This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/lZHttcoOJn14Hz_IeffOozmfqpU.roa File: lZHttcoOJn14Hz_IeffOozmfqpU.roa (raw, json) Hash identifier: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM= Subject key identifier: 95:91:ED:B5:CA:0E:26:7D:78:1F:3F:C8:79:F7:CE:A3:39:9F:AA:95 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A36D73F9E4BE774A92C36E38AA21A0 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/lZHttcoOJn14Hz_IeffOozmfqpU.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25467 IP address blocks: 45.153.126.0/24 maxlen: 24 46.183.184.0/24 maxlen: 24 46.183.185.0/24 maxlen: 24 92.243.65.0/24 maxlen: 24 185.193.50.0/24 maxlen: 24 188.190.24.0/24 maxlen: 24 2a03:f80:385::/48 maxlen: 48 2a03:f80:389::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6d:73:f9:e4:be:77:4a:92:c3:6e:38:aa:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9591edb5ca0e267d781f3fc879f7cea3399faa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:aa:6a:2a:d4:f1:31:24:c9:0b:31:e4:5c: ab:8d:ac:88:73:3e:93:3a:a3:bb:1d:f3:29:58:44: 40:f0:41:1c:d8:fb:45:0c:ee:95:5a:b2:be:43:36: 47:67:f2:c9:e9:5a:87:7d:f2:a2:f9:5f:32:d1:b8: df:a8:0d:6a:c0:39:5f:07:fe:b0:9e:ef:0e:ba:c4: 81:7d:3e:6e:02:46:60:63:bc:2c:50:a7:09:96:10: ca:d6:fe:b3:0b:34:21:28:51:df:fe:ae:01:97:a3: 99:93:6d:0f:ce:92:a0:30:e4:f5:88:9b:2e:5d:f4: 73:f8:3b:d9:01:07:6f:f8:d8:f4:7f:71:a0:4a:84: 9b:d7:17:13:aa:ac:d6:9a:f7:9d:92:0e:21:26:01: ff:d5:3e:06:e3:6f:07:47:4c:44:67:91:09:00:1a: 40:64:08:0e:e4:aa:c7:ec:52:43:ec:85:5b:b3:7d: dd:b2:cf:0c:06:aa:1a:38:67:3b:b2:c8:79:5c:17: 74:19:c6:db:ec:0c:1b:c0:95:96:40:c5:4d:68:d4: 65:97:c4:2b:c8:3f:c9:8a:86:26:46:a4:48:90:db: f3:90:0d:ef:81:44:9b:ef:df:de:5e:85:a1:1b:07: e5:e0:3c:99:7a:8f:75:b8:16:77:af:96:02:7f:37: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:91:ED:B5:CA:0E:26:7D:78:1F:3F:C8:79:F7:CE:A3:39:9F:AA:95 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/lZHttcoOJn14Hz_IeffOozmfqpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.126.0/24 46.183.184.0/23 92.243.65.0/24 185.193.50.0/24 188.190.24.0/24 IPv6: 2a03:f80:385::/48 2a03:f80:389::/48 Signature Algorithm: sha256WithRSAEncryption a8:aa:fc:ea:c4:7e:dc:2e:5c:a5:66:e0:69:87:1c:28:7e:4c: 3c:ad:ae:5d:08:33:bc:30:73:4f:11:9c:a0:89:57:3d:5d:b3: 86:0e:5d:c8:71:4f:dc:4c:ab:15:fa:1f:9a:eb:7b:7d:a8:bd: d6:b2:78:35:39:52:46:ff:7e:e1:29:26:7e:dd:a0:df:90:4d: a4:a4:1d:11:eb:a5:62:94:f9:9f:dc:43:a2:ba:43:99:90:e0: 1a:ff:2a:e6:f2:2a:8b:8d:03:ab:ea:11:97:33:c2:05:37:4f: 42:c0:88:83:43:3d:34:1f:84:8a:8e:ad:d5:f7:73:e7:31:00: 76:a0:4a:20:8d:c5:ab:8f:3d:80:9d:0d:d9:05:a1:d7:e7:8b: 75:45:96:0c:0a:1e:e7:c0:f4:5a:b8:4a:5b:7f:c1:1f:e7:d2: d7:11:79:ce:8d:d0:56:e3:17:ad:54:87:57:37:56:ff:4c:68: 3e:a8:52:7f:79:b0:69:54:89:d7:4d:71:13:0b:a2:59:25:1c: d6:2b:16:06:d2:5b:25:65:a2:cd:ca:f7:5b:8d:a5:27:0d:a1: 21:0e:16:fe:cd:a0:b9:a7:ab:73:9c:96:13:6f:c8:c5:e1:6b: 57:be:f8:de:f4:97:c2:c4:44:64:95:3d:26:d7:28:2d:77:df: da:62:e2:c1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt4o21z+eS+d0qSw244qiGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTkxZWRiNWNhMGUyNjdkNzgxZjNmYzg3OWY3Y2VhMzM5OWZhYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfGqairU8TEkyQsx5FyrjayIcz6T OqO7HfMpWERA8EEc2PtFDO6VWrK+QzZHZ/LJ6VqHffKi+V8y0bjfqA1qwDlfB/6w nu8OusSBfT5uAkZgY7wsUKcJlhDK1v6zCzQhKFHf/q4Bl6OZk20PzpKgMOT1iJsu XfRz+DvZAQdv+Nj0f3GgSoSb1xcTqqzWmvedkg4hJgH/1T4G428HR0xEZ5EJABpA ZAgO5KrH7FJD7IVbs33dss8MBqoaOGc7ssh5XBd0Gcbb7AwbwJWWQMVNaNRll8Qr yD/JioYmRqRIkNvzkA3vgUSb79/eXoWhGwfl4DyZeo91uBZ3r5YCfzcDkwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFJWR7bXKDiZ9eB8/yHn3zqM5n6qVMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvbFpIdHRjb09KbjE0SHpfSWVmZk9vem1mcXBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQALZl+AwQB Lre4AwQAXPNBAwQAucEyAwQAvL4YMBgEAgACMBIDBwAqAw+AA4UDBwAqAw+AA4kw DQYJKoZIhvcNAQELBQADggEBAKiq/OrEftwuXKVm4GmHHCh+TDytrl0IM7wwc08R nKCJVz1ds4YOXchxT9xMqxX6H5rre32ovdayeDU5Ukb/fuEpJn7doN+QTaSkHRHr pWKU+Z/cQ6K6Q5mQ4Br/KubyKouNA6vqEZczwgU3T0LAiINDPTQfhIqOrdX3c+cx AHagSiCNxauPPYCdDdkFodfni3VFlgwKHufA9Fq4Slt/wR/n0tcRec6N0FbjF61U h1c3Vv9MaD6oUn95sGlUiddNcRMLolklHNYrFgbSWyVlos3K91uNpScNoSEOFv7N oLmnq3OclhNvyMXha1e++N70l8LERGSVPSbXKC1339pi4sE= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:17 2026 by rpki-client