This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/lhj_M8rEkQSJwVv1yErO59O5n_8.roa File: lhj_M8rEkQSJwVv1yErO59O5n_8.roa (raw, json) Hash identifier: xGs/2/KINx9gwhsGdLRhMgCHL3pZEAIZqG8TlXFn9lc= Subject key identifier: 96:18:FF:33:CA:C4:91:04:89:C1:5B:F5:C8:4A:CE:E7:D3:B9:9F:FF Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019AACD3D59A864A7FC05F3EF86F65B36118 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/lhj_M8rEkQSJwVv1yErO59O5n_8.roa Signing time: Sat 22 Nov 2025 18:29:15 +0000 ROA not before: Sat 22 Nov 2025 18:29:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 138.226.234.0/24 maxlen: 24 138.226.239.0/24 maxlen: 24 216.163.179.0/24 maxlen: 24 2a14:a087::/48 maxlen: 48 2a14:a087:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:d3:d5:9a:86:4a:7f:c0:5f:3e:f8:6f:65:b3:61:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Nov 22 18:29:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9618ff33cac4910489c15bf5c84acee7d3b99fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:9f:37:9a:c2:55:e8:66:5c:10:1b:03:69: e7:95:d2:40:c0:6f:ad:30:70:58:43:bb:5d:18:3c: bd:e4:40:b7:86:62:2d:fd:81:84:be:84:16:7e:37: f1:ef:b8:2c:9f:9b:3f:d6:10:cf:61:1f:10:1f:ff: 6c:2c:0a:f9:7d:af:5c:65:a6:35:9e:44:c6:c2:e0: 0f:f6:68:5b:1f:ad:09:b2:ea:63:aa:a7:ef:47:23: aa:34:ab:44:4e:00:c5:be:ac:18:e3:6b:31:b1:94: b2:58:cd:8a:4d:23:ce:be:9d:b7:2b:2f:b1:b9:2b: b7:43:1e:eb:02:02:60:c3:18:88:aa:c7:26:70:0b: 73:46:19:a4:48:68:8d:a3:f0:60:f1:1d:19:f3:0c: 17:58:93:4c:ad:a4:a0:2f:5e:15:63:30:82:33:31: b4:c1:9d:6c:ca:66:66:8f:03:30:64:53:62:27:ac: 50:17:ca:63:a1:17:f5:52:a6:ef:16:ca:5b:14:46: a3:21:b2:7c:25:1d:94:46:e8:15:ce:fe:34:37:e5: 37:ff:19:70:b8:b2:8b:4c:dc:a5:bc:59:2e:f6:be: db:24:ec:99:5c:bb:8f:4a:31:e8:87:33:a2:26:c4: 5a:0c:0e:ce:31:20:3a:8c:ee:ba:d4:1a:76:d3:ca: a8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:18:FF:33:CA:C4:91:04:89:C1:5B:F5:C8:4A:CE:E7:D3:B9:9F:FF X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/lhj_M8rEkQSJwVv1yErO59O5n_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.226.234.0/24 138.226.239.0/24 216.163.179.0/24 IPv6: 2a14:a087::/47 Signature Algorithm: sha256WithRSAEncryption 3a:51:21:aa:e8:41:8a:8a:1f:71:b4:39:bb:37:73:6a:53:11: 92:bc:28:31:fb:d9:c7:cd:d7:71:e6:d7:80:08:99:ac:0d:a2: 10:c9:13:4c:92:60:52:59:4c:9a:5d:ac:a9:ff:b2:45:40:43: 52:8f:24:ce:05:51:a1:18:94:4b:7d:58:ed:9c:c4:3e:11:81: 8d:81:3a:f3:90:88:e0:36:4f:d1:9d:3e:fb:2d:7c:59:74:5b: e8:0d:70:ac:ef:2f:0c:50:d9:88:31:19:f7:e0:96:4b:fe:a9: 06:03:87:b0:e2:5a:0f:79:21:b2:cb:97:aa:b6:e4:5e:53:37: 3d:de:13:08:66:be:7e:94:41:f1:a7:d2:36:dd:b6:45:55:d5: 27:b8:a6:83:ad:04:b7:85:bd:6c:88:80:2c:1a:9d:7b:61:04: ea:5d:84:a2:7c:b8:98:0f:00:ae:b6:25:78:01:8e:e9:d8:8b: c4:b0:86:74:1e:00:6b:3b:5f:87:bc:07:9b:dd:82:4c:3f:5e: 51:e0:9d:8b:3d:07:02:c0:b7:a3:ec:47:f7:fc:af:e5:91:63: cf:df:c9:46:93:91:bd:dc:85:d0:89:44:dd:dc:98:b0:c4:e3: 6b:ee:52:a4:82:96:cf:5b:33:0f:23:3d:ac:61:45:f2:4d:ea: 2f:ae:af:82 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZqs09Wahkp/wF8++G9ls2EYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjUxMTIyMTgyOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjE4ZmYzM2NhYzQ5MTA0ODljMTViZjVjODRhY2VlN2QzYjk5ZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrafN5rCVehmXBAbA2nnldJAwG+t MHBYQ7tdGDy95EC3hmIt/YGEvoQWfjfx77gsn5s/1hDPYR8QH/9sLAr5fa9cZaY1 nkTGwuAP9mhbH60JsupjqqfvRyOqNKtETgDFvqwY42sxsZSyWM2KTSPOvp23Ky+x uSu3Qx7rAgJgwxiIqscmcAtzRhmkSGiNo/Bg8R0Z8wwXWJNMraSgL14VYzCCMzG0 wZ1symZmjwMwZFNiJ6xQF8pjoRf1UqbvFspbFEajIbJ8JR2URugVzv40N+U3/xlw uLKLTNylvFku9r7bJOyZXLuPSjHohzOiJsRaDA7OMSA6jO661Bp208qoOwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJYY/zPKxJEEicFb9chKzufTuZ//MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvbGhqX004ckVrUVNKd1Z2MXlFck81OU81bl84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAiuLqAwQA iuLvAwQA2KOzMA8EAgACMAkDBwEqFKCHAAAwDQYJKoZIhvcNAQELBQADggEBADpR IaroQYqKH3G0Obs3c2pTEZK8KDH72cfN13Hm14AImawNohDJE0ySYFJZTJpdrKn/ skVAQ1KPJM4FUaEYlEt9WO2cxD4RgY2BOvOQiOA2T9GdPvstfFl0W+gNcKzvLwxQ 2YgxGffglkv+qQYDh7DiWg95IbLLl6q25F5TNz3eEwhmvn6UQfGn0jbdtkVV1Se4 poOtBLeFvWyIgCwanXthBOpdhKJ8uJgPAK62JXgBjunYi8SwhnQeAGs7X4e8B5vd gkw/XlHgnYs9BwLAt6PsR/f8r+WRY8/fyUaTkb3chdCJRN3cmLDE42vuUqSCls9b Mw8jPaxhRfJN6i+ur4I= -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:15 2025 by rpki-client