This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/lt2RQoiJxINGyPOZ-bRlph3vQrg.roa File: lt2RQoiJxINGyPOZ-bRlph3vQrg.roa (raw, json) Hash identifier: CGu5ggy6o1wED0YF45U1fR3Q8X7j53Rf+ZjOfgKxzaY= Subject key identifier: 96:DD:91:42:88:89:C4:83:46:C8:F3:99:F9:B4:65:A6:1D:EF:42:B8 Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Certificate serial: 019B7759561B687FFC9E92A96B772C22A282 Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/lt2RQoiJxINGyPOZ-bRlph3vQrg.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57814 IP address blocks: 45.138.44.0/22 maxlen: 32 45.138.44.0/24 maxlen: 32 45.138.45.0/24 maxlen: 32 45.138.46.0/24 maxlen: 32 45.138.47.0/24 maxlen: 32 185.110.93.0/24 maxlen: 32 195.69.140.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:1b:68:7f:fc:9e:92:a9:6b:77:2c:22:a2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96dd91428889c48346c8f399f9b465a61def42b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:1a:0d:f7:f6:41:de:42:79:d7:a6:58:83: 39:b2:ca:f7:7e:fe:e9:fa:af:fe:b3:38:6f:99:a8: 31:7f:de:c6:f2:e2:80:aa:e2:3e:bf:05:ca:91:0a: 01:51:dc:50:ad:12:bd:3e:00:f9:9e:e1:2d:9b:a4: 79:69:b3:ea:cc:3a:14:8c:48:a3:72:00:88:19:b7: 40:1b:a0:15:52:63:be:55:32:b8:25:52:5c:6f:17: 29:dc:4d:5f:34:13:3a:cb:14:03:25:af:5f:0b:ce: bd:c4:4c:b2:aa:f7:7d:bc:2d:c6:e5:f4:bc:16:ee: b6:7b:1b:90:ef:a9:bf:7c:7c:8b:4d:5b:8e:ab:9a: 07:71:c8:99:8e:3f:3c:90:b2:fa:71:1f:6a:2d:49: 25:9a:4d:73:3f:77:1b:45:15:19:e2:e8:4c:7f:c1: a6:d7:d5:53:2d:23:5b:45:5d:7f:c8:80:4c:db:ab: f0:c0:f4:7a:fb:70:79:86:17:2f:21:d2:4f:c9:ba: 7e:e4:7c:ff:33:21:c0:fd:48:c3:0c:03:91:91:6c: 9e:86:df:c0:07:e6:19:41:02:fa:23:79:83:4d:87: d5:cf:19:e6:bf:6c:10:34:8a:6c:9d:57:b3:24:26: 83:5a:bb:eb:4f:c2:4c:b9:1f:5c:6f:3e:27:d3:eb: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:91:42:88:89:C4:83:46:C8:F3:99:F9:B4:65:A6:1D:EF:42:B8 X509v3 Authority Key Identifier: keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/lt2RQoiJxINGyPOZ-bRlph3vQrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.44.0/22 185.110.93.0/24 195.69.140.0/22 Signature Algorithm: sha256WithRSAEncryption 36:85:df:76:e1:e9:88:56:dc:38:14:82:09:c3:e3:15:16:8c: 73:0d:18:b3:de:d2:1d:b9:34:9d:7d:58:44:bf:c2:45:57:bf: 36:b6:08:0d:b7:1c:e1:03:9a:98:eb:3f:46:07:df:be:ac:f7: ae:7f:98:b9:19:ac:d6:b6:ac:73:21:07:da:6d:37:31:a1:54: d6:d9:84:a5:62:4a:47:bd:85:f1:6b:cf:73:9b:3f:85:91:60: 83:b9:77:71:7d:e2:9d:90:45:ad:57:42:a6:b3:98:59:05:9e: 32:c6:e3:d4:f6:df:50:af:6e:bc:b7:ab:14:24:3d:5d:4b:9f: a3:77:71:b3:9b:86:a3:64:91:10:57:90:cb:4c:15:8e:f6:2b: c3:96:51:98:72:e2:7d:3f:75:25:f5:5a:6f:69:f1:3b:e7:12: 2b:b0:9c:7a:4d:db:e5:59:d5:06:4e:3f:ab:18:e5:c5:74:4f: ee:5b:d5:5d:dc:6f:a4:10:2d:34:66:96:b8:0a:b3:a5:7d:23: 54:fe:f9:35:4d:35:e8:4c:3d:97:fb:12:5a:c4:e7:6e:49:e8: 28:a2:e0:a4:2c:44:13:48:3e:5c:82:53:58:0a:53:ea:06:95: fc:eb:e1:3f:98:18:32:be:bb:d2:69:e5:e2:19:ed:01:3d:ab: 11:51:9c:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WVYbaH/8npKpa3csIqKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi NDFhNGUwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRkOTE0Mjg4ODljNDgzNDZjOGYzOTlmOWI0NjVhNjFkZWY0MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTQaDff2Qd5CedemWIM5ssr3fv7p +q/+szhvmagxf97G8uKAquI+vwXKkQoBUdxQrRK9PgD5nuEtm6R5abPqzDoUjEij cgCIGbdAG6AVUmO+VTK4JVJcbxcp3E1fNBM6yxQDJa9fC869xEyyqvd9vC3G5fS8 Fu62exuQ76m/fHyLTVuOq5oHcciZjj88kLL6cR9qLUklmk1zP3cbRRUZ4uhMf8Gm 19VTLSNbRV1/yIBM26vwwPR6+3B5hhcvIdJPybp+5Hz/MyHA/UjDDAORkWyeht/A B+YZQQL6I3mDTYfVzxnmv2wQNIpsnVezJCaDWrvrT8JMuR9cbz4n0+uLUwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJbdkUKIicSDRsjzmfm0ZaYd70K4MB8GA1UdIwQY MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt NDRmZGU5NmI4YWVjLzEvbHQyUlFvaUp4SU5HeVBPWi1iUmxwaDN2UXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYosAwQA uW5dAwQCw0WMMA0GCSqGSIb3DQEBCwUAA4IBAQA2hd924emIVtw4FIIJw+MVFoxz DRiz3tIduTSdfVhEv8JFV782tggNtxzhA5qY6z9GB9++rPeuf5i5GazWtqxzIQfa bTcxoVTW2YSlYkpHvYXxa89zmz+FkWCDuXdxfeKdkEWtV0Kms5hZBZ4yxuPU9t9Q r268t6sUJD1dS5+jd3Gzm4ajZJEQV5DLTBWO9ivDllGYcuJ9P3Ul9VpvafE75xIr sJx6TdvlWdUGTj+rGOXFdE/uW9Vd3G+kEC00Zpa4CrOlfSNU/vk1TTXoTD2X+xJa xOduSegoouCkLEQTSD5cglNYClPqBpX86+E/mBgyvrvSaeXiGe0BPasRUZxe -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:04 2026 by rpki-client