This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lh3TiiBvDwUe4qt94pJV7wnXJVM.roa File: Lh3TiiBvDwUe4qt94pJV7wnXJVM.roa (raw, json) Hash identifier: /fX4klsrUKtXNml6RmcMz03Dkk5d08XaeNCk9X2j6WI= Subject key identifier: 2E:1D:D3:8A:20:6F:0F:05:1E:E2:AB:7D:E2:92:55:EF:09:D7:25:53 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3233E3D9BCD040CC9AFD0B8EF2393 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lh3TiiBvDwUe4qt94pJV7wnXJVM.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199834 IP address blocks: 193.37.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:23:3e:3d:9b:cd:04:0c:c9:af:d0:b8:ef:23:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1dd38a206f0f051ee2ab7de29255ef09d72553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:c9:b4:34:34:52:21:3e:a5:89:6f:ee:dd: 5f:6e:89:8f:ca:83:b3:62:6d:9e:3c:c1:3c:6f:05: 4d:a9:03:0e:3f:f0:d4:b1:8a:fe:32:9b:ef:cc:b2: 04:9e:92:16:67:fb:ac:a4:50:d6:de:ad:fe:32:a7: 4d:60:61:cb:77:4a:09:92:d0:d3:39:40:f7:cc:62: 5f:d4:8c:5a:c8:76:69:53:27:61:08:20:6d:3b:4a: 14:e6:40:61:df:ae:fe:09:ca:15:9a:50:ac:95:e0: 90:69:e0:2a:96:d4:f2:0d:fc:af:d5:d4:2d:0c:f8: 94:c0:12:5a:f7:1b:3a:6e:51:0f:c8:48:88:d3:b6: c2:85:7e:9f:46:91:a2:ac:41:26:ea:ac:71:a0:2b: bd:6a:af:ac:c0:6d:50:5f:62:79:d4:ac:c8:91:ac: 4d:ed:68:2c:01:f2:f7:3e:be:bd:4a:1d:19:1e:9c: b3:fe:65:09:d1:20:ff:ce:cd:a8:64:19:66:af:e4: 2e:e8:3f:e1:1d:46:ae:c2:0b:fe:91:93:cb:a9:b1: 73:2f:92:db:1a:59:4e:1c:fb:f1:0c:19:53:f9:d9: ed:aa:f3:95:2e:28:e7:6b:00:e0:05:80:cd:57:f5: 48:fe:1b:dd:fe:c8:8e:e8:5d:5f:56:02:ec:ac:ef: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1D:D3:8A:20:6F:0F:05:1E:E2:AB:7D:E2:92:55:EF:09:D7:25:53 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lh3TiiBvDwUe4qt94pJV7wnXJVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.42.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:94:0b:a9:b4:9a:87:28:37:f2:92:d7:43:0b:16:a1:33:55: e6:03:66:5c:71:cc:98:04:78:65:aa:3f:ed:99:9a:34:74:de: 66:81:99:12:5b:1c:53:0f:b8:05:44:4e:ed:d6:7f:66:f8:25: ac:ed:eb:3f:65:86:25:95:13:2f:76:67:78:24:86:f3:98:2d: 43:a5:f2:d3:c1:5c:fc:1f:8f:f9:6a:b8:75:9a:84:43:76:c5: bd:cb:69:e0:71:8d:36:8e:59:84:4b:2d:d1:12:f5:cc:a1:5f: b3:28:ac:74:c9:7e:39:5a:5f:f4:04:9e:ad:11:b6:23:94:5d: 45:41:ba:42:8b:f1:37:5b:97:db:8d:ea:98:14:14:43:e5:4d: a1:df:1d:ae:9b:e0:ff:04:5a:54:79:b4:1e:5a:3f:55:0b:4c: cf:84:a1:34:ae:70:dd:9c:f5:57:19:ba:c6:16:99:9e:b7:31: 7f:0b:d6:01:2e:ec:db:95:c4:49:cb:ad:bd:2d:eb:31:f2:f5: f3:28:c7:b7:ed:6a:63:b6:1b:4c:c1:3b:22:79:a3:51:11:87: 52:d0:ec:ea:77:1c:90:95:e6:84:22:69:a3:ab:bf:31:9e:25: 3d:04:9e:39:9c:69:6f:7c:71:cb:f8:a0:d7:ee:dc:14:9f:e7: 31:7c:80:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyM+PZvNBAzJr9C47yOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFkZDM4YTIwNmYwZjA1MWVlMmFiN2RlMjkyNTVlZjA5ZDcyNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDXJtDQ0UiE+pYlv7t1fbomPyoOz Ym2ePME8bwVNqQMOP/DUsYr+MpvvzLIEnpIWZ/uspFDW3q3+MqdNYGHLd0oJktDT OUD3zGJf1IxayHZpUydhCCBtO0oU5kBh367+CcoVmlCsleCQaeAqltTyDfyv1dQt DPiUwBJa9xs6blEPyEiI07bChX6fRpGirEEm6qxxoCu9aq+swG1QX2J51KzIkaxN 7WgsAfL3Pr69Sh0ZHpyz/mUJ0SD/zs2oZBlmr+Qu6D/hHUauwgv+kZPLqbFzL5Lb GllOHPvxDBlT+dntqvOVLijnawDgBYDNV/VI/hvd/siO6F1fVgLsrO/M2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4d04ogbw8FHuKrfeKSVe8J1yVTMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTGgzVGlpQnZEd1VlNHF0OTRwSlY3d25YSlZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSUqMA0G CSqGSIb3DQEBCwUAA4IBAQAclAuptJqHKDfyktdDCxahM1XmA2ZcccyYBHhlqj/t mZo0dN5mgZkSWxxTD7gFRE7t1n9m+CWs7es/ZYYllRMvdmd4JIbzmC1DpfLTwVz8 H4/5arh1moRDdsW9y2ngcY02jlmESy3REvXMoV+zKKx0yX45Wl/0BJ6tEbYjlF1F QbpCi/E3W5fbjeqYFBRD5U2h3x2um+D/BFpUebQeWj9VC0zPhKE0rnDdnPVXGbrG FpmetzF/C9YBLuzblcRJy629Lesx8vXzKMe37WpjthtMwTsieaNREYdS0OzqdxyQ leaEImmjq78xniU9BJ45nGlvfHHL+KDX7twUn+cxfIAB -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:21 2026 by rpki-client