This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa File: tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa (raw, json) Hash identifier: QOlqs8KXOpGS492JR6Z+1it46kTu85+FaSQ+ynVWEh8= Subject key identifier: B4:D4:24:78:9F:44:1A:B3:17:29:8C:31:04:C6:5F:BB:06:75:A0:02 Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Certificate serial: 019B79ECDF593BBFEC89E9BD1BA808F0AB01 Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57070 IP address blocks: 146.0.16.0/21 maxlen: 24 185.200.248.0/22 maxlen: 24 2a0a:bac0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:df:59:3b:bf:ec:89:e9:bd:1b:a8:08:f0:ab:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4d424789f441ab317298c3104c65fbb0675a002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:96:77:09:9f:42:fb:2f:99:3e:f1:0b:c8: 1c:6a:26:bb:87:49:c7:d0:0b:9c:09:d3:9c:31:03: 69:f4:9c:b2:3f:1c:90:2a:95:ac:64:4b:51:f7:a1: 45:75:35:b5:15:00:c3:39:1b:a8:84:c5:c4:92:fd: c4:cc:06:49:57:22:01:18:08:3a:52:2c:7a:53:85: 9a:c9:19:8c:96:29:46:56:b1:90:ec:c1:4d:68:cf: a3:cd:98:92:d4:fb:f6:48:5a:98:73:e6:f7:dd:ec: a4:dd:ae:e9:86:6e:ad:8a:07:6f:94:bd:ed:04:78: 4a:ec:5c:5a:38:7a:fd:e4:1f:4d:2f:9c:38:ae:e5: 9d:95:ac:a9:b7:0e:33:cf:90:b8:54:29:09:d8:77: 79:de:5e:65:d4:70:05:a8:4f:36:c5:3a:37:9c:4b: c0:48:eb:3b:3e:94:80:f2:d7:8c:b2:43:73:22:b5: 91:f3:f3:d2:d7:10:f8:d2:bf:99:c6:3a:39:57:f9: 46:38:ce:80:97:5f:8e:c9:f1:3f:3a:ea:81:c1:9a: 54:30:e3:5c:5b:ed:c3:4e:30:c4:64:52:11:c7:a1: 62:89:a4:d2:cc:44:49:52:0f:b5:12:5f:b3:52:ce: 9f:55:1b:ff:9a:3d:94:3b:3b:44:61:f1:7a:ce:e2: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D4:24:78:9F:44:1A:B3:17:29:8C:31:04:C6:5F:BB:06:75:A0:02 X509v3 Authority Key Identifier: keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.0.16.0/21 185.200.248.0/22 IPv6: 2a0a:bac0::/29 Signature Algorithm: sha256WithRSAEncryption ee:eb:1f:60:3f:37:70:63:40:20:6e:a2:95:50:11:aa:c6:75: b4:60:b5:36:8e:24:fd:74:ed:27:11:e8:c6:08:11:2b:19:92: da:a2:6c:19:59:5f:71:cc:50:d1:25:88:c9:c0:66:b1:3c:cb: a3:b2:8f:cf:3e:40:c9:04:cb:f7:78:77:8e:c9:30:36:51:71: d0:8c:01:22:c8:63:50:7e:ce:24:30:6c:d1:95:d0:4a:b8:8f: d1:d7:59:8e:8a:64:c4:35:50:94:fa:4b:13:a3:d9:f1:bd:15: 03:61:c6:0d:29:67:f9:4c:03:31:d8:1d:38:ad:fa:3a:52:bc: 15:8f:ef:4c:56:2d:07:c3:45:ff:f7:d1:71:84:12:75:9e:d3: b3:0f:08:95:0c:ef:4f:a7:44:23:56:81:f1:ff:6f:20:25:f8: 09:31:e1:9c:f3:14:f4:bf:38:e0:50:84:6d:08:5b:41:8c:7d: 71:c2:6c:b7:15:b0:a3:86:fb:d6:68:50:c0:ad:0e:a2:af:56: c1:d3:e3:1e:17:ad:9b:5d:1a:2f:46:25:e9:3b:31:4e:23:d3: 1b:c7:97:cb:c2:9c:1b:c0:f0:64:61:d9:44:39:31:96:e3:6d: 86:0b:75:10:6f:d8:5e:42:af:06:77:8a:ee:41:75:11:de:f5: 61:cd:04:9e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57N9ZO7/siem9G6gI8KsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3 YTg0ZGUwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGQ0MjQ3ODlmNDQxYWIzMTcyOThjMzEwNGM2NWZiYjA2NzVhMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhSWdwmfQvsvmT7xC8gcaia7h0nH 0AucCdOcMQNp9JyyPxyQKpWsZEtR96FFdTW1FQDDORuohMXEkv3EzAZJVyIBGAg6 Uix6U4WayRmMlilGVrGQ7MFNaM+jzZiS1Pv2SFqYc+b33eyk3a7phm6tigdvlL3t BHhK7FxaOHr95B9NL5w4ruWdlayptw4zz5C4VCkJ2Hd53l5l1HAFqE82xTo3nEvA SOs7PpSA8teMskNzIrWR8/PS1xD40r+Zxjo5V/lGOM6Al1+OyfE/OuqBwZpUMONc W+3DTjDEZFIRx6FiiaTSzERJUg+1El+zUs6fVRv/mj2UOztEYfF6zuJjDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLTUJHifRBqzFymMMQTGX7sGdaACMB8GA1UdIwQY MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct Nzc4OGFlZTEyMTVmLzEvdE5Ra2VKOUVHck1YS1l3eEJNWmZ1d1oxb0FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDkgAQAwQC ucj4MA0EAgACMAcDBQMqCrrAMA0GCSqGSIb3DQEBCwUAA4IBAQDu6x9gPzdwY0Ag bqKVUBGqxnW0YLU2jiT9dO0nEejGCBErGZLaomwZWV9xzFDRJYjJwGaxPMujso/P PkDJBMv3eHeOyTA2UXHQjAEiyGNQfs4kMGzRldBKuI/R11mOimTENVCU+ksTo9nx vRUDYcYNKWf5TAMx2B04rfo6UrwVj+9MVi0Hw0X/99FxhBJ1ntOzDwiVDO9Pp0Qj VoHx/28gJfgJMeGc8xT0vzjgUIRtCFtBjH1xwmy3FbCjhvvWaFDArQ6ir1bB0+Me F62bXRovRiXpOzFOI9Mbx5fLwpwbwPBkYdlEOTGW422GC3UQb9heQq8Gd4ruQXUR 3vVhzQSe -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:46 2026 by rpki-client