This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/lHWMLrOWJPIs4BBwC991DrKwGo4.roa File: lHWMLrOWJPIs4BBwC991DrKwGo4.roa (raw, json) Hash identifier: y28g4c7JhwolCgwgEN4bgF07Be1DrEjj6ZIL1k4Kjr4= Subject key identifier: 94:75:8C:2E:B3:96:24:F2:2C:E0:10:70:0B:DF:75:0E:B2:B0:1A:8E Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Certificate serial: 019B78A2F3382441CEBFED6856C1504DDD70 Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/lHWMLrOWJPIs4BBwC991DrKwGo4.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8896 IP address blocks: 45.138.236.0/22 maxlen: 22 45.138.238.0/24 maxlen: 24 45.138.239.0/24 maxlen: 24 77.241.96.0/20 maxlen: 20 89.221.96.0/20 maxlen: 20 185.15.216.0/22 maxlen: 22 185.15.216.0/24 maxlen: 24 185.92.52.0/22 maxlen: 22 185.126.184.0/22 maxlen: 22 212.33.128.0/19 maxlen: 19 2a00:1e18::/29 maxlen: 29 2a00:1e18::/32 maxlen: 32 2a00:1e19::/32 maxlen: 32 2a00:1e1c:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f3:38:24:41:ce:bf:ed:68:56:c1:50:4d:dd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94758c2eb39624f22ce010700bdf750eb2b01a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:96:13:ad:74:c4:0f:69:1f:e8:03:ee:62: bd:93:b3:1a:c0:eb:95:80:c0:e2:4f:db:a6:49:d3: 0d:a1:c6:2d:77:6f:6e:4d:b2:97:42:91:2d:d3:e8: 09:36:76:2d:70:99:0f:03:25:de:53:b1:fc:ff:de: df:86:ce:bc:da:81:bf:7d:83:fa:9a:31:b0:47:be: 83:56:3f:4e:6b:d9:59:94:75:4e:41:62:d0:d0:5d: 36:46:51:7f:bf:04:bb:e0:19:52:44:11:42:95:9f: f5:3b:a5:e7:88:8f:2c:09:35:c0:be:be:77:f4:6c: 4d:fd:a8:1c:e5:3d:09:5e:20:21:cd:46:2d:e7:08: 13:c0:b8:ae:88:67:ec:28:f8:6a:b1:3d:ba:bb:09: 29:3a:40:4b:a6:08:7a:08:0b:12:d2:f4:e9:5f:52: 5c:12:45:02:c7:37:43:ff:12:83:73:fb:fb:54:63: 71:e2:57:ee:d7:d0:40:5e:76:c7:ee:77:0c:e3:98: cd:31:96:83:90:12:d3:2b:01:d4:42:01:ef:7b:d2: 7d:5e:bd:ed:25:f8:54:69:27:18:c1:56:1c:1d:2d: 4a:ab:92:e6:c6:d3:f6:db:ad:bc:bf:5b:78:68:e9: 07:42:00:ac:bf:16:e3:39:9d:6e:5c:3e:67:77:b6: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:75:8C:2E:B3:96:24:F2:2C:E0:10:70:0B:DF:75:0E:B2:B0:1A:8E X509v3 Authority Key Identifier: keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/lHWMLrOWJPIs4BBwC991DrKwGo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.236.0/22 77.241.96.0/20 89.221.96.0/20 185.15.216.0/22 185.92.52.0/22 185.126.184.0/22 212.33.128.0/19 IPv6: 2a00:1e18::/29 Signature Algorithm: sha256WithRSAEncryption be:e1:de:ed:26:b7:ee:e0:1e:4c:72:a9:03:95:e8:1b:e7:64: 75:b8:f8:e4:1c:90:1f:3a:96:f4:f5:5a:63:79:1a:4e:bb:cc: 05:31:f0:74:73:a2:e3:3e:90:35:e7:f9:79:29:e9:c2:97:c8: 17:80:86:ab:38:38:e5:b8:81:03:4a:35:34:3d:3e:33:67:e8: 9d:42:2f:ce:1a:69:49:1f:04:3b:57:e5:7e:d8:ce:b2:b1:29: ba:ef:c1:0c:4b:82:eb:86:aa:02:af:10:22:4c:8a:92:f4:ac: ba:fd:86:0d:5c:cf:be:ba:5a:14:bb:fa:81:78:5c:fb:4f:91: 1f:46:a4:8e:4a:1e:9d:a1:ae:06:d4:3b:e9:4d:3b:72:a4:39: 00:81:04:3c:7c:84:31:00:47:ba:f4:9f:40:94:1f:2e:c3:d5: 6d:14:38:70:98:d8:7a:d0:e2:71:d1:2b:0c:27:03:d7:28:25: 81:01:89:39:ee:e0:33:0a:66:64:08:3f:57:f7:e6:5c:a3:dd: 30:31:66:37:da:5e:d9:5d:04:72:37:8c:af:4b:a9:e1:a3:32: 58:45:b0:54:42:c1:43:f4:07:9d:6d:6e:b0:1c:e7:5f:6b:b6: 3a:63:66:6f:43:63:1d:a8:bb:af:64:3a:3e:25:df:fb:f8:31: 1f:54:d8:15 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt4ovM4JEHOv+1oVsFQTd1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5 YmJjOGUwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc1OGMyZWIzOTYyNGYyMmNlMDEwNzAwYmRmNzUwZWIyYjAxYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOaWE610xA9pH+gD7mK9k7MawOuV gMDiT9umSdMNocYtd29uTbKXQpEt0+gJNnYtcJkPAyXeU7H8/97fhs682oG/fYP6 mjGwR76DVj9Oa9lZlHVOQWLQ0F02RlF/vwS74BlSRBFClZ/1O6XniI8sCTXAvr53 9GxN/agc5T0JXiAhzUYt5wgTwLiuiGfsKPhqsT26uwkpOkBLpgh6CAsS0vTpX1Jc EkUCxzdD/xKDc/v7VGNx4lfu19BAXnbH7ncM45jNMZaDkBLTKwHUQgHve9J9Xr3t JfhUaScYwVYcHS1Kq5LmxtP22628v1t4aOkHQgCsvxbjOZ1uXD5nd7aPgQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFJR1jC6zliTyLOAQcAvfdQ6ysBqOMB8GA1UdIwQY MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt Mzk0ODAyODVhOTQ4LzEvbEhXTUxyT1dKUElzNEJCd0M5OTFEckt3R280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4 LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLYrsAwQE TfFgAwQEWd1gAwQCuQ/YAwQCuVw0AwQCuX64AwQF1CGAMA0EAgACMAcDBQMqAB4Y MA0GCSqGSIb3DQEBCwUAA4IBAQC+4d7tJrfu4B5McqkDlegb52R1uPjkHJAfOpb0 9VpjeRpOu8wFMfB0c6LjPpA15/l5KenCl8gXgIarODjluIEDSjU0PT4zZ+idQi/O GmlJHwQ7V+V+2M6ysSm678EMS4LrhqoCrxAiTIqS9Ky6/YYNXM++uloUu/qBeFz7 T5EfRqSOSh6doa4G1DvpTTtypDkAgQQ8fIQxAEe69J9AlB8uw9VtFDhwmNh60OJx 0SsMJwPXKCWBAYk57uAzCmZkCD9X9+Zco90wMWY32l7ZXQRyN4yvS6nhozJYRbBU QsFD9AedbW6wHOdfa7Y6Y2ZvQ2MdqLuvZDo+Jd/7+DEfVNgV -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:09 2026 by rpki-client