This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/LJsNdySzgVhzx0jmB1MhskD9sjw.roa File: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (raw, json) Hash identifier: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4= Subject key identifier: 2C:9B:0D:77:24:B3:81:58:73:C7:48:E6:07:53:21:B2:40:FD:B2:3C Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c Certificate serial: 019B78A36ADFAF43E4760BA20ACE1CD643E8 Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/LJsNdySzgVhzx0jmB1MhskD9sjw.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210310 IP address blocks: 91.205.108.0/22 maxlen: 24 193.151.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6a:df:af:43:e4:76:0b:a2:0a:ce:1c:d6:43:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c9b0d7724b3815873c748e6075321b240fdb23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:d4:06:4b:8e:54:06:c4:f0:7f:ff:d0:68: b8:ff:50:b2:7e:bb:a0:5c:43:f5:ee:ed:14:c6:82: 62:97:82:f1:b6:5f:b2:c1:69:ab:2c:67:5b:2b:a6: 85:9c:e9:3d:6e:01:a0:77:2e:bd:06:91:90:3b:e1: c7:35:6b:b1:5a:62:89:ee:db:3c:c9:a3:1c:e5:e8: 8b:4c:f0:be:2a:c4:60:8d:19:43:04:14:f6:0e:6c: 9c:ef:b5:e8:d6:ab:ec:b2:58:aa:95:1c:d6:7d:11: 82:fd:e4:e7:aa:12:13:b6:98:49:82:79:99:8c:82: f0:35:a6:aa:de:61:aa:6e:f1:f6:85:07:35:f3:c2: 92:3a:a2:fd:2b:9d:e6:d2:09:59:d9:8c:21:5f:22: cb:99:7a:65:d4:a8:9b:e2:29:51:ef:25:bc:d8:70: ce:a4:34:48:15:f8:49:2b:80:97:78:2f:3d:41:75: ec:15:f8:fc:16:87:14:2d:9d:78:84:3e:a9:cc:f0: 0e:49:b3:d1:19:ea:69:cf:2f:41:9c:1b:40:6e:64: 82:8a:c0:35:08:88:b1:d3:a3:ba:66:2d:f7:ac:ae: 50:0d:16:b2:48:13:79:ab:7a:94:e9:34:fd:d7:92: 52:23:46:19:28:00:e4:8c:ab:77:75:da:d1:bf:2a: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:0D:77:24:B3:81:58:73:C7:48:E6:07:53:21:B2:40:FD:B2:3C X509v3 Authority Key Identifier: keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/LJsNdySzgVhzx0jmB1MhskD9sjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.108.0/22 193.151.95.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:23:3a:31:41:ff:06:82:0b:84:b3:30:0d:ee:37:b8:e6:02: c5:a3:2c:8e:a3:22:69:95:1a:4f:ad:3d:1e:23:cf:af:d2:1f: 22:c7:43:7d:83:b8:5d:a7:78:c3:14:75:40:4e:71:46:5c:be: 50:1e:a4:cf:b4:ee:23:8b:26:48:77:0b:06:7e:6c:05:77:57: c3:83:fc:c7:d5:52:2e:90:7c:8c:6a:a0:af:70:5a:75:07:ba: 2c:92:54:49:e2:96:e9:74:c9:eb:14:c6:6d:cd:38:21:48:91: 00:f3:3b:5c:ea:32:dd:71:cd:5f:0c:10:37:9b:78:6f:68:a4: bf:d0:f7:2e:5c:53:fd:c8:c6:f0:39:59:ea:a6:6b:d3:93:d2: bb:e5:2e:3e:a7:b0:b8:e4:2f:e2:35:65:65:6b:6f:fa:cd:83: f5:b9:db:f0:a7:2a:7d:f5:7b:71:26:d3:b8:f3:88:52:50:b7: 36:84:5b:28:52:2f:99:69:3d:e9:90:5a:49:d3:c3:82:1c:04: 80:e6:75:b7:69:bb:ca:ee:b6:04:ed:67:6d:6c:8d:92:86:3b: b8:7b:bf:dd:ef:aa:cd:b6:b5:42:d7:e1:d3:d0:ad:7f:d2:da: 7c:20:a5:48:ee:f1:b8:60:d5:7b:62:29:c6:4b:ea:53:d0:5a: de:fb:7b:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o2rfr0PkdguiCs4c1kPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh MWZiMmMwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzliMGQ3NzI0YjM4MTU4NzNjNzQ4ZTYwNzUzMjFiMjQwZmRiMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFrUBkuOVAbE8H//0Gi4/1Cyfrug XEP17u0UxoJil4Lxtl+ywWmrLGdbK6aFnOk9bgGgdy69BpGQO+HHNWuxWmKJ7ts8 yaMc5eiLTPC+KsRgjRlDBBT2Dmyc77Xo1qvssliqlRzWfRGC/eTnqhITtphJgnmZ jILwNaaq3mGqbvH2hQc188KSOqL9K53m0glZ2YwhXyLLmXpl1Kib4ilR7yW82HDO pDRIFfhJK4CXeC89QXXsFfj8FocULZ14hD6pzPAOSbPRGeppzy9BnBtAbmSCisA1 CIix06O6Zi33rK5QDRaySBN5q3qU6TT915JSI0YZKADkjKt3ddrRvyqXtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCybDXcks4FYc8dI5gdTIbJA/bI8MB8GA1UdIwQY MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct ZTkyYTI1NDkxY2VkLzEvTEpzTmR5U3pnVmh6eDBqbUIxTWhza0Q5c2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW81sAwQA wZdfMA0GCSqGSIb3DQEBCwUAA4IBAQBuIzoxQf8GgguEszAN7je45gLFoyyOoyJp lRpPrT0eI8+v0h8ix0N9g7hdp3jDFHVATnFGXL5QHqTPtO4jiyZIdwsGfmwFd1fD g/zH1VIukHyMaqCvcFp1B7osklRJ4pbpdMnrFMZtzTghSJEA8ztc6jLdcc1fDBA3 m3hvaKS/0PcuXFP9yMbwOVnqpmvTk9K75S4+p7C45C/iNWVla2/6zYP1udvwpyp9 9XtxJtO484hSULc2hFsoUi+ZaT3pkFpJ08OCHASA5nW3abvK7rYE7WdtbI2Shju4 e7/d76rNtrVC1+HT0K1/0tp8IKVI7vG4YNV7YinGS+pT0Fre+3vQ -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:07 2026 by rpki-client