This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LJxiObyAX14FRHy3JLIcY0XUaB8.roa File: LJxiObyAX14FRHy3JLIcY0XUaB8.roa (raw, json) Hash identifier: v2cBg4uOH5cHdD4uKpW9vDP+ul9jWp7TgruvTkuK6FM= Subject key identifier: 2C:9C:62:39:BC:80:5F:5E:05:44:7C:B7:24:B2:1C:63:45:D4:68:1F Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B0E6AF92427EE3B699EEBDA50E387DA19 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LJxiObyAX14FRHy3JLIcY0XUaB8.roa Signing time: Thu 11 Dec 2025 17:17:30 +0000 ROA not before: Thu 11 Dec 2025 17:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 185.229.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:6a:f9:24:27:ee:3b:69:9e:eb:da:50:e3:87:da:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 11 17:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c9c6239bc805f5e05447cb724b21c6345d4681f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cf:40:ea:65:49:3e:59:f7:ce:92:f4:0c:e2: 4d:9d:85:dc:28:5a:92:79:ba:3b:0a:05:c0:c9:e5: 4e:ae:8f:ce:9c:08:a7:db:32:07:d1:99:11:62:cf: b6:22:b9:2d:08:84:13:99:68:df:7d:7c:a4:80:1d: 28:f4:de:5d:82:f3:38:2a:60:f2:9f:00:38:a5:9a: 2f:d7:79:c5:8a:f0:8a:b1:18:98:cb:86:f2:69:20: 6a:90:ef:17:91:71:c9:cf:71:88:34:99:21:e6:1e: 47:cb:06:78:8a:06:e5:3c:a9:3c:0c:0a:93:ac:13: 59:91:25:75:23:42:1a:df:4a:b5:71:80:06:1b:d0: a7:c8:e9:cd:a0:53:3a:07:5f:60:28:75:81:0d:27: 97:64:3b:30:95:db:cd:2d:2f:cf:48:a2:f1:77:ef: 94:6f:4a:e0:41:c0:c8:ff:97:11:c8:06:ed:2e:dd: 46:0a:be:2e:e3:80:35:7d:ef:58:55:14:fe:cd:12: e9:2a:d0:d3:8f:5e:be:12:e4:64:56:0e:db:58:2d: 68:78:41:4f:47:94:0e:00:05:f9:fc:d3:ce:19:30: f4:5b:9f:50:67:e2:74:16:9e:1b:55:b1:e7:8e:eb: 98:67:8a:c0:d1:73:fd:aa:fa:d7:e6:d6:05:07:2b: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9C:62:39:BC:80:5F:5E:05:44:7C:B7:24:B2:1C:63:45:D4:68:1F X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LJxiObyAX14FRHy3JLIcY0XUaB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.222.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:7d:b0:c3:3a:ee:2a:05:a7:c6:13:36:20:98:6c:22:04:8e: 9a:1d:31:2f:93:66:3b:8e:b1:a0:c7:a5:df:3f:40:7f:01:6c: f3:9a:e5:84:50:78:44:7e:f0:65:a3:15:26:26:f5:08:13:68: a4:5e:df:2a:76:ec:c2:9f:cf:aa:ec:71:d5:0a:70:38:4e:9b: 7c:8a:eb:cb:75:fb:1d:a4:d0:41:ae:ba:8a:c4:f7:62:d4:5f: 85:f9:b4:29:75:a7:1d:d2:28:79:93:d2:d5:5e:58:d8:1c:93: cf:29:61:8d:08:95:59:0a:57:45:34:8d:90:e9:a4:c1:4f:e7: fc:10:7c:7f:89:a4:a5:b1:ea:0e:ce:a1:f3:5c:01:14:2a:76: cd:e9:54:00:fe:36:1d:39:79:6e:ce:ec:d1:cc:07:45:44:33: 8f:a4:c2:f5:68:df:ba:2a:67:59:3a:8f:a7:6a:d2:07:59:54: c0:04:61:a0:f2:29:b9:ff:3b:d3:9e:32:f4:8c:b2:96:42:8f: e7:15:63:40:ed:f3:f7:f8:48:4e:a2:c8:4e:b5:68:94:c4:04: a8:1c:97:cb:6a:18:23:25:dd:73:c2:cc:08:d8:9b:ab:74:ff: f8:08:57:4b:df:f1:99:6a:76:e7:03:b4:ae:31:43:4c:3f:92: 41:ed:2b:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsOavkkJ+47aZ7r2lDjh9oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjExMTcxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzljNjIzOWJjODA1ZjVlMDU0NDdjYjcyNGIyMWM2MzQ1ZDQ2ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c9A6mVJPln3zpL0DOJNnYXcKFqS ebo7CgXAyeVOro/OnAin2zIH0ZkRYs+2IrktCIQTmWjffXykgB0o9N5dgvM4KmDy nwA4pZov13nFivCKsRiYy4byaSBqkO8XkXHJz3GINJkh5h5HywZ4igblPKk8DAqT rBNZkSV1I0Ia30q1cYAGG9CnyOnNoFM6B19gKHWBDSeXZDswldvNLS/PSKLxd++U b0rgQcDI/5cRyAbtLt1GCr4u44A1fe9YVRT+zRLpKtDTj16+EuRkVg7bWC1oeEFP R5QOAAX5/NPOGTD0W59QZ+J0Fp4bVbHnjuuYZ4rA0XP9qvrX5tYFByv29QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCycYjm8gF9eBUR8tySyHGNF1GgfMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTEp4aU9ieUFYMTRGUkh5M0pMSWNZMFhVYUI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXeMA0G CSqGSIb3DQEBCwUAA4IBAQAOfbDDOu4qBafGEzYgmGwiBI6aHTEvk2Y7jrGgx6Xf P0B/AWzzmuWEUHhEfvBloxUmJvUIE2ikXt8qduzCn8+q7HHVCnA4Tpt8iuvLdfsd pNBBrrqKxPdi1F+F+bQpdacd0ih5k9LVXljYHJPPKWGNCJVZCldFNI2Q6aTBT+f8 EHx/iaSlseoOzqHzXAEUKnbN6VQA/jYdOXluzuzRzAdFRDOPpML1aN+6KmdZOo+n atIHWVTABGGg8im5/zvTnjL0jLKWQo/nFWNA7fP3+EhOoshOtWiUxASoHJfLahgj Jd1zwswI2JurdP/4CFdL3/GZanbnA7SuMUNMP5JB7SsM -----END CERTIFICATE-----Generated at Sat Dec 20 01:45:37 2025 by rpki-client