This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa File: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (raw, json) Hash identifier: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds= Subject key identifier: 94:76:7C:36:8D:28:55:60:1F:81:31:94:8E:36:46:B7:24:59:85:6A Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b Certificate serial: 019B791060F24245140688029B08ACC38243 Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 195.68.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:f2:42:45:14:06:88:02:9b:08:ac:c3:82:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94767c368d2855601f8131948e3646b72459856a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:db:1e:25:7d:50:fc:9a:48:14:4b:25:f1:a7: d2:97:e7:66:12:fc:30:9e:91:c0:f7:f1:0a:bf:a0: ec:cf:4e:fe:42:7d:26:da:a4:a5:f8:45:73:57:a9: 2c:2f:92:df:be:1a:f9:e1:6a:95:d6:50:86:8a:b6: db:70:60:95:d3:bf:99:9d:b0:7a:41:e2:ec:50:f7: a7:cc:dc:f4:55:b5:40:71:b7:05:13:f7:66:48:6b: 52:5c:66:72:51:0d:e2:31:13:0e:8c:1e:13:6f:11: 36:79:6a:12:b7:4e:3d:01:22:03:9a:b0:52:ee:cd: 7d:a8:57:ba:81:3f:6c:b1:20:b4:df:0a:93:d8:9b: 32:07:dc:1d:da:81:1e:44:59:a4:3a:95:6d:87:d9: 2a:1e:b3:33:ce:4c:5c:35:c2:28:b2:c8:4d:49:13: e6:79:e2:0c:07:9f:5c:56:24:e7:cc:b1:a1:8a:c1: fa:ff:37:02:cf:64:4b:12:83:04:7c:cd:20:bc:32: 0d:39:e7:03:81:86:21:4e:14:fd:fa:52:fa:bc:30: 78:7b:6f:04:5a:98:68:31:cf:8c:bc:ba:4b:ec:62: e9:02:d6:03:31:e4:5e:7f:f0:0b:46:b0:88:d7:3c: fc:2d:01:aa:ee:60:3d:bc:f6:9b:23:29:fc:a5:56: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:76:7C:36:8D:28:55:60:1F:81:31:94:8E:36:46:B7:24:59:85:6A X509v3 Authority Key Identifier: keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.68.244.0/24 Signature Algorithm: sha256WithRSAEncryption 87:2e:6d:77:5d:c2:37:d2:dc:f6:6e:ab:8b:df:18:28:f5:76: 85:95:ef:e6:4e:22:be:ab:b5:a2:64:5b:b0:3b:fc:45:72:b5: 9e:06:4b:e5:06:5f:0a:52:2f:05:a9:a9:11:7e:47:33:d0:49: f7:ab:3f:36:0a:b3:6b:c1:4c:b0:d5:cb:50:ba:fc:f3:27:0d: 96:62:ca:a0:bb:ab:c1:da:30:f1:d1:8a:67:e1:e4:7a:33:93: c3:74:0a:94:e0:d5:f5:b7:35:41:32:a7:f5:37:fa:83:54:ca: 07:14:8b:d4:7c:fa:f6:1a:99:22:67:0a:81:73:f1:92:d6:e7: 7e:73:53:14:ef:85:7f:7c:6e:03:6f:7f:9e:ba:fe:bc:48:e5: fd:0f:cf:82:3f:13:0a:69:af:9a:bf:5c:b5:ed:ca:cc:76:97: 82:33:1b:65:51:f7:9d:8b:71:c3:4f:16:24:db:76:b1:7a:87: 55:65:83:5e:9c:6f:d9:3a:1c:1c:ab:36:9d:fa:c4:ab:ad:c9: fd:b1:e6:a5:83:41:0a:c7:60:8f:90:1b:84:d0:2a:fe:f4:ad: d3:84:f4:84:18:28:6d:3d:ea:13:d3:fc:f6:2f:ce:39:38:ac: 1e:67:87:99:6f:68:e3:e5:9b:94:bf:a0:9d:c9:32:29:7f:b8: 44:ef:da:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGDyQkUUBogCmwisw4JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi ZmNiNWIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc2N2MzNjhkMjg1NTYwMWY4MTMxOTQ4ZTM2NDZiNzI0NTk4NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tseJX1Q/JpIFEsl8afSl+dmEvww npHA9/EKv6Dsz07+Qn0m2qSl+EVzV6ksL5Lfvhr54WqV1lCGirbbcGCV07+ZnbB6 QeLsUPenzNz0VbVAcbcFE/dmSGtSXGZyUQ3iMRMOjB4TbxE2eWoSt049ASIDmrBS 7s19qFe6gT9ssSC03wqT2JsyB9wd2oEeRFmkOpVth9kqHrMzzkxcNcIosshNSRPm eeIMB59cViTnzLGhisH6/zcCz2RLEoMEfM0gvDINOecDgYYhThT9+lL6vDB4e28E WphoMc+MvLpL7GLpAtYDMeRef/ALRrCI1zz8LQGq7mA9vPabIyn8pVYOhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJR2fDaNKFVgH4ExlI42RrckWYVqMB8GA1UdIwQY MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt YTIzNDFkM2JiMDUzLzEvbEhaOE5vMG9WV0FmZ1RHVWpqWkd0eVJaaFdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0T0MA0G CSqGSIb3DQEBCwUAA4IBAQCHLm13XcI30tz2bquL3xgo9XaFle/mTiK+q7WiZFuw O/xFcrWeBkvlBl8KUi8FqakRfkcz0En3qz82CrNrwUyw1ctQuvzzJw2WYsqgu6vB 2jDx0Ypn4eR6M5PDdAqU4NX1tzVBMqf1N/qDVMoHFIvUfPr2GpkiZwqBc/GS1ud+ c1MU74V/fG4Db3+euv68SOX9D8+CPxMKaa+av1y17crMdpeCMxtlUfedi3HDTxYk 23axeodVZYNenG/ZOhwcqzad+sSrrcn9sealg0EKx2CPkBuE0Cr+9K3ThPSEGCht PeoT0/z2L845OKweZ4eZb2jj5ZuUv6CdyTIpf7hE79qg -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:10 2026 by rpki-client