This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/Lh1w2stJ270Gej9xnTdwoInIgKA.roa File: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (raw, json) Hash identifier: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo= Subject key identifier: 2E:1D:70:DA:CB:49:DB:BD:06:7A:3F:71:9D:37:70:A0:89:C8:80:A0 Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7 Certificate serial: 019B7834B9D835226572408B9588D3D9FD34 Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/Lh1w2stJ270Gej9xnTdwoInIgKA.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199789 IP address blocks: 185.60.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b9:d8:35:22:65:72:40:8b:95:88:d3:d9:fd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1d70dacb49dbbd067a3f719d3770a089c880a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:6a:9a:9c:68:87:34:6f:da:9f:4e:f8:c6: 29:08:8a:ff:d6:b7:74:ba:33:ea:6b:95:6f:87:e1: bb:f9:9c:a5:c7:62:03:0c:97:58:ef:9f:1c:a6:31: f5:86:8c:c0:38:9b:74:cb:89:d8:3a:35:75:f9:d7: 2b:f4:f3:4c:05:fa:21:3a:12:8b:ee:c8:91:9b:f3: 20:06:9b:ae:2c:24:36:bd:97:59:f9:14:fc:81:12: e1:ce:a4:59:44:a0:0b:8b:83:f9:08:63:b6:83:6b: 4f:25:4c:3f:39:9a:c5:a8:84:24:99:1f:a5:b4:4f: 00:20:db:3e:5a:f7:ce:f4:56:ad:37:75:37:81:a4: a1:36:6a:75:5f:8e:6a:1c:79:75:59:7f:b6:5d:5b: c8:39:e6:e7:15:45:b6:86:2a:f7:c6:0e:30:1a:0b: 30:96:4c:78:6c:f3:57:99:62:33:2f:cc:1a:b0:fe: 35:de:1c:73:41:38:84:ac:ef:4b:4c:64:d1:38:9b: 04:13:31:72:da:67:35:70:34:e6:00:99:6b:5a:b3: 45:40:24:3f:af:30:e4:50:f6:7a:1c:ef:18:75:95: 9a:d9:69:86:b6:a2:e5:2a:a3:be:91:f7:eb:54:c1: a4:a7:d4:11:da:ac:8a:7a:1f:b1:8b:05:01:05:96: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1D:70:DA:CB:49:DB:BD:06:7A:3F:71:9D:37:70:A0:89:C8:80:A0 X509v3 Authority Key Identifier: keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/Lh1w2stJ270Gej9xnTdwoInIgKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.74.0/24 Signature Algorithm: sha256WithRSAEncryption e6:e9:7a:06:bd:a9:5a:d0:d1:4d:57:2a:da:e6:7c:5f:82:c2: 5d:e1:72:d7:d3:fc:53:46:d6:a5:7f:9f:1a:c8:8a:91:75:81: 5d:49:38:88:18:ad:c0:e1:2c:d1:72:51:c2:85:40:37:97:92: af:10:0e:2e:db:e8:b0:6e:5d:5a:41:f3:64:2d:3b:80:b3:9d: 8e:86:e6:00:06:33:df:47:bf:57:f6:b8:f6:bb:b9:49:1c:5c: a0:ea:7f:36:4c:cd:46:94:1d:59:bf:00:c9:40:8c:e2:74:3c: f9:32:0e:1f:94:75:d4:67:80:cb:f5:63:45:a0:32:6a:5c:76: c5:ae:1c:b5:ce:88:00:ce:ad:dc:e4:d8:d9:00:be:3c:78:b9: be:3b:6a:db:31:a8:33:d0:96:1f:82:50:da:e1:f3:a0:a1:68: a6:bd:3c:7d:c9:89:5b:da:a6:bb:f9:71:00:db:10:1d:2a:3f: 38:13:d3:76:5d:49:12:c7:ac:56:53:f0:b5:0f:aa:e0:c7:08: 34:c4:98:51:58:80:78:69:23:03:60:41:30:7e:44:bb:73:ec: 0b:52:a3:9e:d2:f4:11:da:df:45:f3:55:ce:a2:9c:16:df:9f: 59:54:b1:bd:49:d5:9d:ac:98:39:47:5d:3c:c1:fb:aa:87:36: fb:62:b8:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLnYNSJlckCLlYjT2f00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1 MWI0ZDcwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFkNzBkYWNiNDlkYmJkMDY3YTNmNzE5ZDM3NzBhMDg5Yzg4MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJqmpxohzRv2p9O+MYpCIr/1rd0 ujPqa5Vvh+G7+Zylx2IDDJdY758cpjH1hozAOJt0y4nYOjV1+dcr9PNMBfohOhKL 7siRm/MgBpuuLCQ2vZdZ+RT8gRLhzqRZRKALi4P5CGO2g2tPJUw/OZrFqIQkmR+l tE8AINs+WvfO9FatN3U3gaShNmp1X45qHHl1WX+2XVvIOebnFUW2hir3xg4wGgsw lkx4bPNXmWIzL8wasP413hxzQTiErO9LTGTROJsEEzFy2mc1cDTmAJlrWrNFQCQ/ rzDkUPZ6HO8YdZWa2WmGtqLlKqO+kffrVMGkp9QR2qyKeh+xiwUBBZYUeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4dcNrLSdu9Bno/cZ03cKCJyICgMB8GA1UdIwQY MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt ZTEwN2Q5ZjE2YzJkLzEvTGgxdzJzdEoyNzBHZWo5eG5UZHdvSW5JZ0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTxKMA0G CSqGSIb3DQEBCwUAA4IBAQDm6XoGvala0NFNVyra5nxfgsJd4XLX0/xTRtalf58a yIqRdYFdSTiIGK3A4SzRclHChUA3l5KvEA4u2+iwbl1aQfNkLTuAs52OhuYABjPf R79X9rj2u7lJHFyg6n82TM1GlB1ZvwDJQIzidDz5Mg4flHXUZ4DL9WNFoDJqXHbF rhy1zogAzq3c5NjZAL48eLm+O2rbMagz0JYfglDa4fOgoWimvTx9yYlb2qa7+XEA 2xAdKj84E9N2XUkSx6xWU/C1D6rgxwg0xJhRWIB4aSMDYEEwfkS7c+wLUqOe0vQR 2t9F81XOopwW359ZVLG9SdWdrJg5R108wfuqhzb7Yrhu -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:49 2026 by rpki-client