This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/lomzg8TRXkBkQAJV3SYj7kC0l0k.roa File: lomzg8TRXkBkQAJV3SYj7kC0l0k.roa (raw, json) Hash identifier: gnOZFo1e3nzIFcl3On+9oUhEAr2nhDp2g8Ki0TCHhqA= Subject key identifier: 96:89:B3:83:C4:D1:5E:40:64:40:02:55:DD:26:23:EE:40:B4:97:49 Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba Certificate serial: 019B7DC975EDAA807702D6DE6FCCA48C9EDC Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/lomzg8TRXkBkQAJV3SYj7kC0l0k.roa Signing time: Fri 02 Jan 2026 08:18:33 +0000 ROA not before: Fri 02 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39691 IP address blocks: 185.234.224.0/22 maxlen: 22 185.234.224.0/23 maxlen: 23 185.234.224.0/24 maxlen: 24 185.234.225.0/24 maxlen: 24 185.234.226.0/24 maxlen: 24 185.234.227.0/24 maxlen: 24 2a0d:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:75:ed:aa:80:77:02:d6:de:6f:cc:a4:8c:9e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba Validity Not Before: Jan 2 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9689b383c4d15e4064400255dd2623ee40b49749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:04:2d:2b:03:75:a9:0a:22:e1:b4:1e:d6: fc:78:76:4c:7c:e8:bb:5e:9c:bc:dd:49:0b:5c:7a: 5a:13:9f:7e:21:e4:75:6d:32:55:1d:9a:7f:ed:bd: d2:bf:e2:5f:1b:54:37:5a:33:bc:a6:93:de:8f:b0: 63:4f:18:9e:40:ec:8f:c5:44:bf:7b:e0:97:16:ed: 41:b5:30:75:1d:d2:de:e7:60:62:2b:8f:69:be:09: a6:1d:6f:a4:27:7c:cd:82:36:13:29:b1:e5:c2:d8: 0c:45:1f:08:4d:16:36:09:48:14:09:4b:bd:a1:3b: 6e:e0:64:6c:06:97:95:86:65:8d:85:42:81:4a:56: fd:d7:b6:fc:ff:d9:75:e4:f7:8c:08:81:20:f8:1e: e0:e7:c3:1c:f2:90:29:3a:cd:45:db:06:b1:5a:0c: 55:5f:3f:bc:00:2f:f7:37:be:3d:b2:b3:ee:1d:86: 76:96:da:2d:68:21:3b:0e:f0:6c:6f:fa:a8:53:f5: 88:23:3a:e2:de:ed:f6:fe:65:27:2d:34:5a:fe:22: 25:79:04:f8:2f:c4:dd:3d:ee:5c:af:1d:7f:a0:59: c1:3e:88:82:74:b1:7e:60:9d:7b:e5:aa:ba:cc:33: 55:92:75:fd:55:eb:43:5b:38:6e:cc:53:a7:40:9b: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:89:B3:83:C4:D1:5E:40:64:40:02:55:DD:26:23:EE:40:B4:97:49 X509v3 Authority Key Identifier: keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/lomzg8TRXkBkQAJV3SYj7kC0l0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.224.0/22 IPv6: 2a0d:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 2e:c1:a1:c0:1b:fe:62:5b:6a:c9:ee:ca:dd:40:10:35:61:66: eb:0b:72:86:23:61:90:1e:e5:75:6c:d5:73:11:81:1c:94:34: 45:4d:aa:e4:be:44:c2:1a:be:79:73:b7:9f:a5:61:e1:c3:3e: 39:a5:4b:81:06:cc:46:5a:16:53:3a:79:13:ee:1d:96:42:56: 4c:1c:6c:41:71:67:db:e1:01:9e:36:c4:ca:b4:8b:44:4e:df: 68:57:5b:ef:48:93:3f:23:a1:44:a5:fe:d5:3e:51:56:ca:62: 4d:2d:97:f1:47:53:f7:86:86:1d:77:8d:f7:b4:d2:ad:70:85: 25:dd:7b:bd:68:e6:22:f2:50:71:57:79:d3:37:f6:dc:92:3d: 9c:13:ad:ae:05:02:dd:9d:06:fb:60:41:02:98:e0:5f:32:96: 32:fb:ed:13:2e:90:ff:c2:59:ff:54:ec:39:47:4f:46:6b:bf: 03:d6:1d:e4:84:17:ee:2b:bc:59:d1:78:d4:57:7d:78:f5:b6: d3:6d:40:28:04:fa:b5:8c:33:1f:0d:ad:be:7f:cd:a7:85:4e: 9c:eb:06:57:97:9c:1b:69:67:ce:00:4c:8f:02:d7:06:19:0c: 01:19:8d:4f:d1:3c:c7:5c:7c:de:ce:ae:dd:26:04:86:ae:38: 9d:b9:05:ec -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yXXtqoB3Atbeb8ykjJ7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Nzk5Yjc3MmI1NTFkYjc4NGVlYmE4YjBlMTE1YTBjNDMz Y2QzYmEwHhcNMjYwMTAyMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njg5YjM4M2M0ZDE1ZTQwNjQ0MDAyNTVkZDI2MjNlZTQwYjQ5NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KIELSsDdakKIuG0Htb8eHZMfOi7 Xpy83UkLXHpaE59+IeR1bTJVHZp/7b3Sv+JfG1Q3WjO8ppPej7BjTxieQOyPxUS/ e+CXFu1BtTB1HdLe52BiK49pvgmmHW+kJ3zNgjYTKbHlwtgMRR8ITRY2CUgUCUu9 oTtu4GRsBpeVhmWNhUKBSlb917b8/9l15PeMCIEg+B7g58Mc8pApOs1F2waxWgxV Xz+8AC/3N749srPuHYZ2ltotaCE7DvBsb/qoU/WIIzri3u32/mUnLTRa/iIleQT4 L8TdPe5crx1/oFnBPoiCdLF+YJ175aq6zDNVknX9VetDWzhuzFOnQJuYiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJaJs4PE0V5AZEACVd0mI+5AtJdJMB8GA1UdIwQY MBaAFGh5m3crVR23hO66iw4RWgxDPNO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEt MGM3NmEzMTZiNTJlLzEvbG9temc4VFJYa0JrUUFKVjNTWWo3a0MwbDBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEtMGM3NmEzMTZiNTJl LzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuergMA8E AgACMAkDBwAqDS8AAAAwDQYJKoZIhvcNAQELBQADggEBAC7BocAb/mJbasnuyt1A EDVhZusLcoYjYZAe5XVs1XMRgRyUNEVNquS+RMIavnlzt5+lYeHDPjmlS4EGzEZa FlM6eRPuHZZCVkwcbEFxZ9vhAZ42xMq0i0RO32hXW+9Ikz8joUSl/tU+UVbKYk0t l/FHU/eGhh13jfe00q1whSXde71o5iLyUHFXedM39tySPZwTra4FAt2dBvtgQQKY 4F8yljL77RMukP/CWf9U7DlHT0ZrvwPWHeSEF+4rvFnReNRXfXj1ttNtQCgE+rWM Mx8Nrb5/zaeFTpzrBleXnBtpZ84ATI8C1wYZDAEZjU/RPMdcfN7Ort0mBIauOJ25 Bew= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:10 2026 by rpki-client