This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/LHRhRb7BbKRJgX65EILPXtPyA9g.roa File: LHRhRb7BbKRJgX65EILPXtPyA9g.roa (raw, json) Hash identifier: JYxrBZ5k+jIHAeW+R9UtHHezy3w3r2SNVSn9g/11gwU= Subject key identifier: 2C:74:61:45:BE:C1:6C:A4:49:81:7E:B9:10:82:CF:5E:D3:F2:03:D8 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019AEBC642E7BA401293BAC1AA8251D8A6CA Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/LHRhRb7BbKRJgX65EILPXtPyA9g.roa Signing time: Thu 04 Dec 2025 23:50:30 +0000 ROA not before: Thu 04 Dec 2025 23:50:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212921 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.152.0/24 maxlen: 24 2.59.155.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.227.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 45.142.152.0/24 maxlen: 24 45.142.155.0/24 maxlen: 24 91.204.224.0/22 maxlen: 22 185.202.100.0/22 maxlen: 22 193.239.150.0/23 maxlen: 23 193.239.150.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 193.239.154.0/24 maxlen: 24 194.126.202.0/24 maxlen: 24 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:c6:42:e7:ba:40:12:93:ba:c1:aa:82:51:d8:a6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 4 23:50:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c746145bec16ca449817eb91082cf5ed3f203d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:be:a4:2a:1f:68:8f:a7:89:0e:c5:fa:30: f5:1a:b7:33:93:21:f7:8e:33:a1:0c:5d:9f:5d:13: 6a:ea:f4:ea:a0:e2:7f:65:2e:49:86:ac:c2:8d:30: 6e:aa:6e:35:0c:e4:97:ea:de:05:b9:0e:64:b8:83: 70:3a:f1:a5:bb:e6:4d:eb:13:ef:ee:bf:c0:80:35: 77:4e:0e:fd:f6:6d:15:68:3e:1a:6e:20:90:74:3c: a9:6d:84:26:5d:51:92:a7:ca:5c:e4:84:06:e0:8e: 52:74:5e:9f:b7:78:63:81:f0:c0:f5:40:55:d1:f6: 05:d8:6a:95:45:c1:8e:10:4a:3b:50:08:56:e7:e3: c5:9b:8e:8b:98:50:d4:36:92:31:45:33:b6:ff:ba: 6f:96:7a:63:66:f9:c4:59:82:66:2a:46:67:bb:cd: aa:b2:69:6c:55:be:82:b7:15:b5:3f:ca:01:6c:9f: dc:59:1f:c8:42:3d:0c:69:dd:00:d0:4d:30:27:d1: 35:1a:3b:2a:f0:a9:e1:fa:a7:93:b3:9d:0d:14:28: e8:85:e1:ea:c5:d7:47:c5:d1:cc:14:e0:f7:eb:63: 16:49:ed:8b:de:02:fd:02:1f:c2:b2:66:13:9a:3a: 51:6f:e6:f2:c3:ad:34:87:8b:fc:d3:e1:ab:bf:88: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:74:61:45:BE:C1:6C:A4:49:81:7E:B9:10:82:CF:5E:D3:F2:03:D8 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/LHRhRb7BbKRJgX65EILPXtPyA9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.202.0/24 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 53:13:3f:34:89:2d:af:c0:37:fc:3e:27:2e:f4:04:9e:0f:82: d3:bf:b6:a8:5e:d8:bc:23:37:a3:1c:4b:f3:23:49:93:73:0d: 6c:ed:26:e8:87:17:00:b1:c3:e7:f6:b4:dd:0e:16:01:6c:be: ab:5a:4b:bf:7f:27:a2:f5:cb:5f:da:fe:be:10:44:01:b5:35: 19:57:c0:6d:a3:c2:a6:39:1b:70:ec:5a:17:16:f3:c0:f2:77: 4b:59:b9:79:78:fc:ee:ad:db:bf:bf:35:ac:90:8b:ed:f2:a5: 72:6f:22:57:fe:64:d7:a5:77:d7:d5:f4:00:92:a7:ae:ed:12: 1f:bf:c0:02:63:17:b9:31:78:b3:31:6c:74:ae:1a:e7:be:93: 64:ef:fa:47:01:26:09:48:f0:eb:5b:a0:33:34:0e:39:43:8f: 3e:2d:b5:2a:de:90:15:95:d7:e6:60:31:63:1f:1e:22:75:51: 5f:53:ec:83:83:b1:a5:c8:c0:b8:f5:a0:e6:4c:34:52:55:c1: 8c:5d:ee:82:31:85:78:55:d1:ee:29:18:8c:b6:21:66:f2:8c: e7:72:6c:af:69:b7:58:7b:95:00:cf:d1:48:08:5a:1b:2a:12: f7:e0:19:12:75:d8:36:5a:56:d1:32:3e:87:34:42:9a:72:d4: a9:5a:49:af -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZrrxkLnukASk7rBqoJR2KbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjA0MjM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzc0NjE0NWJlYzE2Y2E0NDk4MTdlYjkxMDgyY2Y1ZWQzZjIwM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyny+pCofaI+niQ7F+jD1GrczkyH3 jjOhDF2fXRNq6vTqoOJ/ZS5JhqzCjTBuqm41DOSX6t4FuQ5kuINwOvGlu+ZN6xPv 7r/AgDV3Tg799m0VaD4abiCQdDypbYQmXVGSp8pc5IQG4I5SdF6ft3hjgfDA9UBV 0fYF2GqVRcGOEEo7UAhW5+PFm46LmFDUNpIxRTO2/7pvlnpjZvnEWYJmKkZnu82q smlsVb6CtxW1P8oBbJ/cWR/IQj0Mad0A0E0wJ9E1Gjsq8Knh+qeTs50NFCjoheHq xddHxdHMFOD362MWSe2L3gL9Ah/CsmYTmjpRb+byw600h4v80+Grv4iDbQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFCx0YUW+wWykSYF+uRCCz17T8gPYMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvTEhSaFJiN0JiS1JKZ1g2NUVJTFBYdFB5QTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7KAwQAwn7XAwQA wn7bAwQAwn7jMA0GCSqGSIb3DQEBCwUAA4IBAQBTEz80iS2vwDf8Picu9ASeD4LT v7aoXti8IzejHEvzI0mTcw1s7SbohxcAscPn9rTdDhYBbL6rWku/fyei9ctf2v6+ EEQBtTUZV8Bto8KmORtw7FoXFvPA8ndLWbl5ePzurdu/vzWskIvt8qVybyJX/mTX pXfX1fQAkqeu7RIfv8ACYxe5MXizMWx0rhrnvpNk7/pHASYJSPDrW6AzNA45Q48+ LbUq3pAVldfmYDFjHx4idVFfU+yDg7GlyMC49aDmTDRSVcGMXe6CMYV4VdHuKRiM tiFm8ozncmyvabdYe5UAz9FICFobKhL34BkSddg2WlbRMj6HNEKactSpWkmv -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:07 2025 by rpki-client