This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa File: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (raw, json) Hash identifier: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw= Subject key identifier: 2E:15:28:C9:A7:F0:D1:E0:4E:D0:88:78:05:00:77:4B:C0:44:82:97 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A096668B4C271CECE1FB06E2A7D5 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 45.155.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a0:96:66:8b:4c:27:1c:ec:e1:fb:06:e2:a7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1528c9a7f0d1e04ed088780500774bc0448297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:e5:bb:e3:52:de:7e:f3:ba:8a:82:7f:08: 9a:6c:b2:ca:41:33:31:00:87:b7:2c:16:90:86:e9: 7d:73:d3:79:99:1a:21:3c:9f:32:56:27:31:5b:2c: 8e:8d:e1:66:ae:a6:4d:3e:5f:dd:f0:b2:d7:75:74: 93:ee:ee:4c:12:60:b1:77:2f:b7:e8:50:9d:fb:47: 54:74:e6:de:60:87:ed:94:db:ca:51:dd:01:71:5b: 3c:bf:9b:37:96:79:0d:31:61:8e:2d:00:89:77:9d: e2:24:23:af:a9:0a:33:f1:5a:91:a9:3e:78:96:f7: 10:cf:7f:9e:54:9d:ac:d3:c6:17:64:a7:eb:ce:1c: 2e:d1:2b:14:76:26:99:ce:78:aa:77:7e:7c:81:a5: c7:13:a9:89:3c:6c:87:27:c3:bc:86:76:3b:f9:c3: f5:eb:85:85:09:b2:f8:e9:c7:b8:04:33:26:90:51: 72:cf:43:e4:17:9b:90:b4:30:b7:a1:03:82:33:a4: db:04:3e:85:fa:9a:9f:02:4c:2e:cf:e7:fa:40:dd: 50:8f:dd:d0:ae:cc:c8:cd:57:93:0d:6e:5f:08:63: 20:18:bf:58:ba:8e:40:2c:50:ba:bf:16:fb:56:f3: 73:34:dd:52:1f:0e:83:f0:78:d2:3b:17:f0:bd:5a: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:15:28:C9:A7:F0:D1:E0:4E:D0:88:78:05:00:77:4B:C0:44:82:97 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.243.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:cc:14:c6:c0:19:03:39:8c:a9:88:f7:23:db:8e:01:7a:ac: fd:89:b9:21:e7:74:cc:c4:e6:2e:f1:5a:16:63:13:ee:f2:fa: 3a:3f:d0:49:1a:6e:85:73:28:c7:9d:55:7e:08:00:2f:29:9a: a3:10:bb:44:29:6c:70:8a:c3:12:ee:26:88:e6:d6:05:f1:69: 97:da:d9:87:e6:a9:1c:ba:74:58:a7:0c:0b:89:fa:61:1f:99: bf:fe:a2:7f:59:6e:11:0d:30:da:f7:59:41:d4:c1:dc:06:32: 87:c7:24:68:9c:11:10:01:d3:c1:a1:5b:07:5c:cb:17:51:2a: d3:a5:da:e4:a6:3b:09:92:49:63:70:4f:2a:4e:55:67:d9:21: d3:91:c2:f8:8a:36:23:7e:58:e1:78:6c:6b:77:43:69:48:8a: 26:d6:4d:16:89:a0:f6:72:f5:ce:b7:f7:6b:c3:65:8b:74:51: 1c:99:4e:27:24:be:25:00:aa:97:2d:69:bb:13:59:59:28:00: 56:61:ca:b2:fe:b6:cb:4f:13:bd:86:aa:02:e6:08:a9:67:75: b2:64:ed:60:1f:90:8b:b1:a9:6a:70:fd:3a:c8:6d:b1:b4:2c: 08:d1:fd:54:31:73:a0:08:34:ec:d1:b2:f3:89:d4:d9:9b:46: 21:ba:6c:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKCWZotMJxzs4fsG4qfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTE1MjhjOWE3ZjBkMWUwNGVkMDg4NzgwNTAwNzc0YmMwNDQ4Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKHlu+NS3n7zuoqCfwiabLLKQTMx AIe3LBaQhul9c9N5mRohPJ8yVicxWyyOjeFmrqZNPl/d8LLXdXST7u5MEmCxdy+3 6FCd+0dUdObeYIftlNvKUd0BcVs8v5s3lnkNMWGOLQCJd53iJCOvqQoz8VqRqT54 lvcQz3+eVJ2s08YXZKfrzhwu0SsUdiaZzniqd358gaXHE6mJPGyHJ8O8hnY7+cP1 64WFCbL46ce4BDMmkFFyz0PkF5uQtDC3oQOCM6TbBD6F+pqfAkwuz+f6QN1Qj93Q rszIzVeTDW5fCGMgGL9Yuo5ALFC6vxb7VvNzNN1SHw6D8HjSOxfwvVqcvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4VKMmn8NHgTtCIeAUAd0vARIKXMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvTGhVb3lhZncwZUJPMEloNEJRQjNTOEJFZ3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvzMA0G CSqGSIb3DQEBCwUAA4IBAQBdzBTGwBkDOYypiPcj244Beqz9ibkh53TMxOYu8VoW YxPu8vo6P9BJGm6FcyjHnVV+CAAvKZqjELtEKWxwisMS7iaI5tYF8WmX2tmH5qkc unRYpwwLifphH5m//qJ/WW4RDTDa91lB1MHcBjKHxyRonBEQAdPBoVsHXMsXUSrT pdrkpjsJkkljcE8qTlVn2SHTkcL4ijYjfljheGxrd0NpSIom1k0WiaD2cvXOt/dr w2WLdFEcmU4nJL4lAKqXLWm7E1lZKABWYcqy/rbLTxO9hqoC5gipZ3WyZO1gH5CL salqcP06yG2xtCwI0f1UMXOgCDTs0bLzidTZm0YhumzG -----END CERTIFICATE-----Generated at Mon Jan 19 10:57:08 2026 by rpki-client