This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/LJlzTJtg6FQBljsIQ42l8hu1ry0.roa File: LJlzTJtg6FQBljsIQ42l8hu1ry0.roa (raw, json) Hash identifier: 8VVphXmiTF2MkpBn69wXWh0vVMpRcQmyTL7499d+b8Y= Subject key identifier: 2C:99:73:4C:9B:60:E8:54:01:96:3B:08:43:8D:A5:F2:1B:B5:AF:2D Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17 Certificate serial: 019B77596E58801108C0D49E12385775ED1A Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/LJlzTJtg6FQBljsIQ42l8hu1ry0.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15224 IP address blocks: 185.34.188.0/23 maxlen: 23 2a00:db60:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6e:58:80:11:08:c0:d4:9e:12:38:57:75:ed:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c99734c9b60e85401963b08438da5f21bb5af2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:4e:2b:eb:51:cb:2b:ba:56:3e:96:7e:cd: 48:a4:8f:0c:29:6c:75:ee:1b:d5:88:5e:31:eb:fb: ec:fb:76:c4:9e:98:48:6b:f6:89:3b:a3:f8:98:d4: 35:3f:87:37:12:6e:67:01:ab:82:ec:aa:cf:4c:3d: 6f:1d:28:e8:e6:5d:06:51:95:e9:13:9a:34:88:04: 22:c0:6f:4a:6e:40:d8:d3:c9:44:4f:7c:5b:0c:0f: ff:c0:4c:19:2b:08:f5:7e:8f:ed:44:ec:92:e5:c9: c1:dc:90:8f:13:bb:25:27:22:91:9f:16:09:bc:ad: 84:47:2c:20:89:9b:dd:a5:8d:99:23:34:71:62:67: 34:58:da:fe:6b:4c:c9:2c:72:f3:18:f6:c8:3f:d2: 26:53:6c:ed:fe:55:de:4b:9f:bf:e0:7e:45:9f:08: 98:1b:03:99:68:a5:4b:e4:2a:b7:05:68:ed:7a:71: 52:0b:e8:e9:1e:98:76:70:d2:33:8f:83:08:3b:94: 30:4f:d8:aa:87:02:68:dc:cc:8b:08:85:2c:61:16: 9d:98:d0:2f:86:8c:d4:fc:e4:e2:09:a8:13:53:1b: b4:2d:d1:02:63:ee:bd:08:56:2f:9b:36:fa:dc:20: 76:a1:b4:5d:66:43:fa:07:db:93:cf:0a:fe:28:a2: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:73:4C:9B:60:E8:54:01:96:3B:08:43:8D:A5:F2:1B:B5:AF:2D X509v3 Authority Key Identifier: keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/LJlzTJtg6FQBljsIQ42l8hu1ry0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.188.0/23 IPv6: 2a00:db60:2000::/48 Signature Algorithm: sha256WithRSAEncryption 0b:82:ca:f6:30:bc:1c:2b:16:6e:4b:a0:93:10:1b:b9:9c:e5: 8d:b3:a3:3e:a6:05:fe:10:59:8b:58:86:69:d5:f0:a1:a0:f6: 95:37:74:a3:94:4a:41:5d:de:37:49:1c:a3:00:26:84:6f:b5: cb:66:8e:77:64:06:9b:e4:83:ab:0b:32:6e:40:74:e1:99:16: eb:4f:5b:24:31:34:c2:b4:03:8f:f7:ad:5b:fb:cf:d3:7b:60: 55:07:9c:b8:04:b9:89:46:79:5a:39:db:f8:f3:46:1f:ef:a7: ee:5a:20:92:34:7f:3b:e9:ba:fa:cb:54:60:90:3a:32:58:ed: d6:3b:d8:ea:28:47:bc:b3:55:0e:3c:9a:84:03:44:9f:39:22: fc:0d:48:e1:62:29:ea:f3:36:ff:37:0e:b8:35:72:29:13:15: fa:90:d3:12:1f:93:bf:57:43:e6:6d:58:5d:ef:a1:92:6c:ca: 15:1f:a5:45:9c:21:0b:d4:d3:99:bd:82:3a:8e:94:11:bd:da: 41:c0:3d:ff:9b:da:9b:cf:0f:fe:33:4a:77:73:82:09:8e:69: 07:9c:b9:8d:0f:1f:fd:44:cc:96:50:6f:36:dd:0e:13:05:f0: fa:86:26:50:c1:f1:ac:c3:b4:34:cc:63:6f:6d:64:62:b0:dc: 2a:d1:7f:80 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WW5YgBEIwNSeEjhXde0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz MDZhMTcwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzk5NzM0YzliNjBlODU0MDE5NjNiMDg0MzhkYTVmMjFiYjVhZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRZOK+tRyyu6Vj6Wfs1IpI8MKWx1 7hvViF4x6/vs+3bEnphIa/aJO6P4mNQ1P4c3Em5nAauC7KrPTD1vHSjo5l0GUZXp E5o0iAQiwG9KbkDY08lET3xbDA//wEwZKwj1fo/tROyS5cnB3JCPE7slJyKRnxYJ vK2ERywgiZvdpY2ZIzRxYmc0WNr+a0zJLHLzGPbIP9ImU2zt/lXeS5+/4H5FnwiY GwOZaKVL5Cq3BWjtenFSC+jpHph2cNIzj4MIO5QwT9iqhwJo3MyLCIUsYRadmNAv hozU/OTiCagTUxu0LdECY+69CFYvmzb63CB2obRdZkP6B9uTzwr+KKLqeQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCyZc0ybYOhUAZY7CEONpfIbta8tMB8GA1UdIwQY MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt MmJiZjhmYWEwMGNhLzEvTEpselRKdGc2RlFCbGpzSVE0Mmw4aHUxcnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuSK8MA8E AgACMAkDBwAqANtgIAAwDQYJKoZIhvcNAQELBQADggEBAAuCyvYwvBwrFm5LoJMQ G7mc5Y2zoz6mBf4QWYtYhmnV8KGg9pU3dKOUSkFd3jdJHKMAJoRvtctmjndkBpvk g6sLMm5AdOGZFutPWyQxNMK0A4/3rVv7z9N7YFUHnLgEuYlGeVo52/jzRh/vp+5a IJI0fzvpuvrLVGCQOjJY7dY72OooR7yzVQ48moQDRJ85IvwNSOFiKerzNv83Drg1 cikTFfqQ0xIfk79XQ+ZtWF3voZJsyhUfpUWcIQvU05m9gjqOlBG92kHAPf+b2pvP D/4zSndzggmOaQecuY0PH/1EzJZQbzbdDhMF8PqGJlDB8azDtDTMY29tZGKw3CrR f4A= -----END CERTIFICATE-----Generated at Thu Jan 22 01:42:51 2026 by rpki-client