This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa File: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (raw, json) Hash identifier: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE= Subject key identifier: 2C:70:68:F7:E0:5F:3F:2D:16:BA:98:D6:5B:F0:F6:C2:07:CD:22:94 Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13 Certificate serial: 019B7CED4DCD638610ED37F1E211977E53ED Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29075 IP address blocks: 46.23.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4d:cd:63:86:10:ed:37:f1:e2:11:97:7e:53:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c7068f7e05f3f2d16ba98d65bf0f6c207cd2294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:89:f0:fe:77:85:e6:23:eb:82:c3:2e:ae: fa:99:ed:24:db:74:97:ba:5e:fe:1e:8c:9e:a6:9f: 00:ef:8f:57:86:31:31:d5:a7:89:79:f3:46:d7:d4: c6:b8:8e:6a:d4:ba:ec:25:74:70:04:44:e0:4c:72: 71:a9:ea:98:b9:06:98:fc:a5:ad:83:c3:39:af:d5: 81:84:64:aa:33:51:8f:75:4d:29:cb:0d:70:40:69: 21:a3:ff:86:71:8d:49:c3:54:76:b1:fe:c1:e2:c3: 0f:af:bb:66:e1:a8:46:dd:56:d1:9a:12:53:cc:80: 9b:6b:2d:f4:96:48:69:b1:ff:60:7a:40:58:52:b7: 62:ef:05:71:65:91:99:e4:45:c7:93:d3:e0:8e:ac: 03:38:ea:f7:e5:a7:e0:3e:25:90:cc:28:a3:20:10: cc:27:6e:6a:c7:24:01:ac:a1:c0:0d:85:46:30:cc: a1:4e:e0:a9:47:95:e6:12:5f:3c:8b:18:d5:6c:23: f2:f7:86:91:7d:00:a6:b9:8d:d7:fb:fe:96:9f:2d: 98:a3:d7:38:96:f0:08:49:26:3d:8a:81:89:9f:4b: d1:df:b2:84:3c:56:16:e1:85:b6:ad:78:23:22:65: be:57:6d:09:6c:90:60:30:4c:5f:dc:37:00:34:de: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:70:68:F7:E0:5F:3F:2D:16:BA:98:D6:5B:F0:F6:C2:07:CD:22:94 X509v3 Authority Key Identifier: keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.240.0/20 Signature Algorithm: sha256WithRSAEncryption 36:4c:b6:57:b1:13:cc:c4:1f:bb:11:cb:87:d6:97:45:ac:7c: 40:49:89:c8:23:bc:1c:aa:51:fa:23:3e:df:e9:3a:5c:20:8a: a0:8e:61:bb:02:2e:7f:ec:f0:c1:9f:5b:dc:68:f3:27:35:5e: 52:6e:b7:c5:ba:4a:24:74:f6:1a:ee:3b:99:26:37:07:ef:a4: 9c:b5:f7:c6:8e:8a:41:88:7d:3a:09:72:c2:d6:27:86:d4:46: 2f:de:af:d8:6e:5a:f3:68:b2:c7:45:15:a3:a0:89:8b:d5:16: 80:27:28:b5:d4:82:52:b0:59:4c:47:fa:39:f5:6d:a7:43:97: fd:de:86:23:ef:e7:cc:69:89:8d:6b:0e:bb:19:a7:20:b3:b7: 55:67:76:3e:71:33:b6:3c:32:9a:b1:38:e9:34:c1:32:ca:f3: ef:6e:55:ea:34:57:c9:53:fa:04:e5:d5:da:b0:ac:7c:ac:79: a8:4a:58:f6:a2:af:12:e0:70:a1:78:0e:e4:b2:dc:39:35:b4: e0:c8:9c:02:da:e0:06:0f:cb:78:7d:31:81:89:3e:e1:3d:e3: 8d:f3:e0:79:0d:d5:22:f1:70:30:ba:27:63:e7:79:c8:6f:b1: f4:3e:70:14:d3:8c:6a:c0:f7:5a:c8:c4:e2:f6:d2:8d:4a:c4: 51:03:c7:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87U3NY4YQ7Tfx4hGXflPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5 ZmJjMTMwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzcwNjhmN2UwNWYzZjJkMTZiYTk4ZDY1YmYwZjZjMjA3Y2QyMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaGJ8P53heYj64LDLq76me0k23SX ul7+Hoyepp8A749XhjEx1aeJefNG19TGuI5q1LrsJXRwBETgTHJxqeqYuQaY/KWt g8M5r9WBhGSqM1GPdU0pyw1wQGkho/+GcY1Jw1R2sf7B4sMPr7tm4ahG3VbRmhJT zICbay30lkhpsf9gekBYUrdi7wVxZZGZ5EXHk9PgjqwDOOr35afgPiWQzCijIBDM J25qxyQBrKHADYVGMMyhTuCpR5XmEl88ixjVbCPy94aRfQCmuY3X+/6Wny2Yo9c4 lvAISSY9ioGJn0vR37KEPFYW4YW2rXgjImW+V20JbJBgMExf3DcANN7f2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCxwaPfgXz8tFrqY1lvw9sIHzSKUMB8GA1UdIwQY MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt MzMzZjBjOTkyNzllLzEvTEhCbzktQmZQeTBXdXBqV1dfRDJ3Z2ZOSXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELhfwMA0G CSqGSIb3DQEBCwUAA4IBAQA2TLZXsRPMxB+7EcuH1pdFrHxASYnII7wcqlH6Iz7f 6TpcIIqgjmG7Ai5/7PDBn1vcaPMnNV5SbrfFukokdPYa7juZJjcH76SctffGjopB iH06CXLC1ieG1EYv3q/YblrzaLLHRRWjoImL1RaAJyi11IJSsFlMR/o59W2nQ5f9 3oYj7+fMaYmNaw67Gacgs7dVZ3Y+cTO2PDKasTjpNMEyyvPvblXqNFfJU/oE5dXa sKx8rHmoSlj2oq8S4HCheA7kstw5NbTgyJwC2uAGD8t4fTGBiT7hPeON8+B5DdUi 8XAwuidj53nIb7H0PnAU04xqwPdayMTi9tKNSsRRA8ds -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:15 2026 by rpki-client