This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa File: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (raw, json) Hash identifier: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4= Subject key identifier: 2E:58:E0:FF:11:F5:29:31:32:17:C6:2D:42:91:43:85:4D:9F:AB:D3 Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0 Certificate serial: 019B7EA58B1E2141DBE9E7137DB749E4C4CA Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa Signing time: Fri 02 Jan 2026 12:18:56 +0000 ROA not before: Fri 02 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8365 IP address blocks: 130.83.0.0/16 maxlen: 16 193.23.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8b:1e:21:41:db:e9:e7:13:7d:b7:49:e4:c4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0 Validity Not Before: Jan 2 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e58e0ff11f529313217c62d429143854d9fabd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:52:6e:25:9d:35:83:6f:07:a7:04:01:a0: ea:5d:34:ec:95:97:7d:a9:43:bc:56:5f:0a:53:fa: 4b:1f:da:91:fe:f7:64:93:79:ca:5d:72:af:89:be: 7d:c4:a0:83:20:73:af:12:be:33:a5:cb:2a:9b:56: af:f4:98:86:f5:2c:40:3d:f3:b4:43:5f:01:3d:f1: 57:fa:ca:00:ad:c0:64:f8:30:5f:bd:95:fb:c9:1a: 81:d0:16:1d:00:45:c5:2e:b0:96:3f:8e:c2:3f:9e: 5a:98:a3:f3:50:7b:87:c7:a9:77:45:f8:c7:c9:61: c2:14:c9:29:4f:15:17:89:5e:e7:4e:98:e8:0e:ba: a2:a8:67:26:48:fc:bb:02:b5:71:28:50:b3:33:63: 21:f6:fc:9c:4e:b5:7b:a1:5b:de:f0:d5:67:f3:05: 51:98:da:e6:ab:e5:24:3f:6c:f7:73:19:a3:d7:d2: 8a:cb:91:df:f7:d6:cf:ca:c0:10:f5:5f:eb:77:43: 6a:8e:35:9c:a6:6c:ec:aa:40:b7:f8:e9:40:fa:0d: 72:4f:c4:d1:7e:1b:0a:5c:d3:77:a3:1d:44:22:a2: e1:67:e3:5f:12:1e:59:ad:b3:c4:bf:a9:e2:39:21: 27:30:fa:1e:7d:e8:2e:84:46:92:3a:44:77:68:d4: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:58:E0:FF:11:F5:29:31:32:17:C6:2D:42:91:43:85:4D:9F:AB:D3 X509v3 Authority Key Identifier: keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.83.0.0/16 193.23.248.0/24 Signature Algorithm: sha256WithRSAEncryption a5:7a:5e:86:71:e1:2f:9a:2b:75:0f:ff:cd:87:b0:ea:bb:31: ad:a0:70:04:5c:4c:e6:a6:8f:9b:81:55:45:52:0b:fe:c8:8d: 67:9c:e9:92:8d:b1:1b:f7:2d:f5:25:01:f6:6a:25:c4:eb:ae: 40:1b:b8:cc:ca:2b:d1:c1:cb:65:9e:47:ba:ed:2b:a6:6d:77: 39:f8:96:80:e3:f8:96:d6:e0:38:73:f1:17:2a:82:a8:59:cd: 66:e2:4e:27:d4:94:89:e2:99:ab:36:2e:46:f5:00:60:e3:83: 03:5e:57:45:11:ef:16:23:5d:14:cf:72:b2:b4:fc:bf:f9:f7: 8e:73:50:5d:a0:b7:f5:f0:ee:32:50:81:00:2c:67:46:8a:72: 72:17:78:4f:36:5e:8d:8f:5b:0b:8f:d3:33:37:49:66:ea:76: 0d:50:fb:7e:e2:48:bc:45:05:22:71:bf:41:72:47:2a:a6:3a: 09:47:53:ed:cc:cf:1a:87:85:33:c5:9c:d0:bd:4b:dd:26:95: 1e:a2:3a:8e:4e:f3:ac:e2:49:19:e0:e9:e3:31:bc:2a:73:a5: 20:3b:4b:69:cc:83:f0:73:a7:02:21:e0:fd:48:64:ab:3c:e6: 6d:92:a7:cc:3d:c8:ec:ea:c9:79:04:ff:c0:c4:d8:1f:50:73: 8c:f0:40:0b -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt+pYseIUHb6ecTfbdJ5MTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2VmNzVlMDk3YTYzMTg4NmIzM2M4MWY2NGFhNWViYmMw YzMyYTAwHhcNMjYwMTAyMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTU4ZTBmZjExZjUyOTMxMzIxN2M2MmQ0MjkxNDM4NTRkOWZhYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwItSbiWdNYNvB6cEAaDqXTTslZd9 qUO8Vl8KU/pLH9qR/vdkk3nKXXKvib59xKCDIHOvEr4zpcsqm1av9JiG9SxAPfO0 Q18BPfFX+soArcBk+DBfvZX7yRqB0BYdAEXFLrCWP47CP55amKPzUHuHx6l3RfjH yWHCFMkpTxUXiV7nTpjoDrqiqGcmSPy7ArVxKFCzM2Mh9vycTrV7oVve8NVn8wVR mNrmq+UkP2z3cxmj19KKy5Hf99bPysAQ9V/rd0NqjjWcpmzsqkC3+OlA+g1yT8TR fhsKXNN3ox1EIqLhZ+NfEh5ZrbPEv6niOSEnMPoefeguhEaSOkR3aNRpzwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFC5Y4P8R9SkxMhfGLUKRQ4VNn6vTMB8GA1UdIwQY MBaAFNfO914JemMYhrM8gfZKpeu8DDKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTIt NWJhNTAxZTBiMzcwLzEvTGxqZ194SDFLVEV5RjhZdFFwRkRoVTJmcTlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTItNWJhNTAxZTBiMzcw LzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAglMDBADB F/gwDQYJKoZIhvcNAQELBQADggEBAKV6XoZx4S+aK3UP/82HsOq7Ma2gcARcTOam j5uBVUVSC/7IjWec6ZKNsRv3LfUlAfZqJcTrrkAbuMzKK9HBy2WeR7rtK6Ztdzn4 loDj+JbW4Dhz8RcqgqhZzWbiTifUlInimas2Lkb1AGDjgwNeV0UR7xYjXRTPcrK0 /L/5945zUF2gt/Xw7jJQgQAsZ0aKcnIXeE82Xo2PWwuP0zM3SWbqdg1Q+37iSLxF BSJxv0FyRyqmOglHU+3MzxqHhTPFnNC9S90mlR6iOo5O86ziSRng6eMxvCpzpSA7 S2nMg/BzpwIh4P1IZKs85m2Sp8w9yOzqyXkE/8DE2B9Qc4zwQAs= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:51 2026 by rpki-client