This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/lH39RLJn2Hz8-UQkPP2o_JvX24I.roa File: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (raw, json) Hash identifier: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M= Subject key identifier: 94:7D:FD:44:B2:67:D8:7C:FC:F9:44:24:3C:FD:A8:FC:9B:D7:DB:82 Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295 Certificate serial: 019B7E3901A40B9A1C2B71BC6A4DBDB8E2B7 Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/lH39RLJn2Hz8-UQkPP2o_JvX24I.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.164.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:01:a4:0b:9a:1c:2b:71:bc:6a:4d:bd:b8:e2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=947dfd44b267d87cfcf944243cfda8fc9bd7db82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:b5:ec:a9:3f:e4:5a:dd:81:8a:12:ba:8b: 06:25:3e:1d:d8:79:fb:b8:d3:d5:64:6a:d8:74:8c: 14:60:41:f1:11:b3:89:52:6e:c8:5e:e3:05:0f:c7: 51:d3:b2:53:39:42:09:4d:57:cb:50:18:de:2a:9f: bd:d5:5c:68:48:e7:81:5f:0d:c2:0d:89:c4:de:00: 13:a6:53:47:07:56:65:e4:d9:5f:a5:03:fa:3c:1d: 63:cd:38:05:72:28:30:0b:b0:85:4e:4f:b7:8e:b7: 0e:f3:52:c2:56:61:7f:aa:80:99:41:89:3d:ec:a3: b2:f9:c2:76:10:dc:e9:89:e5:6a:3d:bc:28:94:1b: 3d:a6:bf:0e:8a:10:0e:74:0c:9a:a2:66:36:ba:40: 91:5b:96:d1:c7:eb:34:79:5b:27:36:61:61:6e:70: 40:db:3e:07:99:6c:2a:20:bb:83:7e:1b:79:b5:95: c0:b2:22:b8:22:cf:87:9e:dc:f9:7b:61:83:0a:db: d7:b5:52:7c:83:ff:83:47:76:4e:b0:54:90:ec:2b: bc:29:c0:79:d3:e6:68:bc:21:f9:65:fe:b8:0c:86: a7:98:f5:eb:5c:27:f3:ee:3e:63:de:eb:1f:27:fa: 1b:3b:69:4c:29:78:f6:f2:fe:2c:1e:0a:65:62:fa: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7D:FD:44:B2:67:D8:7C:FC:F9:44:24:3C:FD:A8:FC:9B:D7:DB:82 X509v3 Authority Key Identifier: keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/lH39RLJn2Hz8-UQkPP2o_JvX24I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:5d:c0:6b:23:98:fe:33:56:db:bb:a6:5d:14:3f:bc:e1:99: 36:01:45:6c:6f:b5:d9:d5:f1:02:e1:7f:b8:1e:fb:1a:59:1e: f3:77:02:1f:1a:70:2f:46:aa:b1:dd:66:76:d2:15:63:4f:61: 90:5c:af:ba:53:d9:e7:af:ce:1d:40:5e:82:22:9b:ad:4f:0b: e4:64:50:43:d6:2b:02:fd:ef:08:77:f5:b1:22:c7:53:d1:98: 8e:98:d8:16:8b:f7:7e:45:8e:47:94:03:96:63:1a:a7:23:41: 80:60:e1:b4:dd:f1:46:ee:bb:1c:e7:f3:29:2f:6c:a6:77:d3: b2:f9:10:b2:d5:10:47:b8:cc:20:41:7e:33:ff:71:39:7c:80: 4b:b8:23:8a:b7:8f:44:fc:79:dd:f4:36:72:1c:3a:2f:b2:fc: 2a:07:da:89:84:2d:02:c8:1e:b4:ce:18:8f:1a:a8:fc:c9:e7: 15:18:44:b2:ff:0a:93:a6:a3:c6:cd:cc:a9:a4:68:cf:5f:cd: 3b:e2:b1:14:ab:6a:81:a2:d5:c7:c9:89:a8:ba:6b:9d:24:d3: f3:3b:1e:af:5b:b0:0a:6b:81:08:fe:dc:f9:a4:8b:52:fe:1c: 96:a2:59:77:84:d7:af:50:4d:98:72:63:aa:f3:7f:1a:4a:36: 9d:c0:35:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQGkC5ocK3G8ak29uOK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm YjQyOTUwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDdkZmQ0NGIyNjdkODdjZmNmOTQ0MjQzY2ZkYThmYzliZDdkYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDa17Kk/5FrdgYoSuosGJT4d2Hn7 uNPVZGrYdIwUYEHxEbOJUm7IXuMFD8dR07JTOUIJTVfLUBjeKp+91VxoSOeBXw3C DYnE3gATplNHB1Zl5NlfpQP6PB1jzTgFcigwC7CFTk+3jrcO81LCVmF/qoCZQYk9 7KOy+cJ2ENzpieVqPbwolBs9pr8OihAOdAyaomY2ukCRW5bRx+s0eVsnNmFhbnBA 2z4HmWwqILuDfht5tZXAsiK4Is+Hntz5e2GDCtvXtVJ8g/+DR3ZOsFSQ7Cu8KcB5 0+ZovCH5Zf64DIanmPXrXCfz7j5j3usfJ/obO2lMKXj28v4sHgplYvrr9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJR9/USyZ9h8/PlEJDz9qPyb19uCMB8GA1UdIwQY MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt NGQ2ODVhY2E4Mjc5LzEvbEgzOVJMSm4ySHo4LVVRa1BQMm9fSnZYMjRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5 LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaTYMA0G CSqGSIb3DQEBCwUAA4IBAQAaXcBrI5j+M1bbu6ZdFD+84Zk2AUVsb7XZ1fEC4X+4 HvsaWR7zdwIfGnAvRqqx3WZ20hVjT2GQXK+6U9nnr84dQF6CIputTwvkZFBD1isC /e8Id/WxIsdT0ZiOmNgWi/d+RY5HlAOWYxqnI0GAYOG03fFG7rsc5/MpL2ymd9Oy +RCy1RBHuMwgQX4z/3E5fIBLuCOKt49E/Hnd9DZyHDovsvwqB9qJhC0CyB60zhiP Gqj8yecVGESy/wqTpqPGzcyppGjPX8074rEUq2qBotXHyYmoumudJNPzOx6vW7AK a4EI/tz5pItS/hyWoll3hNevUE2YcmOq838aSjadwDWi -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:00 2026 by rpki-client