This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa File: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (raw, json) Hash identifier: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw= Subject key identifier: 94:7A:BF:82:41:AD:27:BC:4F:A8:09:21:53:DC:AE:A2:A3:42:3D:3A Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019B7F82C7637381E57D15C6EAC7533C9E18 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa Signing time: Fri 02 Jan 2026 16:20:35 +0000 ROA not before: Fri 02 Jan 2026 16:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6424 IP address blocks: 5.183.96.0/22 maxlen: 24 103.243.124.0/22 maxlen: 24 146.19.95.0/24 maxlen: 24 146.19.249.0/24 maxlen: 24 185.112.251.0/24 maxlen: 24 185.162.183.0/24 maxlen: 24 185.166.144.0/24 maxlen: 24 188.93.192.0/21 maxlen: 24 188.93.196.0/24 maxlen: 24 188.93.198.0/24 maxlen: 24 188.93.199.0/24 maxlen: 24 193.107.13.0/24 maxlen: 24 193.109.184.0/21 maxlen: 24 193.109.184.0/24 maxlen: 24 193.163.151.0/24 maxlen: 24 212.52.23.0/24 maxlen: 24 2001:b18::/32 maxlen: 48 2001:b18:a::/48 maxlen: 48 2001:b18:b::/48 maxlen: 48 2001:b18:1000::/48 maxlen: 48 2001:b18:1001::/48 maxlen: 48 2001:b18:1002::/48 maxlen: 48 2001:b18:1008::/48 maxlen: 48 2001:b18:1012::/48 maxlen: 48 2001:b18:1016::/48 maxlen: 48 2001:b18:1018::/48 maxlen: 48 2001:b18:1020::/48 maxlen: 48 2001:b18:1031::/48 maxlen: 48 2001:b18:1091::/48 maxlen: 48 2a0b:e740::/29 maxlen: 29 2a0d:82c0::/29 maxlen: 48 2a0d:82c0::/32 maxlen: 32 2a0d:82c7:d::/48 maxlen: 48 2a0e:5f00::/29 maxlen: 48 2a0e:5f00::/32 maxlen: 32 2a0f:7700::/29 maxlen: 29 2a0f:8900::/29 maxlen: 29 2a0f:d300::/29 maxlen: 29 2a10:ee40::/29 maxlen: 29 2a11:c00::/29 maxlen: 29 2a12:c1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c7:63:73:81:e5:7d:15:c6:ea:c7:53:3c:9e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=947abf8241ad27bc4fa8092153dcaea2a3423d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:c2:2a:4d:22:fc:f7:05:65:36:d4:cf:d4: c1:87:be:a5:3b:ad:ca:c7:9f:ba:e3:d4:14:c6:dd: 25:ab:a1:38:c0:f9:cc:81:67:cd:d0:b1:82:29:8a: 08:45:a8:b5:04:51:14:18:3d:0d:b3:5a:62:00:f0: 0a:ee:dc:63:75:b5:56:07:9a:a3:22:e3:b3:6e:72: f2:bc:1c:92:37:24:d6:d5:b8:7c:7d:99:b7:bc:b1: d3:34:24:4b:00:b9:32:91:8b:66:56:ae:95:1f:ef: 15:e1:8a:71:08:c5:29:13:9a:08:b1:80:97:3b:d8: 29:3c:68:64:e2:3e:84:76:04:17:e5:15:25:34:d0: 1e:e8:ea:10:4f:b7:4a:66:97:9b:ea:2b:9c:8c:88: 24:1e:b7:d7:2d:2c:44:21:17:3b:36:f9:fa:00:86: 67:2b:4d:5f:93:1e:88:1b:cd:c5:0a:8e:de:1d:ed: 68:db:96:e9:3d:ca:bb:c3:f9:6c:e9:3f:27:11:06: 53:9e:15:67:77:e6:ee:c9:41:fb:9b:e3:6a:63:bb: ef:75:0a:ef:f5:91:48:a5:af:e1:6e:da:fb:3b:1c: 18:6a:9e:f1:ce:ae:91:ea:d6:7d:ae:56:80:e3:dc: 0d:e4:15:0f:31:bc:dd:d9:d0:84:e5:e8:58:5b:13: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7A:BF:82:41:AD:27:BC:4F:A8:09:21:53:DC:AE:A2:A3:42:3D:3A X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.96.0/22 103.243.124.0/22 146.19.95.0/24 146.19.249.0/24 185.112.251.0/24 185.162.183.0/24 185.166.144.0/24 188.93.192.0/21 193.107.13.0/24 193.109.184.0/21 193.163.151.0/24 212.52.23.0/24 IPv6: 2001:b18::/32 2a0b:e740::/29 2a0d:82c0::/29 2a0e:5f00::/29 2a0f:7700::/29 2a0f:8900::/29 2a0f:d300::/29 2a10:ee40::/29 2a11:c00::/29 2a12:c1c0::/29 Signature Algorithm: sha256WithRSAEncryption 7c:2d:ff:c1:df:9a:00:6a:f3:6e:52:b9:21:75:0a:54:a7:90: f5:0a:65:c0:38:30:b3:0d:20:cd:90:83:d5:65:3d:79:46:90: 77:da:fb:a7:25:bf:41:47:7c:00:8b:c1:ee:f8:0d:ed:26:d7: b4:27:21:91:bf:6f:2c:d0:5a:d6:c9:98:72:0f:f0:b8:d4:fb: 62:11:e0:be:c8:0c:78:ab:78:9c:3b:ad:5f:b6:5b:bd:fc:7c: 8f:5b:30:97:a5:d0:2f:bf:fc:96:12:67:30:47:b1:4b:a8:da: 16:4c:52:1b:5e:8c:7e:fc:f6:46:8f:c0:70:14:fc:fa:c1:8d: ed:20:d8:30:9e:84:c3:92:17:e7:d5:34:0a:eb:a4:da:bc:bf: 98:0c:80:98:7b:ba:9e:cd:b7:2b:7d:df:73:97:88:55:06:1d: 71:3d:e3:2e:27:89:d4:21:5d:d8:2d:00:2c:7a:d7:1b:e0:0a: bd:72:ef:69:73:30:b4:3a:a3:54:9d:eb:b4:8b:76:78:8f:24: 62:f0:02:81:b9:a4:fe:43:6b:68:97:72:0c:4c:d7:89:87:bd: bb:b9:8d:da:15:d9:3b:69:54:45:67:a3:f4:47:02:62:e0:25: 7f:fa:e2:b4:dc:49:53:46:91:09:69:83:07:f3:13:90:41:5a: 01:27:cd:5b -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt/gsdjc4HlfRXG6sdTPJ4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDdhYmY4MjQxYWQyN2JjNGZhODA5MjE1M2RjYWVhMmEzNDIzZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHCKk0i/PcFZTbUz9TBh76lO63K x5+649QUxt0lq6E4wPnMgWfN0LGCKYoIRai1BFEUGD0Ns1piAPAK7txjdbVWB5qj IuOzbnLyvBySNyTW1bh8fZm3vLHTNCRLALkykYtmVq6VH+8V4YpxCMUpE5oIsYCX O9gpPGhk4j6EdgQX5RUlNNAe6OoQT7dKZpeb6iucjIgkHrfXLSxEIRc7Nvn6AIZn K01fkx6IG83FCo7eHe1o25bpPcq7w/ls6T8nEQZTnhVnd+buyUH7m+NqY7vvdQrv 9ZFIpa/hbtr7OxwYap7xzq6R6tZ9rlaA49wN5BUPMbzd2dCE5ehYWxNuLwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFJR6v4JBrSe8T6gJIVPcrqKjQj06MB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbEhxX2drR3RKN3hQcUFraFU5eXVvcU5DUFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjBOBAIAATBIAwQCBbdg AwQCZ/N8AwQAkhNfAwQAkhP5AwQAuXD7AwQAuaK3AwQAuaaQAwQDvF3AAwQAwWsN AwQDwW24AwQAwaOXAwQA1DQXMEwEAgACMEYDBQAgAQsYAwUDKgvnQAMFAyoNgsAD BQMqDl8AAwUDKg93AAMFAyoPiQADBQMqD9MAAwUDKhDuQAMFAyoRDAADBQMqEsHA MA0GCSqGSIb3DQEBCwUAA4IBAQB8Lf/B35oAavNuUrkhdQpUp5D1CmXAODCzDSDN kIPVZT15RpB32vunJb9BR3wAi8Hu+A3tJte0JyGRv28s0FrWyZhyD/C41PtiEeC+ yAx4q3icO61ftlu9/HyPWzCXpdAvv/yWEmcwR7FLqNoWTFIbXox+/PZGj8BwFPz6 wY3tINgwnoTDkhfn1TQK66TavL+YDICYe7qezbcrfd9zl4hVBh1xPeMuJ4nUIV3Y LQAsetcb4Aq9cu9pczC0OqNUneu0i3Z4jyRi8AKBuaT+Q2tol3IMTNeJh727uY3a Fdk7aVRFZ6P0RwJi4CV/+uK03ElTRpEJaYMH8xOQQVoBJ81b -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:21 2026 by rpki-client