This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/lHui1rAjQ_Q4r1wxIGuetVb48BI.roa File: lHui1rAjQ_Q4r1wxIGuetVb48BI.roa (raw, json) Hash identifier: RlNAJsl93PkyN71SoGN3JUD37RzQ/2tniVsKOLkpsMU= Subject key identifier: 94:7B:A2:D6:B0:23:43:F4:38:AF:5C:31:20:6B:9E:B5:56:F8:F0:12 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B12D778AD88436F064D41066BAAADBD4C Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/lHui1rAjQ_Q4r1wxIGuetVb48BI.roa Signing time: Fri 12 Dec 2025 13:54:29 +0000 ROA not before: Fri 12 Dec 2025 13:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28968 IP address blocks: 62.181.34.0/23 maxlen: 23 62.181.36.0/22 maxlen: 22 62.181.38.0/24 maxlen: 24 62.181.46.0/23 maxlen: 23 62.181.56.0/21 maxlen: 24 62.181.56.0/22 maxlen: 24 62.181.58.0/23 maxlen: 23 77.232.32.0/23 maxlen: 23 77.232.35.0/24 maxlen: 24 77.232.48.0/23 maxlen: 23 212.59.96.0/21 maxlen: 21 212.59.108.0/23 maxlen: 23 212.59.108.0/24 maxlen: 24 212.59.109.0/24 maxlen: 24 2a00:f460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:d7:78:ad:88:43:6f:06:4d:41:06:6b:aa:ad:bd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Dec 12 13:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=947ba2d6b02343f438af5c31206b9eb556f8f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:1a:13:15:5e:11:d4:e8:84:22:cb:af:82: b5:83:e2:2c:2f:ba:ae:f5:ff:69:7f:79:a9:b1:dd: f9:8a:2d:d4:8b:cf:31:ac:63:e8:43:1c:70:92:11: e6:6b:f7:bd:dc:a3:f1:de:9d:9b:dc:65:5b:b8:ca: 94:d8:02:2c:82:7e:2f:e3:ff:58:c9:53:f5:d2:e8: 20:98:14:20:dc:19:e5:ae:01:63:5c:ea:73:38:97: 3d:ac:84:7d:60:8c:c5:0f:57:aa:21:5a:bb:cb:29: 62:59:ea:6f:83:53:d4:13:5a:71:ab:e8:e7:38:07: 8c:4d:b5:ca:c8:bc:8d:9d:3d:76:ed:12:2e:a6:4a: f6:ea:03:3d:76:46:b1:81:84:f7:f5:6a:60:61:52: 7a:60:60:4d:1c:37:dc:7a:a4:c5:93:8e:f1:b3:fb: 4e:70:72:42:34:6c:1b:e4:a9:20:cd:9e:f2:2c:2d: 47:79:ef:1e:dc:30:9a:e6:33:85:15:44:dd:f7:b8: 4a:7f:b7:e1:9c:a7:ff:74:0a:9e:34:44:f4:b5:9b: 86:e2:74:2f:15:70:5b:4f:a7:23:7c:e3:9a:b3:1e: b2:ec:ec:1a:74:ce:a7:c3:44:6d:e2:6f:22:0e:29: 0c:ce:5b:96:c6:c3:8e:27:b1:78:39:d1:aa:3d:fc: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7B:A2:D6:B0:23:43:F4:38:AF:5C:31:20:6B:9E:B5:56:F8:F0:12 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/lHui1rAjQ_Q4r1wxIGuetVb48BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.34.0-62.181.39.255 62.181.46.0/23 62.181.56.0/21 77.232.32.0/23 77.232.35.0/24 77.232.48.0/23 212.59.96.0/21 212.59.108.0/23 IPv6: 2a00:f460::/32 Signature Algorithm: sha256WithRSAEncryption 94:4e:18:28:27:df:b8:ce:91:4a:e8:76:35:65:af:b8:33:36: a2:17:4c:1f:d9:ed:a5:d5:52:fd:76:ec:ca:ef:ce:c9:fc:4c: dc:dd:e3:a4:9b:a0:35:7c:28:12:ac:4c:5d:f5:8b:95:e9:c3: 4d:8a:51:fb:c4:21:b7:bb:12:c0:55:79:e4:20:62:c4:e1:55: 22:46:08:b1:79:f6:12:10:11:48:31:23:b7:a5:03:15:b3:15: f0:57:8c:5a:5b:f9:e4:e7:64:9f:f7:c2:d5:11:33:ca:d4:e0: 62:00:c3:bf:3e:a9:ed:bf:53:31:34:c9:84:24:22:43:f9:b6: ff:ff:9b:e1:79:06:7a:be:34:5c:f1:67:c7:0f:00:78:c4:28: f9:42:90:f8:54:ae:55:a7:d4:8e:61:9c:63:86:e8:94:18:38: a4:e1:10:85:cb:79:40:c0:61:aa:e6:b3:8b:fd:64:f2:f2:30: 5e:b9:9b:66:c7:2d:30:03:22:5c:55:23:dd:40:cd:44:90:83: 25:62:05:e7:ae:08:a4:9f:ca:db:2c:29:7a:b6:4c:b0:72:3c: 59:d3:90:89:42:b4:63:d2:51:a5:e1:bd:f7:3c:c3:aa:d2:b8: 69:26:0f:f5:cd:22:98:f7:84:98:ab:76:80:26:f8:a3:a8:7b: a5:82:3c:09 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZsS13itiENvBk1BBmuqrb1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjUxMjEyMTM1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDdiYTJkNmIwMjM0M2Y0MzhhZjVjMzEyMDZiOWViNTU2ZjhmMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS8aExVeEdTohCLLr4K1g+IsL7qu 9f9pf3mpsd35ii3Ui88xrGPoQxxwkhHma/e93KPx3p2b3GVbuMqU2AIsgn4v4/9Y yVP10uggmBQg3BnlrgFjXOpzOJc9rIR9YIzFD1eqIVq7yyliWepvg1PUE1pxq+jn OAeMTbXKyLyNnT127RIupkr26gM9dkaxgYT39WpgYVJ6YGBNHDfceqTFk47xs/tO cHJCNGwb5KkgzZ7yLC1Hee8e3DCa5jOFFUTd97hKf7fhnKf/dAqeNET0tZuG4nQv FXBbT6cjfOOasx6y7OwadM6nw0Rt4m8iDikMzluWxsOOJ7F4OdGqPfz68wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJR7otawI0P0OK9cMSBrnrVW+PASMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvbEh1aTFyQWpRX1E0cjF3eElHdWV0VmI0OEJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4MAwDBAE+tSID BAM+tSADBAE+tS4DBAM+tTgDBAFN6CADBABN6CMDBAFN6DADBAPUO2ADBAHUO2ww DQQCAAIwBwMFACoA9GAwDQYJKoZIhvcNAQELBQADggEBAJROGCgn37jOkUrodjVl r7gzNqIXTB/Z7aXVUv127Mrvzsn8TNzd46SboDV8KBKsTF31i5Xpw02KUfvEIbe7 EsBVeeQgYsThVSJGCLF59hIQEUgxI7elAxWzFfBXjFpb+eTnZJ/3wtURM8rU4GIA w78+qe2/UzE0yYQkIkP5tv//m+F5Bnq+NFzxZ8cPAHjEKPlCkPhUrlWn1I5hnGOG 6JQYOKThEIXLeUDAYarms4v9ZPLyMF65m2bHLTADIlxVI91AzUSQgyViBeeuCKSf ytssKXq2TLByPFnTkIlCtGPSUaXhvfc8w6rSuGkmD/XNIpj3hJirdoAm+KOoe6WC PAk= -----END CERTIFICATE-----Generated at Sun Dec 21 10:49:54 2025 by rpki-client