This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lHJB0_cL7MQP4FjA3j_kVRGVmik.roa File: lHJB0_cL7MQP4FjA3j_kVRGVmik.roa (raw, json) Hash identifier: Q7mxNOQ+VBH2HjiY4D+dVuBN8kO+KFOvLKdsZNDSg14= Subject key identifier: 94:72:41:D3:F7:0B:EC:C4:0F:E0:58:C0:DE:3F:E4:55:11:95:9A:29 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77A6DEED932839CCAB70250D503BA Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lHJB0_cL7MQP4FjA3j_kVRGVmik.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204574 IP address blocks: 188.164.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7a:6d:ee:d9:32:83:9c:ca:b7:02:50:d5:03:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=947241d3f70becc40fe058c0de3fe45511959a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:0f:86:40:14:55:87:15:a5:8c:eb:a6:80: 18:e2:77:a9:8c:5f:b5:32:01:a5:1c:44:fa:75:96: a9:2c:ad:54:b2:ab:a3:e2:da:23:29:bc:73:48:1a: 24:a6:23:5c:f7:45:90:6f:c4:09:4a:18:9d:f3:f7: 63:5e:d8:8b:7e:60:69:d0:82:d7:42:c8:f1:92:b5: d4:7a:18:71:cc:f2:ed:6d:ef:7b:63:03:e2:85:59: e5:2d:1a:ea:ca:95:a1:b7:aa:4b:c8:52:e2:a6:78: a0:fc:c7:fb:d1:ad:33:88:88:49:ae:c4:3c:5d:5c: a5:43:80:f9:56:4a:f0:a7:10:41:6f:41:74:f0:9c: df:65:de:80:30:69:da:8b:11:c4:93:1a:fd:d3:1f: 17:23:90:68:6c:57:a2:fb:a7:20:16:03:5a:ce:11: c7:bd:7f:69:da:be:46:87:97:aa:e3:e6:ae:ed:2c: 6b:a7:bc:02:af:4e:7a:f0:79:f2:39:7e:d8:e9:97: c5:33:87:38:fd:ac:d0:a5:ff:31:38:e4:45:7f:e5: 90:28:44:46:c8:15:dc:3b:38:a4:62:4e:35:db:8a: 5b:6b:b1:dc:56:c7:f7:be:bb:6c:3b:1f:be:72:dc: 04:ab:9f:dc:c4:b4:e1:7f:c5:60:67:8c:7e:34:17: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:41:D3:F7:0B:EC:C4:0F:E0:58:C0:DE:3F:E4:55:11:95:9A:29 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lHJB0_cL7MQP4FjA3j_kVRGVmik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.210.0/24 Signature Algorithm: sha256WithRSAEncryption 20:9e:17:ae:28:b6:1f:fd:bb:9d:ce:e3:ef:01:6a:94:ab:3b: 88:93:0c:33:dd:6e:fb:ca:84:39:23:f4:54:cc:7f:98:96:b1: a4:2d:10:d5:56:80:f6:a8:3f:a1:55:b4:25:ba:9e:34:3d:5c: 93:27:38:81:cd:e7:73:1b:72:d8:29:42:48:aa:26:3c:0f:2b: 6d:91:63:ba:21:a0:59:e1:a1:1b:38:c9:0e:e4:b9:2c:3b:80: 6e:69:12:27:fe:07:d2:2a:12:a6:fc:b9:00:0f:86:95:aa:47: 5d:72:85:93:b9:05:24:bd:72:b7:46:f9:7b:5f:39:e0:6e:88: 89:d8:6e:25:7c:67:c8:84:60:19:b9:c9:8f:c6:8e:f7:48:0c: 1a:1b:a4:0d:40:f0:82:33:c5:10:22:40:fa:6c:cf:93:e5:17: af:d3:35:d5:70:fb:b3:cb:4e:66:15:c2:f6:06:0f:ca:a1:6f: 28:db:b7:1c:8b:87:5d:f4:19:bf:bf:3a:03:f5:4c:4b:85:48: 3d:fb:08:3d:84:77:4d:49:1b:3b:5d:69:c5:33:f5:d1:b9:b6: d8:bd:47:31:06:d1:95:df:b3:02:4f:78:99:9e:be:df:f9:a7: 99:c2:fd:f1:5d:1f:5c:1e:38:d6:ca:09:aa:58:5f:fa:33:34: a8:77:13:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3pt7tkyg5zKtwJQ1QO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDcyNDFkM2Y3MGJlY2M0MGZlMDU4YzBkZTNmZTQ1NTExOTU5YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysUPhkAUVYcVpYzrpoAY4nepjF+1 MgGlHET6dZapLK1Usquj4tojKbxzSBokpiNc90WQb8QJShid8/djXtiLfmBp0ILX QsjxkrXUehhxzPLtbe97YwPihVnlLRrqypWht6pLyFLipnig/Mf70a0ziIhJrsQ8 XVylQ4D5VkrwpxBBb0F08JzfZd6AMGnaixHEkxr90x8XI5BobFei+6cgFgNazhHH vX9p2r5Gh5eq4+au7Sxrp7wCr0568HnyOX7Y6ZfFM4c4/azQpf8xOORFf+WQKERG yBXcOzikYk4124pba7HcVsf3vrtsOx++ctwEq5/cxLThf8VgZ4x+NBc8cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRyQdP3C+zED+BYwN4/5FURlZopMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvbEhKQjBfY0w3TVFQNEZqQTNqX2tWUkdWbWlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvKTSMA0G CSqGSIb3DQEBCwUAA4IBAQAgnheuKLYf/budzuPvAWqUqzuIkwwz3W77yoQ5I/RU zH+YlrGkLRDVVoD2qD+hVbQlup40PVyTJziBzedzG3LYKUJIqiY8DyttkWO6IaBZ 4aEbOMkO5LksO4BuaRIn/gfSKhKm/LkAD4aVqkddcoWTuQUkvXK3Rvl7XzngboiJ 2G4lfGfIhGAZucmPxo73SAwaG6QNQPCCM8UQIkD6bM+T5Rev0zXVcPuzy05mFcL2 Bg/KoW8o27cci4dd9Bm/vzoD9UxLhUg9+wg9hHdNSRs7XWnFM/XRubbYvUcxBtGV 37MCT3iZnr7f+aeZwv3xXR9cHjjWygmqWF/6MzSodxP2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client