This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/lj0kuQleiOMB3rKlACYLbLp19W4.roa File: lj0kuQleiOMB3rKlACYLbLp19W4.roa (raw, json) Hash identifier: lQAgV/D7oQZzR3Kau4+V4PUVXXhPKhI9zN5kUO6UioM= Subject key identifier: 96:3D:24:B9:09:5E:88:E3:01:DE:B2:A5:00:26:0B:6C:BA:75:F5:6E Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26 Certificate serial: 019B7834312D1AEEAF17108122F039BF3FD1 Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/lj0kuQleiOMB3rKlACYLbLp19W4.roa Signing time: Thu 01 Jan 2026 06:17:24 +0000 ROA not before: Thu 01 Jan 2026 06:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209707 IP address blocks: 91.132.76.0/22 maxlen: 22 2a09:c180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:31:2d:1a:ee:af:17:10:81:22:f0:39:bf:3f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=963d24b9095e88e301deb2a500260b6cba75f56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:b0:04:38:b6:fd:95:52:b6:ec:ea:9e:ab: c2:35:09:65:7a:84:48:df:3a:40:4c:17:6a:1b:a7: 00:02:e1:32:ba:f7:61:81:6e:2a:fc:ac:ee:08:14: 89:e6:23:9c:bd:8d:b8:ce:a9:48:68:ac:f8:65:99: a9:c4:11:9f:a7:cf:88:8c:44:ba:0b:ba:39:ec:66: d1:69:1e:30:23:3e:a3:75:d7:99:a1:d1:ce:5f:8a: 17:92:b8:b3:17:a3:07:cd:fc:29:af:7c:4b:fa:51: 64:71:30:6a:5a:22:a3:27:72:ba:bd:de:9e:28:3b: 01:ef:1c:05:be:1a:98:b1:4c:36:a9:ff:eb:67:7a: b1:45:6e:41:8b:c3:fe:96:25:1b:06:97:1f:02:d2: 80:47:93:9a:62:26:54:8f:b6:64:b4:26:0c:39:eb: 66:fe:66:46:83:4c:a4:4b:bf:05:4b:18:d6:bb:98: 55:b2:16:79:ae:d1:b8:91:54:25:ee:57:26:01:00: 94:ef:3b:7e:2a:ab:c8:4f:99:db:3d:a5:19:a9:07: e8:94:da:9f:4e:33:c8:44:99:46:1c:32:9b:f0:13: 56:31:4d:6d:20:5f:26:21:a8:ef:fc:67:3d:e2:f6: aa:00:36:b2:b3:8c:cd:78:49:f9:4a:65:b4:77:6b: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:24:B9:09:5E:88:E3:01:DE:B2:A5:00:26:0B:6C:BA:75:F5:6E X509v3 Authority Key Identifier: keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/lj0kuQleiOMB3rKlACYLbLp19W4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.76.0/22 IPv6: 2a09:c180::/29 Signature Algorithm: sha256WithRSAEncryption 78:a4:8d:0c:14:ad:9f:d7:62:b8:f2:c6:59:54:35:eb:06:96: 8d:d4:43:74:6f:ba:cb:e3:3a:0a:7f:f0:47:a1:6c:36:3d:b8: 76:23:8a:98:c8:81:90:5e:c9:15:f2:3c:fc:c9:dc:84:95:5f: 63:5d:90:fd:00:41:c9:e2:24:a9:35:f0:9c:8f:b9:e3:86:f7: 45:6c:67:2a:51:26:83:90:16:28:69:c4:c7:5f:f5:b3:56:ba: 0a:ce:49:5c:cb:a6:f1:73:5b:f0:38:7f:f5:e4:4a:ef:d2:b2: 05:7c:47:a4:71:86:de:0b:20:e2:e3:2e:50:ef:d4:6e:fe:a7: bb:3e:24:21:83:46:6f:34:7a:c8:d2:11:e2:49:0f:9c:16:e4: f1:c8:8a:eb:de:87:28:38:32:53:93:23:8f:50:c4:a7:12:29: 98:e6:fb:6c:2e:36:6f:63:56:41:d7:4d:5a:48:31:c8:0f:c7: 45:2f:68:ef:cf:64:3a:23:43:71:14:83:93:84:05:2a:c9:a8: a7:53:c7:45:85:48:c6:0d:2c:3f:64:42:58:79:fa:37:59:89: 82:47:dc:78:33:80:b8:c4:d1:57:1a:10:cf:57:7d:93:8b:29: f8:cc:08:1a:5d:cc:5e:79:9f:7d:e6:0c:78:30:e3:8a:1c:2a: 88:ab:30:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NDEtGu6vFxCBIvA5vz/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODczMTkxNzE3MGM0YjgxYmVlMzUxZDA0NTVjMzJjYmFk NjNiMjYwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjNkMjRiOTA5NWU4OGUzMDFkZWIyYTUwMDI2MGI2Y2JhNzVmNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoawBDi2/ZVStuzqnqvCNQlleoRI 3zpATBdqG6cAAuEyuvdhgW4q/KzuCBSJ5iOcvY24zqlIaKz4ZZmpxBGfp8+IjES6 C7o57GbRaR4wIz6jddeZodHOX4oXkrizF6MHzfwpr3xL+lFkcTBqWiKjJ3K6vd6e KDsB7xwFvhqYsUw2qf/rZ3qxRW5Bi8P+liUbBpcfAtKAR5OaYiZUj7ZktCYMOetm /mZGg0ykS78FSxjWu5hVshZ5rtG4kVQl7lcmAQCU7zt+KqvIT5nbPaUZqQfolNqf TjPIRJlGHDKb8BNWMU1tIF8mIajv/Gc94vaqADays4zNeEn5SmW0d2uRxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJY9JLkJXojjAd6ypQAmC2y6dfVuMB8GA1UdIwQY MBaAFBaHMZFxcMS4G+41HQRVwyy61jsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUt YjJkNDY2Njk3YWM0LzEvbGowa3VRbGVpT01CM3JLbEFDWUxiTHAxOVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUtYjJkNDY2Njk3YWM0 LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW4RMMA0E AgACMAcDBQMqCcGAMA0GCSqGSIb3DQEBCwUAA4IBAQB4pI0MFK2f12K48sZZVDXr BpaN1EN0b7rL4zoKf/BHoWw2Pbh2I4qYyIGQXskV8jz8ydyElV9jXZD9AEHJ4iSp NfCcj7njhvdFbGcqUSaDkBYoacTHX/WzVroKzklcy6bxc1vwOH/15Erv0rIFfEek cYbeCyDi4y5Q79Ru/qe7PiQhg0ZvNHrI0hHiSQ+cFuTxyIrr3ocoODJTkyOPUMSn EimY5vtsLjZvY1ZB101aSDHID8dFL2jvz2Q6I0NxFIOThAUqyainU8dFhUjGDSw/ ZEJYefo3WYmCR9x4M4C4xNFXGhDPV32Tiyn4zAgaXcxeeZ995gx4MOOKHCqIqzAd -----END CERTIFICATE-----Generated at Tue Feb 3 02:23:29 2026 by rpki-client