This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/Lijwv8ed8pOLySWZZGE9d68r6MQ.roa
File: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (raw, json)
Hash identifier: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=
Subject key identifier: 2E:28:F0:BF:C7:9D:F2:93:8B:C9:25:99:64:61:3D:77:AF:2B:E8:C4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019B7CEDF6AEF294E97605AFCB06A640B343
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/Lijwv8ed8pOLySWZZGE9d68r6MQ.roa
Signing time: Fri 02 Jan 2026 04:18:48 +0000
ROA not before: Fri 02 Jan 2026 04:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50597
IP address blocks: 185.180.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:f6:ae:f2:94:e9:76:05:af:cb:06:a6:40:b3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Jan 2 04:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e28f0bfc79df2938bc9259964613d77af2be8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:8d:f4:1f:8b:c0:93:fd:08:08:d9:66:9b:
bb:44:41:f1:8c:3b:30:f4:99:de:31:a4:ad:28:17:
d7:b2:09:72:2a:f1:a1:94:c0:42:70:29:2c:d3:25:
b6:44:75:83:b1:db:21:e9:fb:2f:6d:73:e7:da:d7:
ef:a9:85:17:b8:31:11:a1:79:43:00:94:d2:2c:df:
ed:99:38:14:f2:b9:78:f0:92:fc:29:af:12:4b:07:
bd:08:6e:0b:54:5e:d3:f5:de:d8:22:c1:03:95:45:
34:d5:57:5d:7c:17:ff:98:01:14:fc:58:33:b4:8a:
22:f9:a0:69:6d:7f:e4:4b:76:48:1b:40:51:24:9d:
b8:d6:21:41:62:a0:de:e4:59:df:66:5e:ea:c7:60:
1f:9f:9b:89:ad:11:7e:5f:ea:d4:3c:2a:23:19:ee:
d5:a2:5c:c8:a0:a3:c7:ed:ea:b5:e5:46:e1:92:68:
e0:8b:a5:ab:b5:8a:e6:c9:e7:42:b3:5d:ba:c4:de:
59:7c:f1:0c:01:a7:b8:4b:36:51:d5:2d:9c:0f:c0:
8c:60:50:a1:7b:f6:a8:00:3a:47:3e:a7:f7:16:97:
79:b9:fb:3d:d0:d8:d1:bc:30:c3:cb:50:09:b6:f7:
ec:e4:ed:fd:87:3d:0f:61:b0:22:77:2e:f6:ce:25:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:F0:BF:C7:9D:F2:93:8B:C9:25:99:64:61:3D:77:AF:2B:E8:C4
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/Lijwv8ed8pOLySWZZGE9d68r6MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:29:5b:61:89:ee:b9:71:26:02:e0:ad:db:46:df:40:ed:df:
2a:28:bb:14:cf:68:ac:2a:3c:a3:0e:a2:29:5a:85:41:4e:50:
b9:9b:42:a7:ba:2c:ab:62:cb:e4:18:e9:5f:60:a0:8d:a4:8f:
5c:93:d8:62:b6:4c:51:11:7d:61:81:c1:d0:b4:c3:7e:77:b3:
a0:dd:9c:9e:e6:8f:9c:60:a0:23:87:fc:37:8d:42:61:22:96:
6a:15:c5:82:37:11:56:d2:3d:a7:25:d4:5d:a2:6d:bc:ec:8a:
45:57:17:f6:31:71:05:2e:4c:9f:bd:f0:13:34:7b:94:89:1e:
9d:ae:74:5f:18:f2:1c:96:12:69:ef:46:e0:ea:f2:77:b5:23:
b0:97:a0:77:a9:10:62:2b:8d:f8:04:b1:8f:2f:4a:1a:c3:12:
30:2b:bd:5c:77:c1:87:b7:8c:89:ba:d4:9b:76:f8:73:dd:07:
85:da:54:f0:5f:43:39:b0:bc:61:c9:92:1c:99:b3:36:1a:2c:
55:6a:79:8c:17:9b:66:20:50:46:af:92:6a:f3:09:29:09:41:
bc:e0:a7:f0:76:2c:f5:0c:9a:7e:96:07:5f:db:23:1e:2d:2f:
29:82:9a:7a:44:50:46:86:8c:1f:67:29:41:0b:9b:90:dc:f5:
62:90:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:47:44 2026 by rpki-client