This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa File: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (raw, json) Hash identifier: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc= Subject key identifier: 94:77:4D:20:F5:CB:D4:D3:E9:37:F2:3E:10:D5:35:95:9B:1B:B4:6F Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467 Certificate serial: 019B7C80DA81389B330C2022EE7CB8FDD068 Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210103 IP address blocks: 146.19.11.0/24 maxlen: 24 2a12:1d00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:da:81:38:9b:33:0c:20:22:ee:7c:b8:fd:d0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94774d20f5cbd4d3e937f23e10d535959b1bb46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:0c:1f:db:d6:42:52:b9:f4:e5:bd:82:64: bf:11:3f:95:8b:21:49:d9:64:d0:54:30:16:29:11: 1b:43:4e:0d:ca:b5:df:e1:0d:33:27:fc:0f:22:6b: d1:dc:6b:67:0d:80:33:3f:28:19:b2:f0:13:af:79: e6:85:24:54:bc:47:4b:f9:f9:a1:fc:32:70:a7:76: d4:64:9e:4b:f0:76:7c:76:6c:82:ce:1f:94:d1:a7: 26:6e:12:1f:84:6a:d2:d2:44:3d:1c:72:f8:b5:eb: 67:dc:77:41:49:58:16:98:47:06:73:0e:59:8d:a1: 44:7e:6a:29:1b:c0:a9:04:d7:5c:20:39:98:bb:4c: 6d:a5:fc:c0:0f:ca:ba:da:cf:8e:a1:29:b9:d9:84: 6c:bf:16:07:02:7b:f3:c9:50:ab:07:53:df:9c:6b: de:e7:b7:fe:e1:0e:92:f0:41:74:92:79:97:11:8d: 16:6b:7f:10:3d:32:fa:b5:4b:79:8e:ba:d2:e8:e7: aa:65:dd:05:8c:40:63:b7:eb:7c:e7:43:18:45:ce: 23:2d:6d:56:9c:d7:1e:50:11:d3:81:e6:76:f0:aa: 0c:66:a1:67:8e:eb:1a:9a:b0:0b:03:7c:77:78:c3: 76:12:7a:a8:40:71:ab:63:1d:f9:a3:73:40:11:26: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:77:4D:20:F5:CB:D4:D3:E9:37:F2:3E:10:D5:35:95:9B:1B:B4:6F X509v3 Authority Key Identifier: keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.11.0/24 IPv6: 2a12:1d00::/29 Signature Algorithm: sha256WithRSAEncryption 96:6a:1d:bd:89:32:36:49:53:89:d9:64:3b:25:47:a9:28:0c: 30:fa:f7:18:36:b6:b1:70:db:96:24:46:e9:38:fd:7c:5f:8b: ef:67:fd:54:0f:8b:fe:c0:d6:e5:98:b2:fe:4e:34:8d:70:2d: af:cb:88:10:85:25:3d:ce:92:c1:49:bf:9a:a8:a1:c3:7f:bc: 1e:40:52:27:04:1e:01:04:60:88:85:98:35:61:04:47:f8:ef: fb:92:01:f9:cc:a6:98:5c:10:b3:01:f4:4f:78:c3:bf:4b:4c: 3b:93:b0:d2:2b:2c:d9:d1:58:6d:b0:87:6b:c7:f2:cc:6f:7f: 79:31:c4:9b:17:00:60:66:b8:b0:07:c0:73:79:72:92:b6:c6: 15:d0:94:42:d9:76:bc:30:3c:19:10:23:d5:62:69:a8:e8:ec: 26:a9:c9:27:82:36:b3:7c:e7:26:d2:82:15:d7:3a:fb:8e:16: 0b:4e:5d:20:d6:b8:0d:94:4d:bb:c2:8b:b8:08:fc:87:32:54: 0c:7c:65:f2:b4:a6:35:3f:35:ae:d6:ed:72:ab:f2:7d:6d:60: e3:3d:a8:f6:20:74:b9:38:e7:12:b4:24:92:5d:44:10:26:a8: a5:fd:de:59:79:69:ac:b8:55:af:ca:c6:f3:f8:ec:75:f3:21: b3:11:31:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gNqBOJszDCAi7ny4/dBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl NGU0NjcwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc3NGQyMGY1Y2JkNGQzZTkzN2YyM2UxMGQ1MzU5NTliMWJiNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIIMH9vWQlK59OW9gmS/ET+ViyFJ 2WTQVDAWKREbQ04NyrXf4Q0zJ/wPImvR3GtnDYAzPygZsvATr3nmhSRUvEdL+fmh /DJwp3bUZJ5L8HZ8dmyCzh+U0acmbhIfhGrS0kQ9HHL4tetn3HdBSVgWmEcGcw5Z jaFEfmopG8CpBNdcIDmYu0xtpfzAD8q62s+OoSm52YRsvxYHAnvzyVCrB1PfnGve 57f+4Q6S8EF0knmXEY0Wa38QPTL6tUt5jrrS6OeqZd0FjEBjt+t850MYRc4jLW1W nNceUBHTgeZ28KoMZqFnjusamrALA3x3eMN2EnqoQHGrYx35o3NAESZOoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJR3TSD1y9TT6TfyPhDVNZWbG7RvMB8GA1UdIwQY MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt ZjM3OTdjZmQ2NWFlLzEvbEhkTklQWEwxTlBwTl9JLUVOVTFsWnNidEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhMLMA0E AgACMAcDBQMqEh0AMA0GCSqGSIb3DQEBCwUAA4IBAQCWah29iTI2SVOJ2WQ7JUep KAww+vcYNraxcNuWJEbpOP18X4vvZ/1UD4v+wNblmLL+TjSNcC2vy4gQhSU9zpLB Sb+aqKHDf7weQFInBB4BBGCIhZg1YQRH+O/7kgH5zKaYXBCzAfRPeMO/S0w7k7DS KyzZ0VhtsIdrx/LMb395McSbFwBgZriwB8BzeXKStsYV0JRC2Xa8MDwZECPVYmmo 6OwmqckngjazfOcm0oIV1zr7jhYLTl0g1rgNlE27wou4CPyHMlQMfGXytKY1PzWu 1u1yq/J9bWDjPaj2IHS5OOcStCSSXUQQJqil/d5ZeWmsuFWvysbz+Ox18yGzETEB -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:16 2026 by rpki-client