This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/lHY7We2BrbFc-eXXkRgJlJbdX3A.roa File: lHY7We2BrbFc-eXXkRgJlJbdX3A.roa (raw, json) Hash identifier: zHm1Mi17ZuiEgkgBNzNI9u7E4SsR3QzuY1xCaT9FLZo= Subject key identifier: 94:76:3B:59:ED:81:AD:B1:5C:F9:E5:D7:91:18:09:94:96:DD:5F:70 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1D2D136846448FFFEE7B6ADA4AA9 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/lHY7We2BrbFc-eXXkRgJlJbdX3A.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215311 IP address blocks: 91.108.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:2d:13:68:46:44:8f:ff:ee:7b:6a:da:4a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94763b59ed81adb15cf9e5d79118099496dd5f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:59:c4:6d:dd:5a:1f:08:38:70:68:36:a4: b6:88:d0:82:20:20:af:67:9d:ea:0d:74:0f:f5:15: 00:30:c9:34:a0:79:dc:3c:97:3b:21:07:6b:39:06: bf:7f:3b:cc:29:20:dc:09:49:b3:d1:0e:4e:59:c2: 9c:29:5d:72:af:4e:0d:17:da:c8:97:3a:6b:2a:c3: df:7e:14:a1:60:5f:61:e5:28:5b:3e:e8:08:36:48: 0b:83:46:75:3b:63:47:9e:66:f4:de:7a:91:62:02: 01:15:1d:3a:7f:9b:3f:6f:be:ee:c3:30:91:de:5c: 7f:b2:94:87:f0:60:35:21:b5:1c:95:9b:a5:4b:41: 6a:02:3e:d5:5b:a9:97:d9:64:a7:5f:00:0b:e8:6f: 94:21:65:50:84:09:3b:62:19:07:f0:81:ee:3d:9d: 1e:ac:b8:fd:50:43:07:51:5e:7a:b5:7b:59:8c:c6: 39:8d:cd:cc:c5:d5:02:6c:86:c3:ea:55:68:0e:d9: 08:5b:d3:2c:ff:03:b0:90:ff:16:60:39:96:8e:4e: ed:d3:bd:7e:c3:24:0e:61:ce:5c:0e:eb:c6:f9:ff: 92:9f:f1:14:43:32:7b:10:e9:31:4b:0a:e8:2e:a1: 22:e3:0c:85:a3:9e:92:90:7f:93:3f:35:c6:98:19: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:76:3B:59:ED:81:AD:B1:5C:F9:E5:D7:91:18:09:94:96:DD:5F:70 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/lHY7We2BrbFc-eXXkRgJlJbdX3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.248.0/22 Signature Algorithm: sha256WithRSAEncryption 23:0d:3d:63:08:f0:58:77:e8:0c:76:cf:b0:25:89:12:c2:fa: 02:e5:ed:45:55:31:f9:1a:3a:d2:bf:56:fe:ff:09:82:f7:1d: 99:57:bb:ff:be:7b:f8:3c:b6:f9:e1:cc:b3:d3:01:c3:59:81: cc:08:5b:3c:89:7c:71:5f:64:2e:ae:59:fe:67:88:71:24:b2: 95:a9:4d:40:10:d9:2a:10:2d:99:e9:f0:d1:b7:ac:cf:d9:8e: 10:f0:51:2a:7d:58:05:a1:40:e0:ad:52:b8:7f:df:ac:bc:f6: a0:bf:26:21:df:33:e4:db:19:05:88:f3:51:90:5e:d5:38:63: c9:7b:4f:a3:25:78:19:62:86:3b:b3:d8:69:7a:11:f5:f4:81: 44:52:d3:90:76:96:92:c4:25:44:57:57:2f:ff:c5:4a:19:a5: 10:d1:9c:46:c4:e8:1c:10:5e:ef:d4:d6:04:c6:e5:26:e4:c4: bc:52:76:7b:f8:6b:d9:9b:37:b4:50:d0:34:b1:6c:3f:92:19: 33:b6:8f:5f:13:9f:18:04:95:d0:c1:db:69:13:97:ff:19:c6: a5:86:b5:04:a7:0f:90:ef:0d:6b:e3:61:42:c1:f2:ac:78:25: 66:12:a7:d7:d1:18:3c:fe:69:39:59:0b:b6:6f:42:c7:70:cf: 8f:93:cf:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26x0tE2hGRI//7ntq2kqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc2M2I1OWVkODFhZGIxNWNmOWU1ZDc5MTE4MDk5NDk2ZGQ1ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv5ZxG3dWh8IOHBoNqS2iNCCICCv Z53qDXQP9RUAMMk0oHncPJc7IQdrOQa/fzvMKSDcCUmz0Q5OWcKcKV1yr04NF9rI lzprKsPffhShYF9h5ShbPugINkgLg0Z1O2NHnmb03nqRYgIBFR06f5s/b77uwzCR 3lx/spSH8GA1IbUclZulS0FqAj7VW6mX2WSnXwAL6G+UIWVQhAk7YhkH8IHuPZ0e rLj9UEMHUV56tXtZjMY5jc3MxdUCbIbD6lVoDtkIW9Ms/wOwkP8WYDmWjk7t071+ wyQOYc5cDuvG+f+Sn/EUQzJ7EOkxSwroLqEi4wyFo56SkH+TPzXGmBnJkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJR2O1ntga2xXPnl15EYCZSW3V9wMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvbEhZN1dlMkJyYkZjLWVYWGtSZ0psSmJkWDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2z4MA0G CSqGSIb3DQEBCwUAA4IBAQAjDT1jCPBYd+gMds+wJYkSwvoC5e1FVTH5GjrSv1b+ /wmC9x2ZV7v/vnv4PLb54cyz0wHDWYHMCFs8iXxxX2Qurln+Z4hxJLKVqU1AENkq EC2Z6fDRt6zP2Y4Q8FEqfVgFoUDgrVK4f9+svPagvyYh3zPk2xkFiPNRkF7VOGPJ e0+jJXgZYoY7s9hpehH19IFEUtOQdpaSxCVEV1cv/8VKGaUQ0ZxGxOgcEF7v1NYE xuUm5MS8UnZ7+GvZmze0UNA0sWw/khkzto9fE58YBJXQwdtpE5f/GcalhrUEpw+Q 7w1r42FCwfKseCVmEqfX0Rg8/mk5WQu2b0LHcM+Pk8/a -----END CERTIFICATE-----Generated at Tue Jan 20 15:46:21 2026 by rpki-client