This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lnh93DOv_uwa-8o9lJqyUnqr_pY.roa File: lnh93DOv_uwa-8o9lJqyUnqr_pY.roa (raw, json) Hash identifier: bZ2e6jVd83DegTTegWPrNTId3aClwlSIsglPSfByjB4= Subject key identifier: 96:78:7D:DC:33:AF:FE:EC:1A:FB:CA:3D:94:9A:B2:52:7A:AB:FE:96 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D515C9B04B9CD8F1FBE63FD571246 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lnh93DOv_uwa-8o9lJqyUnqr_pY.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212503 IP address blocks: 2a0e:b107:1d08::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:51:5c:9b:04:b9:cd:8f:1f:be:63:fd:57:12:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96787ddc33affeec1afbca3d949ab2527aabfe96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:52:22:1e:57:4a:d5:b8:9b:f0:03:ee:e4: b6:6d:9e:2a:a4:c5:02:96:ca:7a:e7:44:2a:c9:e3: eb:0f:cd:26:4d:42:43:b2:5c:f3:bd:fb:ec:64:44: fc:10:3a:6c:21:6a:92:48:79:67:a3:90:f0:9e:c9: fc:54:c6:12:77:17:a7:e7:4b:14:88:f2:a0:ca:b6: 2f:44:1a:f1:6d:7a:37:61:02:ba:7b:ce:f3:2e:54: 89:a0:df:21:bd:93:9c:cc:d6:61:f4:e8:81:26:05: a6:2b:f6:71:35:6a:44:e9:ed:b5:58:c7:f2:75:42: 11:e6:d2:54:9f:21:52:ae:6a:b9:3a:e5:74:41:ca: d5:26:e2:7b:48:5d:22:44:3d:6c:7c:cd:ba:68:67: b8:78:9e:96:09:67:0e:ff:cd:09:c5:a2:4f:4a:b4: 34:c2:68:8e:72:27:55:c1:11:4b:22:80:41:37:c0: 4e:92:93:c0:91:8b:b4:81:ad:ed:f3:44:c6:03:cc: 91:ea:ba:dc:8e:fd:b4:d4:2a:1e:22:b3:01:d8:dd: be:15:2b:3b:d0:cc:58:cb:ec:7c:ad:81:1b:08:26: 72:29:87:28:e3:c9:30:5c:1b:f1:92:5a:d0:8b:85: 5c:22:31:eb:b3:d2:82:0a:db:41:36:e1:8f:07:44: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:78:7D:DC:33:AF:FE:EC:1A:FB:CA:3D:94:9A:B2:52:7A:AB:FE:96 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lnh93DOv_uwa-8o9lJqyUnqr_pY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d08::/45 Signature Algorithm: sha256WithRSAEncryption 27:4e:e2:56:80:42:1f:53:31:6f:57:dc:f8:03:fd:79:0b:f4: ef:8d:08:3d:ec:cc:43:f5:9a:d3:b4:03:ca:70:73:f3:ba:75: 5e:70:bf:90:83:fb:aa:48:1b:39:f3:64:42:e6:14:5b:7f:b6: 3c:be:16:bb:5c:83:83:b6:65:e4:a0:88:14:75:81:30:38:a8: f4:34:7f:4a:8b:4b:ee:16:9f:0c:15:e1:47:74:49:08:89:6c: 71:47:84:e0:ab:fd:65:25:91:f0:92:32:2c:31:cd:85:cc:e2: 71:07:20:ef:04:77:1e:93:b0:59:0a:28:42:6d:1a:26:48:d9: 34:25:f1:66:95:39:ed:21:86:f5:3f:59:2e:45:92:21:c5:46: 99:46:1a:cd:ad:67:b7:63:50:cc:44:24:a8:90:80:d2:d0:cc: 18:b2:0f:40:5b:db:23:67:fc:83:14:65:63:18:c6:f7:d6:82: 1e:08:67:94:c3:15:f5:71:43:05:f9:fb:47:21:ea:15:d2:c3: 70:7e:c0:45:b6:2a:8e:de:06:f4:cf:26:77:4c:35:75:14:09: 2a:dd:a0:c0:3b:34:4f:21:ec:29:e8:16:a1:07:c3:1f:d2:d7: fb:d1:14:e4:fe:b8:c4:b1:b0:cd:01:87:92:28:78:fd:54:00: 3e:be:5e:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVFcmwS5zY8fvmP9VxJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njc4N2RkYzMzYWZmZWVjMWFmYmNhM2Q5NDlhYjI1MjdhYWJmZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUJSIh5XStW4m/AD7uS2bZ4qpMUC lsp650QqyePrD80mTUJDslzzvfvsZET8EDpsIWqSSHlno5Dwnsn8VMYSdxen50sU iPKgyrYvRBrxbXo3YQK6e87zLlSJoN8hvZOczNZh9OiBJgWmK/ZxNWpE6e21WMfy dUIR5tJUnyFSrmq5OuV0QcrVJuJ7SF0iRD1sfM26aGe4eJ6WCWcO/80JxaJPSrQ0 wmiOcidVwRFLIoBBN8BOkpPAkYu0ga3t80TGA8yR6rrcjv201CoeIrMB2N2+FSs7 0MxYy+x8rYEbCCZyKYco48kwXBvxklrQi4VcIjHrs9KCCttBNuGPB0RTYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJZ4fdwzr/7sGvvKPZSaslJ6q/6WMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbG5oOTNET3ZfdXdhLThvOWxKcXlVbnFyX3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xBx0I MA0GCSqGSIb3DQEBCwUAA4IBAQAnTuJWgEIfUzFvV9z4A/15C/TvjQg97MxD9ZrT tAPKcHPzunVecL+Qg/uqSBs582RC5hRbf7Y8vha7XIODtmXkoIgUdYEwOKj0NH9K i0vuFp8MFeFHdEkIiWxxR4Tgq/1lJZHwkjIsMc2FzOJxByDvBHcek7BZCihCbRom SNk0JfFmlTntIYb1P1kuRZIhxUaZRhrNrWe3Y1DMRCSokIDS0MwYsg9AW9sjZ/yD FGVjGMb31oIeCGeUwxX1cUMF+ftHIeoV0sNwfsBFtiqO3gb0zyZ3TDV1FAkq3aDA OzRPIewp6BahB8Mf0tf70RTk/rjEsbDNAYeSKHj9VAA+vl65 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client