This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LJ0jj-3Osxdac1UPpp7u1IFsZE4.roa File: LJ0jj-3Osxdac1UPpp7u1IFsZE4.roa (raw, json) Hash identifier: l87hpormccHw0wUF1WiGXAD8TZizXDZYVsf7uavz9ig= Subject key identifier: 2C:9D:23:8F:ED:CE:B3:17:5A:73:55:0F:A6:9E:EE:D4:81:6C:64:4E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70B93EC934CD21BA527BA01CE3ABA Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LJ0jj-3Osxdac1UPpp7u1IFsZE4.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214301 IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0b:93:ec:93:4c:d2:1b:a5:27:ba:01:ce:3a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c9d238fedceb3175a73550fa69eeed4816c644e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:88:8b:12:00:aa:42:4c:48:3e:2c:32:bd:8e: ec:bc:5b:d3:1e:db:1d:39:db:41:3f:b3:04:4b:41: bd:66:3a:ee:f9:8b:12:07:7e:7d:9f:aa:4c:e4:2a: f2:0c:e8:44:10:ee:b2:c8:a4:6e:3f:72:dc:7a:1d: 80:74:10:b4:1c:14:60:97:62:1d:45:67:3e:75:4b: c5:56:a0:ae:8a:30:e8:81:2b:e6:30:08:82:09:94: 00:96:8c:ee:de:ec:df:87:a0:88:06:81:11:bd:67: e5:55:bd:fa:bc:bd:5f:47:ec:31:ac:b6:e4:b8:01: 20:31:21:d4:05:eb:be:1e:65:5b:6f:cf:35:1c:e7: 1b:d6:e5:a6:60:40:cf:0e:83:60:52:1d:a4:b5:72: 5c:3f:a3:97:60:85:8c:05:3a:96:1a:2c:ee:2c:0f: 1e:fa:9c:13:0d:81:e6:10:b8:58:f6:c1:51:c6:47: 18:8f:e7:0c:3c:bb:ab:14:3b:f8:48:06:64:69:cf: df:26:ac:cc:f0:95:f0:62:44:5d:b7:46:03:0d:70: d7:db:06:41:1d:ca:60:32:71:9a:e6:bb:e5:86:3b: dd:64:5e:5a:cb:bb:f6:b5:2d:08:4b:ff:98:3f:36: 40:16:dd:05:a5:e5:0b:a4:b3:f4:5e:18:aa:e5:03: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9D:23:8F:ED:CE:B3:17:5A:73:55:0F:A6:9E:EE:D4:81:6C:64:4E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LJ0jj-3Osxdac1UPpp7u1IFsZE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a90::/48 Signature Algorithm: sha256WithRSAEncryption 03:1a:da:01:2d:c9:52:9d:db:09:1f:df:f5:e5:ab:ca:31:c5: 57:9d:0f:43:59:01:f5:1c:50:90:25:a4:a5:b4:a0:63:b1:44: b4:a2:0f:ef:4b:6b:0e:d6:f0:5e:11:b7:73:5c:a1:9b:24:f9: b4:d2:49:a1:b1:6f:7e:d1:b2:f3:9f:20:21:e7:64:bf:35:ab: 5a:f0:68:51:e4:76:db:36:f8:02:56:76:74:1f:61:6d:9a:7c: 85:44:38:dd:cb:aa:ac:7d:44:41:d0:07:cd:13:7e:d5:42:66: 47:a1:c0:90:98:83:9a:cb:98:20:85:cc:c7:2b:64:43:f6:03: 66:87:e9:5b:e0:fe:92:be:06:22:2a:cf:b7:86:ec:72:69:52: 05:61:5e:2d:50:fc:b0:9e:a4:3c:06:a7:b0:42:b1:6c:1c:c3: 00:72:98:04:c8:55:63:d8:f2:88:3c:76:d6:9e:f5:44:87:e9: c1:6a:32:11:48:3c:cd:07:44:85:e0:b1:e1:5f:e1:b0:82:43: e6:d9:43:2b:6a:87:83:59:48:8a:0e:95:26:c9:c8:b5:f5:2e: 9a:31:89:27:0a:7a:db:66:e4:96:3f:1a:0e:ef:9b:e4:20:ff: b4:c3:6a:06:e6:ae:d1:dc:ce:9d:01:1c:13:22:89:7a:ac:5a: bd:c0:f2:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwuT7JNM0hulJ7oBzjq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzlkMjM4ZmVkY2ViMzE3NWE3MzU1MGZhNjllZWVkNDgxNmM2NDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IiLEgCqQkxIPiwyvY7svFvTHtsd OdtBP7MES0G9Zjru+YsSB359n6pM5CryDOhEEO6yyKRuP3Lceh2AdBC0HBRgl2Id RWc+dUvFVqCuijDogSvmMAiCCZQAlozu3uzfh6CIBoERvWflVb36vL1fR+wxrLbk uAEgMSHUBeu+HmVbb881HOcb1uWmYEDPDoNgUh2ktXJcP6OXYIWMBTqWGizuLA8e +pwTDYHmELhY9sFRxkcYj+cMPLurFDv4SAZkac/fJqzM8JXwYkRdt0YDDXDX2wZB HcpgMnGa5rvlhjvdZF5ay7v2tS0IS/+YPzZAFt0FpeULpLP0Xhiq5QOwFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCydI4/tzrMXWnNVD6ae7tSBbGROMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTEowamotM09zeGRhYzFVUHBwN3UxSUZzWkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIqQ MA0GCSqGSIb3DQEBCwUAA4IBAQADGtoBLclSndsJH9/15avKMcVXnQ9DWQH1HFCQ JaSltKBjsUS0og/vS2sO1vBeEbdzXKGbJPm00kmhsW9+0bLznyAh52S/Nata8GhR 5HbbNvgCVnZ0H2FtmnyFRDjdy6qsfURB0AfNE37VQmZHocCQmIOay5gghczHK2RD 9gNmh+lb4P6SvgYiKs+3huxyaVIFYV4tUPywnqQ8BqewQrFsHMMAcpgEyFVj2PKI PHbWnvVEh+nBajIRSDzNB0SF4LHhX+GwgkPm2UMraoeDWUiKDpUmyci19S6aMYkn CnrbZuSWPxoO75vkIP+0w2oG5q7R3M6dARwTIol6rFq9wPI7 -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client