This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ljiBg-i1Q7ymdtWGqEl4Sh5hDkI.roa File: ljiBg-i1Q7ymdtWGqEl4Sh5hDkI.roa (raw, json) Hash identifier: z3eFjcw0/G716V7TrPsYTyJPBi3b8bMbGisWMgPljB8= Subject key identifier: 96:38:81:83:E8:B5:43:BC:A6:76:D5:86:A8:49:78:4A:1E:61:0E:42 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9AE49AADDFDD8B3AE31F121A5289 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ljiBg-i1Q7ymdtWGqEl4Sh5hDkI.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8987 IP address blocks: 2a0e:aa07:f0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9a:e4:9a:ad:df:dd:8b:3a:e3:1f:12:1a:52:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96388183e8b543bca676d586a849784a1e610e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:86:a9:62:74:0e:07:9d:6a:18:8c:d3:b6: 40:8d:39:fc:4f:da:9a:18:98:c0:c6:1e:e4:4f:c6: a6:69:3c:ca:05:e9:61:dc:63:c9:0b:e2:7a:f1:1b: 59:82:c4:49:56:c3:bc:9e:76:5a:eb:67:be:93:1d: cf:fc:b9:3b:21:dc:72:9e:c2:0c:33:22:b4:50:44: 7e:88:57:78:33:d0:f1:f0:35:34:53:bf:64:ec:ce: 74:bd:76:67:30:f5:11:7b:ac:b1:64:2f:15:2f:ba: 26:6b:53:8a:35:89:15:eb:e6:23:f2:85:43:a0:73: cd:4e:64:71:5e:6e:b7:15:19:66:d8:b2:3f:13:b5: 26:19:a0:6b:70:49:ce:85:b9:46:bf:6f:be:7e:dc: a5:99:6d:c5:c2:13:a6:1c:9b:84:ad:69:a7:af:68: c7:a8:33:15:30:67:2a:34:d6:8f:c4:05:4d:98:e4: 6b:62:ef:c8:34:4b:5d:e2:78:27:c3:f7:2a:df:4b: 12:c8:4b:db:14:81:03:3b:82:fe:15:4c:5f:fa:c1: 15:d6:41:87:cc:3f:ed:54:54:2f:c4:95:93:f5:f3: 3d:1d:53:91:78:09:8b:08:b2:50:ff:ba:78:ef:ca: dd:45:fe:1f:44:bb:ee:c8:00:0a:84:5c:4b:77:ba: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:38:81:83:E8:B5:43:BC:A6:76:D5:86:A8:49:78:4A:1E:61:0E:42 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ljiBg-i1Q7ymdtWGqEl4Sh5hDkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:f0d0::/44 Signature Algorithm: sha256WithRSAEncryption c4:2e:b9:5d:ad:28:f7:68:53:52:f4:6e:8b:cb:3d:ad:ae:ec: 0f:5c:54:23:e9:0f:04:9a:f4:34:cb:2d:d1:5d:e0:1c:be:9a: c9:1f:b8:f5:2f:7f:f3:dc:b9:85:51:54:9f:99:6f:2c:2c:16: 97:fb:47:9f:54:0f:60:f5:6d:9a:a2:81:10:5d:ff:c1:39:37: 44:a4:b2:10:28:03:ac:25:0a:7a:3d:5c:96:06:26:05:59:e9: ee:7f:0b:54:67:f7:ce:83:8b:ed:b2:8d:c6:b1:63:c2:ce:95: f4:dd:eb:f3:1f:89:f6:76:e8:6c:54:85:a1:79:5d:7a:a2:b4: a7:6b:42:fa:5e:b0:c1:11:80:0d:f4:65:64:8d:de:2b:7a:3e: c7:11:1e:c5:2c:5d:11:7e:aa:e1:54:b0:2a:3b:bb:c5:5c:46: 05:bb:e8:44:ba:e5:b5:98:3e:d0:20:0c:f8:ce:fa:b1:ce:ec: 99:6e:d7:10:4d:78:cd:15:6c:56:15:9f:5c:fe:18:47:ea:c9: df:b3:f1:17:e4:32:4a:1d:4b:84:8d:71:17:90:f6:f9:fe:80: cc:7d:18:dc:4f:47:b1:eb:8f:af:0d:0a:d7:95:df:a2:75:93: 52:23:85:6e:22:f6:a7:ef:40:b3:0e:db:ca:5a:e0:76:89:b6: 67:e2:0d:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fprkmq3f3Ys64x8SGlKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjM4ODE4M2U4YjU0M2JjYTY3NmQ1ODZhODQ5Nzg0YTFlNjEwZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/eGqWJ0DgedahiM07ZAjTn8T9qa GJjAxh7kT8amaTzKBelh3GPJC+J68RtZgsRJVsO8nnZa62e+kx3P/Lk7IdxynsIM MyK0UER+iFd4M9Dx8DU0U79k7M50vXZnMPURe6yxZC8VL7oma1OKNYkV6+Yj8oVD oHPNTmRxXm63FRlm2LI/E7UmGaBrcEnOhblGv2++ftylmW3FwhOmHJuErWmnr2jH qDMVMGcqNNaPxAVNmORrYu/INEtd4ngnw/cq30sSyEvbFIEDO4L+FUxf+sEV1kGH zD/tVFQvxJWT9fM9HVOReAmLCLJQ/7p478rdRf4fRLvuyAAKhFxLd7odcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJY4gYPotUO8pnbVhqhJeEoeYQ5CMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvbGppQmctaTFRN3ltZHRXR3FFbDRTaDVoRGtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB/DQ MA0GCSqGSIb3DQEBCwUAA4IBAQDELrldrSj3aFNS9G6Lyz2truwPXFQj6Q8EmvQ0 yy3RXeAcvprJH7j1L3/z3LmFUVSfmW8sLBaX+0efVA9g9W2aooEQXf/BOTdEpLIQ KAOsJQp6PVyWBiYFWenufwtUZ/fOg4vtso3GsWPCzpX03evzH4n2duhsVIWheV16 orSna0L6XrDBEYAN9GVkjd4rej7HER7FLF0RfqrhVLAqO7vFXEYFu+hEuuW1mD7Q IAz4zvqxzuyZbtcQTXjNFWxWFZ9c/hhH6snfs/EX5DJKHUuEjXEXkPb5/oDMfRjc T0ex64+vDQrXld+idZNSI4VuIvan70CzDtvKWuB2ibZn4g20 -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client