This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/LhzEJgeIglAa5qZWdGZklevtUTg.roa File: LhzEJgeIglAa5qZWdGZklevtUTg.roa (raw, json) Hash identifier: a5QqVzS7PfvbVZgoeMWUOcBUG3/k7vat/Mzm4iVPmnk= Subject key identifier: 2E:1C:C4:26:07:88:82:50:1A:E6:A6:56:74:66:64:95:EB:ED:51:38 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F6F7B08955850392C59139319970 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/LhzEJgeIglAa5qZWdGZklevtUTg.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216165 IP address blocks: 217.113.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f6:f7:b0:89:55:85:03:92:c5:91:39:31:99:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1cc426078882501ae6a65674666495ebed5138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:5d:b7:c7:ab:b7:89:35:23:d8:e0:1a:a6: 64:14:15:06:6c:4c:97:6f:84:a8:61:31:f7:83:6c: f8:04:aa:89:8d:11:e6:f2:35:2a:63:31:f6:e8:c9: 9c:a0:b7:cd:13:71:1c:93:e3:c7:86:86:50:37:a1: 45:00:48:d5:53:1c:36:35:2c:24:6b:03:b0:8a:02: cf:ff:06:a3:3b:77:f9:c2:31:10:27:f7:4a:df:f3: 6f:1b:a7:03:1b:d6:cb:c3:80:a4:bb:13:ab:5f:ca: e0:46:9e:54:66:a4:e0:3d:a9:45:d8:92:c3:23:dc: 9e:b0:26:e4:80:19:23:5a:8a:cd:f2:81:ce:81:16: 00:3d:48:e9:62:3b:4b:26:dd:a8:6c:a2:0e:7c:97: aa:ce:44:8e:a0:8b:b6:42:8b:f9:d5:6e:4e:3d:ea: e0:24:96:16:c2:5c:c7:46:ae:6d:c7:e6:c3:ed:2b: d9:eb:ae:7f:39:50:43:e8:54:a8:41:68:36:3f:3f: 72:1d:7a:f3:7e:1c:e0:b4:65:e1:a5:ec:7b:d9:7b: c5:f2:d9:c9:53:a5:9b:27:40:12:61:ad:ac:a6:f4: 3e:30:4a:bd:4b:9c:d7:60:58:25:43:5e:53:ad:77: fe:ac:37:c7:87:16:c6:d8:ad:70:e4:a6:7e:34:1b: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:C4:26:07:88:82:50:1A:E6:A6:56:74:66:64:95:EB:ED:51:38 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/LhzEJgeIglAa5qZWdGZklevtUTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.16.0/24 Signature Algorithm: sha256WithRSAEncryption 52:49:32:b2:e3:b6:c7:d0:b9:93:06:c5:c7:a6:5e:96:1e:73: df:23:e6:b1:b9:c3:67:e4:f2:60:3b:95:4d:4d:74:d1:7e:c7: 72:3e:a4:93:7b:85:30:63:74:3f:ae:b4:2c:56:0f:c1:dc:dd: e8:4a:b8:97:dd:5c:9d:a0:7a:05:81:65:a1:69:c3:c5:2b:c9: c8:fc:87:c1:31:80:ac:90:45:12:14:27:35:6f:14:79:d8:36: 31:c2:6a:79:7e:4d:0a:25:4a:8f:24:88:d4:0a:4d:75:a1:06: a1:b6:cb:2a:89:16:29:94:dd:64:9e:11:81:61:a1:3c:7e:c6: 0d:a7:75:7f:90:a1:28:80:e0:8e:e9:d3:60:dd:f0:44:7a:72: 98:b0:f9:a1:e1:72:91:d5:8a:71:ae:11:77:92:a7:90:ec:d6: 4e:04:fc:c2:f0:1a:dc:7d:67:5f:89:66:4d:c0:b9:ad:49:94: fe:f0:db:32:81:00:58:78:a9:f8:33:74:f6:f4:6c:0c:81:8f: 6f:6d:84:ef:83:20:3b:7e:d0:93:88:29:d2:1c:d5:60:11:6c: 7b:5e:f7:e3:93:a7:79:77:89:a9:ce:e0:2c:ba:f0:db:69:13: fc:f6:84:84:bc:1d:21:47:16:72:87:c3:cb:ca:c6:38:63:bf: 79:07:5c:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPb3sIlVhQOSxZE5MZlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFjYzQyNjA3ODg4MjUwMWFlNmE2NTY3NDY2NjQ5NWViZWQ1MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Fdt8ert4k1I9jgGqZkFBUGbEyX b4SoYTH3g2z4BKqJjRHm8jUqYzH26MmcoLfNE3Eck+PHhoZQN6FFAEjVUxw2NSwk awOwigLP/wajO3f5wjEQJ/dK3/NvG6cDG9bLw4CkuxOrX8rgRp5UZqTgPalF2JLD I9yesCbkgBkjWorN8oHOgRYAPUjpYjtLJt2obKIOfJeqzkSOoIu2Qov51W5OPerg JJYWwlzHRq5tx+bD7SvZ665/OVBD6FSoQWg2Pz9yHXrzfhzgtGXhpex72XvF8tnJ U6WbJ0ASYa2spvQ+MEq9S5zXYFglQ15TrXf+rDfHhxbG2K1w5KZ+NBvopQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4cxCYHiIJQGuamVnRmZJXr7VE4MB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvTGh6RUpnZUlnbEFhNXFaV2RHWmtsZXZ0VVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XEQMA0G CSqGSIb3DQEBCwUAA4IBAQBSSTKy47bH0LmTBsXHpl6WHnPfI+axucNn5PJgO5VN TXTRfsdyPqSTe4UwY3Q/rrQsVg/B3N3oSriX3VydoHoFgWWhacPFK8nI/IfBMYCs kEUSFCc1bxR52DYxwmp5fk0KJUqPJIjUCk11oQahtssqiRYplN1knhGBYaE8fsYN p3V/kKEogOCO6dNg3fBEenKYsPmh4XKR1YpxrhF3kqeQ7NZOBPzC8BrcfWdfiWZN wLmtSZT+8NsygQBYeKn4M3T29GwMgY9vbYTvgyA7ftCTiCnSHNVgEWx7Xvfjk6d5 d4mpzuAsuvDbaRP89oSEvB0hRxZyh8PLysY4Y795B1wi -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:37 2026 by rpki-client