This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/aLohr_CjNJaf_OCGCYUirDRs1Mc.roa File: aLohr_CjNJaf_OCGCYUirDRs1Mc.roa (raw, json) Hash identifier: BdAfbqtdeH1oK0lMhwivyNJCFGk02pluiC+NvbWmuzc= Subject key identifier: 68:BA:21:AF:F0:A3:34:96:9F:FC:E0:86:09:85:22:AC:34:6C:D4:C7 Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9 Certificate serial: 019B7AC91ACB57A03FA5FEFA014AF28A31FC Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/aLohr_CjNJaf_OCGCYUirDRs1Mc.roa Signing time: Thu 01 Jan 2026 18:19:18 +0000 ROA not before: Thu 01 Jan 2026 18:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204645 IP address blocks: 95.131.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1a:cb:57:a0:3f:a5:fe:fa:01:4a:f2:8a:31:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9 Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68ba21aff0a334969ffce086098522ac346cd4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:7d:29:0f:9c:54:f2:48:e0:e0:58:e1:1d: 99:d3:f0:98:fd:9b:21:c6:8b:df:02:c9:7c:fe:ca: c7:57:ec:2d:64:02:a3:3e:e1:e7:3d:95:f3:b6:40: 26:98:03:0e:e5:8f:d4:40:1e:63:cc:d1:86:0a:20: 66:e7:3b:3d:c6:3a:f8:80:87:c5:27:6e:24:28:58: ca:f9:d9:97:79:62:71:ad:35:bc:35:b7:3f:de:32: 82:76:bf:87:61:c9:05:54:d4:c7:55:f7:18:06:24: 7f:f4:dc:bf:16:98:30:26:0d:38:f4:57:fb:68:0a: 02:4e:d8:57:2f:8e:0c:e7:2f:68:71:35:6b:82:68: a7:45:a6:59:8c:d4:53:13:00:a9:0b:9a:4b:a0:af: 32:82:0f:6c:37:ea:b7:63:d6:f3:08:d1:8a:e8:b3: e7:dc:ed:86:d0:7a:27:cb:16:32:10:76:6e:4e:90: 70:1e:4d:02:1c:8a:02:3f:6d:26:2c:b2:cb:6a:ef: 91:79:62:cc:19:74:d3:8b:ac:95:0d:05:a8:cf:be: b4:d3:1f:47:bf:97:33:60:a5:3e:fb:d0:5f:91:aa: 30:ac:b3:ee:44:cd:3f:f5:6b:87:b3:04:9b:a6:78: 41:6b:bb:f9:c7:0e:f8:cf:43:d6:6e:6c:8d:e9:b7: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:21:AF:F0:A3:34:96:9F:FC:E0:86:09:85:22:AC:34:6C:D4:C7 X509v3 Authority Key Identifier: keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/aLohr_CjNJaf_OCGCYUirDRs1Mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.20.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:3b:5f:b8:d9:15:87:4b:cc:9b:5f:86:6a:37:14:e8:2c:96: fa:b8:83:e0:c3:0f:35:9c:fb:81:4c:53:ba:67:37:79:d2:03: 7c:6c:2d:9d:6d:f5:79:04:41:2c:10:ed:56:56:d3:76:d9:8d: ed:23:13:b6:54:16:c7:95:aa:31:f4:64:f1:9a:18:8a:92:3f: 82:79:2e:4a:a3:fe:44:00:b0:a7:61:06:62:53:4c:34:3b:04: bc:44:af:8b:da:74:55:d8:85:b2:b6:52:03:a9:83:a6:99:c0: 54:38:8b:c1:de:35:f6:4e:48:06:db:e2:7a:61:af:ed:52:57: 46:68:66:ef:78:65:50:34:20:5f:c9:de:ee:99:c8:8d:2e:02: 17:3b:a6:55:a0:fb:9f:09:25:9d:72:9f:2f:03:09:ff:32:b3: 3e:c3:a0:ac:76:16:ef:e6:44:41:e2:08:f0:fe:71:95:c1:89: c8:42:08:c3:e6:e4:40:08:e0:30:a7:18:97:65:04:50:14:6f: 30:3e:b3:64:de:45:e7:07:98:68:0b:71:56:eb:3a:b2:aa:1d: 1d:bb:fe:1a:db:de:44:34:d9:f5:9f:59:dc:6e:65:33:66:57: 8b:02:1c:90:0a:9a:4a:21:94:d5:0f:d5:5b:ce:b5:48:15:80: fc:a2:b0:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRrLV6A/pf76AUryijH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWVlM2FmODIwNTYzNDk0NjQ3NTUxYTUyMDZlZjBjNDVj Zjk1YzkwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGJhMjFhZmYwYTMzNDk2OWZmY2UwODYwOTg1MjJhYzM0NmNkNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr599KQ+cVPJI4OBY4R2Z0/CY/Zsh xovfAsl8/srHV+wtZAKjPuHnPZXztkAmmAMO5Y/UQB5jzNGGCiBm5zs9xjr4gIfF J24kKFjK+dmXeWJxrTW8Nbc/3jKCdr+HYckFVNTHVfcYBiR/9Ny/FpgwJg049Ff7 aAoCTthXL44M5y9ocTVrgminRaZZjNRTEwCpC5pLoK8ygg9sN+q3Y9bzCNGK6LPn 3O2G0HonyxYyEHZuTpBwHk0CHIoCP20mLLLLau+ReWLMGXTTi6yVDQWoz7600x9H v5czYKU++9BfkaowrLPuRM0/9WuHswSbpnhBa7v5xw74z0PWbmyN6bfadwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGi6Ia/wozSWn/zghgmFIqw0bNTHMB8GA1UdIwQY MBaAFBke46+CBWNJRkdVGlIG7wxFz5XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYt NDZkNmNlYTIwMzQyLzEvYUxvaHJfQ2pOSmFmX09DR0NZVWlyRFJzMU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYtNDZkNmNlYTIwMzQy LzEvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX4MUMA0G CSqGSIb3DQEBCwUAA4IBAQCcO1+42RWHS8ybX4ZqNxToLJb6uIPgww81nPuBTFO6 Zzd50gN8bC2dbfV5BEEsEO1WVtN22Y3tIxO2VBbHlaox9GTxmhiKkj+CeS5Ko/5E ALCnYQZiU0w0OwS8RK+L2nRV2IWytlIDqYOmmcBUOIvB3jX2TkgG2+J6Ya/tUldG aGbveGVQNCBfyd7umciNLgIXO6ZVoPufCSWdcp8vAwn/MrM+w6Csdhbv5kRB4gjw /nGVwYnIQgjD5uRACOAwpxiXZQRQFG8wPrNk3kXnB5hoC3FW6zqyqh0du/4a295E NNn1n1ncbmUzZleLAhyQCppKIZTVD9VbzrVIFYD8orBg -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:41 2026 by rpki-client