This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/lYJDRXWPAACOBIGtN5SoMpmELk8.roa File: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (raw, json) Hash identifier: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA= Subject key identifier: 95:82:43:45:75:8F:00:00:8E:04:81:AD:37:94:A8:32:99:84:2E:4F Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79 Certificate serial: 019B77592757953F97530D66E84591511E0E Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/lYJDRXWPAACOBIGtN5SoMpmELk8.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215298 IP address blocks: 185.67.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:27:57:95:3f:97:53:0d:66:e8:45:91:51:1e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95824345758f00008e0481ad3794a83299842e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:90:c0:f7:4a:21:6a:f8:fe:05:39:88:ac: 0e:79:df:f8:0a:33:32:1f:06:45:a3:92:43:25:06: 91:5c:01:94:19:7c:d9:be:dc:64:7d:7c:db:53:7c: 07:2f:45:b6:cb:b3:aa:55:d2:45:f4:50:f4:5b:39: 17:0a:96:31:d3:2a:2f:1c:e0:78:7f:e6:27:fb:87: f2:c4:6c:e2:a8:af:8e:6e:9f:42:6e:10:eb:88:71: 4c:69:b0:25:23:7e:ea:06:44:05:48:db:ef:97:62: a8:b5:dc:0d:b1:24:9d:f7:b7:53:cb:61:cb:3b:87: 1d:67:a4:8d:b2:83:0d:ff:57:ea:b2:93:ed:48:47: 41:26:d4:2d:3d:13:4b:d1:75:73:56:7c:6c:40:ba: 2b:3b:f8:68:cc:62:4e:8c:dc:5e:da:92:0f:c2:75: 31:5d:2f:13:07:85:b5:5c:3b:0a:26:1d:d2:fe:fb: 56:c8:5a:f3:cc:df:da:19:75:b1:94:8a:46:86:a9: 62:0f:49:6a:b3:20:54:5c:16:ea:c4:d4:a1:69:24: f5:e5:b6:80:89:bc:76:57:36:60:08:90:5b:c9:fa: e0:3f:c7:1a:66:a4:2a:e6:c3:c3:95:0e:10:03:15: b8:34:09:d6:38:4a:eb:25:28:d7:48:60:8e:d3:ef: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:82:43:45:75:8F:00:00:8E:04:81:AD:37:94:A8:32:99:84:2E:4F X509v3 Authority Key Identifier: keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/lYJDRXWPAACOBIGtN5SoMpmELk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.113.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d6:96:b7:6d:17:76:e9:f6:5a:34:c1:bc:6a:56:c2:d0:0d: a0:c8:bd:3e:a7:27:1b:d4:f2:26:bd:fb:1f:8f:ec:89:01:8a: c4:cb:af:e1:4b:b4:e4:fb:27:36:9a:62:04:bf:8c:2b:a5:ed: 42:4d:92:fb:98:b5:ab:0e:3a:7b:df:3f:31:f7:d0:2b:4a:e7: e8:e3:a0:0e:39:82:f6:f7:67:2e:0d:88:76:b9:7f:cb:74:d7: a7:c6:39:7c:95:f9:07:d4:48:b9:55:eb:24:bc:86:0f:3b:7b: 6b:36:66:63:a2:52:93:16:ce:b0:5e:8b:76:6d:97:26:1d:7b: 12:f8:10:60:cf:df:6a:8b:b2:fb:3c:4e:09:e0:75:7e:30:88: d2:02:02:85:b6:e1:d3:b4:e6:38:ed:8b:d2:56:6a:03:99:65: e3:2a:61:0b:40:80:85:de:8f:73:6b:ca:a2:91:da:1d:80:2c: d7:0e:64:3b:ca:e7:81:e8:42:22:40:f7:63:2f:ac:36:4b:f4: e1:b9:17:b2:59:c4:b6:b7:dc:10:9b:64:b1:dc:a1:4b:de:02: 1d:04:04:8b:10:0f:29:3b:f1:e3:10:51:07:86:7a:72:4f:63: c0:e8:70:4f:04:40:58:0a:86:cf:f0:21:34:db:55:9c:a4:8d: 80:45:53:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSdXlT+XUw1m6EWRUR4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1 MDRmNzkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTgyNDM0NTc1OGYwMDAwOGUwNDgxYWQzNzk0YTgzMjk5ODQyZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwuQwPdKIWr4/gU5iKwOed/4CjMy HwZFo5JDJQaRXAGUGXzZvtxkfXzbU3wHL0W2y7OqVdJF9FD0WzkXCpYx0yovHOB4 f+Yn+4fyxGziqK+Obp9CbhDriHFMabAlI37qBkQFSNvvl2KotdwNsSSd97dTy2HL O4cdZ6SNsoMN/1fqspPtSEdBJtQtPRNL0XVzVnxsQLorO/hozGJOjNxe2pIPwnUx XS8TB4W1XDsKJh3S/vtWyFrzzN/aGXWxlIpGhqliD0lqsyBUXBbqxNShaST15baA ibx2VzZgCJBbyfrgP8caZqQq5sPDlQ4QAxW4NAnWOErrJSjXSGCO0++aIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWCQ0V1jwAAjgSBrTeUqDKZhC5PMB8GA1UdIwQY MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt NmJjMzkwOTk1Y2FiLzEvbFlKRFJYV1BBQUNPQklHdE41U29NcG1FTGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUNxMA0G CSqGSIb3DQEBCwUAA4IBAQAT1pa3bRd26fZaNMG8albC0A2gyL0+pycb1PImvfsf j+yJAYrEy6/hS7Tk+yc2mmIEv4wrpe1CTZL7mLWrDjp73z8x99ArSufo46AOOYL2 92cuDYh2uX/LdNenxjl8lfkH1Ei5VeskvIYPO3trNmZjolKTFs6wXot2bZcmHXsS +BBgz99qi7L7PE4J4HV+MIjSAgKFtuHTtOY47YvSVmoDmWXjKmELQICF3o9za8qi kdodgCzXDmQ7yueB6EIiQPdjL6w2S/ThuReyWcS2t9wQm2Sx3KFL3gIdBASLEA8p O/HjEFEHhnpyT2PA6HBPBEBYCobP8CE021WcpI2ARVNf -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:40 2026 by rpki-client