This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/JlmLPl8yZYajDEDYFJIxQblUllA.roa File: JlmLPl8yZYajDEDYFJIxQblUllA.roa (raw, json) Hash identifier: OZunBJk4QSRLEbPmLCf0a9buRk1XuEa/uVL88IZWWcY= Subject key identifier: 26:59:8B:3E:5F:32:65:86:A3:0C:40:D8:14:92:31:41:B9:54:96:50 Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624 Certificate serial: 019B7E37EE3E3B1C4BB44A3A175C418FC0BC Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/JlmLPl8yZYajDEDYFJIxQblUllA.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29555 IP address blocks: 81.91.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ee:3e:3b:1c:4b:b4:4a:3a:17:5c:41:8f:c0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26598b3e5f326586a30c40d814923141b9549650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fe:4b:f6:e1:00:58:e7:a5:f3:e1:85:ce:9f: 0a:4a:3d:7c:69:b8:c6:50:26:47:4c:70:50:91:75: c8:51:9d:3b:40:e6:92:12:4a:ab:24:e0:e1:aa:5e: 94:06:28:37:77:06:9f:17:24:1a:6c:16:e2:29:33: 14:8e:cc:e5:59:ad:1e:25:99:09:83:9f:a8:aa:c7: 97:ca:48:27:5a:5e:37:fb:77:6a:6b:33:a6:66:4b: e2:98:e2:06:39:61:ac:75:8d:45:4c:0f:e0:48:b9: 18:83:64:02:01:b6:1b:4a:45:30:fa:3d:56:56:82: f2:79:2b:6e:fc:7a:b0:8b:85:75:85:05:85:dd:66: 4e:48:39:a7:8b:b1:db:56:a5:c8:05:f0:28:21:1c: 00:09:10:39:f5:53:be:d0:17:f6:4f:e9:67:de:82: 01:b0:f7:6c:ab:56:2c:8e:55:ba:47:b2:0c:19:55: 16:03:f8:79:e2:77:9f:8a:1f:04:c5:f1:80:ac:db: f7:e9:38:b6:4e:d9:1f:b3:51:c5:89:2f:fc:0d:6c: 24:b2:40:0c:dd:0b:07:8c:94:fe:8e:b4:c8:e3:98: 08:32:f6:60:dd:85:85:df:45:1e:97:7d:78:3c:dc: a7:0c:7e:fa:24:52:28:8d:58:7e:fa:77:8f:6c:68: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:59:8B:3E:5F:32:65:86:A3:0C:40:D8:14:92:31:41:B9:54:96:50 X509v3 Authority Key Identifier: keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/JlmLPl8yZYajDEDYFJIxQblUllA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.188.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d7:f7:ce:2b:60:36:32:b0:53:cc:05:ac:ab:0e:12:0a:13: 76:1f:de:d2:6a:27:c2:99:a8:74:46:84:30:d0:43:e8:58:e1: 11:0c:ca:69:0b:65:54:be:29:75:b0:a1:78:1c:ed:ff:24:e6: 4e:09:0a:1c:91:5c:26:d5:29:14:8e:31:8a:91:2a:e8:73:e7: c9:68:ff:64:6c:91:c5:c9:0d:17:8b:a0:07:68:a5:60:d9:88: bf:4e:55:6a:12:6d:cb:4b:f3:78:26:2e:50:8b:a4:89:31:5a: e8:90:b8:dc:63:77:78:2c:56:03:71:6d:cc:5e:aa:b7:a2:72: 0c:1e:ae:96:2c:0c:65:b7:64:d4:5a:79:5b:13:a4:0e:93:2e: a9:07:44:36:1a:ea:47:47:99:c2:d5:34:59:f3:e2:5f:8d:8f: d6:2e:33:94:b7:16:2f:0a:67:8b:62:43:d4:33:f9:32:0d:78: 4d:5a:1c:4b:55:0b:a4:fe:f6:31:97:1e:50:7f:86:c5:3e:bf: d7:ca:02:33:59:a4:18:65:47:bc:7f:84:8c:8e:35:d0:31:0e: 02:c1:ed:db:d9:dd:b8:38:ee:5a:e6:14:1d:9a:c7:f3:4e:a2: d7:15:67:10:cd:35:65:f3:3d:e1:b0:87:ed:1f:3b:1a:6b:de: 59:33:19:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+4+OxxLtEo6F1xBj8C8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWRjMmJhNTk0MmUwNGZkZDhiYTk5NTE2YTFiOTNiMWU0 Zjk2MjQwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjU5OGIzZTVmMzI2NTg2YTMwYzQwZDgxNDkyMzE0MWI5NTQ5NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/5L9uEAWOel8+GFzp8KSj18abjG UCZHTHBQkXXIUZ07QOaSEkqrJODhql6UBig3dwafFyQabBbiKTMUjszlWa0eJZkJ g5+oqseXykgnWl43+3dqazOmZkvimOIGOWGsdY1FTA/gSLkYg2QCAbYbSkUw+j1W VoLyeStu/Hqwi4V1hQWF3WZOSDmni7HbVqXIBfAoIRwACRA59VO+0Bf2T+ln3oIB sPdsq1YsjlW6R7IMGVUWA/h54nefih8ExfGArNv36Ti2Ttkfs1HFiS/8DWwkskAM 3QsHjJT+jrTI45gIMvZg3YWF30Uel314PNynDH76JFIojVh++nePbGhKvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZZiz5fMmWGowxA2BSSMUG5VJZQMB8GA1UdIwQY MBaAFDpdwrpZQuBP3YuplRahuTseT5YkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGIt OWMxNWZiZDVlZTVlLzEvSmxtTFBsOHlaWWFqREVEWUZKSXhRYmxVbGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGItOWMxNWZiZDVlZTVl LzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVu8MA0G CSqGSIb3DQEBCwUAA4IBAQBx1/fOK2A2MrBTzAWsqw4SChN2H97SaifCmah0RoQw 0EPoWOERDMppC2VUvil1sKF4HO3/JOZOCQockVwm1SkUjjGKkSroc+fJaP9kbJHF yQ0Xi6AHaKVg2Yi/TlVqEm3LS/N4Ji5Qi6SJMVrokLjcY3d4LFYDcW3MXqq3onIM Hq6WLAxlt2TUWnlbE6QOky6pB0Q2GupHR5nC1TRZ8+JfjY/WLjOUtxYvCmeLYkPU M/kyDXhNWhxLVQuk/vYxlx5Qf4bFPr/XygIzWaQYZUe8f4SMjjXQMQ4Cwe3b2d24 OO5a5hQdmsfzTqLXFWcQzTVl8z3hsIftHzsaa95ZMxnB -----END CERTIFICATE-----Generated at Tue Jan 27 22:01:25 2026 by rpki-client