This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/lHfae3UMrtkbZl9pwmHCG7QPKCs.roa File: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (raw, json) Hash identifier: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI= Subject key identifier: 94:77:DA:7B:75:0C:AE:D9:1B:66:5F:69:C2:61:C2:1B:B4:0F:28:2B Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA5E24AFF852B97415EE6067DADD7 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/lHfae3UMrtkbZl9pwmHCG7QPKCs.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213938 IP address blocks: 192.109.147.0/24 maxlen: 24 2a07:8143::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:e2:4a:ff:85:2b:97:41:5e:e6:06:7d:ad:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9477da7b750caed91b665f69c261c21bb40f282b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:44:fd:02:7d:dd:f8:8d:6a:9f:13:a3:3a:c5: 4c:96:16:c3:a7:6a:19:45:91:09:e1:2d:08:4f:40: 15:f1:f0:f0:6d:cb:29:79:1c:c6:88:4a:cf:5c:11: 08:e3:1f:dc:c7:2d:b0:82:6e:49:08:69:7a:4c:3f: 4d:e6:85:98:bb:96:22:33:55:22:71:80:d6:ce:fa: 4e:db:ac:c0:90:7b:79:08:f2:89:b8:f5:06:2e:43: 7e:81:c4:06:67:ff:32:fd:c1:0d:b3:a1:47:a3:c4: 0e:c8:f7:b1:e6:d0:f0:4c:37:23:e6:6f:21:a4:64: ff:da:2c:23:90:20:8c:91:f8:6e:6e:26:9a:da:27: 24:af:33:7b:6f:53:16:65:6a:e3:40:45:a7:f4:b8: 1d:f0:66:62:e9:3d:83:64:64:a9:47:fb:27:12:61: aa:a3:ff:49:82:35:04:6b:a3:df:69:51:50:3a:83: 8b:fd:5c:fb:87:44:f8:15:3d:b2:5b:b9:33:a3:e6: d8:17:05:65:6e:b7:9b:7e:c0:30:c2:d7:0d:10:8c: 9e:eb:60:06:81:b7:69:de:98:ad:1f:66:7d:91:9c: 1b:37:45:90:5c:d6:da:3b:ad:62:3f:c3:bb:a4:6b: a0:8e:c1:7c:a9:a0:88:aa:1e:d5:d1:32:0a:e5:09: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:77:DA:7B:75:0C:AE:D9:1B:66:5F:69:C2:61:C2:1B:B4:0F:28:2B X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/lHfae3UMrtkbZl9pwmHCG7QPKCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.147.0/24 IPv6: 2a07:8143::/36 Signature Algorithm: sha256WithRSAEncryption 55:66:8d:45:0b:f8:9e:55:53:39:5b:f4:37:f5:fe:33:7c:f2: e9:72:ec:63:d8:7f:ac:dc:a1:26:ac:15:ea:d1:80:4b:f9:a4: 5c:9b:df:d7:83:a8:60:bf:e1:c2:80:75:c4:66:1e:9b:9c:78: 06:80:1d:bf:86:7b:7e:e0:60:90:de:52:77:87:1d:74:6a:51: 72:71:f0:42:ad:0d:89:34:9d:a4:05:6b:5b:22:2a:2e:4b:b9: c8:c5:53:eb:41:4f:6b:ae:6a:8e:70:da:f2:e8:3c:bb:d1:78: 13:8f:ff:a9:92:72:6a:4f:e7:b3:d8:0f:eb:75:c9:be:83:80: 00:fe:d7:fd:fb:25:19:13:58:d5:e2:c7:63:f6:44:6c:f6:a2: 4c:be:b8:c5:31:09:cf:46:fe:a5:71:58:16:23:10:dd:00:49: 1b:c3:90:03:b2:25:d4:78:f8:8b:8a:bb:e4:02:5a:fa:58:20: fc:df:b0:67:b6:94:da:47:fb:42:b4:90:d4:73:48:0e:9b:aa: 1e:81:72:8e:0f:bc:80:f9:2c:90:85:04:ec:17:e4:ac:82:40: d4:a5:c1:36:fe:17:96:73:3d:6e:2e:e3:b4:a1:14:5e:8a:f5: ae:a4:8a:63:51:f0:86:a0:7c:6c:3e:11:4c:51:3f:75:28:5f: a9:27:68:da -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fqXiSv+FK5dBXuYGfa3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc3ZGE3Yjc1MGNhZWQ5MWI2NjVmNjljMjYxYzIxYmI0MGYyODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40T9An3d+I1qnxOjOsVMlhbDp2oZ RZEJ4S0IT0AV8fDwbcspeRzGiErPXBEI4x/cxy2wgm5JCGl6TD9N5oWYu5YiM1Ui cYDWzvpO26zAkHt5CPKJuPUGLkN+gcQGZ/8y/cENs6FHo8QOyPex5tDwTDcj5m8h pGT/2iwjkCCMkfhubiaa2ickrzN7b1MWZWrjQEWn9Lgd8GZi6T2DZGSpR/snEmGq o/9JgjUEa6PfaVFQOoOL/Vz7h0T4FT2yW7kzo+bYFwVlbrebfsAwwtcNEIye62AG gbdp3pitH2Z9kZwbN0WQXNbaO61iP8O7pGugjsF8qaCIqh7V0TIK5QlpSQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJR32nt1DK7ZG2ZfacJhwhu0DygrMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvbEhmYWUzVU1ydGtiWmw5cHdtSENHN1FQS0NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwG2TMA4E AgACMAgDBgQqB4FDADANBgkqhkiG9w0BAQsFAAOCAQEAVWaNRQv4nlVTOVv0N/X+ M3zy6XLsY9h/rNyhJqwV6tGAS/mkXJvf14OoYL/hwoB1xGYem5x4BoAdv4Z7fuBg kN5Sd4cddGpRcnHwQq0NiTSdpAVrWyIqLku5yMVT60FPa65qjnDa8ug8u9F4E4// qZJyak/ns9gP63XJvoOAAP7X/fslGRNY1eLHY/ZEbPaiTL64xTEJz0b+pXFYFiMQ 3QBJG8OQA7Il1Hj4i4q75AJa+lgg/N+wZ7aU2kf7QrSQ1HNIDpuqHoFyjg+8gPks kIUE7BfkrIJA1KXBNv4XlnM9bi7jtKEUXor1rqSKY1HwhqB8bD4RTFE/dShfqSdo 2g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:51 2026 by rpki-client