This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/18kHGWCAiXEwLk5tToiHTfxt3EM.roa File: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (raw, json) Hash identifier: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w= Subject key identifier: D7:C9:07:19:60:80:89:71:30:2E:4E:6D:4E:88:87:4D:FC:6D:DC:43 Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019BB7D95D39A170E81A567EB5430F1F9179 Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/18kHGWCAiXEwLk5tToiHTfxt3EM.roa Signing time: Tue 13 Jan 2026 14:53:54 +0000 ROA not before: Tue 13 Jan 2026 14:53:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216083 IP address blocks: 5.42.148.0/23 maxlen: 24 195.68.234.0/23 maxlen: 23 195.68.234.0/24 maxlen: 24 195.68.235.0/24 maxlen: 24 2a14:1a00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:d9:5d:39:a1:70:e8:1a:56:7e:b5:43:0f:1f:91:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Jan 13 14:53:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7c9071960808971302e4e6d4e88874dfc6ddc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:38:bc:3f:42:01:fb:48:59:bd:46:39:58: 37:11:03:02:f5:bc:f4:ad:b8:c9:a5:e7:57:fc:80: b9:4a:8e:ff:fc:a6:a7:de:71:76:10:4a:50:81:d2: 95:c2:ea:40:9f:07:50:ee:ab:bf:c4:ec:f2:da:09: 6b:24:c3:bf:8b:77:28:d5:0d:79:22:42:0e:36:23: 81:0c:33:1a:89:b5:cb:ff:17:6c:b2:fb:00:3c:1e: b2:73:36:be:9e:43:75:b6:54:e1:4a:99:8e:fe:be: ec:c5:8a:0e:9d:a2:6f:89:ea:a2:bd:2f:fe:21:ad: 87:af:d2:07:b1:06:91:5c:8f:df:b2:bc:b1:1a:5d: 24:66:17:a0:38:91:bd:0d:2f:65:a3:95:32:4a:6f: 95:3d:a1:e9:54:e5:48:ba:43:72:29:c7:5b:66:db: 06:0e:c6:c2:91:7d:8e:fe:a4:a4:ed:38:e1:df:54: 7f:70:51:3c:14:8c:6b:65:89:ec:7e:b8:1f:c9:d1: 4f:64:8d:ae:8e:39:b2:91:27:db:75:22:bf:55:0e: 0e:e4:f0:5b:43:63:b1:0d:ce:19:17:eb:7d:b5:68: 3d:7c:f2:1b:8e:5b:e3:c1:46:0f:d8:59:f8:ae:a5: 21:e9:1f:c9:44:0a:71:34:a3:85:30:31:09:8b:d8: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:07:19:60:80:89:71:30:2E:4E:6D:4E:88:87:4D:FC:6D:DC:43 X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/18kHGWCAiXEwLk5tToiHTfxt3EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.148.0/23 195.68.234.0/23 IPv6: 2a14:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 42:81:47:07:fc:43:3b:3f:80:2e:f5:b2:36:3e:85:ba:34:6f: 0b:c7:60:60:3e:8a:73:49:2e:05:c0:59:a1:b9:58:49:a4:7a: c8:ab:78:f5:b1:69:ac:d1:43:9c:7d:c2:27:52:7d:ee:1d:ce: b0:31:eb:d5:77:bb:84:b6:56:8d:7e:fa:46:fc:7b:a1:5f:c6: 07:31:d6:aa:c4:f3:f9:3d:3a:20:57:62:1f:e6:f9:06:dc:72: ca:63:c5:ac:ad:ae:8b:4d:53:b8:17:df:9d:f9:83:27:36:f7: 0e:6f:3c:f9:e1:44:c3:3a:79:68:52:c2:c3:3f:38:8d:30:db: c6:e6:2d:20:f0:3b:3c:c5:49:2f:ce:ce:cb:e3:11:c2:58:20: 2c:ff:9e:27:50:a7:73:6d:7c:fb:40:9f:29:6c:20:bf:32:fd: 6b:93:25:c6:a2:09:f1:22:58:89:63:ba:9e:8e:a6:f7:91:7f: b0:f6:7b:33:13:bf:9b:e8:ca:2f:39:0f:f5:7d:99:3c:88:3a: d6:c7:e5:2f:71:93:d9:bb:4c:b9:d6:13:b0:52:ac:3d:43:95: 63:e7:e6:fb:bb:01:03:fd:b5:5f:e1:9e:73:f9:82:8f:1a:da: 91:37:24:2a:ab:a0:64:86:0c:a9:1d:9b:48:4e:ef:92:53:0b: 3f:e1:20:cd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZu32V05oXDoGlZ+tUMPH5F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjYwMTEzMTQ1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2M5MDcxOTYwODA4OTcxMzAyZTRlNmQ0ZTg4ODc0ZGZjNmRkYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LA4vD9CAftIWb1GOVg3EQMC9bz0 rbjJpedX/IC5So7//Kan3nF2EEpQgdKVwupAnwdQ7qu/xOzy2glrJMO/i3co1Q15 IkIONiOBDDMaibXL/xdssvsAPB6ycza+nkN1tlThSpmO/r7sxYoOnaJvieqivS/+ Ia2Hr9IHsQaRXI/fsryxGl0kZhegOJG9DS9lo5UySm+VPaHpVOVIukNyKcdbZtsG DsbCkX2O/qSk7Tjh31R/cFE8FIxrZYnsfrgfydFPZI2ujjmykSfbdSK/VQ4O5PBb Q2OxDc4ZF+t9tWg9fPIbjlvjwUYP2Fn4rqUh6R/JRApxNKOFMDEJi9inYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNfJBxlggIlxMC5ObU6Ih038bdxDMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvMThrSEdXQ0FpWEV3TGs1dFRvaUhUZnh0M0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBBSqUAwQB w0TqMA0EAgACMAcDBQMqFBoAMA0GCSqGSIb3DQEBCwUAA4IBAQBCgUcH/EM7P4Au 9bI2PoW6NG8Lx2BgPopzSS4FwFmhuVhJpHrIq3j1sWms0UOcfcInUn3uHc6wMevV d7uEtlaNfvpG/HuhX8YHMdaqxPP5PTogV2If5vkG3HLKY8Wsra6LTVO4F9+d+YMn NvcObzz54UTDOnloUsLDPziNMNvG5i0g8Ds8xUkvzs7L4xHCWCAs/54nUKdzbXz7 QJ8pbCC/Mv1rkyXGognxIliJY7qejqb3kX+w9nszE7+b6MovOQ/1fZk8iDrWx+Uv cZPZu0y51hOwUqw9Q5Vj5+b7uwED/bVf4Z5z+YKPGtqRNyQqq6BkhgypHZtITu+S Uws/4SDN -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:33 2026 by rpki-client