This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/lpjlttfQCLiNxZOZ3RO91z3Qskc.roa File: lpjlttfQCLiNxZOZ3RO91z3Qskc.roa (raw, json) Hash identifier: 1BTaMyn3hYhMT5xntCbHdOnj6M+nbJYYWkZEDfVM78g= Subject key identifier: 96:98:E5:B6:D7:D0:08:B8:8D:C5:93:99:DD:13:BD:D7:3D:D0:B2:47 Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Certificate serial: 019B7CED74D678BD1D6479299DCF08CDF2F7 Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/lpjlttfQCLiNxZOZ3RO91z3Qskc.roa Signing time: Fri 02 Jan 2026 04:18:15 +0000 ROA not before: Fri 02 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14907 IP address blocks: 91.198.174.0/24 maxlen: 24 185.15.56.0/22 maxlen: 22 185.15.56.0/24 maxlen: 24 185.15.57.0/24 maxlen: 24 185.15.58.0/24 maxlen: 24 185.15.59.0/24 maxlen: 24 185.71.138.0/24 maxlen: 24 2001:67c:930::/48 maxlen: 48 2a02:ec80::/29 maxlen: 29 2a02:ec80:300::/48 maxlen: 48 2a02:ec80:600::/48 maxlen: 48 2a02:ec80:700::/48 maxlen: 48 2a02:ec80:a000::/48 maxlen: 48 2a02:ec80:a100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:74:d6:78:bd:1d:64:79:29:9d:cf:08:cd:f2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9698e5b6d7d008b88dc59399dd13bdd73dd0b247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:58:32:8b:24:84:ed:22:c3:b9:02:05:3f: 90:23:59:8d:a5:c8:6e:f2:56:b3:ab:41:7f:0c:be: 5e:57:a2:d1:14:d8:26:c9:1c:9a:d3:98:ff:15:14: ca:22:5d:c8:da:1b:00:3b:9d:49:c1:79:fa:f2:1b: a8:3b:4c:dc:d0:fc:c4:26:4a:23:d6:89:a8:9c:eb: 59:5f:2c:03:de:52:e7:ae:bf:2f:38:5d:6c:0f:68: f1:83:6d:8b:32:42:4a:7a:f1:62:81:7c:b4:99:18: 1b:69:10:8c:bf:e2:b7:b7:81:d7:ef:1b:07:04:c9: 6d:27:95:c1:9b:ff:44:0d:38:fe:17:16:00:ef:6f: 1e:4e:0e:14:de:f7:67:40:1b:71:bc:6a:bf:65:5e: 7b:2f:6c:06:9e:e8:c0:37:62:2b:bf:20:c8:43:ac: 1d:b3:d0:23:b3:35:e6:67:62:54:46:94:d4:d2:4f: 90:3a:fa:65:a3:ce:26:b1:3f:e9:e1:e6:fb:00:07: 66:dc:c7:c2:b4:34:da:65:3e:bb:f5:7f:0b:b7:d9: 46:db:08:fc:8d:e0:27:9c:c0:95:5d:ad:e4:ad:d5: b6:81:3c:b1:de:2e:c1:00:ac:5a:3a:37:01:85:0d: a6:46:93:70:ec:e6:a1:76:f6:87:7b:7b:e3:a8:ea: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:98:E5:B6:D7:D0:08:B8:8D:C5:93:99:DD:13:BD:D7:3D:D0:B2:47 X509v3 Authority Key Identifier: keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/lpjlttfQCLiNxZOZ3RO91z3Qskc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.174.0/24 185.15.56.0/22 185.71.138.0/24 IPv6: 2001:67c:930::/48 2a02:ec80::/29 Signature Algorithm: sha256WithRSAEncryption 9a:99:c4:78:f0:b5:a9:02:4d:3f:57:ed:ff:35:f1:7c:e0:78: c9:04:e2:db:32:ce:4b:c2:8c:1d:b5:f8:3a:de:a9:db:e7:0b: 56:43:0c:bc:d2:34:be:e0:ee:54:89:52:dc:26:b4:69:14:93: dc:a9:95:db:35:dc:7f:aa:04:8b:7b:e7:a9:ec:94:d8:05:6b: 57:21:34:b8:72:79:be:97:f4:c1:75:44:d5:be:bc:4a:31:15: a9:13:5b:70:ed:c0:98:4a:fe:5a:01:c0:77:c1:6e:37:6e:1d: 10:7d:d1:41:0c:62:02:74:28:66:be:df:54:e7:47:8e:df:94: 21:62:bc:8f:13:89:5c:8e:f9:a6:c6:6f:a3:73:b8:65:ad:24: c8:bc:a5:6a:56:df:2e:af:7c:7e:e9:1b:b3:1a:05:00:e1:c4: 44:8b:aa:88:8a:b6:65:c1:ad:96:a7:91:28:75:e4:97:c1:fd: 03:d7:25:fd:67:2f:2f:db:b7:21:d7:85:b0:38:d5:9b:45:02: 65:9c:73:2e:63:8f:85:d3:f7:d6:9c:a6:2a:13:cd:3d:e5:13: 83:2e:b4:6d:6d:e1:54:3d:bb:d5:ce:39:53:c1:02:71:f1:3b: ae:4b:45:7c:14:14:3e:42:81:62:d3:51:ef:e2:11:ed:01:87: aa:39:c0:2f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt87XTWeL0dZHkpnc8IzfL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz NzdkNmQwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njk4ZTViNmQ3ZDAwOGI4OGRjNTkzOTlkZDEzYmRkNzNkZDBiMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AZYMoskhO0iw7kCBT+QI1mNpchu 8lazq0F/DL5eV6LRFNgmyRya05j/FRTKIl3I2hsAO51JwXn68huoO0zc0PzEJkoj 1omonOtZXywD3lLnrr8vOF1sD2jxg22LMkJKevFigXy0mRgbaRCMv+K3t4HX7xsH BMltJ5XBm/9EDTj+FxYA728eTg4U3vdnQBtxvGq/ZV57L2wGnujAN2IrvyDIQ6wd s9AjszXmZ2JURpTU0k+QOvplo84msT/p4eb7AAdm3MfCtDTaZT679X8Lt9lG2wj8 jeAnnMCVXa3krdW2gTyx3i7BAKxaOjcBhQ2mRpNw7OahdvaHe3vjqOp7bQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJaY5bbX0Ai4jcWTmd0Tvdc90LJHMB8GA1UdIwQY MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt MTk1MTM0NWNlYTMzLzEvbHBqbHR0ZlFDTGlOeFpPWjNSTzkxejNRc2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQAW8auAwQC uQ84AwQAuUeKMBYEAgACMBADBwAgAQZ8CTADBQMqAuyAMA0GCSqGSIb3DQEBCwUA A4IBAQCamcR48LWpAk0/V+3/NfF84HjJBOLbMs5Lwowdtfg63qnb5wtWQwy80jS+ 4O5UiVLcJrRpFJPcqZXbNdx/qgSLe+ep7JTYBWtXITS4cnm+l/TBdUTVvrxKMRWp E1tw7cCYSv5aAcB3wW43bh0QfdFBDGICdChmvt9U50eO35QhYryPE4lcjvmmxm+j c7hlrSTIvKVqVt8ur3x+6RuzGgUA4cREi6qIirZlwa2Wp5EodeSXwf0D1yX9Zy8v 27ch14WwONWbRQJlnHMuY4+F0/fWnKYqE8095RODLrRtbeFUPbvVzjlTwQJx8Tuu S0V8FBQ+QoFi01Hv4hHtAYeqOcAv -----END CERTIFICATE-----Generated at Sun Jan 11 08:35:59 2026 by rpki-client