This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa File: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (raw, json) Hash identifier: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg= Subject key identifier: 94:7A:8F:EB:F2:CD:20:98:C7:D8:36:35:9E:46:08:C3:FC:31:EA:F8 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D54A587B0EB042B319132DCFD329 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35744 IP address blocks: 91.238.176.0/24 maxlen: 24 185.28.56.0/24 maxlen: 24 2a00:9b60:5353::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d5:4a:58:7b:0e:b0:42:b3:19:13:2d:cf:d3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=947a8febf2cd2098c7d836359e4608c3fc31eaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:f5:0a:9b:36:f5:a6:86:b1:ce:2b:43:2a: 0d:84:e1:9f:93:7b:ef:f3:eb:8f:ab:21:69:4b:09: 8b:00:18:f6:5a:dd:0b:2d:31:25:07:49:bc:80:4a: 5c:0f:b8:15:5d:d4:9b:1c:71:fd:7b:22:72:00:92: 9e:d6:c3:47:73:2e:6a:cd:20:60:2b:1f:99:3c:84: b9:c4:d3:47:e4:59:ee:4e:a5:c0:36:db:26:df:28: 72:7a:43:93:79:c1:1e:fe:d6:07:4a:05:5c:df:63: 9f:22:a0:d3:16:1b:f9:4c:bf:3a:da:3e:3d:c2:48: 84:67:92:b1:0a:ab:53:d4:8e:08:32:cf:b5:82:96: 50:28:61:f7:35:32:1a:e5:99:5b:6c:0e:82:bb:d4: 0a:f7:36:da:42:a7:54:7c:e2:a5:ae:7a:44:6a:c9: 18:2b:7e:d3:58:95:a4:2d:1e:5f:bc:8d:5f:6c:96: 0f:69:fa:8e:46:7d:e6:6e:a7:63:35:81:13:2e:7a: 86:9a:ab:a4:ea:8f:21:fb:23:41:6a:6f:ea:e8:15: 21:fb:ec:7a:a5:f6:bb:86:12:78:ec:7a:f9:44:94: aa:bd:d9:11:6e:48:f4:42:c5:42:81:0e:4b:93:89: 16:72:00:4e:75:5f:15:8a:94:79:d9:cd:a9:91:7e: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7A:8F:EB:F2:CD:20:98:C7:D8:36:35:9E:46:08:C3:FC:31:EA:F8 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.176.0/24 185.28.56.0/24 IPv6: 2a00:9b60:5353::/48 Signature Algorithm: sha256WithRSAEncryption 29:d7:fb:e9:d1:06:7b:c0:28:ce:c4:c4:28:df:d4:ef:38:df: d7:c2:da:11:ff:b9:93:41:54:fb:2b:a9:2a:b8:a2:58:ac:03: 35:40:c6:61:8a:72:f1:15:ec:81:d1:c1:e1:8a:23:b2:0c:99: 5c:d9:e3:9d:2b:b1:a3:b7:56:60:39:85:14:fa:87:f9:07:82: 36:cc:f6:41:1d:44:c6:79:69:40:bc:e1:58:6d:da:2d:7b:77: 95:73:d3:60:11:b4:14:4c:46:70:bc:c8:19:ed:a5:15:fd:25: f5:57:ff:ab:fe:43:7c:40:79:ce:e4:48:9f:fe:a2:cd:d9:89: da:ed:79:45:89:9f:b7:9f:4e:72:61:d4:24:13:26:ec:aa:4a: a4:fd:a7:b1:e5:f4:72:3d:9a:9b:9b:6f:cc:f5:0e:fe:c3:91: 5a:e5:aa:8b:47:2a:87:cb:bc:af:bb:da:6c:d3:fd:d9:e5:b8: 95:98:76:87:b3:e0:aa:11:40:1a:bb:d2:40:6f:e5:e3:d8:50: f8:32:a8:07:5a:e1:e7:3c:ab:84:ae:9b:d4:dd:14:97:22:ed: 53:4a:87:ea:de:08:df:c8:dd:99:45:9c:66:d7:42:81:92:4b: 70:78:19:25:fe:6c:08:94:0b:ff:e7:c7:c2:ac:a7:19:73:99: 71:1d:9a:05 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/gNVKWHsOsEKzGRMtz9MpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDdhOGZlYmYyY2QyMDk4YzdkODM2MzU5ZTQ2MDhjM2ZjMzFlYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVf1Cps29aaGsc4rQyoNhOGfk3vv 8+uPqyFpSwmLABj2Wt0LLTElB0m8gEpcD7gVXdSbHHH9eyJyAJKe1sNHcy5qzSBg Kx+ZPIS5xNNH5FnuTqXANtsm3yhyekOTecEe/tYHSgVc32OfIqDTFhv5TL862j49 wkiEZ5KxCqtT1I4IMs+1gpZQKGH3NTIa5ZlbbA6Cu9QK9zbaQqdUfOKlrnpEaskY K37TWJWkLR5fvI1fbJYPafqORn3mbqdjNYETLnqGmquk6o8h+yNBam/q6BUh++x6 pfa7hhJ47Hr5RJSqvdkRbkj0QsVCgQ5Lk4kWcgBOdV8VipR52c2pkX78NQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJR6j+vyzSCYx9g2NZ5GCMP8Mer4MB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvbEhxUDZfTE5JSmpIMkRZMW5rWUl3X3d4NnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW+6wAwQA uRw4MA8EAgACMAkDBwAqAJtgU1MwDQYJKoZIhvcNAQELBQADggEBACnX++nRBnvA KM7ExCjf1O8439fC2hH/uZNBVPsrqSq4olisAzVAxmGKcvEV7IHRweGKI7IMmVzZ 450rsaO3VmA5hRT6h/kHgjbM9kEdRMZ5aUC84Vht2i17d5Vz02ARtBRMRnC8yBnt pRX9JfVX/6v+Q3xAec7kSJ/+os3ZidrteUWJn7efTnJh1CQTJuyqSqT9p7Hl9HI9 mpubb8z1Dv7DkVrlqotHKofLvK+72mzT/dnluJWYdoez4KoRQBq70kBv5ePYUPgy qAda4ec8q4Sum9TdFJci7VNKh+reCN/I3ZlFnGbXQoGSS3B4GSX+bAiUC//nx8Ks pxlzmXEdmgU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:52 2026 by rpki-client