd4ptQomhbMKzyHVV0ZBoXaMxcmsaJeB/sawS52x0 E5quNt2YAFL7V3dcOh/l14S8CxrXD05BBEt0l9s5ajxq9KrgYN35PIJL+TwJwfGY meHwdu2Jt/LQgqvmY7neu/V42QBMkgHORpWZDO3jsXKmjsHWQ5eVeDJu5cD2MD3s pCCPE0Bt3MDfPgKSw8i0Zy/g3otu1nVj2hc1PiwF1PJCt6hsQqQuUwTq/GUExznv Hi2FgjNbPYNmSs0BxrejN6TTM8aWp5RBf3uat6XpPPqSAxLxE2aaV20WLbJq8W9s FoXJ2xMaI45wuAFlUhYJ4gqpCkPJUM91nJZSP9CB3j7n -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:51 2026 by rpki-client