This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/doW0mpCnrwRns3RIOxChwkliLTE.roa File: doW0mpCnrwRns3RIOxChwkliLTE.roa (raw, json) Hash identifier: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc= Subject key identifier: 76:85:B4:9A:90:A7:AF:04:67:B3:74:48:3B:10:A1:C2:49:62:2D:31 Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Certificate serial: 019B7C12AAA33176CDB792E4542E6262E64F Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/doW0mpCnrwRns3RIOxChwkliLTE.roa Signing time: Fri 02 Jan 2026 00:19:16 +0000 ROA not before: Fri 02 Jan 2026 00:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211368 IP address blocks: 185.239.156.0/24 maxlen: 24 185.239.157.0/24 maxlen: 24 185.239.158.0/24 maxlen: 24 185.239.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:aa:a3:31:76:cd:b7:92:e4:54:2e:62:62:e6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7685b49a90a7af0467b374483b10a1c249622d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:1d:dc:c2:e5:15:18:ed:09:e1:87:0d:67: 9a:02:f4:89:d7:50:45:a0:f4:86:b5:61:4e:ef:f4: e4:72:f1:bf:33:70:0e:2e:38:e0:26:ae:87:60:a3: 17:ee:30:50:65:40:c2:d4:bf:77:dd:a3:5d:77:d8: 02:1f:bf:b3:5a:61:5f:42:49:d3:5d:5e:25:ad:60: d6:16:1c:9d:2c:19:d3:bb:9b:4a:cd:7f:c5:33:f3: e9:6d:8e:ed:ae:f2:41:5a:0f:d8:6e:b4:21:e8:64: 04:b0:5f:7f:8e:d9:da:7f:80:3e:3d:79:ff:1f:0a: 90:06:35:ae:0b:7d:05:88:27:a4:ba:a1:b1:58:15: be:1b:5b:db:2f:94:fd:e2:23:db:68:ee:cb:6f:f2: 7a:cf:c9:a2:57:2e:b7:77:b9:7f:c7:09:36:7a:7a: e6:3f:18:30:55:0c:28:ae:57:b4:8a:3d:d4:36:15: d8:75:d3:fc:a4:af:2d:c8:52:f7:35:32:0b:73:8a: 41:7c:66:2e:2f:1b:f6:25:ee:2c:9f:ce:d6:d1:03: c0:88:17:44:86:91:ee:b4:26:6e:8f:07:84:c6:af: b4:a8:16:e7:a8:8d:2a:af:b7:b4:a2:50:69:b4:f3: f4:00:31:9e:7f:8a:6f:c5:43:49:10:b9:f7:16:a3: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:85:B4:9A:90:A7:AF:04:67:B3:74:48:3B:10:A1:C2:49:62:2D:31 X509v3 Authority Key Identifier: keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/doW0mpCnrwRns3RIOxChwkliLTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.156.0/22 Signature Algorithm: sha256WithRSAEncryption 01:6a:b6:ea:1a:8a:4c:f6:da:e2:bc:b5:15:3e:a6:63:fa:92: 8d:ef:d9:76:64:4d:14:5d:b2:7e:f4:98:1f:34:f1:b8:09:e0: b1:dc:f3:aa:5a:20:fa:ca:63:fd:cf:f7:6c:96:58:28:9b:48: 44:95:72:60:d9:71:a5:91:ad:ea:cd:60:31:ba:15:21:bc:5b: fa:14:7e:0c:ec:35:cf:50:3c:f5:c8:d7:49:4b:ab:b8:b0:f1: f1:cd:6d:8a:81:c0:8c:a6:fb:66:dc:2b:fc:9d:77:0e:89:8f: 7e:12:8b:c7:24:f2:b7:e1:48:4d:7e:98:70:4f:4f:2a:41:42: 15:fe:3f:aa:80:82:71:55:5c:b7:95:7f:1d:b4:68:42:d7:7a: 82:94:82:01:de:cb:0d:02:78:d3:12:96:46:bb:93:89:10:90: 79:3b:15:e4:1b:22:ca:03:26:a1:37:26:cc:5c:78:f9:b1:d8: 0b:95:4a:fa:e6:80:16:68:88:e5:a2:9e:c2:84:fd:7a:89:d4: b4:69:63:3f:b3:a1:78:26:c1:9b:2b:57:8c:4c:88:31:ec:fd: 9e:9d:af:83:75:c1:96:dd:f5:d0:3a:dc:7b:c5:f6:38:2f:a9: 87:45:e6:ce:4f:ee:e1:79:26:18:d3:22:af:bd:24:1d:24:6f: 57:2c:4b:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqqjMXbNt5LkVC5iYuZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz YjU2YzAwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njg1YjQ5YTkwYTdhZjA0NjdiMzc0NDgzYjEwYTFjMjQ5NjIyZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHkd3MLlFRjtCeGHDWeaAvSJ11BF oPSGtWFO7/TkcvG/M3AOLjjgJq6HYKMX7jBQZUDC1L933aNdd9gCH7+zWmFfQknT XV4lrWDWFhydLBnTu5tKzX/FM/PpbY7trvJBWg/YbrQh6GQEsF9/jtnaf4A+PXn/ HwqQBjWuC30FiCekuqGxWBW+G1vbL5T94iPbaO7Lb/J6z8miVy63d7l/xwk2enrm PxgwVQworle0ij3UNhXYddP8pK8tyFL3NTILc4pBfGYuLxv2Je4sn87W0QPAiBdE hpHutCZujweExq+0qBbnqI0qr7e0olBptPP0ADGef4pvxUNJELn3FqNrgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHaFtJqQp68EZ7N0SDsQocJJYi0xMB8GA1UdIwQY MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct NmY3MWNhZDE2Zjk2LzEvZG9XMG1wQ25yd1JuczNSSU94Q2h3a2xpTFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2 LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue+cMA0G CSqGSIb3DQEBCwUAA4IBAQABarbqGopM9trivLUVPqZj+pKN79l2ZE0UXbJ+9Jgf NPG4CeCx3POqWiD6ymP9z/dsllgom0hElXJg2XGlka3qzWAxuhUhvFv6FH4M7DXP UDz1yNdJS6u4sPHxzW2KgcCMpvtm3Cv8nXcOiY9+EovHJPK34UhNfphwT08qQUIV /j+qgIJxVVy3lX8dtGhC13qClIIB3ssNAnjTEpZGu5OJEJB5OxXkGyLKAyahNybM XHj5sdgLlUr65oAWaIjlop7ChP16idS0aWM/s6F4JsGbK1eMTIgx7P2ena+DdcGW 3fXQOtx7xfY4L6mHRebOT+7heSYY0yKvvSQdJG9XLEuX -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:42 2026 by rpki-client