This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lha6O3azmUaMmYHxC2PWWbLe1l8.roa File: Lha6O3azmUaMmYHxC2PWWbLe1l8.roa (raw, json) Hash identifier: an2fPGMbSFaMcku0wJ9i2GMDs3vQOstFmPFwU4gl7zM= Subject key identifier: 2E:16:BA:3B:76:B3:99:46:8C:99:81:F1:0B:63:D6:59:B2:DE:D6:5F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019AB4E71AED721E7EB9789C5F0A7EFF2D29 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lha6O3azmUaMmYHxC2PWWbLe1l8.roa Signing time: Mon 24 Nov 2025 08:07:15 +0000 ROA not before: Mon 24 Nov 2025 08:07:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56619 IP address blocks: 79.98.249.0/24 maxlen: 24 90.188.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:e7:1a:ed:72:1e:7e:b9:78:9c:5f:0a:7e:ff:2d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Nov 24 08:07:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e16ba3b76b399468c9981f10b63d659b2ded65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:23:4e:d4:91:c3:90:2f:6a:1b:53:bf:43: 8d:92:7d:a2:0d:b5:06:b3:e6:54:3f:48:17:43:b3: ed:31:95:b0:2f:45:e2:aa:d5:cd:ce:90:0b:00:d3: c0:28:1f:bf:c0:ab:62:68:e1:fa:a8:d8:10:39:df: b1:97:d9:43:37:5a:07:28:42:98:78:04:18:45:61: c9:64:5f:f3:5e:7a:f0:49:fe:f0:05:ae:8a:3d:33: 93:aa:54:9f:9b:10:a3:ea:cc:f5:a4:08:a9:41:22: 81:77:7e:44:3c:32:46:7f:c4:58:7e:7d:f5:64:6c: 01:db:ad:75:aa:87:da:72:f3:71:9c:0b:cd:a8:b9: 55:7f:c0:e4:ea:c2:ca:e4:14:06:d7:a6:2b:83:e7: 9e:e9:81:90:b4:b1:95:da:6e:db:11:7c:98:11:fc: 9c:02:7a:f8:46:63:20:9c:59:64:32:c4:0d:e9:d3: 7e:a7:2b:b1:63:72:e9:dd:64:a3:5f:37:7a:fa:bc: 3c:cd:01:af:12:53:f8:8a:64:ec:ec:b9:62:d7:6f: 76:a2:63:e5:01:46:9b:45:00:f7:9d:45:b7:52:7f: 5b:cd:b4:f1:44:de:e1:04:72:c4:0b:dd:72:88:56: b7:2c:d2:5b:72:77:01:b7:03:92:75:8c:d7:f1:51: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:16:BA:3B:76:B3:99:46:8C:99:81:F1:0B:63:D6:59:B2:DE:D6:5F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lha6O3azmUaMmYHxC2PWWbLe1l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.249.0/24 90.188.196.0/24 Signature Algorithm: sha256WithRSAEncryption 70:c5:61:25:c2:33:e6:bc:11:2a:85:22:a9:2b:e7:d8:27:15: c4:08:cd:d7:14:95:49:81:f4:ea:31:70:16:20:e2:ef:4a:be: b4:da:9a:e3:ec:cb:f4:c1:0d:73:81:b5:3b:28:7c:37:6f:cd: 57:ab:f0:e3:da:22:54:38:1c:72:ab:15:53:2d:13:34:c7:62: ca:5c:d9:51:58:b5:9f:8f:e0:8d:36:c2:10:fa:5e:6a:bd:4e: eb:ca:00:8b:86:da:d9:56:0d:38:1c:6f:2a:de:3f:7e:3c:35: b8:3a:93:07:ae:a0:21:38:a3:54:af:10:f4:e3:bb:db:e3:49: ce:d4:a0:19:cb:da:6f:e3:3e:30:ec:7e:f4:d1:f5:03:be:be: 54:25:5d:25:27:45:62:57:45:9b:89:a9:c5:f5:01:5c:60:55: 8f:ef:7f:90:0c:45:5a:5a:5d:14:63:8e:a0:73:eb:42:90:24: 5b:57:8c:fa:bd:e8:65:ee:a6:34:f0:24:fa:c2:63:70:f8:03: cf:73:75:ce:b8:50:55:35:65:cb:dd:6f:a0:02:51:da:cf:85: 28:1c:da:b3:3c:ae:25:69:26:46:53:f4:27:93:87:ec:01:dd: 34:ef:84:18:ab:0b:09:25:d4:4c:7b:88:da:0c:05:a0:ea:33: 20:d3:e6:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq05xrtch5+uXicXwp+/y0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjUxMTI0MDgwNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTE2YmEzYjc2YjM5OTQ2OGM5OTgxZjEwYjYzZDY1OWIyZGVkNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIsjTtSRw5AvahtTv0ONkn2iDbUG s+ZUP0gXQ7PtMZWwL0XiqtXNzpALANPAKB+/wKtiaOH6qNgQOd+xl9lDN1oHKEKY eAQYRWHJZF/zXnrwSf7wBa6KPTOTqlSfmxCj6sz1pAipQSKBd35EPDJGf8RYfn31 ZGwB2611qofacvNxnAvNqLlVf8Dk6sLK5BQG16Yrg+ee6YGQtLGV2m7bEXyYEfyc Anr4RmMgnFlkMsQN6dN+pyuxY3Lp3WSjXzd6+rw8zQGvElP4imTs7Lli1292omPl AUabRQD3nUW3Un9bzbTxRN7hBHLEC91yiFa3LNJbcncBtwOSdYzX8VEzCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC4Wujt2s5lGjJmB8Qtj1lmy3tZfMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvTGhhNk8zYXptVWFNbVlIeEMyUFdXYkxlMWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2L5AwQA WrzEMA0GCSqGSIb3DQEBCwUAA4IBAQBwxWElwjPmvBEqhSKpK+fYJxXECM3XFJVJ gfTqMXAWIOLvSr602prj7Mv0wQ1zgbU7KHw3b81Xq/Dj2iJUOBxyqxVTLRM0x2LK XNlRWLWfj+CNNsIQ+l5qvU7rygCLhtrZVg04HG8q3j9+PDW4OpMHrqAhOKNUrxD0 47vb40nO1KAZy9pv4z4w7H700fUDvr5UJV0lJ0ViV0WbianF9QFcYFWP73+QDEVa Wl0UY46gc+tCkCRbV4z6vehl7qY08CT6wmNw+APPc3XOuFBVNWXL3W+gAlHaz4Uo HNqzPK4laSZGU/Qnk4fsAd0074QYqwsJJdRMe4jaDAWg6jMg0+Zm -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:10 2025 by rpki-client