This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa
File: LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa (raw, json)
Hash identifier: R8R2deH4wzpQeZtkxO49MWL5HlgBcEV1PZ5wfpJUweo=
Subject key identifier: 2E:15:59:A6:72:51:04:1E:CD:AD:2C:D6:7C:71:C1:27:64:86:E9:B5
Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial: 019B7C80243FAACF7828A7EA176D89CEA22B
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa
Signing time: Fri 02 Jan 2026 02:18:51 +0000
ROA not before: Fri 02 Jan 2026 02:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 167.94.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:24:3f:aa:cf:78:28:a7:ea:17:6d:89:ce:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Validity
Not Before: Jan 2 02:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e1559a67251041ecdad2cd67c71c1276486e9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:72:b3:a0:c4:e1:2e:de:f0:d3:75:4c:89:
03:d4:c5:2a:38:0f:c1:67:41:d9:03:c2:11:ab:a5:
84:29:83:57:39:91:72:f6:1e:92:a0:2a:c6:46:34:
ef:bb:79:75:70:48:b8:3a:d5:2f:50:b3:e5:9f:e4:
68:45:b4:fb:27:c2:de:40:68:c5:82:2a:32:59:68:
7e:c2:3b:1f:b2:33:53:f5:61:ea:3f:67:47:46:08:
7d:dc:c3:80:e0:41:e6:d4:4c:0d:67:b7:34:b8:26:
ab:0a:99:fb:25:e1:e3:94:a8:4f:14:6f:75:1e:1e:
73:ce:d6:37:19:cc:0f:af:57:92:2c:85:d2:f7:dd:
2f:4f:65:39:27:91:0e:0d:db:51:83:33:96:7c:c0:
57:66:71:fb:9a:ba:2f:b4:55:80:d0:ec:2a:2d:12:
32:ed:1c:1c:c2:43:68:d2:01:e4:07:b9:3a:ee:e1:
d3:d2:90:41:2d:5d:e6:69:b7:19:c8:4d:29:d6:36:
7f:bf:2c:dc:f1:af:72:c2:d5:22:03:1d:50:f8:73:
4f:33:93:de:6d:56:bc:89:82:25:b2:3c:94:1a:95:
20:b9:4b:80:ae:ef:13:aa:87:11:6a:08:6a:7a:cc:
07:64:66:63:23:8b:20:bd:71:f7:68:81:c2:eb:68:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:59:A6:72:51:04:1E:CD:AD:2C:D6:7C:71:C1:27:64:86:E9:B5
X509v3 Authority Key Identifier:
keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:21:38:bd:d6:2f:5d:c8:4b:f1:3a:ac:e6:58:57:03:1c:53:
74:07:4e:bf:22:65:7c:f3:6c:22:9a:05:6e:3a:8b:23:c5:2d:
f6:f9:87:4f:cf:d7:48:1a:40:e9:6c:88:f4:ac:22:47:5e:05:
f1:48:a2:f0:26:00:76:92:0f:65:39:f6:cd:63:c6:55:7b:47:
54:7d:ee:dc:cc:e7:f8:ff:13:a9:a7:a0:e5:77:36:ab:ff:ef:
74:46:39:a4:b0:b6:d7:00:1c:2e:37:e7:a5:12:63:df:6d:b4:
9e:8f:ce:96:64:b6:67:3f:19:a7:1a:60:30:f7:dc:cd:cf:ef:
f3:67:20:67:09:4c:44:f5:f9:c5:a2:f1:34:dd:c9:2e:60:b1:
44:15:49:fc:68:38:58:9e:1f:08:f5:a6:f7:3c:8a:6e:bb:f7:
e2:24:52:3d:b3:ed:cf:d3:08:cd:70:e0:02:ec:73:d2:b1:aa:
67:4b:af:2a:2b:b2:92:79:72:0e:0d:b1:12:96:36:37:3b:62:
d5:ae:1a:e2:36:04:4f:21:29:43:ee:dd:76:33:67:e1:2f:9d:
a1:3b:7d:45:1e:f3:a6:87:8c:4b:43:fa:41:a9:3a:33:60:c2:
f8:1e:8e:11:b1:e3:f4:31:5b:67:18:c9:12:81:ac:fb:ba:5e:
f5:5a:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:36:36 2026 by rpki-client