This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa File: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (raw, json) Hash identifier: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI= Subject key identifier: 2E:32:4B:AA:37:27:65:9B:D4:07:B9:8A:8C:21:FE:EC:66:73:78:B3 Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757 Certificate serial: 019B7F8286EE904D4EEC2EAF4F456E9F5225 Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa Signing time: Fri 02 Jan 2026 16:20:19 +0000 ROA not before: Fri 02 Jan 2026 16:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206892 IP address blocks: 91.206.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:86:ee:90:4d:4e:ec:2e:af:4f:45:6e:9f:52:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559349644323315f806dc64ca4d9ed9557762757 Validity Not Before: Jan 2 16:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e324baa3727659bd407b98a8c21feec667378b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:8b:2e:92:ad:36:81:5f:ca:42:da:76:52: 9d:ea:b9:ef:52:b5:52:d0:74:ad:3a:b7:23:85:0b: 60:ae:b2:9a:6e:d9:75:31:c1:d5:7f:e5:d7:5e:73: a9:70:b3:d8:4f:f3:16:67:30:48:ef:24:b6:41:9b: c0:4f:9a:0b:f7:3f:74:0a:54:e8:2f:6d:51:79:cd: d9:cc:c4:81:d3:86:cc:15:cb:6b:8a:d8:9a:b2:aa: 55:ad:a4:96:ec:01:5d:cc:fe:1e:b3:3b:b4:21:e0: 5f:c7:00:e9:50:4d:3d:9b:36:3d:4a:d9:fc:7c:86: fa:ea:5c:54:db:6a:a3:37:a4:7c:90:32:db:8f:93: f0:7f:ac:89:90:27:9d:e4:f3:6d:3c:ee:2f:c3:7d: 1c:dd:07:48:77:eb:ef:7d:81:29:78:14:a7:96:4b: f2:5e:c7:03:ee:99:99:e1:65:be:0b:f8:37:84:3b: 1c:76:76:2c:74:ac:30:f3:40:b5:e1:47:37:e0:98: 03:43:d2:a5:88:9a:9e:31:ff:51:bd:d1:ee:7a:a6: bf:02:5d:74:71:97:e7:23:47:c7:8a:d0:ed:3b:3a: 7a:78:c2:e8:54:6a:47:2e:fe:9c:bc:5c:2a:d5:ca: cb:db:1f:52:48:a8:8b:76:26:a0:9d:7b:88:fd:95: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:4B:AA:37:27:65:9B:D4:07:B9:8A:8C:21:FE:EC:66:73:78:B3 X509v3 Authority Key Identifier: keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.112.0/24 Signature Algorithm: sha256WithRSAEncryption df:d8:9b:4a:06:a1:1a:fd:26:be:e5:12:39:41:f7:04:f0:db: b9:fa:1f:0a:9b:0f:b5:6a:48:6a:be:0d:a2:4c:60:c6:35:a7: b3:51:fe:f2:ce:12:59:2c:33:44:2b:bb:86:e0:9c:22:0f:6a: 4e:c2:48:23:c3:91:37:0e:fb:e8:3e:92:36:43:ed:0c:35:4f: 46:31:ed:b1:77:0e:ee:7a:8f:af:96:74:c3:a4:19:e8:3a:2e: 6c:46:bb:2b:4f:4e:0c:95:ea:ea:ee:0d:80:04:2d:cb:16:0d: 81:73:4e:1b:ee:95:4f:45:3a:7f:ba:15:c5:8d:86:fc:e6:f9: 04:74:12:2f:88:a4:42:4e:74:7d:81:de:83:78:4e:fa:33:5b: 83:87:26:9e:7c:04:11:18:dd:e7:82:9a:4c:27:f2:79:75:a9: 7e:82:52:09:15:8a:82:96:0f:63:b3:bf:2e:c6:7a:64:00:96: bf:b8:94:7f:6f:c1:3b:1c:70:07:9b:74:c1:89:15:0b:21:6d: 7a:c3:65:1d:61:8b:64:fd:58:84:f3:4c:11:8f:84:de:25:b3: fd:f6:fe:71:fa:1a:7b:a7:3a:ef:96:de:da:d1:6d:1e:bb:38: 68:8f:02:3e:da:3d:73:02:91:73:bf:6c:64:9e:aa:37:47:d3: 24:f1:11:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gobukE1O7C6vT0Vun1IlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3 NjI3NTcwHhcNMjYwMTAyMTYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTMyNGJhYTM3Mjc2NTliZDQwN2I5OGE4YzIxZmVlYzY2NzM3OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwuLLpKtNoFfykLadlKd6rnvUrVS 0HStOrcjhQtgrrKabtl1McHVf+XXXnOpcLPYT/MWZzBI7yS2QZvAT5oL9z90ClTo L21Rec3ZzMSB04bMFctritiasqpVraSW7AFdzP4eszu0IeBfxwDpUE09mzY9Stn8 fIb66lxU22qjN6R8kDLbj5Pwf6yJkCed5PNtPO4vw30c3QdId+vvfYEpeBSnlkvy XscD7pmZ4WW+C/g3hDscdnYsdKww80C14Uc34JgDQ9KliJqeMf9RvdHueqa/Al10 cZfnI0fHitDtOzp6eMLoVGpHLv6cvFwq1crL2x9SSKiLdiagnXuI/ZWpVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4yS6o3J2Wb1Ae5iowh/uxmc3izMB8GA1UdIwQY MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt NjA2NmQ4OWYwNWI4LzEvTGpKTHFqY25aWnZVQjdtS2pDSC03R1p6ZUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4 LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85wMA0G CSqGSIb3DQEBCwUAA4IBAQDf2JtKBqEa/Sa+5RI5QfcE8Nu5+h8Kmw+1akhqvg2i TGDGNaezUf7yzhJZLDNEK7uG4JwiD2pOwkgjw5E3DvvoPpI2Q+0MNU9GMe2xdw7u eo+vlnTDpBnoOi5sRrsrT04Mlerq7g2ABC3LFg2Bc04b7pVPRTp/uhXFjYb85vkE dBIviKRCTnR9gd6DeE76M1uDhyaefAQRGN3ngppMJ/J5dal+glIJFYqClg9js78u xnpkAJa/uJR/b8E7HHAHm3TBiRULIW16w2UdYYtk/ViE80wRj4TeJbP99v5x+hp7 pzrvlt7a0W0euzhojwI+2j1zApFzv2xknqo3R9Mk8RHx -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:38 2026 by rpki-client