This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/imh_l3g4l-v4ARvrB47zBr6npYc.roa File: imh_l3g4l-v4ARvrB47zBr6npYc.roa (raw, json) Hash identifier: +4LHZfbwAtdvhA+phsNIwxwF9nTHU9oJ87vaM1DwuoA= Subject key identifier: 8A:68:7F:97:78:38:97:EB:F8:01:1B:EB:07:8E:F3:06:BE:A7:A5:87 Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2 Certificate serial: 019B7AC8800BBB6496E2E08301B521B29A39 Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/imh_l3g4l-v4ARvrB47zBr6npYc.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42742 IP address blocks: 91.189.232.0/21 maxlen: 21 92.118.140.0/24 maxlen: 24 92.118.141.0/24 maxlen: 24 92.118.142.0/24 maxlen: 24 194.79.4.0/22 maxlen: 22 195.211.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:80:0b:bb:64:96:e2:e0:83:01:b5:21:b2:9a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2 Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a687f97783897ebf8011beb078ef306bea7a587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:31:ae:28:bf:c3:2c:4c:19:98:11:9e:3e: 75:95:d6:88:5c:6f:8f:54:59:a6:3a:4a:74:70:96: 56:24:2b:71:5f:b6:04:cb:f1:1e:19:5f:8b:fe:eb: 26:be:f1:1d:32:68:63:cd:3b:bd:68:25:30:a5:33: dc:c4:2a:92:0d:ed:c5:14:7c:f2:70:87:f4:88:9c: ad:cb:de:de:f3:fb:74:39:55:99:69:62:89:2e:53: 51:da:9a:1a:52:0c:50:7b:f9:48:dc:7f:3b:19:60: bc:ad:c6:27:aa:ba:a4:13:02:b8:aa:0b:0f:87:76: b2:ca:15:57:f5:cc:89:0f:25:b1:bf:96:e3:bb:25: 2f:38:b7:12:7f:c5:f1:c2:10:f0:4c:1e:cd:bb:00: 7b:18:d4:2c:bf:0e:a6:f1:5e:72:05:5c:a1:49:c6: 0c:f0:01:fd:3a:b1:05:c3:81:f1:6f:69:2f:b1:17: 5c:ab:bb:5d:39:96:65:06:c4:37:81:2d:99:4d:39: 81:b4:bd:35:dd:75:2d:06:d4:33:f6:8b:f0:89:e2: 35:6f:d7:cf:c0:d7:0a:ba:35:46:be:fc:30:1d:ed: e5:28:4d:97:4a:a7:bd:ad:75:1a:29:c2:d0:4d:ba: 10:d7:50:fe:f7:3d:41:26:90:0b:a7:61:07:33:73: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:68:7F:97:78:38:97:EB:F8:01:1B:EB:07:8E:F3:06:BE:A7:A5:87 X509v3 Authority Key Identifier: keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/imh_l3g4l-v4ARvrB47zBr6npYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.232.0/21 92.118.140.0-92.118.142.255 194.79.4.0/22 195.211.64.0/22 Signature Algorithm: sha256WithRSAEncryption 14:76:a0:a3:b0:a2:14:8e:f7:b8:7b:1b:cd:1c:e7:86:60:d1: 00:bc:83:35:64:b5:db:af:24:a1:63:98:a5:84:7b:ab:ce:a3: a4:f8:ac:19:86:e6:5f:e7:4f:23:30:41:c1:d4:90:16:b5:d2: 0a:cf:b5:95:7b:d6:42:45:d3:d5:10:36:e9:8f:5c:43:2e:24: fb:59:1e:70:37:21:94:18:c2:14:59:8c:77:de:71:42:26:e5: 80:00:2a:47:a9:1f:5d:da:7c:25:b7:75:f6:78:c8:b2:87:26: d3:e8:5e:6c:a6:03:d3:8a:16:96:97:bd:22:d8:6a:95:3f:1f: c2:35:59:57:70:2c:c8:37:c5:d5:9e:a5:c6:72:c5:15:5b:ec: e7:55:a0:43:ae:31:f1:bb:c5:bf:a9:8c:da:25:94:3e:b6:9f: 61:5c:3c:38:6a:b2:16:01:f3:59:ed:70:10:68:ec:bc:d7:e8: 94:b7:72:a6:7c:c8:2b:62:78:65:f2:9c:fc:63:12:b5:aa:9d: 6c:ba:c0:ad:c5:71:f3:df:a8:12:00:03:49:08:6e:81:a9:4e: 38:a0:f1:53:06:6c:65:25:2b:87:a9:83:80:ac:4b:4e:63:a0: ee:7f:59:79:c1:0d:95:14:9c:ec:a0:35:a6:cf:fc:cb:a2:76: d3:5e:cf:58 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6yIALu2SW4uCDAbUhspo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjQxZjEyOWRiZmM0YTE2NTFmZWNkYmEwMzEwOGZjZDJj YzFkZjIwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTY4N2Y5Nzc4Mzg5N2ViZjgwMTFiZWIwNzhlZjMwNmJlYTdhNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopExrii/wyxMGZgRnj51ldaIXG+P VFmmOkp0cJZWJCtxX7YEy/EeGV+L/usmvvEdMmhjzTu9aCUwpTPcxCqSDe3FFHzy cIf0iJyty97e8/t0OVWZaWKJLlNR2poaUgxQe/lI3H87GWC8rcYnqrqkEwK4qgsP h3ayyhVX9cyJDyWxv5bjuyUvOLcSf8XxwhDwTB7NuwB7GNQsvw6m8V5yBVyhScYM 8AH9OrEFw4Hxb2kvsRdcq7tdOZZlBsQ3gS2ZTTmBtL013XUtBtQz9ovwieI1b9fP wNcKujVGvvwwHe3lKE2XSqe9rXUaKcLQTboQ11D+9z1BJpALp2EHM3NbVwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIpof5d4OJfr+AEb6weO8wa+p6WHMB8GA1UdIwQY MBaAFLEkHxKdv8ShZR/s26AxCPzSzB3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTct ZTlkZGJlM2VmYmUzLzEvaW1oX2wzZzRsLXY0QVJ2ckI0N3pCcjZucFljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTctZTlkZGJlM2VmYmUz LzEvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDW73oMAwD BAJcdowDBABcdo4DBALCTwQDBALD00AwDQYJKoZIhvcNAQELBQADggEBABR2oKOw ohSO97h7G80c54Zg0QC8gzVktduvJKFjmKWEe6vOo6T4rBmG5l/nTyMwQcHUkBa1 0grPtZV71kJF09UQNumPXEMuJPtZHnA3IZQYwhRZjHfecUIm5YAAKkepH13afCW3 dfZ4yLKHJtPoXmymA9OKFpaXvSLYapU/H8I1WVdwLMg3xdWepcZyxRVb7OdVoEOu MfG7xb+pjNollD62n2FcPDhqshYB81ntcBBo7LzX6JS3cqZ8yCtieGXynPxjErWq nWy6wK3FcfPfqBIAA0kIboGpTjig8VMGbGUlK4epg4CsS05joO5/WXnBDZUUnOyg NabP/MuidtNez1g= -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:35 2026 by rpki-client