This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/loji3lmNSsetL8U4MWJRuLAwY-8.roa File: loji3lmNSsetL8U4MWJRuLAwY-8.roa (raw, json) Hash identifier: weVjMISoHALyuSUFKD3HNazb4RZTeMJbhZ68EqgzyfE= Subject key identifier: 96:88:E2:DE:59:8D:4A:C7:AD:2F:C5:38:31:62:51:B8:B0:30:63:EF Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A357CBEC3BB78568F5345DA0365B94 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/loji3lmNSsetL8U4MWJRuLAwY-8.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216194 IP address blocks: 94.156.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:57:cb:ec:3b:b7:85:68:f5:34:5d:a0:36:5b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9688e2de598d4ac7ad2fc538316251b8b03063ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ff:72:a0:f0:16:be:9f:67:a6:9c:64:ad:f8: 43:77:3a:93:19:cf:ce:c4:b4:41:d4:63:ac:ff:5d: 3d:d1:6a:aa:c1:a1:14:75:f6:61:a6:2f:35:8d:99: de:77:8b:47:7c:17:1d:3d:13:6d:43:af:5e:dd:51: ed:bb:e9:77:d3:c9:ef:bd:1a:1a:a8:41:03:e1:83: ef:c1:bb:55:b0:09:7c:a7:74:3e:96:ab:1e:9d:e5: 7b:79:0a:e0:00:d9:b5:89:46:78:9f:3b:c9:0a:71: fb:6a:55:10:cf:54:3b:68:09:17:14:b3:1b:f6:1a: d3:3f:97:cc:de:72:7f:fd:95:20:2c:6c:d9:eb:8e: 72:1e:8d:92:c6:4c:b7:63:be:44:a5:d8:8e:56:02: 30:5e:72:d0:3a:9e:ac:1d:57:bb:75:85:52:d0:6a: 58:48:86:35:94:49:34:52:f8:82:2d:9b:89:d9:2b: 64:8b:83:74:86:15:d7:c6:1c:46:a9:2c:f6:9f:7a: 23:21:5b:3e:9a:a5:c8:2c:15:85:2d:10:62:35:1a: 73:f5:da:90:47:a9:e8:3c:ca:e6:df:ed:7f:b7:24: 27:a7:c6:eb:5c:c4:cb:a7:34:4a:f6:19:77:33:ff: 5c:ff:86:a1:f7:b8:16:3b:02:5b:7c:67:90:4c:af: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:88:E2:DE:59:8D:4A:C7:AD:2F:C5:38:31:62:51:B8:B0:30:63:EF X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/loji3lmNSsetL8U4MWJRuLAwY-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.104.0/24 Signature Algorithm: sha256WithRSAEncryption a9:e0:5b:a7:cc:78:23:0d:7b:3b:49:7c:68:65:d5:fc:0a:f9: 4a:42:9c:72:63:6d:8e:44:0c:86:97:06:1a:69:5a:79:d3:2b: 36:56:28:ea:e1:15:32:73:f4:d7:73:63:22:e1:25:37:6c:23: 7d:cd:f5:fa:db:a3:93:53:a3:11:8a:43:7c:ed:a4:cd:90:c9: 0a:63:09:68:6e:cb:66:04:a1:fb:7b:66:6b:86:fc:86:2f:10: 5c:63:96:a7:72:2e:44:9b:57:2d:bd:61:33:fb:9c:b7:6f:78: f6:df:f0:90:38:18:6e:63:62:5c:c8:81:36:44:7a:40:c0:82: a7:5e:da:cc:93:16:af:24:56:e5:32:09:da:e8:99:5f:c1:6c: 6d:c0:25:73:7e:5f:d2:ed:4f:e3:49:94:4b:0e:bf:a6:89:d8: 6b:88:60:ce:4b:7e:8e:40:b9:10:39:58:68:54:5c:7a:29:85: dd:c2:7e:4f:0e:f8:48:7e:44:fd:28:b1:53:fc:50:53:f2:32: a5:0c:14:95:ac:24:bf:e8:da:52:4d:a2:4d:df:36:dd:c9:2b: 18:35:eb:53:69:10:49:56:35:0b:7e:eb:7b:92:0d:d0:5d:26: 5f:7e:0d:d3:87:61:d4:6e:e2:6c:7d:b9:6c:07:a9:31:53:29: f0:f9:73:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1fL7Du3hWj1NF2gNluUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njg4ZTJkZTU5OGQ0YWM3YWQyZmM1MzgzMTYyNTFiOGIwMzA2M2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v9yoPAWvp9nppxkrfhDdzqTGc/O xLRB1GOs/1090WqqwaEUdfZhpi81jZned4tHfBcdPRNtQ69e3VHtu+l308nvvRoa qEED4YPvwbtVsAl8p3Q+lqseneV7eQrgANm1iUZ4nzvJCnH7alUQz1Q7aAkXFLMb 9hrTP5fM3nJ//ZUgLGzZ645yHo2Sxky3Y75EpdiOVgIwXnLQOp6sHVe7dYVS0GpY SIY1lEk0UviCLZuJ2Stki4N0hhXXxhxGqSz2n3ojIVs+mqXILBWFLRBiNRpz9dqQ R6noPMrm3+1/tyQnp8brXMTLpzRK9hl3M/9c/4ah97gWOwJbfGeQTK9B2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaI4t5ZjUrHrS/FODFiUbiwMGPvMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbG9qaTNsbU5Tc2V0TDhVNE1XSlJ1TEF3WS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpxoMA0G CSqGSIb3DQEBCwUAA4IBAQCp4FunzHgjDXs7SXxoZdX8CvlKQpxyY22ORAyGlwYa aVp50ys2Vijq4RUyc/TXc2Mi4SU3bCN9zfX626OTU6MRikN87aTNkMkKYwlobstm BKH7e2ZrhvyGLxBcY5anci5Em1ctvWEz+5y3b3j23/CQOBhuY2JcyIE2RHpAwIKn XtrMkxavJFblMgna6JlfwWxtwCVzfl/S7U/jSZRLDr+midhriGDOS36OQLkQOVho VFx6KYXdwn5PDvhIfkT9KLFT/FBT8jKlDBSVrCS/6NpSTaJN3zbdySsYNetTaRBJ VjULfut7kg3QXSZffg3Th2HUbuJsfblsB6kxUynw+XO5 -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:33 2026 by rpki-client