This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa File: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (raw, json) Hash identifier: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0= Subject key identifier: 94:98:BE:02:69:48:A9:94:35:81:C3:50:23:25:05:61:43:A6:D0:FC Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FB3DC78C2D8F0688B2483C0610AA Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.152.167.0/24 maxlen: 24 152.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fb:3d:c7:8c:2d:8f:06:88:b2:48:3c:06:10:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9498be026948a9943581c3502325056143a6d0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:8f:ba:cc:e4:be:ef:72:6e:7c:ce:be:4f: 18:c0:57:e1:ce:38:53:ec:10:2a:98:14:b8:b1:1d: 96:22:32:b3:bd:74:95:c5:b2:1f:ff:96:8e:ac:32: ef:85:f6:d8:d4:05:79:67:96:13:86:58:0f:69:fb: 63:a4:be:29:cd:48:2c:c1:38:f8:87:7d:43:4d:a5: 7a:6f:17:94:ab:ec:d1:ba:cf:05:1b:e8:42:8a:37: 91:94:c5:36:ae:9e:a0:fb:83:ef:6e:41:dd:b1:9b: dd:94:bd:f5:a1:54:71:38:41:f1:75:8f:81:9f:09: a1:0c:29:8f:0c:e1:ff:c9:97:f0:3c:d8:ee:07:bf: 66:8f:b1:9f:26:b3:19:60:1e:52:28:34:69:b2:e6: 90:78:c0:1c:3b:62:73:a3:23:fa:ee:a0:50:b2:1f: 74:6a:4d:f7:ca:12:07:f4:3d:94:ca:a1:b9:64:43: de:87:d4:c5:41:55:de:45:4d:69:69:74:1d:ef:0f: 45:1a:e8:cf:e8:da:eb:84:7f:9c:1e:90:93:7d:29: ba:42:3c:49:4f:0c:8f:2a:06:67:a9:d6:eb:14:1f: dd:55:14:97:62:04:38:d5:da:e0:3c:23:54:b9:43: 67:eb:19:b6:39:9d:aa:b5:bc:0f:b6:36:21:83:0d: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:98:BE:02:69:48:A9:94:35:81:C3:50:23:25:05:61:43:A6:D0:FC X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.167.0/24 152.89.192.0/24 Signature Algorithm: sha256WithRSAEncryption 20:c5:fc:fd:15:35:29:d5:95:cc:fc:5d:ff:97:75:7a:67:2e: 74:6f:3f:3b:99:fd:bb:9d:19:ce:d2:4c:c3:28:67:2a:64:12: 69:24:57:39:d1:ed:af:28:92:15:56:63:06:7d:b0:2d:11:4c: 22:bb:b9:12:57:d2:a9:0b:87:d3:e2:33:e5:8b:8a:ef:71:6e: a4:d4:3e:92:95:67:01:13:38:91:5d:42:82:00:00:41:41:79: 9b:4f:e5:4b:ef:5e:8c:c1:31:d4:34:f4:4f:5c:ce:2a:4d:d2: 7f:81:73:81:36:7a:fe:e6:7f:30:0d:3d:43:5d:77:c7:59:af: c7:a6:d4:2c:a3:fd:63:01:08:26:b2:5e:67:12:c9:b9:d7:54: 4d:ed:4e:ae:ad:72:bd:fa:7f:2e:2f:9a:8e:e7:2f:48:50:07: 61:9f:65:e6:b5:b3:e9:b0:cd:40:d3:4a:84:45:77:ba:7e:3a: 4b:d2:65:2b:96:dc:41:9c:87:05:d5:93:ce:56:16:3c:ba:54: 31:d8:cf:ca:ce:a3:84:25:d4:c3:8c:1c:fe:5e:6f:3b:0a:ef: 07:d8:d9:06:14:db:35:f1:e9:86:17:f5:b3:82:55:b9:e0:78: 9b:56:ef:43:a1:18:72:0b:6f:94:cf:c7:64:37:07:43:b6:9e: a8:18:19:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvs9x4wtjwaIskg8BhCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDk4YmUwMjY5NDhhOTk0MzU4MWMzNTAyMzI1MDU2MTQzYTZkMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j6Puszkvu9ybnzOvk8YwFfhzjhT 7BAqmBS4sR2WIjKzvXSVxbIf/5aOrDLvhfbY1AV5Z5YThlgPaftjpL4pzUgswTj4 h31DTaV6bxeUq+zRus8FG+hCijeRlMU2rp6g+4PvbkHdsZvdlL31oVRxOEHxdY+B nwmhDCmPDOH/yZfwPNjuB79mj7GfJrMZYB5SKDRpsuaQeMAcO2JzoyP67qBQsh90 ak33yhIH9D2UyqG5ZEPeh9TFQVXeRU1paXQd7w9FGujP6NrrhH+cHpCTfSm6QjxJ TwyPKgZnqdbrFB/dVRSXYgQ41drgPCNUuUNn6xm2OZ2qtbwPtjYhgw1PvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJSYvgJpSKmUNYHDUCMlBWFDptD8MB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvbEppLUFtbElxWlExZ2NOUUl5VUZZVU9tMFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZinAwQA mFnAMA0GCSqGSIb3DQEBCwUAA4IBAQAgxfz9FTUp1ZXM/F3/l3V6Zy50bz87mf27 nRnO0kzDKGcqZBJpJFc50e2vKJIVVmMGfbAtEUwiu7kSV9KpC4fT4jPli4rvcW6k 1D6SlWcBEziRXUKCAABBQXmbT+VL716MwTHUNPRPXM4qTdJ/gXOBNnr+5n8wDT1D XXfHWa/HptQso/1jAQgmsl5nEsm511RN7U6urXK9+n8uL5qO5y9IUAdhn2XmtbPp sM1A00qERXe6fjpL0mUrltxBnIcF1ZPOVhY8ulQx2M/KzqOEJdTDjBz+Xm87Cu8H 2NkGFNs18emGF/WzglW54HibVu9DoRhyC2+Uz8dkNwdDtp6oGBnG -----END CERTIFICATE-----Generated at Thu Jan 8 12:56:56 2026 by rpki-client