This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa File: LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa (raw, json) Hash identifier: WjIjLuXn3A1xNvSwh1XgBv48UJzhklp1E8+xHhdyWoU= Subject key identifier: 2C:9E:8B:C7:E2:99:E6:38:E6:BB:4E:E1:D0:2A:50:DA:D7:DB:DF:B7 Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Certificate serial: 019B78A3391086FF240BE20EE8D88189833B Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216280 IP address blocks: 84.20.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 08:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:39:10:86:ff:24:0b:e2:0e:e8:d8:81:89:83:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c9e8bc7e299e638e6bb4ee1d02a50dad7dbdfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:1d:32:42:fe:02:91:63:31:55:64:53:2c: e3:dd:3d:cd:5e:ac:59:4a:d8:90:36:d2:fa:63:21: df:fb:ce:2b:0e:25:59:0a:f1:3d:07:36:7d:31:c6: d5:76:fa:ec:93:c4:7d:b1:ed:63:e9:4e:59:b3:71: df:e5:56:1f:ea:f9:35:fd:c4:f5:6e:91:36:5f:ad: 51:fd:c2:07:41:cd:ae:c9:de:0a:5a:39:e9:e9:7f: 78:5f:18:9b:0e:d0:d9:42:55:a8:a5:21:6d:f3:88: 2f:73:dc:dc:e0:42:a9:3d:f3:65:4a:69:47:d9:6a: 5b:28:60:58:75:22:7d:20:aa:05:9f:a7:d1:f4:89: 17:78:9b:62:1a:01:a4:a2:4e:49:c2:b5:f0:bb:a9: 84:0d:ed:79:4d:ed:f8:b3:67:8d:19:1e:80:41:00: 36:25:91:47:5e:aa:d8:75:98:83:8e:03:36:2f:b9: d1:d4:aa:be:03:26:dc:67:26:5a:39:56:99:9a:76: e9:b0:17:b3:f9:6a:3a:02:de:07:7e:c7:22:08:8f: cc:89:41:43:3f:c0:ef:5f:59:bf:3f:f8:3b:f4:c0: 8d:f3:a3:27:ea:a3:5d:05:39:f5:30:c7:34:45:2d: cb:18:bf:fb:ce:a4:47:b8:9c:04:33:3d:00:36:dd: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:8B:C7:E2:99:E6:38:E6:BB:4E:E1:D0:2A:50:DA:D7:DB:DF:B7 X509v3 Authority Key Identifier: keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.20.94.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f7:4b:83:dd:3d:78:31:a4:4c:ee:38:c2:de:72:04:03:13: 63:86:88:7a:10:99:92:94:12:02:57:ed:08:6d:a1:65:b9:93: 93:76:be:92:89:a6:26:15:b2:0c:6c:b6:11:48:9a:a0:f2:a8: 9a:b8:b3:f1:09:be:54:27:e7:74:db:2d:3f:ce:05:f1:75:95: 4a:d6:cb:92:13:1a:40:4d:99:71:a8:4a:72:c1:23:88:2c:f9: 75:70:5e:f5:c0:3a:3e:b0:2c:e6:b6:00:8c:c8:a8:08:7a:4b: 28:a3:8e:f7:a3:40:d2:e5:bb:18:88:cd:d7:19:ea:84:1e:04: 17:b6:74:67:df:22:2d:52:5d:0e:e9:cb:32:b3:52:47:1f:9c: d7:51:0b:ab:38:82:eb:04:26:62:36:1a:11:c9:36:0c:12:19: 22:70:65:7a:fb:99:6a:30:f7:4a:1a:b4:1d:91:ca:ad:17:f2: 54:84:1e:27:9e:d7:ba:c1:19:00:b8:5e:ee:83:7a:2b:3f:33: 89:a5:23:44:7a:62:22:0f:04:86:36:13:f0:be:c6:d6:1c:1b: af:2c:fd:6a:5f:a4:7b:8f:25:cd:91:d5:73:fd:7b:ef:0a:02: 3b:4d:44:cb:7e:f2:88:bd:2b:0d:73:fa:7b:0c:57:44:00:c9: 96:0e:57:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozkQhv8kC+IO6NiBiYM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh OGZmOGIwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzllOGJjN2UyOTllNjM4ZTZiYjRlZTFkMDJhNTBkYWQ3ZGJkZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb4dMkL+ApFjMVVkUyzj3T3NXqxZ StiQNtL6YyHf+84rDiVZCvE9BzZ9McbVdvrsk8R9se1j6U5Zs3Hf5VYf6vk1/cT1 bpE2X61R/cIHQc2uyd4KWjnp6X94XxibDtDZQlWopSFt84gvc9zc4EKpPfNlSmlH 2WpbKGBYdSJ9IKoFn6fR9IkXeJtiGgGkok5JwrXwu6mEDe15Te34s2eNGR6AQQA2 JZFHXqrYdZiDjgM2L7nR1Kq+AybcZyZaOVaZmnbpsBez+Wo6At4HfsciCI/MiUFD P8DvX1m/P/g79MCN86Mn6qNdBTn1MMc0RS3LGL/7zqRHuJwEMz0ANt0idQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyei8fimeY45rtO4dAqUNrX29+3MB8GA1UdIwQY MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt ZjY2MjZiNjMzODNlLzEvTEo2THgtS1o1amptdTA3aDBDcFEydGZiMzdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBReMA0G CSqGSIb3DQEBCwUAA4IBAQBs90uD3T14MaRM7jjC3nIEAxNjhoh6EJmSlBICV+0I baFluZOTdr6SiaYmFbIMbLYRSJqg8qiauLPxCb5UJ+d02y0/zgXxdZVK1suSExpA TZlxqEpywSOILPl1cF71wDo+sCzmtgCMyKgIeksoo473o0DS5bsYiM3XGeqEHgQX tnRn3yItUl0O6csys1JHH5zXUQurOILrBCZiNhoRyTYMEhkicGV6+5lqMPdKGrQd kcqtF/JUhB4nnte6wRkAuF7ug3orPzOJpSNEemIiDwSGNhPwvsbWHBuvLP1qX6R7 jyXNkdVz/XvvCgI7TUTLfvKIvSsNc/p7DFdEAMmWDlfC -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:21 2026 by rpki-client