This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/LJQ2CSjZ3vUCVBe9x_aAVbx2eLs.roa File: LJQ2CSjZ3vUCVBe9x_aAVbx2eLs.roa (raw, json) Hash identifier: 37sNgm8sahuJz7mDJK1LfOWx1Msk+HpvlqlI2WPKepM= Subject key identifier: 2C:94:36:09:28:D9:DE:F5:02:54:17:BD:C7:F6:80:55:BC:76:78:BB Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d Certificate serial: 019B7D5AB9D0FDEF699248FE29E6979CAEA0 Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/LJQ2CSjZ3vUCVBe9x_aAVbx2eLs.roa Signing time: Fri 02 Jan 2026 06:17:36 +0000 ROA not before: Fri 02 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 194.61.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b9:d0:fd:ef:69:92:48:fe:29:e6:97:9c:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d Validity Not Before: Jan 2 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c94360928d9def5025417bdc7f68055bc7678bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:84:f6:8e:03:07:98:53:a9:55:c9:cc:47: 0c:17:0b:b0:24:77:e2:e8:a8:4a:19:bc:18:5d:f5: 72:1b:49:a9:ed:21:9f:b2:98:fe:62:b4:18:74:31: 59:13:00:df:d9:39:0d:17:8d:d9:1c:b8:43:ab:e9: 74:3f:ba:ea:29:16:78:c5:d5:25:e7:6f:3f:b9:e2: 2c:9f:ae:2b:fb:ac:7c:b2:69:b5:8a:13:4e:5d:0f: ba:c8:67:dc:ad:bf:74:0f:0f:10:54:f1:1b:d5:22: ce:e7:f8:5e:42:ce:8c:26:61:a1:28:d1:15:de:ec: 2c:71:fa:e6:ed:a2:b4:6c:23:f9:0f:de:cd:45:c2: 83:95:89:1a:54:d3:bd:a9:71:69:18:83:7b:9f:ba: a7:71:6e:6e:5d:40:a5:2d:15:11:e8:5e:7b:79:1f: 12:3a:a6:ec:76:c6:9a:73:6a:0c:83:07:a7:17:83: b0:b5:a8:ca:37:d9:d6:64:25:b0:54:8c:10:8f:8c: d9:89:6f:43:a2:e2:bd:5d:c2:c6:ae:f4:4f:9a:2e: f3:29:0d:74:6d:7d:d6:b1:aa:12:96:eb:66:07:ae: 5e:45:98:98:fe:91:f2:d2:cd:c4:6a:14:70:5f:f2: b3:48:ce:07:e7:d5:fc:03:a6:fc:d8:d6:e6:2b:fb: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:94:36:09:28:D9:DE:F5:02:54:17:BD:C7:F6:80:55:BC:76:78:BB X509v3 Authority Key Identifier: keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/LJQ2CSjZ3vUCVBe9x_aAVbx2eLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.106.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:8f:f2:f8:1e:d1:e2:ad:ca:34:cc:44:52:5f:f9:20:a1:9e: 47:be:7f:26:ec:1b:84:9a:ac:a1:de:d7:08:2f:3e:e0:3d:44: 19:da:51:cf:42:53:63:43:c3:05:44:70:66:6f:37:ad:dd:cd: ff:1d:42:d4:18:30:38:2f:03:3c:ca:f5:ad:99:c9:b4:61:57: 47:d1:14:9c:ae:db:18:7c:cf:6f:b0:d5:e2:0c:c8:87:a6:d3: d0:5a:70:70:cf:d3:37:bf:a0:39:ae:a3:93:3f:fa:e2:6b:fa: 64:ab:5b:de:d6:2c:b1:d6:c6:b7:98:81:3b:fe:ee:76:18:fa: 28:ea:da:22:16:95:9d:32:65:c9:ca:95:93:4c:66:1b:4a:aa: 25:84:0f:73:01:b4:17:a3:32:d3:87:49:f1:f5:04:6b:b9:2f: 4e:50:24:74:18:a5:14:48:59:b9:2e:5b:4c:59:e7:a6:c8:70: 4c:37:bf:47:90:72:fa:ea:6d:ce:c8:50:60:16:65:2f:dc:27: e9:c8:c8:6b:e3:38:2e:32:77:bd:e2:50:ae:d7:0f:e0:a7:06: 04:36:59:7e:d2:2a:f3:fd:76:b9:31:82:c1:76:d6:05:46:8a: 41:1a:8f:ca:d0:0b:64:9b:75:c9:c2:47:66:a7:72:5a:fc:e1: bb:49:b5:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WrnQ/e9pkkj+KeaXnK6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YWE4NzhmNzZiNTA5NDdjYmQ3ZGVjYTA0YWM4MzJlMjg3 YjUxNGQwHhcNMjYwMTAyMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzk0MzYwOTI4ZDlkZWY1MDI1NDE3YmRjN2Y2ODA1NWJjNzY3OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/qE9o4DB5hTqVXJzEcMFwuwJHfi 6KhKGbwYXfVyG0mp7SGfspj+YrQYdDFZEwDf2TkNF43ZHLhDq+l0P7rqKRZ4xdUl 528/ueIsn64r+6x8smm1ihNOXQ+6yGfcrb90Dw8QVPEb1SLO5/heQs6MJmGhKNEV 3uwscfrm7aK0bCP5D97NRcKDlYkaVNO9qXFpGIN7n7qncW5uXUClLRUR6F57eR8S Oqbsdsaac2oMgwenF4OwtajKN9nWZCWwVIwQj4zZiW9DouK9XcLGrvRPmi7zKQ10 bX3WsaoSlutmB65eRZiY/pHy0s3EahRwX/KzSM4H59X8A6b82NbmK/vriwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyUNgko2d71AlQXvcf2gFW8dni7MB8GA1UdIwQY MBaAFEeqh492tQlHy9feygSsgy4oe1FNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWIt Mzk5MmM1NGUxODdiLzEvTEpRMkNTalozdlVDVkJlOXhfYUFWYngyZUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWItMzk5MmM1NGUxODdi LzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1qMA0G CSqGSIb3DQEBCwUAA4IBAQB9j/L4HtHirco0zERSX/kgoZ5Hvn8m7BuEmqyh3tcI Lz7gPUQZ2lHPQlNjQ8MFRHBmbzet3c3/HULUGDA4LwM8yvWtmcm0YVdH0RScrtsY fM9vsNXiDMiHptPQWnBwz9M3v6A5rqOTP/ria/pkq1ve1iyx1sa3mIE7/u52GPoo 6toiFpWdMmXJypWTTGYbSqolhA9zAbQXozLTh0nx9QRruS9OUCR0GKUUSFm5LltM WeemyHBMN79HkHL66m3OyFBgFmUv3CfpyMhr4zguMne94lCu1w/gpwYENll+0irz /Xa5MYLBdtYFRopBGo/K0Atkm3XJwkdmp3Ja/OG7SbXP -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:46 2026 by rpki-client