This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa File: LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa (raw, json) Hash identifier: sFqRolKm0Znj/M6WIHuOprIWndPgzew2UV2ZOuaE3Bo= Subject key identifier: 2C:28:A2:8B:23:65:DD:F9:A2:4E:ED:A1:A9:0E:9F:04:9F:93:4D:B5 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 019B7F83FB4A782E54F904688FBA3B7612DD Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa Signing time: Fri 02 Jan 2026 16:21:54 +0000 ROA not before: Fri 02 Jan 2026 16:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 37.221.64.0/22 maxlen: 24 37.221.65.0/24 maxlen: 24 45.86.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fb:4a:78:2e:54:f9:04:68:8f:ba:3b:76:12:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Jan 2 16:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c28a28b2365ddf9a24eeda1a90e9f049f934db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:a3:e0:4f:d4:10:3a:8c:38:5c:fb:f0:b5: 11:c5:95:67:b1:06:d3:9c:e2:b1:ed:57:eb:bb:cb: 84:a1:a7:2a:48:5c:84:71:f9:cc:a5:4e:89:8e:67: cb:da:5a:42:89:2a:b4:a8:d4:1c:1a:25:c6:5d:c5: e8:f8:f3:d8:77:a0:ac:d8:57:e3:b5:7a:1f:b7:5f: 92:8f:7a:e2:44:86:37:74:f1:71:44:a0:a1:38:30: 8a:3b:06:06:0c:0c:bd:c5:b6:d2:7e:0a:79:37:10: b8:15:84:bf:84:d9:93:0b:c5:f5:04:87:d5:d0:49: 62:3c:29:97:f8:65:57:eb:62:69:65:38:d3:02:d2: 13:20:96:a2:73:44:31:e3:79:35:26:42:de:a4:34: 98:5b:ca:97:87:3c:1a:9f:38:34:44:b3:2a:7c:19: f9:21:7a:5f:86:b0:d1:f0:c2:5c:07:7f:f4:27:f4: 53:68:27:6b:6a:44:e3:9b:de:1b:b9:65:78:c7:7a: 94:f9:df:67:f9:14:c3:0b:2f:bc:ec:1f:2e:6f:ae: 22:58:9b:00:87:91:9b:83:44:2a:15:f2:6a:04:a9: 2b:d5:83:fb:dd:4c:55:06:2f:a5:9f:53:d4:0e:f2: a8:f3:8e:68:e7:00:22:8e:8c:d4:72:83:50:0e:ee: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:28:A2:8B:23:65:DD:F9:A2:4E:ED:A1:A9:0E:9F:04:9F:93:4D:B5 X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.64.0/22 45.86.86.0/24 Signature Algorithm: sha256WithRSAEncryption 34:f0:14:bf:a1:63:a7:1a:56:29:18:ef:3f:80:d6:cb:eb:49: 6f:b6:97:3a:04:95:82:34:38:a6:83:06:af:b5:1e:4c:6f:63: ed:7e:74:95:1d:9f:d4:b3:5c:e2:0e:3f:63:6e:86:99:47:b2: 22:36:bc:2b:4a:6f:94:90:54:0c:3e:e4:4a:ae:f3:82:19:20: 07:c9:62:1c:10:4f:0b:d0:ba:9d:57:bd:aa:40:d6:8b:1a:7b: 48:f2:15:03:79:6b:ac:b1:b8:6e:c0:a5:e0:fc:df:d6:26:b1: 3d:1a:c5:e2:b0:79:72:52:c4:72:d4:c0:6c:3f:f0:3b:e6:df: 45:b2:1a:58:cf:95:14:6c:f9:bb:5d:12:37:dc:c3:31:7f:8c: 2e:7a:d6:eb:5e:ee:47:3f:c9:66:72:38:8a:50:f6:ea:f9:67: b1:32:8a:9c:21:0d:4b:32:cb:60:17:61:70:61:23:cb:61:43: 9c:ba:a2:16:8a:45:3a:df:9a:4f:58:93:cc:a0:7e:a0:c4:0b: ca:7d:37:25:79:b9:ec:53:51:9b:da:76:c7:2c:04:2e:97:d7: 00:a9:76:81:0a:4a:cd:40:f6:03:f5:e9:ec:65:66:06:92:4b: 05:a1:83:1f:b2:09:6d:35:b4:e2:a1:cc:9c:5c:7b:b7:af:eb: 2f:2f:28:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g/tKeC5U+QRoj7o7dhLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjYwMTAyMTYyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzI4YTI4YjIzNjVkZGY5YTI0ZWVkYTFhOTBlOWYwNDlmOTM0ZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzKj4E/UEDqMOFz78LURxZVnsQbT nOKx7Vfru8uEoacqSFyEcfnMpU6JjmfL2lpCiSq0qNQcGiXGXcXo+PPYd6Cs2Ffj tXoft1+Sj3riRIY3dPFxRKChODCKOwYGDAy9xbbSfgp5NxC4FYS/hNmTC8X1BIfV 0EliPCmX+GVX62JpZTjTAtITIJaic0Qx43k1JkLepDSYW8qXhzwanzg0RLMqfBn5 IXpfhrDR8MJcB3/0J/RTaCdrakTjm94buWV4x3qU+d9n+RTDCy+87B8ub64iWJsA h5Gbg0QqFfJqBKkr1YP73UxVBi+ln1PUDvKo845o5wAijozUcoNQDu7eKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCwooosjZd35ok7toakOnwSfk021MB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvTENpaWl5TmwzZm1pVHUyaHFRNmZCSi1UVGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJd1AAwQA LVZWMA0GCSqGSIb3DQEBCwUAA4IBAQA08BS/oWOnGlYpGO8/gNbL60lvtpc6BJWC NDimgwavtR5Mb2PtfnSVHZ/Us1ziDj9jboaZR7IiNrwrSm+UkFQMPuRKrvOCGSAH yWIcEE8L0LqdV72qQNaLGntI8hUDeWussbhuwKXg/N/WJrE9GsXisHlyUsRy1MBs P/A75t9FshpYz5UUbPm7XRI33MMxf4wuetbrXu5HP8lmcjiKUPbq+WexMoqcIQ1L MstgF2FwYSPLYUOcuqIWikU635pPWJPMoH6gxAvKfTclebnsU1Gb2nbHLAQul9cA qXaBCkrNQPYD9ensZWYGkksFoYMfsgltNbTiocycXHu3r+svLyjN -----END CERTIFICATE-----Generated at Tue Jan 20 00:55:58 2026 by rpki-client