This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/lFgdap73IKN-x6XHvGiMEA7qWxg.roa File: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (raw, json) Hash identifier: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU= Subject key identifier: 94:58:1D:6A:9E:F7:20:A3:7E:C7:A5:C7:BC:68:8C:10:0E:EA:5B:18 Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab Certificate serial: 019B7C7FE3E01954A1F7AAA9521DBE7AD78D Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/lFgdap73IKN-x6XHvGiMEA7qWxg.roa Signing time: Fri 02 Jan 2026 02:18:34 +0000 ROA not before: Fri 02 Jan 2026 02:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.110.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e3:e0:19:54:a1:f7:aa:a9:52:1d:be:7a:d7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94581d6a9ef720a37ec7a5c7bc688c100eea5b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:a8:ed:5b:10:d4:78:3a:84:29:b8:51:a9: 7e:e1:ee:4e:57:dd:4c:e9:6c:09:e4:9b:fa:fd:0f: 81:eb:8f:de:26:9c:fd:4b:d4:1b:cb:46:15:e7:8e: 97:a0:80:ef:59:4d:1c:fd:16:d5:04:cb:65:f7:b8: 38:2f:6b:fe:9a:ca:1d:cf:ec:b8:29:18:b7:b2:bd: 09:3c:31:a8:98:a9:c6:e2:d6:45:52:04:a5:28:d4: f5:cb:39:4b:ce:e0:a8:f1:41:2b:31:b4:bb:04:64: 4d:b2:78:cb:27:fe:5b:96:d1:34:4e:dd:e9:56:6a: c2:ef:eb:1f:c5:e0:00:d8:73:62:a3:5b:8b:ab:ca: 54:21:08:d8:44:11:c5:2b:7b:b8:1b:4d:8e:96:10: bc:0e:72:a8:89:5e:16:f2:e4:d6:0b:c0:ad:c4:c3: 26:42:3d:62:24:7a:0a:6c:6a:9c:c7:83:4d:bb:3d: b1:e9:81:b4:b7:80:39:c5:11:74:15:9e:17:cd:94: 46:dd:38:a8:b7:2e:17:5a:33:b3:a9:fb:48:86:da: c4:b9:54:a4:52:05:9f:03:57:1b:39:c1:95:9e:49: df:98:51:4b:37:96:e5:34:57:fe:ba:6b:7d:24:9e: 86:2c:93:3a:9f:b0:80:76:89:49:f2:1d:79:53:e8: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:58:1D:6A:9E:F7:20:A3:7E:C7:A5:C7:BC:68:8C:10:0E:EA:5B:18 X509v3 Authority Key Identifier: keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/lFgdap73IKN-x6XHvGiMEA7qWxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.196.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:ea:02:e7:46:1e:8b:1f:97:f7:45:bd:78:1f:ec:dd:16:67: a8:9d:2a:f9:0b:77:88:69:f1:b0:27:7d:ad:5f:f8:1c:1e:a8: 2f:df:cc:21:5c:6a:fc:6f:44:4c:0b:9b:3f:d0:32:a5:cf:ed: b0:55:27:64:14:d1:38:e3:dc:cc:a9:64:11:0d:5c:f8:c6:81: 97:b4:69:c3:d1:d3:1a:79:c6:23:e2:f2:3b:4d:77:7b:f5:74: 9c:64:1f:69:51:f9:1b:88:b2:a6:cd:38:f7:f9:d6:62:55:e0: 72:32:0d:b3:f7:26:15:d0:84:ef:fc:59:dc:73:cf:2d:0e:12: 75:18:14:e1:a9:83:c3:e4:fa:5a:1a:28:52:bb:a1:40:31:8d: dc:7c:b6:64:61:70:a6:3c:0d:ba:0a:d8:e8:6e:c8:ac:0d:8e: b8:5a:c3:26:a7:cc:31:87:ec:c2:6a:ab:75:f3:7b:0a:3a:8c: 53:e2:d7:a5:f7:c5:db:1a:c4:af:3e:37:a0:69:b6:46:5f:c3: d8:0e:12:d7:6f:dc:b2:76:30:e3:c5:b0:49:29:50:68:64:86: 89:46:51:6d:e3:7a:b7:c4:99:7f:e4:72:de:49:f9:e2:1c:7c: 23:73:77:b0:09:cb:29:4f:96:d1:fb:a6:70:7a:fe:11:f6:05: fe:ef:df:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f+PgGVSh96qpUh2+eteNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk OTlhYWIwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDU4MWQ2YTllZjcyMGEzN2VjN2E1YzdiYzY4OGMxMDBlZWE1YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Wo7VsQ1Hg6hCm4Ual+4e5OV91M 6WwJ5Jv6/Q+B64/eJpz9S9Qby0YV546XoIDvWU0c/RbVBMtl97g4L2v+msodz+y4 KRi3sr0JPDGomKnG4tZFUgSlKNT1yzlLzuCo8UErMbS7BGRNsnjLJ/5bltE0Tt3p VmrC7+sfxeAA2HNio1uLq8pUIQjYRBHFK3u4G02OlhC8DnKoiV4W8uTWC8CtxMMm Qj1iJHoKbGqcx4NNuz2x6YG0t4A5xRF0FZ4XzZRG3Tioty4XWjOzqftIhtrEuVSk UgWfA1cbOcGVnknfmFFLN5blNFf+umt9JJ6GLJM6n7CAdolJ8h15U+h9kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRYHWqe9yCjfselx7xojBAO6lsYMB8GA1UdIwQY MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt ZGRlMGQxMjczNWM2LzEvbEZnZGFwNzNJS04teDZYSHZHaU1FQTdxV3hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2 LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW7EMA0G CSqGSIb3DQEBCwUAA4IBAQA96gLnRh6LH5f3Rb14H+zdFmeonSr5C3eIafGwJ32t X/gcHqgv38whXGr8b0RMC5s/0DKlz+2wVSdkFNE449zMqWQRDVz4xoGXtGnD0dMa ecYj4vI7TXd79XScZB9pUfkbiLKmzTj3+dZiVeByMg2z9yYV0ITv/Fncc88tDhJ1 GBThqYPD5PpaGihSu6FAMY3cfLZkYXCmPA26CtjobsisDY64WsMmp8wxh+zCaqt1 83sKOoxT4tel98XbGsSvPjegabZGX8PYDhLXb9yydjDjxbBJKVBoZIaJRlFt43q3 xJl/5HLeSfniHHwjc3ewCcspT5bR+6Zwev4R9gX+79/C -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:58 2026 by rpki-client