This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LuB19bVE3rfZb1VW1VQA-9mlWNQ.roa File: LuB19bVE3rfZb1VW1VQA-9mlWNQ.roa (raw, json) Hash identifier: RIaeuB6N+xYFS4E1fZ/Fmh/0uPkGvNQiY3SBIDn8Lcs= Subject key identifier: 2E:E0:75:F5:B5:44:DE:B7:D9:6F:55:56:D5:54:00:FB:D9:A5:58:D4 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA28A0762CDE52ECD61F5A76195F1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LuB19bVE3rfZb1VW1VQA-9mlWNQ.roa Signing time: Fri 02 Jan 2026 08:20:55 +0000 ROA not before: Fri 02 Jan 2026 08:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216435 IP address blocks: 151.245.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a2:8a:07:62:cd:e5:2e:cd:61:f5:a7:61:95:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee075f5b544deb7d96f5556d55400fbd9a558d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:56:0b:23:ff:cc:06:ee:86:33:37:e6:96:5e: 2c:26:71:e7:78:b7:89:a5:07:7a:3a:09:f1:cd:85: 52:49:75:ae:8c:9a:f1:85:08:f1:4c:68:a0:ea:40: 63:3d:95:db:67:7d:11:52:ad:95:ca:ef:63:4c:05: f0:9e:9d:33:fc:0e:5e:45:6e:b5:93:15:cc:fd:c5: 55:05:d8:0b:7a:0c:77:6f:2a:f1:8c:37:81:ce:5a: 5c:fe:d6:20:a0:55:7b:a9:fe:4a:8d:c0:b5:ec:c1: f6:c5:92:86:30:9a:5b:ee:66:2d:96:f6:e6:fa:59: 06:48:27:ec:48:3a:66:67:7d:94:44:66:bb:90:c8: a5:8e:af:77:74:43:b1:79:3d:a8:1a:7a:3a:56:48: 57:8d:b2:c4:7e:6e:f5:c8:33:67:c8:60:4a:73:60: 42:5a:9e:49:fd:c8:6d:04:89:3b:38:5e:55:75:fc: e2:60:34:15:af:87:c7:da:27:65:aa:46:55:cb:48: 5b:ce:d5:9e:64:29:6c:93:d8:d6:f3:a5:f6:23:13: dd:e9:98:52:c9:a2:70:5a:0a:8b:f6:35:28:34:66: 11:83:99:58:49:08:69:d8:68:e7:d2:9d:3f:a3:f7: 64:0d:25:b1:52:25:3b:fe:da:24:b9:e1:4b:11:ab: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E0:75:F5:B5:44:DE:B7:D9:6F:55:56:D5:54:00:FB:D9:A5:58:D4 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LuB19bVE3rfZb1VW1VQA-9mlWNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:0a:2f:cd:79:f6:83:e7:b2:27:fb:02:c9:07:52:15:cd:cc: 3d:e7:9d:f4:bf:41:5c:97:95:c7:38:ce:61:e3:c6:4e:d4:bd: dc:38:af:de:f9:98:31:5a:a9:cb:3c:a8:78:c0:7e:e0:a4:23: 21:35:db:5e:6e:53:5a:a4:ba:68:f7:b7:7f:be:82:81:87:1b: 71:f1:66:68:12:ca:8c:44:d1:74:56:5e:f5:a8:25:26:e3:d1: 88:5a:08:6e:b9:d2:ab:13:73:c1:88:24:8c:65:f8:9d:94:65: 36:e8:01:c1:d3:6f:de:b6:c1:bc:b9:75:ee:f2:88:69:46:38: f7:3b:44:a1:07:08:68:b9:fa:f2:25:10:3e:97:b8:2e:8c:3b: a2:57:81:9f:92:fd:9f:8a:37:22:82:a4:7e:ad:99:f8:8c:f2: 84:e4:92:9b:0c:0d:a3:82:8a:e2:5d:3e:4e:9d:96:12:60:3a: 7f:61:39:d0:40:6a:aa:26:0c:69:3e:9f:e3:ae:54:d4:93:4f: c1:69:91:78:b5:00:c8:df:ef:41:8f:80:60:09:0b:5a:a2:d4: 4b:18:16:0a:bb:1b:72:2e:ed:4b:f2:96:d0:33:da:d5:5e:67: 9f:c4:b2:fe:e9:98:f7:23:1e:c1:a9:a8:9f:38:26:eb:83:5e: 52:b0:91:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6KKB2LN5S7NYfWnYZXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWUwNzVmNWI1NDRkZWI3ZDk2ZjU1NTZkNTU0MDBmYmQ5YTU1OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FYLI//MBu6GMzfmll4sJnHneLeJ pQd6OgnxzYVSSXWujJrxhQjxTGig6kBjPZXbZ30RUq2Vyu9jTAXwnp0z/A5eRW61 kxXM/cVVBdgLegx3byrxjDeBzlpc/tYgoFV7qf5KjcC17MH2xZKGMJpb7mYtlvbm +lkGSCfsSDpmZ32URGa7kMiljq93dEOxeT2oGno6VkhXjbLEfm71yDNnyGBKc2BC Wp5J/chtBIk7OF5VdfziYDQVr4fH2idlqkZVy0hbztWeZClsk9jW86X2IxPd6ZhS yaJwWgqL9jUoNGYRg5lYSQhp2Gjn0p0/o/dkDSWxUiU7/tokueFLEas+VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7gdfW1RN632W9VVtVUAPvZpVjUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTHVCMTliVkUzcmZaYjFWVzFWUUEtOW1sV05RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/VzMA0G CSqGSIb3DQEBCwUAA4IBAQAOCi/NefaD57In+wLJB1IVzcw95530v0Fcl5XHOM5h 48ZO1L3cOK/e+ZgxWqnLPKh4wH7gpCMhNdteblNapLpo97d/voKBhxtx8WZoEsqM RNF0Vl71qCUm49GIWghuudKrE3PBiCSMZfidlGU26AHB02/etsG8uXXu8ohpRjj3 O0ShBwhoufryJRA+l7gujDuiV4Gfkv2fijcigqR+rZn4jPKE5JKbDA2jgoriXT5O nZYSYDp/YTnQQGqqJgxpPp/jrlTUk0/BaZF4tQDI3+9Bj4BgCQtaotRLGBYKuxty Lu1L8pbQM9rVXmefxLL+6Zj3Ix7BqaifOCbrg15SsJE/ -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:35 2026 by rpki-client