This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/LJiVGCgYbyx1YrovDxbErOmKKZE.roa File: LJiVGCgYbyx1YrovDxbErOmKKZE.roa (raw, json) Hash identifier: 36LJeXEZNvyiVyB06FojXdU1rTulFSqDFXw050tNGLw= Subject key identifier: 2C:98:95:18:28:18:6F:2C:75:62:BA:2F:0F:16:C4:AC:E9:8A:29:91 Certificate issuer: /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5 Certificate serial: 019B77C742807DBDA0264F31F356F7AA1D41 Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/LJiVGCgYbyx1YrovDxbErOmKKZE.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207828 IP address blocks: 193.109.224.0/24 maxlen: 24 193.109.226.0/24 maxlen: 24 193.109.230.0/24 maxlen: 24 193.110.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:80:7d:bd:a0:26:4f:31:f3:56:f7:aa:1d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c98951828186f2c7562ba2f0f16c4ace98a2991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:e1:09:86:9b:bd:d4:71:45:e7:bb:cc:a3: d1:03:78:d9:c5:eb:f9:f5:3e:a9:41:b6:e6:fc:0d: c9:43:0a:4a:33:9d:fc:c1:d0:2a:2e:45:0e:ac:0d: 7e:70:66:bb:9f:b2:a2:c0:33:11:32:5a:f8:9a:e7: 1f:89:f9:82:f9:c3:8b:18:70:d4:2e:32:0d:95:08: c2:78:4e:7a:9e:d8:53:e5:a0:94:4e:21:e2:5d:da: 07:e7:82:2c:31:6d:84:f8:28:14:6f:3f:df:67:a4: 32:b9:98:61:16:b7:89:28:5c:40:b6:5b:2d:72:cc: 3f:27:97:ee:51:f0:61:4b:6e:0f:a2:1a:4f:a2:9e: 02:60:69:35:11:50:78:d4:3f:0c:08:cc:ec:ac:b3: 28:c3:9e:ad:d2:9e:60:c7:5a:8d:ff:8f:41:39:a1: a2:af:c6:2c:80:4b:b1:15:06:4f:8c:89:e0:45:9b: 8e:51:ec:85:f1:6b:bd:60:05:a7:b1:a3:2a:66:e1: 3c:b2:4e:0c:02:84:15:1c:dd:57:02:07:1d:34:02: f7:78:99:0f:78:6f:b1:6c:ac:67:82:c1:2e:93:ff: 49:fe:1c:d4:cd:30:64:37:75:d8:16:1a:30:f8:75: af:4d:58:72:61:54:b4:47:79:d1:10:cb:b7:78:79: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:95:18:28:18:6F:2C:75:62:BA:2F:0F:16:C4:AC:E9:8A:29:91 X509v3 Authority Key Identifier: keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/LJiVGCgYbyx1YrovDxbErOmKKZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.224.0/24 193.109.226.0/24 193.109.230.0/24 193.110.82.0/24 Signature Algorithm: sha256WithRSAEncryption 51:47:6b:b0:24:c6:5c:dc:53:eb:76:11:ad:ac:cb:75:eb:6f: 13:ba:33:cf:f5:c6:50:c8:23:6d:fb:dc:f2:77:4e:fe:04:51: 67:14:56:d7:8c:da:81:b4:d3:46:60:e8:f3:7e:25:2a:ea:93: 96:be:30:5e:31:76:4f:b5:db:93:87:18:b1:24:c3:2c:d5:5d: ed:bc:ee:d1:21:f3:ea:78:fa:7a:58:8d:a9:c7:04:b4:8d:3f: 5d:c1:09:44:3e:d8:49:38:ca:3d:1d:d2:e6:20:d1:36:21:d1: 50:74:4b:91:fd:fe:9b:24:80:73:91:91:f0:07:8d:75:4a:6d: 6c:21:ad:94:6b:6a:d1:6f:16:7f:6d:91:00:b2:dd:24:ea:a5: 20:44:7d:d2:ec:0d:03:0b:8a:94:b1:97:12:fa:11:6e:5f:81: 5d:4a:6e:3a:3c:c2:7b:8a:ba:a3:3f:d3:bd:03:3c:25:b7:78: 33:18:89:2a:9e:77:9c:4a:0d:94:d1:eb:fa:e4:8b:d9:65:e7: a0:8b:cd:08:55:5c:7d:46:9b:50:c3:8c:3a:61:85:7d:a0:dd: 75:7f:2e:5e:f5:23:72:94:54:46:89:0b:21:a8:aa:91:d2:8d: 71:a4:6e:7d:f3:99:c5:8b:b4:9b:01:52:32:3c:b4:25:e7:05: 37:23:5d:78 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x0KAfb2gJk8x81b3qh1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWVmZDA4NDRlYjEzOWFiMjFmODBkNDA3MmNlMGI4ZWRj YzA2YjUwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzk4OTUxODI4MTg2ZjJjNzU2MmJhMmYwZjE2YzRhY2U5OGEyOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+zhCYabvdRxRee7zKPRA3jZxev5 9T6pQbbm/A3JQwpKM538wdAqLkUOrA1+cGa7n7KiwDMRMlr4mucfifmC+cOLGHDU LjINlQjCeE56nthT5aCUTiHiXdoH54IsMW2E+CgUbz/fZ6QyuZhhFreJKFxAtlst csw/J5fuUfBhS24PohpPop4CYGk1EVB41D8MCMzsrLMow56t0p5gx1qN/49BOaGi r8YsgEuxFQZPjIngRZuOUeyF8Wu9YAWnsaMqZuE8sk4MAoQVHN1XAgcdNAL3eJkP eG+xbKxngsEuk/9J/hzUzTBkN3XYFhow+HWvTVhyYVS0R3nREMu3eHlyVQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCyYlRgoGG8sdWK6Lw8WxKzpiimRMB8GA1UdIwQY MBaAFMru/QhE6xOash+A1Acs4LjtzAa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZjU2OWYtY2MzYy00MjllLWJkMWQt YjRiOTdmMTFjM2RkLzEvTEppVkdDZ1lieXgxWXJvdkR4YkVyT21LS1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83ZjU2OWYtY2MzYy00MjllLWJkMWQtYjRiOTdmMTFjM2Rk LzEveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwW3gAwQA wW3iAwQAwW3mAwQAwW5SMA0GCSqGSIb3DQEBCwUAA4IBAQBRR2uwJMZc3FPrdhGt rMt1628TujPP9cZQyCNt+9zyd07+BFFnFFbXjNqBtNNGYOjzfiUq6pOWvjBeMXZP tduThxixJMMs1V3tvO7RIfPqePp6WI2pxwS0jT9dwQlEPthJOMo9HdLmINE2IdFQ dEuR/f6bJIBzkZHwB411Sm1sIa2Ua2rRbxZ/bZEAst0k6qUgRH3S7A0DC4qUsZcS +hFuX4FdSm46PMJ7irqjP9O9Azwlt3gzGIkqnnecSg2U0ev65IvZZeegi80IVVx9 RptQw4w6YYV9oN11fy5e9SNylFRGiQshqKqR0o1xpG5985nFi7SbAVIyPLQl5wU3 I114 -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:24 2026 by rpki-client