This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/lAJZYJJzGp5HPbuIC7fuB-JbImQ.roa File: lAJZYJJzGp5HPbuIC7fuB-JbImQ.roa (raw, json) Hash identifier: KjiWHR4FndPu1pOu7SlliXtRRkAXn6COl4Ndm2nMAAw= Subject key identifier: 94:02:59:60:92:73:1A:9E:47:3D:BB:88:0B:B7:EE:07:E2:5B:22:64 Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019ABA10347E1AC31BF62A76473B116E7FC8 Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/lAJZYJJzGp5HPbuIC7fuB-JbImQ.roa Signing time: Tue 25 Nov 2025 08:10:15 +0000 ROA not before: Tue 25 Nov 2025 08:10:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 141.138.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:10:34:7e:1a:c3:1b:f6:2a:76:47:3b:11:6e:7f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Nov 25 08:10:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9402596092731a9e473dbb880bb7ee07e25b2264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:ec:27:19:6b:9f:e2:83:58:02:a3:34:ca: b0:2a:d8:5d:44:8f:81:c0:13:f7:ab:2e:04:86:eb: ea:5c:2c:c8:7b:89:47:de:83:af:8d:22:0d:d1:5b: 46:15:5d:1c:6a:32:e1:6b:ea:8a:af:c8:f3:d8:20: 95:4c:52:15:c1:40:b5:17:58:07:5d:6b:90:8c:4f: 46:c6:49:ff:59:1e:8e:b9:79:36:a6:c6:40:5b:4d: 54:56:14:91:ed:bd:2f:13:df:25:6c:39:b3:b3:4e: b2:f0:47:7b:4a:c6:c3:43:62:6f:82:b5:87:ba:30: 2e:2e:94:02:1d:a4:59:5d:9a:e8:90:11:85:ef:76: 8f:87:b3:9d:36:ee:fb:02:24:41:9a:c1:c5:d8:d8: 46:45:47:d9:b2:bc:30:17:23:f9:53:61:d1:3f:bc: 12:78:04:93:aa:d8:cc:25:3d:18:e7:df:42:4c:60: 6f:7e:80:1c:9a:db:40:b9:9c:dd:29:88:c2:ba:88: 1f:55:5a:c7:b8:4e:b6:70:a1:cb:43:02:71:5f:e7: 95:cd:8a:14:4a:8c:43:14:76:c4:e8:2a:d8:a2:ed: be:5b:a3:42:a4:fd:fc:53:a5:dc:25:cc:79:a4:ad: 5c:1c:18:7e:8e:59:a2:22:3c:8a:19:b7:d7:4c:bc: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:02:59:60:92:73:1A:9E:47:3D:BB:88:0B:B7:EE:07:E2:5B:22:64 X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/lAJZYJJzGp5HPbuIC7fuB-JbImQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.74.0/24 Signature Algorithm: sha256WithRSAEncryption 41:8a:24:db:ca:66:96:3d:d4:c0:69:15:a1:83:d8:78:0c:8b: f8:0b:4f:08:db:98:3b:40:48:02:10:3d:6d:ba:d1:02:eb:d0: ca:2a:d3:a3:c6:24:27:2c:c1:18:af:b9:77:5f:e2:cc:f2:9f: cf:ba:45:ac:57:e6:c5:bd:9a:fc:93:39:d8:08:f5:08:e1:f8: 2f:03:98:a8:40:c8:0f:68:6a:8d:d5:b3:dd:36:b3:de:61:32: b8:79:bc:6f:55:84:dc:ce:0e:4a:6c:b7:86:3a:ac:b5:10:f3: 4e:38:ab:81:6a:94:0c:28:a1:d8:2b:0d:6f:42:8e:83:e3:8d: de:85:02:4f:43:c7:1b:12:b0:e0:a1:4c:31:da:ce:80:2c:83: 19:62:d1:6c:09:e2:1f:1b:34:ac:80:e5:8c:94:31:c3:f9:d3: 4a:e3:48:14:f2:b9:a7:37:81:d0:2e:51:f2:11:e6:d6:b7:98: ec:4c:b3:f5:49:17:f0:3d:df:b9:4a:ba:ad:93:b4:ca:9a:de: 05:28:9d:b1:a2:a8:e4:7a:5d:b4:ce:91:ba:d9:fb:fa:19:9c: 86:cb:f9:54:a9:16:41:4b:ba:d4:da:86:72:5b:2a:93:df:9d: d7:55:fd:6e:18:0a:ba:b6:7a:14:b9:02:04:73:13:b2:bb:cb: 8a:86:9c:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq6EDR+GsMb9ip2RzsRbn/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjUxMTI1MDgxMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDAyNTk2MDkyNzMxYTllNDczZGJiODgwYmI3ZWUwN2UyNWIyMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJnsJxlrn+KDWAKjNMqwKthdRI+B wBP3qy4EhuvqXCzIe4lH3oOvjSIN0VtGFV0cajLha+qKr8jz2CCVTFIVwUC1F1gH XWuQjE9Gxkn/WR6OuXk2psZAW01UVhSR7b0vE98lbDmzs06y8Ed7SsbDQ2JvgrWH ujAuLpQCHaRZXZrokBGF73aPh7OdNu77AiRBmsHF2NhGRUfZsrwwFyP5U2HRP7wS eASTqtjMJT0Y599CTGBvfoAcmttAuZzdKYjCuogfVVrHuE62cKHLQwJxX+eVzYoU SoxDFHbE6CrYou2+W6NCpP38U6XcJcx5pK1cHBh+jlmiIjyKGbfXTLyM7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQCWWCScxqeRz27iAu37gfiWyJkMB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEvbEFKWllKSnpHcDVIUGJ1SUM3ZnVCLUpiSW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYpKMA0G CSqGSIb3DQEBCwUAA4IBAQBBiiTbymaWPdTAaRWhg9h4DIv4C08I25g7QEgCED1t utEC69DKKtOjxiQnLMEYr7l3X+LM8p/PukWsV+bFvZr8kznYCPUI4fgvA5ioQMgP aGqN1bPdNrPeYTK4ebxvVYTczg5KbLeGOqy1EPNOOKuBapQMKKHYKw1vQo6D443e hQJPQ8cbErDgoUwx2s6ALIMZYtFsCeIfGzSsgOWMlDHD+dNK40gU8rmnN4HQLlHy EebWt5jsTLP1SRfwPd+5Srqtk7TKmt4FKJ2xoqjkel20zpG62fv6GZyGy/lUqRZB S7rU2oZyWyqT353XVf1uGAq6tnoUuQIEcxOyu8uKhpzS -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:40 2025 by rpki-client