This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/lm3OTOwIvXSXM9pioR3a9JAWpbo.roa File: lm3OTOwIvXSXM9pioR3a9JAWpbo.roa (raw, json) Hash identifier: jQABbYTjEwoFiegPBkd7R4azYt9ZrDtGw7Anzr3WHlY= Subject key identifier: 96:6D:CE:4C:EC:08:BD:74:97:33:DA:62:A1:1D:DA:F4:90:16:A5:BA Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b Certificate serial: 019B78354A8FC60C12D0C9B2B319AC71C8E5 Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/lm3OTOwIvXSXM9pioR3a9JAWpbo.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201967 IP address blocks: 193.104.143.0/24 maxlen: 24 2a0c:2380::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4a:8f:c6:0c:12:d0:c9:b2:b3:19:ac:71:c8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966dce4cec08bd749733da62a11ddaf49016a5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:d7:6c:9a:0b:a5:08:b6:f4:66:a5:df:bc: 3e:45:93:39:a1:2b:44:78:13:72:57:d9:f9:3f:a8: 78:0a:19:4f:66:4b:87:ed:ef:63:7a:97:63:c5:7f: ec:01:a3:fa:24:b6:36:b1:e8:84:4d:4c:40:82:d6: 6a:bd:b7:1a:03:90:ce:da:2e:73:db:8a:49:5b:2d: 2c:62:d3:c3:f9:fd:f9:71:4b:d4:a9:7d:a9:b1:d2: 14:1a:aa:78:88:02:20:26:ed:47:40:d0:6f:18:9c: fb:85:5a:ec:08:b1:f3:e3:50:5b:75:d8:29:8d:d3: 77:43:c8:14:88:50:d2:de:24:20:23:51:18:7c:f4: 2c:d1:51:ee:56:32:41:1c:69:2d:a7:88:53:0a:5a: ab:f8:11:9e:2e:00:14:f1:24:40:ed:a1:04:34:28: b1:7b:0c:bd:ed:57:f8:8b:d0:74:16:20:0d:49:ec: 58:da:eb:95:36:24:cd:16:4c:34:a0:08:3d:37:24: 4d:31:f6:32:b5:96:a1:ed:65:c6:38:dc:05:32:dc: 1b:3d:bd:1b:9e:2f:0b:0d:3b:6d:8c:af:71:73:2e: 36:90:2e:b8:50:53:9b:1b:42:c9:29:83:47:e2:e1: be:a2:e1:cf:4b:8c:a8:f4:aa:77:ea:7d:f4:80:1e: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:CE:4C:EC:08:BD:74:97:33:DA:62:A1:1D:DA:F4:90:16:A5:BA X509v3 Authority Key Identifier: keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/lm3OTOwIvXSXM9pioR3a9JAWpbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.143.0/24 IPv6: 2a0c:2380::/29 Signature Algorithm: sha256WithRSAEncryption 7b:a8:13:d7:0b:74:01:4e:f9:eb:c4:21:81:79:b4:c4:9f:7a: ac:e3:e7:79:07:45:36:24:e1:d9:ef:21:f7:15:1e:56:91:42: 0a:f4:70:b8:0b:2b:4e:4e:1b:5b:21:ce:b1:ee:2d:1c:96:14: 46:49:30:3c:3f:9c:3a:78:6e:40:a2:54:9f:8e:34:aa:9a:34: 0c:82:ad:5e:d6:cf:ec:6e:68:36:01:e8:08:cc:82:91:86:79: 78:1a:df:a1:c6:e6:5c:30:61:85:72:de:b4:c4:28:09:c4:f6: ed:ac:c9:1c:e2:af:c6:7b:83:ae:72:04:24:52:53:cb:f9:ec: 3f:6c:1b:1e:bd:97:be:be:8a:51:92:be:75:94:bc:cd:a3:98: 14:24:1f:90:15:b1:d0:49:c6:35:52:d1:b6:c7:24:61:06:8b: 7c:3a:5e:d6:54:5e:4d:fd:38:5f:b8:cc:5d:f3:26:de:b2:e5: 9e:77:6e:1a:5d:6d:fb:21:de:b5:16:fe:cb:23:46:38:26:9c: 83:1c:c0:59:4a:1e:85:b6:6c:25:ed:81:1d:c7:58:d5:cb:a8: 01:2f:a7:7f:e6:80:e7:e4:5e:37:42:3d:2e:c8:52:07:f9:4b: fb:ed:bc:fe:26:ad:b4:f7:5f:b3:2f:8b:79:aa:13:c4:a3:9a: 98:49:30:48 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NUqPxgwS0MmysxmsccjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTdlYjQ5MTk2ZGQyZTA2MDZkNTk3N2MyYjc0YjEwMWI3 OWJjMGIwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZkY2U0Y2VjMDhiZDc0OTczM2RhNjJhMTFkZGFmNDkwMTZhNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqrXbJoLpQi29Gal37w+RZM5oStE eBNyV9n5P6h4ChlPZkuH7e9jepdjxX/sAaP6JLY2seiETUxAgtZqvbcaA5DO2i5z 24pJWy0sYtPD+f35cUvUqX2psdIUGqp4iAIgJu1HQNBvGJz7hVrsCLHz41Bbddgp jdN3Q8gUiFDS3iQgI1EYfPQs0VHuVjJBHGktp4hTClqr+BGeLgAU8SRA7aEENCix ewy97Vf4i9B0FiANSexY2uuVNiTNFkw0oAg9NyRNMfYytZah7WXGONwFMtwbPb0b ni8LDTttjK9xcy42kC64UFObG0LJKYNH4uG+ouHPS4yo9Kp36n30gB5QtwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJZtzkzsCL10lzPaYqEd2vSQFqW6MB8GA1UdIwQY MBaAFG9X60kZbdLgYG1Zd8K3SxAbebwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jN2JmNGEtZGE5Ny00YjViLTg3MTkt MzdiM2UyNDRjMDYzLzEvbG0zT1RPd0l2WFNYTTlwaW9SM2E5SkFXcGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jN2JmNGEtZGE5Ny00YjViLTg3MTktMzdiM2UyNDRjMDYz LzEvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWiPMA0E AgACMAcDBQMqDCOAMA0GCSqGSIb3DQEBCwUAA4IBAQB7qBPXC3QBTvnrxCGBebTE n3qs4+d5B0U2JOHZ7yH3FR5WkUIK9HC4CytOThtbIc6x7i0clhRGSTA8P5w6eG5A olSfjjSqmjQMgq1e1s/sbmg2AegIzIKRhnl4Gt+hxuZcMGGFct60xCgJxPbtrMkc 4q/Ge4OucgQkUlPL+ew/bBsevZe+vopRkr51lLzNo5gUJB+QFbHQScY1UtG2xyRh Bot8Ol7WVF5N/ThfuMxd8ybesuWed24aXW37Id61Fv7LI0Y4JpyDHMBZSh6Ftmwl 7YEdx1jVy6gBL6d/5oDn5F43Qj0uyFIH+Uv77bz+Jq2091+zL4t5qhPEo5qYSTBI -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:39 2026 by rpki-client