This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/LHItdF87GeyP1buZP_fcY5a5ENU.roa File: LHItdF87GeyP1buZP_fcY5a5ENU.roa (raw, json) Hash identifier: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U= Subject key identifier: 2C:72:2D:74:5F:3B:19:EC:8F:D5:BB:99:3F:F7:DC:63:96:B9:10:D5 Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Certificate serial: 019B7EA4D41BB5B807DD42FF149BC0364393 Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/LHItdF87GeyP1buZP_fcY5a5ENU.roa Signing time: Fri 02 Jan 2026 12:18:09 +0000 ROA not before: Fri 02 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24837 IP address blocks: 185.108.196.0/23 maxlen: 23 185.108.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d4:1b:b5:b8:07:dd:42:ff:14:9b:c0:36:43:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Validity Not Before: Jan 2 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c722d745f3b19ec8fd5bb993ff7dc6396b910d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:06:8b:af:ce:35:a3:1e:78:40:b8:3a:43: df:39:8c:bb:3b:02:de:49:f9:3c:a9:20:41:0c:2a: 51:47:2a:d3:c3:f6:de:a8:f7:d8:15:55:d1:dd:23: f2:d2:8a:bf:33:03:52:95:a3:72:cf:ad:17:1a:3b: 7d:f6:e9:1d:5c:e5:5c:99:51:94:7a:82:ce:6c:16: fe:19:15:0f:06:8d:05:28:5a:30:7d:29:a4:53:f6: 80:69:0b:cf:f6:33:c9:cc:3a:82:0f:8e:81:b3:f7: 90:16:c6:c2:a7:95:56:bf:9e:ff:ba:36:2a:e4:ff: de:72:ca:68:04:e5:02:93:ed:a9:69:17:a9:15:ab: 33:a8:04:b1:3d:f7:10:f0:88:ad:1e:55:ee:d9:88: 1d:a3:c0:65:98:d8:a7:c9:3e:72:16:6b:8e:9f:65: 2c:1d:8f:27:fe:f8:bc:54:fa:62:5b:4f:c2:4b:55: d2:36:2a:0a:30:f6:25:b8:fe:59:f7:69:4f:56:ad: cd:c4:06:6a:af:00:09:20:cf:b0:ee:bf:e1:49:db: 7b:09:d2:da:9f:5a:29:57:8b:8e:00:04:a2:d7:28: d0:35:0c:24:13:d2:7a:52:e6:99:18:4f:c3:1e:e0: b7:19:d6:3d:e6:34:e4:b2:8c:73:90:28:7c:69:11: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:72:2D:74:5F:3B:19:EC:8F:D5:BB:99:3F:F7:DC:63:96:B9:10:D5 X509v3 Authority Key Identifier: keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/LHItdF87GeyP1buZP_fcY5a5ENU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.196.0/22 Signature Algorithm: sha256WithRSAEncryption 30:2e:ee:b8:93:01:04:17:e8:b3:bc:fb:9b:70:7e:2b:ae:b0: 5c:93:96:78:57:10:b2:90:5b:1c:d9:b2:e2:51:b9:92:e6:f4: 82:47:2b:11:8f:84:c8:fa:3c:8a:62:1a:01:d4:6e:26:fc:a5: 30:3c:6c:52:bc:35:0e:4c:02:b4:8a:67:40:80:d7:3b:0f:1f: 26:7a:f4:be:51:35:a1:56:10:74:4f:61:b9:3e:29:79:ed:9a: 45:1f:f4:ef:38:7b:42:bf:ca:a2:94:a1:08:dd:01:4b:58:18: 39:2c:c2:4d:e0:05:5d:0a:c8:0a:fd:45:cd:19:eb:c4:85:a2: a9:dc:16:5a:63:8b:34:64:7c:3a:c7:0e:27:99:a1:f1:46:bb: b4:23:5c:1f:46:d8:cc:7b:0f:9f:ab:d2:f7:54:8b:96:51:55: 35:db:57:60:34:38:db:86:ac:00:bd:3a:2d:73:cc:b4:42:06: 97:7b:a1:21:f3:af:a9:e0:75:3a:8d:e2:aa:64:1e:14:69:0e: 20:db:af:13:67:d3:89:2c:63:b5:3e:62:30:4a:10:ad:f0:7a: 9b:6c:9a:83:6c:b2:c8:20:aa:a7:fb:2d:02:fd:3c:75:92:ee: 0a:77:e0:5e:d1:d3:91:b0:fd:2c:b3:58:98:38:5a:e9:ae:ff: 1e:e9:85:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pNQbtbgH3UL/FJvANkOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll Y2IyZDYwHhcNMjYwMTAyMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzcyMmQ3NDVmM2IxOWVjOGZkNWJiOTkzZmY3ZGM2Mzk2YjkxMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7AGi6/ONaMeeEC4OkPfOYy7OwLe Sfk8qSBBDCpRRyrTw/beqPfYFVXR3SPy0oq/MwNSlaNyz60XGjt99ukdXOVcmVGU eoLObBb+GRUPBo0FKFowfSmkU/aAaQvP9jPJzDqCD46Bs/eQFsbCp5VWv57/ujYq 5P/ecspoBOUCk+2paRepFaszqASxPfcQ8IitHlXu2Ygdo8BlmNinyT5yFmuOn2Us HY8n/vi8VPpiW0/CS1XSNioKMPYluP5Z92lPVq3NxAZqrwAJIM+w7r/hSdt7CdLa n1opV4uOAASi1yjQNQwkE9J6UuaZGE/DHuC3GdY95jTksoxzkCh8aRHnawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCxyLXRfOxnsj9W7mT/33GOWuRDVMB8GA1UdIwQY MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt ZTg5ODY4MWJjODllLzEvTEhJdGRGODdHZXlQMWJ1WlBfZmNZNWE1RU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWzEMA0G CSqGSIb3DQEBCwUAA4IBAQAwLu64kwEEF+izvPubcH4rrrBck5Z4VxCykFsc2bLi UbmS5vSCRysRj4TI+jyKYhoB1G4m/KUwPGxSvDUOTAK0imdAgNc7Dx8mevS+UTWh VhB0T2G5Pil57ZpFH/TvOHtCv8qilKEI3QFLWBg5LMJN4AVdCsgK/UXNGevEhaKp 3BZaY4s0ZHw6xw4nmaHxRru0I1wfRtjMew+fq9L3VIuWUVU121dgNDjbhqwAvTot c8y0QgaXe6Eh86+p4HU6jeKqZB4UaQ4g268TZ9OJLGO1PmIwShCt8HqbbJqDbLLI IKqn+y0C/Tx1ku4Kd+Be0dORsP0ss1iYOFrprv8e6YWd -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:14 2026 by rpki-client