This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Ljk83VCvMFaaB88IfYzmXG7UKBY.roa File: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (raw, json) Hash identifier: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE= Subject key identifier: 2E:39:3C:DD:50:AF:30:56:9A:07:CF:08:7D:8C:E6:5C:6E:D4:28:16 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B7D5C85CC3BEA1736530923835F7F08A3 Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Ljk83VCvMFaaB88IfYzmXG7UKBY.roa Signing time: Fri 02 Jan 2026 06:19:34 +0000 ROA not before: Fri 02 Jan 2026 06:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62421 IP address blocks: 193.33.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:85:cc:3b:ea:17:36:53:09:23:83:5f:7f:08:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e393cdd50af30569a07cf087d8ce65c6ed42816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:52:3b:9c:2a:cb:6a:32:bc:b5:da:81:f5: 98:a2:ca:6f:8d:0c:57:c3:3b:94:7f:5f:d8:bf:79: f9:7b:d3:b7:5e:86:7f:70:21:19:4a:e0:79:27:8c: f1:7f:4e:07:5e:96:36:96:30:c0:a2:33:c7:4e:e1: 31:5b:c9:4b:73:f0:5b:bd:e2:b7:68:79:6c:fc:46: c1:9d:8e:cc:dc:42:1b:61:f1:ca:d3:d3:f7:30:24: 86:43:fb:62:4a:10:45:7e:21:cd:e7:c5:f5:69:80: ec:a0:0d:27:c5:15:e7:27:f2:eb:6d:b3:36:1f:da: db:4f:37:0d:d0:74:73:88:be:25:8d:ea:9e:45:d0: 04:0e:68:f8:da:da:71:02:27:4c:e8:b3:ac:c3:5a: b4:e0:97:ab:99:58:cb:84:02:b9:68:fa:6d:68:5f: 52:12:65:49:f3:04:7c:97:b1:ce:19:00:36:69:2c: 49:09:52:7c:b6:ce:bc:a8:8b:63:81:0e:cf:4a:c4: 8e:77:2b:c6:a2:d1:1f:48:b9:da:9b:ff:e1:cb:07: 7c:58:6e:b5:94:37:f0:58:64:5e:8c:d5:b8:49:e9: 1f:74:36:50:18:d2:80:ac:e6:b8:2d:9e:9c:3e:84: 03:b4:58:81:32:17:e0:83:56:94:a0:e9:f6:02:bc: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:39:3C:DD:50:AF:30:56:9A:07:CF:08:7D:8C:E6:5C:6E:D4:28:16 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Ljk83VCvMFaaB88IfYzmXG7UKBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.4.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:1d:60:89:10:48:58:0c:5f:94:b3:61:ae:af:79:13:49:2d: 6c:65:0c:77:ea:1f:62:2d:1b:03:2c:47:72:d8:81:8e:e2:63: 99:d5:05:ac:ab:39:0c:ae:b4:6c:7d:a0:34:04:51:cf:65:4f: 15:ab:99:d0:09:93:30:ea:ea:46:ca:6c:aa:ad:80:50:f0:58: 26:ce:b4:c6:0e:32:a5:c3:bf:ad:7a:38:28:44:fb:6c:01:f1: 74:c7:5f:15:80:35:87:88:21:50:4c:2a:80:62:b6:a6:66:7f: 58:f4:61:1c:dc:11:56:44:5c:b5:8b:d7:43:ba:44:2b:dc:bd: 02:58:5b:d7:d5:ba:24:4a:1d:11:b4:82:c0:88:c4:a6:29:b4: 89:5c:87:da:f2:9b:ce:c4:cb:aa:27:6f:4c:9c:4d:8b:d1:e3: ea:7b:9c:b5:0d:12:02:6a:ba:f0:3b:34:95:36:eb:97:aa:71: 85:55:e6:d2:b3:6d:56:2c:8d:6f:7c:13:41:20:75:65:40:33: 30:ec:58:9a:2a:42:47:f5:c0:71:ca:34:d4:67:ff:df:1d:0d: c4:fe:c7:16:9f:9f:e2:fc:21:42:b3:a2:b0:18:5e:87:31:6e: da:d4:88:34:61:2a:f2:77:1c:81:4e:3b:45:86:70:be:35:79: bd:1a:57:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XIXMO+oXNlMJI4NffwijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTM5M2NkZDUwYWYzMDU2OWEwN2NmMDg3ZDhjZTY1YzZlZDQyODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmVSO5wqy2oyvLXagfWYospvjQxX wzuUf1/Yv3n5e9O3XoZ/cCEZSuB5J4zxf04HXpY2ljDAojPHTuExW8lLc/BbveK3 aHls/EbBnY7M3EIbYfHK09P3MCSGQ/tiShBFfiHN58X1aYDsoA0nxRXnJ/LrbbM2 H9rbTzcN0HRziL4ljeqeRdAEDmj42tpxAidM6LOsw1q04JermVjLhAK5aPptaF9S EmVJ8wR8l7HOGQA2aSxJCVJ8ts68qItjgQ7PSsSOdyvGotEfSLnam//hywd8WG61 lDfwWGRejNW4SekfdDZQGNKArOa4LZ6cPoQDtFiBMhfgg1aUoOn2ArwExQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC45PN1QrzBWmgfPCH2M5lxu1CgWMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvTGprODNWQ3ZNRmFhQjg4SWZZem1YRzdVS0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSEEMA0G CSqGSIb3DQEBCwUAA4IBAQCfHWCJEEhYDF+Us2Gur3kTSS1sZQx36h9iLRsDLEdy 2IGO4mOZ1QWsqzkMrrRsfaA0BFHPZU8Vq5nQCZMw6upGymyqrYBQ8FgmzrTGDjKl w7+tejgoRPtsAfF0x18VgDWHiCFQTCqAYramZn9Y9GEc3BFWRFy1i9dDukQr3L0C WFvX1bokSh0RtILAiMSmKbSJXIfa8pvOxMuqJ29MnE2L0ePqe5y1DRICarrwOzSV NuuXqnGFVebSs21WLI1vfBNBIHVlQDMw7FiaKkJH9cBxyjTUZ//fHQ3E/scWn5/i /CFCs6KwGF6HMW7a1Ig0YSrydxyBTjtFhnC+NXm9Gldr -----END CERTIFICATE-----Generated at Sat Jan 3 18:31:41 2026 by rpki-client