This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa File: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (raw, json) Hash identifier: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE= Subject key identifier: 96:1D:0A:E7:E6:79:01:AC:F4:8F:CC:06:9F:1A:7A:1E:C1:6D:3D:89 Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Certificate serial: 019B7CEDFAA8EDE343971C537D37FD734377 Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42927 IP address blocks: 91.198.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fa:a8:ed:e3:43:97:1c:53:7d:37:fd:73:43:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=961d0ae7e67901acf48fcc069f1a7a1ec16d3d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:a5:90:41:5e:51:11:1d:57:e0:7f:e4:d6: 8b:5c:e1:72:3b:b2:e9:86:9e:c3:4c:61:e8:bd:ca: ef:31:f0:6f:e2:11:c7:19:e2:01:69:ae:ed:33:e8: 87:2d:9a:e3:ec:f7:1e:ca:50:ed:f4:bc:69:c0:5f: 4d:75:87:2d:9e:14:69:bb:83:9b:e1:bc:32:94:e5: 04:0b:8d:ba:42:80:e8:50:9c:cb:90:72:73:e6:98: 4c:56:87:24:20:12:1c:3e:94:e6:b3:e0:01:a4:da: db:97:68:b9:cb:7b:20:f0:fd:5b:ab:0d:b1:f9:f5: 48:89:55:bf:a2:7b:df:d5:f1:e5:82:d2:cf:95:a4: 59:05:f9:26:44:bd:c3:96:18:0a:fa:83:38:ba:61: 8d:10:c4:59:0c:75:49:c9:0c:11:42:50:47:01:b8: 65:9d:47:a6:9c:f6:f5:de:da:c3:57:96:f6:c4:92: 47:a3:7f:55:aa:b1:a2:95:6a:74:f1:f6:a4:80:8f: 3f:8a:7b:71:c3:e8:4f:b8:62:5f:5d:2a:29:2d:0c: 4a:26:58:cd:a7:a6:9d:76:b9:c0:00:79:d1:c5:07: 64:bc:4d:09:0d:e4:46:8e:06:5f:72:b6:b0:b0:b4: 11:3f:2f:85:96:04:cb:a8:f1:23:1a:2f:d2:64:49: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:0A:E7:E6:79:01:AC:F4:8F:CC:06:9F:1A:7A:1E:C1:6D:3D:89 X509v3 Authority Key Identifier: keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.137.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b3:b3:b9:2c:98:42:c3:ce:07:ca:bb:0f:bc:98:14:ab:33: 87:87:b1:e6:a9:7f:97:4a:b7:68:ee:49:d0:5e:8d:f5:a4:56: b3:8a:be:7d:ff:19:5d:de:67:c5:06:93:75:28:0c:35:2e:e8: b8:ad:b0:38:47:e9:8c:46:ec:f9:d5:94:49:40:2d:22:0e:83: 5d:f4:55:3f:3d:f7:70:5d:92:96:a6:e3:63:25:87:68:ef:91: 9c:31:1a:ed:44:a0:09:1c:18:13:0b:b1:fe:ee:2d:0d:df:13: ac:82:90:1a:2f:5e:96:5b:26:9e:26:c6:b1:ec:20:a2:b8:e8: 5d:58:bf:ab:c3:b2:c9:67:b8:a1:68:9e:e2:c1:e6:77:2c:3f: a0:3b:a7:ff:e8:08:91:07:76:96:5e:d2:0f:b9:36:15:55:7e: 73:59:f2:60:b8:7a:a9:47:88:77:c7:3f:02:97:01:da:65:da: 65:7a:df:3a:de:75:a8:9b:70:79:00:9a:d2:9c:24:11:fd:ae: 5b:a7:d2:d3:83:26:27:2f:be:e7:ff:a5:0b:f1:f3:97:bd:91: 3a:d8:62:8e:ee:07:74:05:03:f4:4e:33:81:e2:6d:8a:fc:f9: 62:92:f6:01:c8:f6:bb:54:30:45:83:13:f9:45:75:aa:85:20: 82:37:03:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fqo7eNDlxxTfTf9c0N3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw YTVmZDQwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjFkMGFlN2U2NzkwMWFjZjQ4ZmNjMDY5ZjFhN2ExZWMxNmQzZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih6lkEFeUREdV+B/5NaLXOFyO7Lp hp7DTGHovcrvMfBv4hHHGeIBaa7tM+iHLZrj7PceylDt9LxpwF9NdYctnhRpu4Ob 4bwylOUEC426QoDoUJzLkHJz5phMVockIBIcPpTms+ABpNrbl2i5y3sg8P1bqw2x +fVIiVW/onvf1fHlgtLPlaRZBfkmRL3DlhgK+oM4umGNEMRZDHVJyQwRQlBHAbhl nUemnPb13trDV5b2xJJHo39VqrGilWp08fakgI8/intxw+hPuGJfXSopLQxKJljN p6addrnAAHnRxQdkvE0JDeRGjgZfcrawsLQRPy+FlgTLqPEjGi/SZEkTrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYdCufmeQGs9I/MBp8aeh7BbT2JMB8GA1UdIwQY MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt YjhlZDY2ZDQyNzgyLzEvbGgwSzUtWjVBYXowajh3R254cDZIc0Z0UFlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aJMA0G CSqGSIb3DQEBCwUAA4IBAQB+s7O5LJhCw84HyrsPvJgUqzOHh7HmqX+XSrdo7knQ Xo31pFazir59/xld3mfFBpN1KAw1Lui4rbA4R+mMRuz51ZRJQC0iDoNd9FU/Pfdw XZKWpuNjJYdo75GcMRrtRKAJHBgTC7H+7i0N3xOsgpAaL16WWyaeJsax7CCiuOhd WL+rw7LJZ7ihaJ7iweZ3LD+gO6f/6AiRB3aWXtIPuTYVVX5zWfJguHqpR4h3xz8C lwHaZdplet863nWom3B5AJrSnCQR/a5bp9LTgyYnL77n/6UL8fOXvZE62GKO7gd0 BQP0TjOB4m2K/PlikvYByPa7VDBFgxP5RXWqhSCCNwNk -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:43 2026 by rpki-client