This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LN4H0lEXKOZxl8nvYaTDQaU8EoE.roa File: LN4H0lEXKOZxl8nvYaTDQaU8EoE.roa (raw, json) Hash identifier: tRNNZmhuhMlupYeKJ4Pn5XfAv/BJX3P63fr03iMVsoM= Subject key identifier: 2C:DE:07:D2:51:17:28:E6:71:97:C9:EF:61:A4:C3:41:A5:3C:12:81 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019A59BCD205B8F30E1BCFE37BA7E5822526 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LN4H0lEXKOZxl8nvYaTDQaU8EoE.roa Signing time: Thu 06 Nov 2025 15:15:37 +0000 ROA not before: Thu 06 Nov 2025 15:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.180.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:bc:d2:05:b8:f3:0e:1b:cf:e3:7b:a7:e5:82:25:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Nov 6 15:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2cde07d2511728e67197c9ef61a4c341a53c1281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:b6:ca:26:ed:18:21:b2:c0:41:dd:88:5b: 9d:d0:cc:dc:2c:1f:9b:fd:01:9a:8f:4c:e1:d8:3c: 29:0d:0d:3c:15:e1:d3:68:a4:e6:5e:d5:ad:d7:33: 1f:bc:92:e5:c1:40:1f:e2:f3:53:af:b6:9a:f9:94: 9b:d3:d9:ad:6b:bd:ff:75:59:81:e1:f4:a1:85:ff: 4e:2a:9c:77:58:bd:63:9c:28:7b:0f:a8:1f:d1:dc: 6d:1a:44:35:9f:2c:9c:ae:39:89:8a:f4:bf:b8:07: a3:30:2c:27:56:9e:f5:dd:cc:21:88:98:6e:f7:c4: 64:d1:42:15:ef:82:dc:d2:9a:64:66:74:2a:6f:bb: 6a:d9:6b:77:b1:56:d4:27:5f:73:ec:68:2d:29:58: 1d:87:68:76:a4:ca:5a:58:3d:c1:cf:7e:f6:20:d6: 62:38:d2:df:b8:8c:12:16:bc:ac:89:dd:87:c2:77: 65:cc:68:a1:96:c5:93:b7:fc:87:6a:b4:52:60:31: af:c3:ee:4e:26:13:57:e8:6f:a4:bc:a3:14:63:06: 05:d8:a4:eb:06:70:ee:26:c1:89:90:65:3a:e9:57: e8:cd:25:d3:73:8e:c3:ae:39:60:e9:39:54:2b:ee: b4:52:ec:9c:dd:d8:83:ec:eb:f6:2a:cd:13:10:db: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:07:D2:51:17:28:E6:71:97:C9:EF:61:A4:C3:41:A5:3C:12:81 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LN4H0lEXKOZxl8nvYaTDQaU8EoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.232.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:c3:31:f9:6f:d2:24:2e:36:13:42:cb:b1:7c:c8:9c:00:e3: fa:3e:6c:a0:12:80:15:8e:aa:2a:ed:2f:11:e6:a9:af:ff:53: 4a:99:54:ff:10:99:ac:93:a0:b2:38:61:b0:40:c8:a6:39:b4: 6f:73:69:f3:cf:6b:ff:18:0a:2d:49:ff:ac:b9:00:45:29:fa: d1:19:68:e7:d4:b0:cb:47:f0:f5:25:83:9b:a2:57:54:99:fd: e7:c3:61:80:e2:b4:df:23:46:43:e6:cc:d0:e1:31:3e:ef:71: 90:e9:c3:de:8b:32:60:75:79:e6:d8:a1:01:37:87:a9:ef:8e: 44:bb:bf:e5:b1:00:1f:14:3e:57:5e:5a:83:60:de:5f:63:e3: 9c:ff:7a:a0:82:c9:11:be:21:7b:7d:d8:51:83:df:3b:64:93: 3e:e2:97:74:16:f8:12:78:8f:4d:7d:80:70:0d:9c:3e:2f:53: 8e:00:8e:ec:25:8b:5e:57:5c:46:45:f9:91:5c:b5:e3:9c:42: 6e:fe:52:20:cb:f9:4e:da:8f:21:a8:5b:1d:e7:37:2a:58:65: 71:0d:1d:29:8d:75:1f:75:a1:d7:9a:b7:58:a2:dd:c5:d1:9c: d4:59:c5:06:f4:61:0d:5f:df:e5:92:53:f0:bd:c3:44:d9:35: 61:32:90:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZvNIFuPMOG8/je6flgiUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMTA2MTUxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2RlMDdkMjUxMTcyOGU2NzE5N2M5ZWY2MWE0YzM0MWE1M2MxMjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wO2yibtGCGywEHdiFud0MzcLB+b /QGaj0zh2DwpDQ08FeHTaKTmXtWt1zMfvJLlwUAf4vNTr7aa+ZSb09mta73/dVmB 4fShhf9OKpx3WL1jnCh7D6gf0dxtGkQ1nyycrjmJivS/uAejMCwnVp713cwhiJhu 98Rk0UIV74Lc0ppkZnQqb7tq2Wt3sVbUJ19z7GgtKVgdh2h2pMpaWD3Bz372INZi ONLfuIwSFrysid2HwndlzGihlsWTt/yHarRSYDGvw+5OJhNX6G+kvKMUYwYF2KTr BnDuJsGJkGU66VfozSXTc47Drjlg6TlUK+60Uuyc3diD7Ov2Ks0TENv/vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzeB9JRFyjmcZfJ72Gkw0GlPBKBMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTE40SDBsRVhLT1p4bDhudllhVERRYVU4RW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbToMA0G CSqGSIb3DQEBCwUAA4IBAQAtwzH5b9IkLjYTQsuxfMicAOP6PmygEoAVjqoq7S8R 5qmv/1NKmVT/EJmsk6CyOGGwQMimObRvc2nzz2v/GAotSf+suQBFKfrRGWjn1LDL R/D1JYOboldUmf3nw2GA4rTfI0ZD5szQ4TE+73GQ6cPeizJgdXnm2KEBN4ep745E u7/lsQAfFD5XXlqDYN5fY+Oc/3qggskRviF7fdhRg987ZJM+4pd0FvgSeI9NfYBw DZw+L1OOAI7sJYteV1xGRfmRXLXjnEJu/lIgy/lO2o8hqFsd5zcqWGVxDR0pjXUf daHXmrdYot3F0ZzUWcUG9GENX9/lklPwvcNE2TVhMpDU -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client