This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LAOjiliw905xAx7igPNLN7aHfJ4.roa File: LAOjiliw905xAx7igPNLN7aHfJ4.roa (raw, json) Hash identifier: hUAQeh5fs6lQZSPiVdtF+Mmt5TZ/YZWi01UrqTgdHKs= Subject key identifier: 2C:03:A3:8A:58:B0:F7:4E:71:03:1E:E2:80:F3:4B:37:B6:87:7C:9E Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E75EF3AF6810F27C468107D8F3871 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LAOjiliw905xAx7igPNLN7aHfJ4.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 109.122.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:75:ef:3a:f6:81:0f:27:c4:68:10:7d:8f:38:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c03a38a58b0f74e71031ee280f34b37b6877c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:77:f4:f5:42:9d:d4:2a:79:24:b4:54:24: 64:0a:91:ba:b7:46:07:a8:e3:6a:fb:7e:dd:38:a0: 25:82:57:97:4e:71:8a:31:34:e2:c8:db:38:19:15: ae:be:76:50:7c:ae:6f:76:09:85:98:04:70:f1:89: ef:c4:2b:93:57:62:be:cc:54:a5:03:73:31:e6:44: 0c:bf:7e:cc:d4:17:dd:e2:86:2f:64:2d:09:06:1b: c9:12:3e:17:9e:a2:25:74:2d:76:86:7c:c4:cb:27: ad:b0:9e:73:00:53:5b:d2:a9:37:6e:22:f7:41:c0: 76:37:91:4a:4d:94:a9:10:f1:79:06:99:da:80:46: 16:1b:ea:63:37:6e:6a:7f:8f:e7:53:8b:4d:5a:ec: 45:b3:4c:44:70:d6:04:4a:8a:11:01:d8:05:3f:b0: db:b4:74:e7:ce:47:3c:f3:49:b3:10:c8:57:e4:a8: 0d:4b:a5:ea:b1:8f:31:06:98:a4:e7:bc:7a:08:fc: b9:0c:db:8b:c6:e6:d7:ee:2d:67:da:68:8e:c9:f4: 99:7e:9d:86:e9:2b:5c:5d:4f:17:b1:66:54:82:1e: ad:a6:0e:ac:d4:e3:b5:75:b4:3f:85:ee:10:99:08: 9e:c5:de:46:f2:49:b6:83:be:a7:e4:95:5f:c7:71: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:A3:8A:58:B0:F7:4E:71:03:1E:E2:80:F3:4B:37:B6:87:7C:9E X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LAOjiliw905xAx7igPNLN7aHfJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.47.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d8:d7:63:5c:50:90:16:a3:bb:8f:46:27:36:48:75:b2:5f: 86:f9:67:c6:e7:5f:95:00:b6:72:5a:dc:5d:1f:1b:0f:fa:60: 60:12:6f:d8:ea:a1:60:39:ad:af:60:97:4d:49:06:a0:19:3c: 01:61:a0:36:8f:ed:9f:1d:6f:b4:e0:0f:70:6e:40:09:cf:9b: 26:ac:f6:40:5b:93:ed:ed:5c:aa:95:5d:08:23:4e:1c:0d:5f: 46:2d:df:e7:ec:55:7d:0c:23:2c:2a:19:9b:5b:f9:34:8b:bf: da:36:ea:e9:14:fd:c9:f2:f1:e7:9b:20:95:49:ea:62:b7:78: 1a:f9:85:be:48:c4:94:2a:4c:49:76:be:76:7d:b7:b2:ab:38: 37:ae:11:75:a3:1b:12:4f:0c:f9:02:1e:cd:6c:ec:3f:69:15: ab:a3:71:fb:a1:30:21:8a:3c:16:d0:02:28:1d:3b:f2:ff:93: df:1e:e7:25:c7:1b:71:77:4f:f8:c0:9b:59:68:91:f6:7c:45: 10:61:aa:85:55:2d:6e:18:4c:c3:12:0e:04:b1:ae:f9:f8:d4: e4:3c:b5:ff:cd:ee:f9:84:3b:33:47:90:f4:88:e8:7f:38:80: bd:80:ca:c8:06:cb:64:b9:dc:8f:9a:51:e3:92:49:52:45:3b: 15:7a:d5:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnXvOvaBDyfEaBB9jzhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzAzYTM4YTU4YjBmNzRlNzEwMzFlZTI4MGYzNGIzN2I2ODc3YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0139PVCndQqeSS0VCRkCpG6t0YH qONq+37dOKAlgleXTnGKMTTiyNs4GRWuvnZQfK5vdgmFmARw8YnvxCuTV2K+zFSl A3Mx5kQMv37M1Bfd4oYvZC0JBhvJEj4XnqIldC12hnzEyyetsJ5zAFNb0qk3biL3 QcB2N5FKTZSpEPF5BpnagEYWG+pjN25qf4/nU4tNWuxFs0xEcNYESooRAdgFP7Db tHTnzkc880mzEMhX5KgNS6XqsY8xBpik57x6CPy5DNuLxubX7i1n2miOyfSZfp2G 6StcXU8XsWZUgh6tpg6s1OO1dbQ/he4QmQiexd5G8km2g76n5JVfx3GZ2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwDo4pYsPdOcQMe4oDzSze2h3yeMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvTEFPamlsaXc5MDV4QXg3aWdQTkxON2FIZko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXovMA0G CSqGSIb3DQEBCwUAA4IBAQAK2NdjXFCQFqO7j0YnNkh1sl+G+WfG51+VALZyWtxd HxsP+mBgEm/Y6qFgOa2vYJdNSQagGTwBYaA2j+2fHW+04A9wbkAJz5smrPZAW5Pt 7VyqlV0II04cDV9GLd/n7FV9DCMsKhmbW/k0i7/aNurpFP3J8vHnmyCVSepit3ga +YW+SMSUKkxJdr52fbeyqzg3rhF1oxsSTwz5Ah7NbOw/aRWro3H7oTAhijwW0AIo HTvy/5PfHuclxxtxd0/4wJtZaJH2fEUQYaqFVS1uGEzDEg4Esa75+NTkPLX/ze75 hDszR5D0iOh/OIC9gMrIBstkudyPmlHjkklSRTsVetVY -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:27 2026 by rpki-client