This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LRJOH1XAYORI27y4uJx_6K4rxvI.roa File: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (raw, json) Hash identifier: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc= Subject key identifier: 2D:12:4E:1F:55:C0:60:E4:48:DB:BC:B8:B8:9C:7F:E8:AE:2B:C6:F2 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC94162820C59A022E61C43637171AE Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LRJOH1XAYORI27y4uJx_6K4rxvI.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 2a04:5b81:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:41:62:82:0c:59:a0:22:e6:1c:43:63:71:71:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d124e1f55c060e448dbbcb8b89c7fe8ae2bc6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:f8:ab:f6:3e:e8:fd:c1:7f:22:79:2c:57: 66:d6:12:70:5b:76:1f:fb:08:43:55:58:fe:99:ff: fb:5d:1f:a8:2e:95:c2:bd:ee:0d:1f:d6:b2:8a:87: 32:ba:c1:b8:2a:c1:2d:25:e3:d7:ea:5b:40:a5:dc: 07:5e:70:d5:b8:09:18:52:88:1b:f4:17:4e:8e:e7: 4d:50:fe:29:97:ec:69:9d:39:41:37:36:c4:04:5a: d6:44:25:1a:36:d9:cb:de:ba:9a:b2:c2:d4:11:f9: b4:bf:c0:70:85:53:75:53:b3:14:d6:25:b3:f5:17: f5:5d:6c:4d:c9:ad:97:59:37:df:bc:7b:ef:40:da: be:b7:01:b1:87:9b:a3:48:5e:41:2c:98:92:9b:50: d6:d1:ca:cb:84:63:0e:58:52:2c:86:87:52:13:48: 92:17:59:c7:18:8d:e6:a7:61:45:b8:be:1b:35:2b: 0c:9b:10:c3:e5:03:19:25:63:87:59:7c:4b:29:a3: 5a:d7:61:eb:a9:91:87:e9:24:5c:ad:7a:58:ba:fa: 17:21:5f:08:ff:e4:77:1d:e2:d7:29:4f:7f:d0:63: 0c:d7:8d:24:78:a2:19:d7:f8:fd:bb:07:a8:8b:13: 60:7f:cd:fe:08:35:46:ca:23:a7:0a:dc:4a:ec:69: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:12:4E:1F:55:C0:60:E4:48:DB:BC:B8:B8:9C:7F:E8:AE:2B:C6:F2 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LRJOH1XAYORI27y4uJx_6K4rxvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:2000::/48 Signature Algorithm: sha256WithRSAEncryption b6:e3:e2:51:2b:3d:a9:ae:94:a1:25:dc:a2:54:43:cb:de:20: 48:a4:4e:9e:a8:81:c7:16:9e:cb:ab:b1:24:b1:a2:7b:21:29: 8c:e1:05:24:0f:c7:79:ed:de:33:71:b9:9f:09:b5:11:51:fc: 18:66:3d:05:09:78:03:07:db:91:bb:67:91:eb:6c:3a:06:04: dd:f6:dd:bf:b8:69:fc:b9:f7:12:e2:5a:be:b4:9c:ec:c1:95: a8:f9:77:f1:c1:8a:ba:1a:bb:73:4a:27:87:d8:b5:8b:a3:e0: 78:77:69:cf:3d:ba:fa:1e:cd:02:66:0d:40:b1:70:dd:c4:7f: a8:8a:9a:63:b0:e6:7c:e5:c4:90:20:07:8e:62:16:ea:47:21: ee:0a:0a:bd:11:6d:b7:a2:29:8b:71:a1:f2:19:e6:60:f5:52: dd:17:2e:6a:28:f9:0b:f4:70:4d:e4:62:3f:63:45:ed:76:eb: d8:4a:2d:fc:5e:eb:59:52:41:c4:69:10:0b:24:82:2f:7e:f3: 7e:c0:c1:b8:25:44:ea:aa:d3:57:ab:06:2f:7e:10:e2:10:a7: 66:e3:46:2a:3d:05:d5:2d:3c:e6:34:7b:b8:36:dd:b2:79:32: 6d:f1:b4:ac:8e:9a:73:25:54:52:4f:d4:c2:a4:e0:34:6e:13: 44:d4:0e:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yUFiggxZoCLmHENjcXGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDEyNGUxZjU1YzA2MGU0NDhkYmJjYjhiODljN2ZlOGFlMmJjNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UL4q/Y+6P3BfyJ5LFdm1hJwW3Yf +whDVVj+mf/7XR+oLpXCve4NH9ayiocyusG4KsEtJePX6ltApdwHXnDVuAkYUogb 9BdOjudNUP4pl+xpnTlBNzbEBFrWRCUaNtnL3rqassLUEfm0v8BwhVN1U7MU1iWz 9Rf1XWxNya2XWTffvHvvQNq+twGxh5ujSF5BLJiSm1DW0crLhGMOWFIshodSE0iS F1nHGI3mp2FFuL4bNSsMmxDD5QMZJWOHWXxLKaNa12HrqZGH6SRcrXpYuvoXIV8I /+R3HeLXKU9/0GMM140keKIZ1/j9uweoixNgf83+CDVGyiOnCtxK7Gl9UwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC0STh9VwGDkSNu8uLicf+iuK8byMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvTFJKT0gxWEFZT1JJMjd5NHVKeF82SzRyeHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRbgSAA MA0GCSqGSIb3DQEBCwUAA4IBAQC24+JRKz2prpShJdyiVEPL3iBIpE6eqIHHFp7L q7EksaJ7ISmM4QUkD8d57d4zcbmfCbURUfwYZj0FCXgDB9uRu2eR62w6BgTd9t2/ uGn8ufcS4lq+tJzswZWo+XfxwYq6GrtzSieH2LWLo+B4d2nPPbr6Hs0CZg1AsXDd xH+oippjsOZ85cSQIAeOYhbqRyHuCgq9EW23oimLcaHyGeZg9VLdFy5qKPkL9HBN 5GI/Y0XtduvYSi38XutZUkHEaRALJIIvfvN+wMG4JUTqqtNXqwYvfhDiEKdm40Yq PQXVLTzmNHu4Nt2yeTJt8bSsjppzJVRST9TCpOA0bhNE1A6w -----END CERTIFICATE-----Generated at Fri Jan 2 21:09:58 2026 by rpki-client