This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/lhRe_xHQCXI5rtB8SPIPogdMRdc.roa File: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (raw, json) Hash identifier: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ= Subject key identifier: 96:14:5E:FF:11:D0:09:72:39:AE:D0:7C:48:F2:0F:A2:07:4C:45:D7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103ABB5C206FAF2D9F528F569D586B Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/lhRe_xHQCXI5rtB8SPIPogdMRdc.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 195.216.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:bb:5c:20:6f:af:2d:9f:52:8f:56:9d:58:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96145eff11d0097239aed07c48f20fa2074c45d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b0:bb:d1:01:0b:7f:17:c4:87:f5:74:52:4b: 34:25:d0:55:13:62:bf:ca:84:f4:d3:1b:e8:0a:fb: 33:d1:57:79:62:b9:04:1b:e7:ab:45:13:99:50:d4: e9:3c:8b:1d:64:f4:ba:c9:65:27:6d:18:e7:b3:d9: e4:eb:ef:67:1f:7a:93:b7:a2:dd:5d:3c:74:8f:29: ff:1b:cc:8a:74:b8:63:0b:4d:a8:12:cf:44:7b:4e: a6:1b:b2:b3:c9:45:f1:3a:99:38:e0:d7:0c:aa:2e: 7a:38:70:be:c1:f5:e8:b4:63:d4:6b:cb:19:10:0a: 0f:03:e9:14:90:17:40:31:7f:5d:8c:9c:01:08:b2: 71:b2:e0:76:39:65:53:5c:ad:19:e3:dd:6b:f4:f8: 7c:3d:c3:01:c6:22:48:52:32:99:71:b0:47:0a:0d: 2e:91:ee:2d:98:00:f2:35:79:72:41:2a:be:9a:04: 17:70:c6:16:81:30:0e:3e:13:22:cc:53:37:b7:4c: de:48:bf:83:8d:9c:94:90:7b:d6:a0:51:27:62:ce: ea:de:2b:06:77:c3:6d:62:ba:de:49:ac:9e:e4:73: d4:34:5f:ec:d2:bf:b3:aa:33:4f:c9:e5:99:b0:d5: 9a:01:f8:31:de:f4:53:b8:94:1e:9b:e1:5e:6a:00: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:14:5E:FF:11:D0:09:72:39:AE:D0:7C:48:F2:0F:A2:07:4C:45:D7 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/lhRe_xHQCXI5rtB8SPIPogdMRdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.183.0/24 Signature Algorithm: sha256WithRSAEncryption 24:38:c1:67:b7:57:f4:e7:d4:bd:76:8b:72:31:1c:0b:a8:4c: d0:09:36:7a:3a:ce:ca:a5:f3:cd:3c:dc:b7:2b:ee:6e:3e:3f: a4:3f:61:a7:be:a3:9b:ce:cc:f0:c6:c8:d6:63:d3:b2:30:a4: 82:c1:54:bb:63:55:cd:29:72:eb:81:9b:81:01:6e:58:8e:48: cc:e7:eb:77:0f:f0:d3:94:32:0a:d9:83:92:53:7e:4d:0f:6c: ec:d8:ca:99:b7:eb:b6:a3:39:d4:e2:ff:67:5d:61:89:98:05: 98:3c:4d:69:bf:93:78:d3:6f:87:03:83:37:36:43:19:ba:2e: 97:3c:7a:15:c6:5e:7e:ed:1b:18:7b:b3:05:89:0b:d3:c9:83: e9:92:89:d3:59:7b:3f:61:c4:9b:c3:42:fb:4c:4e:e0:41:75: dd:a7:d8:dc:db:7f:cf:47:71:ad:e7:d1:80:bd:e0:fc:e5:66: 53:20:2f:90:51:61:d2:4e:66:d9:af:71:c8:af:67:58:6a:bb: 17:9a:ba:91:71:1a:ee:4c:3a:00:15:6d:b3:c8:16:37:54:2a: 0f:12:07:68:d5:83:e5:02:ae:8b:98:d3:da:20:fb:26:7d:f7: c4:eb:9f:41:35:20:9f:28:02:52:af:20:b3:cb:2f:e6:58:7e: 41:a7:93:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDq7XCBvry2fUo9WnVhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjE0NWVmZjExZDAwOTcyMzlhZWQwN2M0OGYyMGZhMjA3NGM0NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rC70QELfxfEh/V0Uks0JdBVE2K/ yoT00xvoCvsz0Vd5YrkEG+erRROZUNTpPIsdZPS6yWUnbRjns9nk6+9nH3qTt6Ld XTx0jyn/G8yKdLhjC02oEs9Ee06mG7KzyUXxOpk44NcMqi56OHC+wfXotGPUa8sZ EAoPA+kUkBdAMX9djJwBCLJxsuB2OWVTXK0Z491r9Ph8PcMBxiJIUjKZcbBHCg0u ke4tmADyNXlyQSq+mgQXcMYWgTAOPhMizFM3t0zeSL+DjZyUkHvWoFEnYs7q3isG d8NtYrreSaye5HPUNF/s0r+zqjNPyeWZsNWaAfgx3vRTuJQem+FeagAg8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYUXv8R0AlyOa7QfEjyD6IHTEXXMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvbGhSZV94SFFDWEk1cnRCOFNQSVBvZ2RNUmRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i3MA0G CSqGSIb3DQEBCwUAA4IBAQAkOMFnt1f059S9dotyMRwLqEzQCTZ6Os7KpfPNPNy3 K+5uPj+kP2GnvqObzszwxsjWY9OyMKSCwVS7Y1XNKXLrgZuBAW5YjkjM5+t3D/DT lDIK2YOSU35ND2zs2MqZt+u2oznU4v9nXWGJmAWYPE1pv5N402+HA4M3NkMZui6X PHoVxl5+7RsYe7MFiQvTyYPpkonTWXs/YcSbw0L7TE7gQXXdp9jc23/PR3Gt59GA veD85WZTIC+QUWHSTmbZr3HIr2dYarsXmrqRcRruTDoAFW2zyBY3VCoPEgdo1YPl Aq6LmNPaIPsmfffE659BNSCfKAJSryCzyy/mWH5Bp5M/ -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:33 2026 by rpki-client