This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa File: lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa (raw, json) Hash identifier: y6qClx3Rf5mZaySn4zehVo/hI1iBDsZsk48LzNmFPQE= Subject key identifier: 96:AA:07:1F:03:25:C0:63:42:7C:2A:77:53:75:38:92:48:65:D4:88 Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958 Certificate serial: 019B7C1296FA33BC4B0F7C51D4ECD24BEEE3 Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa Signing time: Fri 02 Jan 2026 00:19:11 +0000 ROA not before: Fri 02 Jan 2026 00:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50596 IP address blocks: 37.75.200.0/21 maxlen: 22 46.254.160.0/21 maxlen: 22 93.179.104.0/21 maxlen: 22 109.201.96.0/19 maxlen: 22 178.57.208.0/21 maxlen: 22 185.8.220.0/22 maxlen: 23 188.68.8.0/21 maxlen: 22 188.68.168.0/21 maxlen: 22 188.68.192.0/21 maxlen: 22 2a03:3cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:96:fa:33:bc:4b:0f:7c:51:d4:ec:d2:4b:ee:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958 Validity Not Before: Jan 2 00:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96aa071f0325c063427c2a77537538924865d488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:5c:42:26:20:11:d4:c9:f6:3e:49:f1:36: 06:ad:78:9e:83:ce:26:7a:db:fe:c9:c0:a8:f0:a6: f7:0d:20:d6:e2:02:2f:e6:5b:61:85:94:38:4b:6c: 79:00:8b:e5:01:ad:28:7a:f9:c7:a6:62:7b:7d:42: 9f:5d:bc:fa:73:9f:0b:09:8e:53:b5:27:fc:c5:23: f8:e5:76:43:2e:d4:ac:15:4f:f4:7b:92:e9:86:53: f9:3f:e7:ca:c0:da:89:d3:36:30:25:56:da:b8:82: f4:ff:6c:db:d0:0e:ba:ec:0a:81:38:f6:05:9b:41: 8c:bc:f6:48:56:85:42:06:7e:ec:e9:0b:7c:ee:85: 7b:e4:5e:5c:ca:1e:21:a5:f0:e9:d6:1f:14:e2:80: a3:4b:f1:b8:74:23:67:eb:fd:9f:eb:7b:fb:d5:d5: f7:cd:24:cc:f0:2d:9c:cc:ab:bf:fb:7b:e3:20:1b: 88:90:05:49:1d:04:b8:b2:80:24:be:11:fc:54:78: a2:51:ba:7b:f2:fc:5c:8a:8c:44:c6:83:bd:c2:32: db:a8:00:5e:2b:5b:a2:fb:6a:aa:04:df:bf:6b:8a: 42:57:50:60:4f:9c:f7:54:88:ea:ac:22:2f:3a:48: 03:a8:30:33:4a:44:68:c8:57:e4:99:5e:3a:7b:87: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AA:07:1F:03:25:C0:63:42:7C:2A:77:53:75:38:92:48:65:D4:88 X509v3 Authority Key Identifier: keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.200.0/21 46.254.160.0/21 93.179.104.0/21 109.201.96.0/19 178.57.208.0/21 185.8.220.0/22 188.68.8.0/21 188.68.168.0/21 188.68.192.0/21 IPv6: 2a03:3cc0::/29 Signature Algorithm: sha256WithRSAEncryption 66:4d:be:d3:90:a7:0a:ca:6f:a7:10:93:47:d6:2f:c9:8e:ca: b7:0c:db:43:31:70:79:9a:37:4b:f5:32:98:e3:b2:cf:cb:ef: be:8a:9b:58:db:ab:3b:c7:2a:53:49:50:cc:c9:e5:64:58:ee: 1a:5b:ae:8f:6f:ff:03:3e:cd:13:c8:d2:83:24:83:8c:05:10: e3:6e:86:66:d7:78:66:72:33:d6:a4:7c:1f:1a:29:29:67:ae: e3:4a:7d:59:5b:88:7b:44:9c:a3:fc:81:31:b2:d7:8c:ef:d1: 3a:23:6e:10:5c:ae:0c:f9:83:71:51:b1:56:9e:84:b7:03:99: ed:07:f2:7e:cd:07:1f:b9:6d:1f:26:30:a8:09:0c:dc:cc:d1: 43:ba:76:d4:c8:aa:18:de:d3:ed:68:6b:df:b9:78:25:d8:cf: d0:02:de:4d:0f:f2:9c:07:b9:d0:56:a7:7f:27:a5:b7:c8:14: 01:9a:25:80:04:9c:42:03:19:29:56:4d:32:e0:33:90:d4:73: 8d:32:11:6a:80:f5:0c:8f:06:6f:5e:10:67:86:b2:2c:07:27: ec:9d:ac:ed:b6:30:e8:46:82:ce:1c:92:22:03:b7:e3:df:51: 09:16:1a:a0:61:46:23:fa:60:68:08:de:e6:8d:6e:a0:44:b8: 27:e7:36:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt8Epb6M7xLD3xR1OzSS+7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGUxMjY0ZTA3YjM3MDhiY2I5ZGI1YTE0ZTdjYzkyNzA4 NjM5NTgwHhcNMjYwMTAyMDAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmFhMDcxZjAzMjVjMDYzNDI3YzJhNzc1Mzc1Mzg5MjQ4NjVkNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN5cQiYgEdTJ9j5J8TYGrXieg84m etv+ycCo8Kb3DSDW4gIv5lthhZQ4S2x5AIvlAa0oevnHpmJ7fUKfXbz6c58LCY5T tSf8xSP45XZDLtSsFU/0e5LphlP5P+fKwNqJ0zYwJVbauIL0/2zb0A667AqBOPYF m0GMvPZIVoVCBn7s6Qt87oV75F5cyh4hpfDp1h8U4oCjS/G4dCNn6/2f63v71dX3 zSTM8C2czKu/+3vjIBuIkAVJHQS4soAkvhH8VHiiUbp78vxcioxExoO9wjLbqABe K1ui+2qqBN+/a4pCV1BgT5z3VIjqrCIvOkgDqDAzSkRoyFfkmV46e4cu/QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJaqBx8DJcBjQnwqd1N1OJJIZdSIMB8GA1UdIwQY MBaAFLoOEmTgezcIvLnbWhTnzJJwhjlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4Yzkt YmZlMGNjYjc5ZmNjLzEvbHFvSEh3TWx3R05DZkNwM1UzVTRra2hsMUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4YzktYmZlMGNjYjc5ZmNj LzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDJUvIAwQD Lv6gAwQDXbNoAwQFbclgAwQDsjnQAwQCuQjcAwQDvEQIAwQDvESoAwQDvETAMA0E AgACMAcDBQMqAzzAMA0GCSqGSIb3DQEBCwUAA4IBAQBmTb7TkKcKym+nEJNH1i/J jsq3DNtDMXB5mjdL9TKY47LPy+++iptY26s7xypTSVDMyeVkWO4aW66Pb/8DPs0T yNKDJIOMBRDjboZm13hmcjPWpHwfGikpZ67jSn1ZW4h7RJyj/IExsteM79E6I24Q XK4M+YNxUbFWnoS3A5ntB/J+zQcfuW0fJjCoCQzczNFDunbUyKoY3tPtaGvfuXgl 2M/QAt5ND/KcB7nQVqd/J6W3yBQBmiWABJxCAxkpVk0y4DOQ1HONMhFqgPUMjwZv XhBnhrIsByfsnazttjDoRoLOHJIiA7fj31EJFhqgYUYj+mBoCN7mjW6gRLgn5zbZ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:23 2026 by rpki-client