This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lP9hjLvTICO3l8tQb4sMHLHl5N8.roa File: lP9hjLvTICO3l8tQb4sMHLHl5N8.roa (raw, json) Hash identifier: 27t12D7X3k/ODW//OASJVM6p8R2Dl28mANh2hf8mzkY= Subject key identifier: 94:FF:61:8C:BB:D3:20:23:B7:97:CB:50:6F:8B:0C:1C:B1:E5:E4:DF Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C0C796AD428ECFE4D2530EC2CA86 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lP9hjLvTICO3l8tQb4sMHLHl5N8.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142299 IP address blocks: 158.173.159.0/24 maxlen: 24 170.62.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c0:c7:96:ad:42:8e:cf:e4:d2:53:0e:c2:ca:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94ff618cbbd32023b797cb506f8b0c1cb1e5e4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:e1:8e:52:01:c1:5d:87:5e:f8:fc:4b:e1: a6:7a:10:f0:ac:34:3b:41:68:29:24:4c:89:dc:17: b6:20:64:de:68:cb:d0:2c:3e:62:1c:24:e1:5d:f6: a3:0d:e5:91:aa:ee:91:9c:c4:50:fc:a5:72:4d:59: 56:c1:5e:40:44:cd:a3:8c:1f:22:34:9e:fb:8a:50: 7e:34:96:5e:14:85:21:44:15:42:40:4e:a8:29:c9: 84:25:38:0e:1f:96:a3:96:25:6e:5e:7f:a3:d7:54: c4:31:1f:64:79:bd:3c:3d:bf:1e:b0:6d:55:d1:43: 1c:28:ac:b1:d0:66:e3:19:15:ec:79:b3:3d:57:b5: e3:0e:09:4e:80:e0:70:20:76:bd:48:c9:18:b2:d8: 7d:9f:9d:b4:22:e2:7a:38:2b:ad:4f:65:3f:1c:58: 5f:09:70:64:0e:74:30:39:3e:67:34:2a:a6:74:31: a5:84:8d:44:c3:f4:4c:e2:1b:0c:40:5a:16:c3:78: 86:ef:af:08:41:69:29:66:5d:8b:3a:ba:71:60:44: 87:9c:66:fb:05:46:0c:35:0e:81:b6:2c:df:89:68: 4c:1d:93:0c:e6:ee:c0:02:28:62:41:4c:12:99:a2: d1:9c:2e:de:0f:d9:91:b9:36:ff:2d:92:1b:24:c9: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:61:8C:BB:D3:20:23:B7:97:CB:50:6F:8B:0C:1C:B1:E5:E4:DF X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lP9hjLvTICO3l8tQb4sMHLHl5N8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.159.0/24 170.62.194.0/23 Signature Algorithm: sha256WithRSAEncryption 02:aa:d4:83:3c:79:a8:29:36:19:bc:a1:f8:e5:b0:3e:03:8a: 05:92:ea:05:dd:75:2c:5e:a0:fa:44:d3:c3:6e:2f:3b:87:d6: 0a:23:fa:2f:0e:d9:55:5a:2c:3a:de:76:7e:34:24:f8:e0:c4: d3:bf:74:6b:80:bc:22:84:f2:03:a7:d2:7c:bf:74:e2:d4:92: 7c:05:a5:e2:00:0e:d7:ff:07:ed:06:98:7e:dc:95:4d:2e:5f: 75:d2:f0:bd:3a:ce:62:f0:ff:e5:27:c7:ab:35:08:c1:be:90: 2a:25:d0:f7:84:0e:83:d2:30:b8:b9:10:42:ec:a7:65:5d:ed: de:49:9e:2c:56:5c:38:66:14:e1:9b:4b:b9:e7:ba:17:9b:2b: 59:7d:a4:21:5f:b1:64:69:22:17:50:a9:fc:23:bc:ac:a1:a6: 9a:2e:0f:7c:35:c8:72:78:2f:2e:89:2c:ad:30:03:0e:53:ee: 55:57:2c:8b:4c:77:c8:8f:c9:5f:56:ea:b2:bf:d2:c3:ab:e7: 49:e4:f5:48:be:5d:08:89:d0:29:94:a0:4f:9f:f2:0b:25:94: 22:ad:32:24:6c:bf:c8:22:b0:78:1b:ef:52:a2:8a:39:34:0d: e5:29:0f:1c:b2:45:23:d7:1a:83:7d:b6:f6:dc:d8:d9:88:5e: 3e:90:c4:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N8DHlq1Cjs/k0lMOwsqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGZmNjE4Y2JiZDMyMDIzYjc5N2NiNTA2ZjhiMGMxY2IxZTVlNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzhjlIBwV2HXvj8S+GmehDwrDQ7 QWgpJEyJ3Be2IGTeaMvQLD5iHCThXfajDeWRqu6RnMRQ/KVyTVlWwV5ARM2jjB8i NJ77ilB+NJZeFIUhRBVCQE6oKcmEJTgOH5ajliVuXn+j11TEMR9keb08Pb8esG1V 0UMcKKyx0GbjGRXsebM9V7XjDglOgOBwIHa9SMkYsth9n520IuJ6OCutT2U/HFhf CXBkDnQwOT5nNCqmdDGlhI1Ew/RM4hsMQFoWw3iG768IQWkpZl2LOrpxYESHnGb7 BUYMNQ6BtizfiWhMHZMM5u7AAihiQUwSmaLRnC7eD9mRuTb/LZIbJMnDywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJT/YYy70yAjt5fLUG+LDByx5eTfMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvbFA5aGpMdlRJQ08zbDh0UWI0c01ITEhsNU44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnq2fAwQB qj7CMA0GCSqGSIb3DQEBCwUAA4IBAQACqtSDPHmoKTYZvKH45bA+A4oFkuoF3XUs XqD6RNPDbi87h9YKI/ovDtlVWiw63nZ+NCT44MTTv3RrgLwihPIDp9J8v3Ti1JJ8 BaXiAA7X/wftBph+3JVNLl910vC9Os5i8P/lJ8erNQjBvpAqJdD3hA6D0jC4uRBC 7KdlXe3eSZ4sVlw4ZhThm0u557oXmytZfaQhX7FkaSIXUKn8I7ysoaaaLg98Nchy eC8uiSytMAMOU+5VVyyLTHfIj8lfVuqyv9LDq+dJ5PVIvl0IidAplKBPn/ILJZQi rTIkbL/IIrB4G+9Sooo5NA3lKQ8cskUj1xqDfbb23NjZiF4+kMSw -----END CERTIFICATE-----Generated at Wed Jan 21 06:08:44 2026 by rpki-client