This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LHqHW9JEYIGAstAeujwVjGAnAV4.roa File: LHqHW9JEYIGAstAeujwVjGAnAV4.roa (raw, json) Hash identifier: 44Wfdlv/Jzm8iNDITTVf9J5E21EcMxuIU2n+lftK7bo= Subject key identifier: 2C:7A:87:5B:D2:44:60:81:80:B2:D0:1E:BA:3C:15:8C:60:27:01:5E Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783446F064D7C2B5BE2079B490E270DB Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LHqHW9JEYIGAstAeujwVjGAnAV4.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 45.8.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:f0:64:d7:c2:b5:be:20:79:b4:90:e2:70:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c7a875bd244608180b2d01eba3c158c6027015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:25:d2:c9:d3:9c:c6:ba:61:3e:89:16:55: a6:8e:5b:1f:23:09:41:cc:96:fd:51:7b:57:91:43: cc:62:68:30:5c:69:e4:ee:63:1c:55:95:ae:d8:a3: 88:c0:2f:da:e4:8a:67:5a:59:17:47:32:ab:8f:d6: ed:08:ef:c5:bf:ac:a4:9c:50:8a:53:1e:f6:58:3b: 17:20:15:19:e4:e1:99:9e:89:ca:96:86:38:ee:c9: 8a:fb:a7:27:3d:01:56:1a:1e:77:98:17:6d:22:37: 8c:1b:05:ac:33:9b:93:3d:43:99:7b:b9:8f:c2:47: 9d:a8:6e:b8:e1:eb:4f:ee:9e:e3:9d:05:83:cf:6f: 2a:17:29:79:1a:9f:a5:8a:f6:6b:08:9b:c6:0e:af: b0:d8:d3:48:5f:2b:5e:d5:a6:c9:4e:b9:07:d9:48: e9:5f:7a:ab:98:bd:7c:45:b0:61:51:8b:82:3b:c9: 6e:39:b0:d5:b7:bf:38:56:7d:f9:f0:07:df:fe:20: a4:49:f1:e3:7b:a7:1f:0a:c7:c4:8e:9d:1f:eb:f1: d6:85:cf:26:d4:04:39:c3:cd:12:49:27:42:76:ed: 54:95:ef:04:e4:44:d5:f9:dd:83:59:02:4e:49:1a: f4:ec:58:c4:ed:39:eb:09:40:56:20:a9:ed:17:bc: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:87:5B:D2:44:60:81:80:B2:D0:1E:BA:3C:15:8C:60:27:01:5E X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LHqHW9JEYIGAstAeujwVjGAnAV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.33.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:58:61:f3:70:c7:91:c7:0b:6e:85:70:27:29:3a:99:98:40: 5f:4b:38:80:89:b3:3d:db:48:54:b3:77:91:5e:9b:fd:29:5e: b5:7e:9b:5a:b4:13:d7:89:b2:68:e3:13:3a:12:8b:f2:9e:6a: 4f:51:04:47:99:20:6e:bd:aa:ad:b5:65:d6:11:40:ef:78:d2: 71:23:e8:c7:46:ba:47:26:fd:96:dc:ac:83:b9:2e:a3:95:ee: 1c:85:d8:a5:36:af:f3:53:8c:44:6a:16:1c:7c:69:b3:78:98: 5b:a2:e8:cc:79:71:5a:ff:14:71:4e:3a:cc:90:97:d4:69:7e: 15:bf:b7:1f:37:2a:56:da:2e:4e:73:fc:d1:a7:e2:a6:67:e2: bc:97:79:b5:4d:0d:1d:d6:3d:61:14:a6:75:53:67:f3:53:bc: c0:0e:37:d5:1f:c4:7f:fc:cb:61:51:69:56:4e:32:62:0a:ec: 26:ac:53:83:ae:40:17:ba:8d:f8:ea:36:5f:26:dd:0d:f5:7f: 8a:2e:b6:44:4d:24:fa:da:eb:22:b3:2e:7d:2a:ed:51:8a:70: cd:03:7f:19:25:45:2e:99:24:5c:37:81:c0:09:2e:e8:0f:df: d9:57:05:0f:36:4e:78:1e:53:8f:ee:52:66:98:f6:c0:23:b4: 54:49:ca:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEbwZNfCtb4gebSQ4nDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzdhODc1YmQyNDQ2MDgxODBiMmQwMWViYTNjMTU4YzYwMjcwMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWol0snTnMa6YT6JFlWmjlsfIwlB zJb9UXtXkUPMYmgwXGnk7mMcVZWu2KOIwC/a5IpnWlkXRzKrj9btCO/Fv6yknFCK Ux72WDsXIBUZ5OGZnonKloY47smK+6cnPQFWGh53mBdtIjeMGwWsM5uTPUOZe7mP wkedqG644etP7p7jnQWDz28qFyl5Gp+livZrCJvGDq+w2NNIXyte1abJTrkH2Ujp X3qrmL18RbBhUYuCO8luObDVt784Vn358Aff/iCkSfHje6cfCsfEjp0f6/HWhc8m 1AQ5w80SSSdCdu1Ule8E5ETV+d2DWQJOSRr07FjE7TnrCUBWIKntF7z2RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCx6h1vSRGCBgLLQHro8FYxgJwFeMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvTEhxSFc5SkVZSUdBc3RBZXVqd1ZqR0FuQVY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQghMA0G CSqGSIb3DQEBCwUAA4IBAQAvWGHzcMeRxwtuhXAnKTqZmEBfSziAibM920hUs3eR Xpv9KV61fptatBPXibJo4xM6EovynmpPUQRHmSBuvaqttWXWEUDveNJxI+jHRrpH Jv2W3KyDuS6jle4chdilNq/zU4xEahYcfGmzeJhboujMeXFa/xRxTjrMkJfUaX4V v7cfNypW2i5Oc/zRp+KmZ+K8l3m1TQ0d1j1hFKZ1U2fzU7zADjfVH8R//MthUWlW TjJiCuwmrFODrkAXuo346jZfJt0N9X+KLrZETST62usisy59Ku1RinDNA38ZJUUu mSRcN4HACS7oD9/ZVwUPNk54HlOP7lJmmPbAI7RUScpT -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:07 2026 by rpki-client