This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa File: Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa (raw, json) Hash identifier: 3Z8PMQ8sh56/aP3O9W1H0byuePE1WYuRdcvV9nD8Q2Q= Subject key identifier: 2E:1F:08:64:CA:84:AA:20:30:9F:65:58:99:E8:3D:B1:51:82:14:4A Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017 Certificate serial: 019B7A5B74DF2C63515CBAC2ACC438FA2295 Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136258 IP address blocks: 37.143.128.0/24 maxlen: 24 37.143.129.0/24 maxlen: 24 37.143.130.0/24 maxlen: 24 37.143.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:74:df:2c:63:51:5c:ba:c2:ac:c4:38:fa:22:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1f0864ca84aa20309f655899e83db15182144a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:f0:f4:c3:c3:48:90:ed:d8:90:65:78:e8: d0:0f:94:d0:a0:cb:be:8f:ec:65:7e:91:83:0a:66: fa:f8:5e:e4:e5:40:61:78:84:b8:4b:fe:a9:f1:0b: 67:14:e6:58:11:e0:23:f1:3d:dc:48:b6:be:7d:14: 18:e8:85:bc:10:a2:b5:f2:82:2d:9a:d1:34:fd:df: 6b:28:5a:c1:6d:76:a9:9b:bb:10:68:7e:8e:bb:1e: ae:6e:45:5e:0b:6e:45:62:ab:90:8a:3a:f3:c2:6e: 41:d6:2d:98:88:84:c5:0a:7d:4a:ea:98:dd:e8:be: c6:6b:7f:72:db:8d:fa:1c:0c:63:84:da:36:3c:95: ef:b3:fe:da:93:33:bb:4d:4c:3a:24:f9:dc:79:a9: 3a:24:ab:50:30:a7:fb:db:b7:29:f7:a4:dc:a7:64: 05:93:0d:a7:9d:b3:76:32:76:d4:86:ab:8a:03:ce: 9f:2b:c6:04:ce:9e:7b:0c:7b:2b:08:c7:15:ac:fb: 90:19:66:ac:62:c2:fb:f7:54:24:3d:fa:67:98:4a: 92:c6:25:be:62:22:90:08:b1:3c:78:56:b0:48:36: 1b:c9:7b:98:5b:88:34:8e:fb:67:d1:15:4b:52:64: b3:0f:73:06:9d:a5:22:ed:26:57:48:1a:ff:de:9e: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:08:64:CA:84:AA:20:30:9F:65:58:99:E8:3D:B1:51:82:14:4A X509v3 Authority Key Identifier: keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.128.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:b5:11:ba:49:b4:3a:77:eb:47:ae:64:e0:32:df:12:99:6b: 75:b5:ce:f6:67:eb:45:83:23:ec:b2:5b:9e:27:5b:78:d7:1e: 97:39:2e:08:ab:0b:5e:6e:a7:74:43:96:a9:0a:5c:97:9b:6e: 68:79:0d:38:93:7c:a4:48:fe:1d:cb:ef:37:23:f8:62:f4:10: 60:75:ae:fb:11:4a:f9:b6:53:30:c5:61:f5:c6:ce:e4:a1:e9: 84:16:b5:dc:2c:f5:f6:93:71:dd:94:1b:9d:7e:a9:52:93:47: 35:cd:8d:73:b2:75:c0:14:cb:5a:de:bb:c2:83:2b:af:5a:41: 7c:a6:28:54:c1:ef:f1:2f:8b:6a:6b:2b:5c:98:ba:f9:f9:29: 0f:a5:6d:07:30:72:2c:49:cb:4e:bb:4e:55:d1:33:2b:ae:9e: 3a:0a:3c:0d:3e:53:a8:32:10:87:53:8d:58:5c:34:ff:ad:b2: d5:d2:42:55:3e:67:ec:b1:06:16:fc:32:16:2f:e2:64:23:40: 2b:01:79:54:df:d7:9b:7e:b9:ba:5a:f8:aa:24:77:41:9c:58: 33:4b:07:86:52:19:43:c3:55:1b:64:59:ac:e8:56:22:f0:e4: c5:53:52:59:7c:52:3a:f0:f0:a9:52:6b:c0:9d:42:66:9e:1c: 98:bb:a7:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3TfLGNRXLrCrMQ4+iKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YWMxNDk4ODYwZTJiYjA5NTgxNzM4NTRiZDA0Yzg2OWEz NjkwMTcwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFmMDg2NGNhODRhYTIwMzA5ZjY1NTg5OWU4M2RiMTUxODIxNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYDw9MPDSJDt2JBleOjQD5TQoMu+ j+xlfpGDCmb6+F7k5UBheIS4S/6p8QtnFOZYEeAj8T3cSLa+fRQY6IW8EKK18oIt mtE0/d9rKFrBbXapm7sQaH6Oux6ubkVeC25FYquQijrzwm5B1i2YiITFCn1K6pjd 6L7Ga39y2436HAxjhNo2PJXvs/7akzO7TUw6JPnceak6JKtQMKf727cp96Tcp2QF kw2nnbN2MnbUhquKA86fK8YEzp57DHsrCMcVrPuQGWasYsL791QkPfpnmEqSxiW+ YiKQCLE8eFawSDYbyXuYW4g0jvtn0RVLUmSzD3MGnaUi7SZXSBr/3p77uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4fCGTKhKogMJ9lWJnoPbFRghRKMB8GA1UdIwQY MBaAFBmsFJiGDiuwlYFzhUvQTIaaNpAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAt N2FhMjkwZTg1N2U5LzEvTGg4SVpNcUVxaUF3bjJWWW1lZzlzVkdDRkVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAtN2FhMjkwZTg1N2U5 LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY+AMA0G CSqGSIb3DQEBCwUAA4IBAQAatRG6SbQ6d+tHrmTgMt8SmWt1tc72Z+tFgyPsslue J1t41x6XOS4Iqwtebqd0Q5apClyXm25oeQ04k3ykSP4dy+83I/hi9BBgda77EUr5 tlMwxWH1xs7koemEFrXcLPX2k3HdlBudfqlSk0c1zY1zsnXAFMta3rvCgyuvWkF8 pihUwe/xL4tqaytcmLr5+SkPpW0HMHIsSctOu05V0TMrrp46CjwNPlOoMhCHU41Y XDT/rbLV0kJVPmfssQYW/DIWL+JkI0ArAXlU39ebfrm6WviqJHdBnFgzSweGUhlD w1UbZFms6FYi8OTFU1JZfFI68PCpUmvAnUJmnhyYu6fP -----END CERTIFICATE-----Generated at Mon Jan 19 17:50:28 2026 by rpki-client