This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LhjCU2xw9xDEusARKBtO0pqc4vY.roa File: LhjCU2xw9xDEusARKBtO0pqc4vY.roa (raw, json) Hash identifier: ajj73SW/V8cvfuyORdiJxwTfc8oNcyhc/X/hgAMCHuY= Subject key identifier: 2E:18:C2:53:6C:70:F7:10:C4:BA:C0:11:28:1B:4E:D2:9A:9C:E2:F6 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B0D1DB73B52ABE70A659861F7DED58EE5 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LhjCU2xw9xDEusARKBtO0pqc4vY.roa Signing time: Thu 11 Dec 2025 11:13:29 +0000 ROA not before: Thu 11 Dec 2025 11:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5065 IP address blocks: 213.145.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:1d:b7:3b:52:ab:e7:0a:65:98:61:f7:de:d5:8e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Dec 11 11:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e18c2536c70f710c4bac011281b4ed29a9ce2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:f1:af:d4:12:02:4d:ec:b5:3a:f1:85:33: d2:98:30:a7:6f:3e:9b:a4:33:a3:a5:78:ca:ef:2b: f4:c9:3e:35:f1:f1:26:04:1e:e4:dc:52:fd:d4:e8: 76:55:7b:ef:56:77:13:f0:04:57:a9:d3:ab:7b:5f: 51:6f:53:93:7b:29:d5:46:cc:0f:90:cf:64:fc:3b: 9c:49:11:d9:3c:3e:ef:e1:72:e9:55:72:79:b9:4d: 6f:b2:cc:5d:8b:9d:f5:cd:02:d4:11:12:73:de:19: 88:51:f7:9c:ed:66:21:ec:dd:46:6d:05:33:61:59: 76:ed:81:e8:a6:7a:b3:2b:01:73:f6:4a:b1:c3:9b: 84:99:68:8d:2a:f4:d9:7c:7a:f9:2a:a0:2e:12:2d: ad:4e:d1:2f:b1:b4:bb:dc:f4:40:d9:c3:46:93:27: 68:27:ef:97:1e:73:b9:d7:44:61:03:c2:fc:e3:23: 00:73:a0:1b:12:35:fb:c7:6e:49:b1:25:ee:1c:db: d1:0d:13:15:c8:56:fa:bf:d1:d7:7f:85:c1:19:b1: 27:32:5d:d6:14:c3:c5:c5:b0:b6:ba:39:f6:8e:7d: 9c:7b:5c:dc:78:c0:45:1f:0f:0a:61:2a:23:4f:b6: 55:85:43:7e:df:8b:6f:30:af:b6:75:38:11:81:a1: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:18:C2:53:6C:70:F7:10:C4:BA:C0:11:28:1B:4E:D2:9A:9C:E2:F6 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LhjCU2xw9xDEusARKBtO0pqc4vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.69.0/24 Signature Algorithm: sha256WithRSAEncryption ae:46:fd:da:b8:96:d9:72:d2:90:4c:18:fc:b4:6c:10:07:32: a1:85:a7:6d:0e:0c:0d:f0:1a:1f:36:63:61:15:9f:87:3a:f6: fe:76:6f:1a:59:28:1e:4b:67:6f:60:c4:34:35:79:f7:ad:84: 65:c4:79:97:68:1e:99:52:03:c1:98:c6:c8:17:2a:45:8a:03: fe:94:2f:be:f9:4b:77:bf:7c:3d:41:81:ba:7d:d7:2d:76:77: d3:7e:55:ea:b4:c8:a5:b1:a4:83:75:6e:37:62:37:8e:6b:c6: b5:49:1f:15:e6:4c:f1:a2:25:4d:7d:83:95:6e:66:48:5d:c5: 83:72:38:92:7f:e5:76:c7:e9:4e:96:54:14:05:53:bb:27:b4: bf:83:e1:62:51:37:be:92:36:07:de:33:91:41:92:30:23:89: df:71:db:18:d1:a8:63:72:81:11:98:ff:cb:c7:ba:28:81:32: e1:b6:c3:2b:4c:5d:0d:2f:7d:50:77:e7:32:a9:08:de:02:a7: 48:48:3d:f6:50:1f:5e:bf:68:8e:1d:00:b3:c0:bd:fd:b8:c1: 1c:0e:8b:40:64:bf:0f:37:1a:2d:d4:2d:f7:30:c9:aa:14:2c: c1:ff:68:7b:92:d4:64:10:7b:eb:88:ea:c2:b7:6b:50:3a:68: f7:8c:a0:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNHbc7UqvnCmWYYffe1Y7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUxMjExMTExMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTE4YzI1MzZjNzBmNzEwYzRiYWMwMTEyODFiNGVkMjlhOWNlMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfzxr9QSAk3stTrxhTPSmDCnbz6b pDOjpXjK7yv0yT418fEmBB7k3FL91Oh2VXvvVncT8ARXqdOre19Rb1OTeynVRswP kM9k/DucSRHZPD7v4XLpVXJ5uU1vssxdi531zQLUERJz3hmIUfec7WYh7N1GbQUz YVl27YHopnqzKwFz9kqxw5uEmWiNKvTZfHr5KqAuEi2tTtEvsbS73PRA2cNGkydo J++XHnO510RhA8L84yMAc6AbEjX7x25JsSXuHNvRDRMVyFb6v9HXf4XBGbEnMl3W FMPFxbC2ujn2jn2ce1zceMBFHw8KYSojT7ZVhUN+34tvMK+2dTgRgaGz3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4YwlNscPcQxLrAESgbTtKanOL2MB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvTGhqQ1UyeHc5eERFdXNBUktCdE8wcHFjNHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFFMA0G CSqGSIb3DQEBCwUAA4IBAQCuRv3auJbZctKQTBj8tGwQBzKhhadtDgwN8BofNmNh FZ+HOvb+dm8aWSgeS2dvYMQ0NXn3rYRlxHmXaB6ZUgPBmMbIFypFigP+lC+++Ut3 v3w9QYG6fdctdnfTflXqtMilsaSDdW43YjeOa8a1SR8V5kzxoiVNfYOVbmZIXcWD cjiSf+V2x+lOllQUBVO7J7S/g+FiUTe+kjYH3jORQZIwI4nfcdsY0ahjcoERmP/L x7oogTLhtsMrTF0NL31Qd+cyqQjeAqdISD32UB9ev2iOHQCzwL39uMEcDotAZL8P Nxot1C33MMmqFCzB/2h7ktRkEHvriOrCt2tQOmj3jKCt -----END CERTIFICATE-----Generated at Fri Dec 19 18:42:41 2025 by rpki-client