This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Limg2OcrpQb2qXQ7sCTfk2S9PJw.roa File: Limg2OcrpQb2qXQ7sCTfk2S9PJw.roa (raw, json) Hash identifier: Ky5JLa75x6iWYS8LhfeixQGhrtneh8tsA5l774oOLa4= Subject key identifier: 2E:29:A0:D8:E7:2B:A5:06:F6:A9:74:3B:B0:24:DF:93:64:BD:3C:9C Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D2E829D00CEA4F7DC3B2DD8213E2 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Limg2OcrpQb2qXQ7sCTfk2S9PJw.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150289 IP address blocks: 2a0c:9a40:8a70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:e8:29:d0:0c:ea:4f:7d:c3:b2:dd:82:13:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e29a0d8e72ba506f6a9743bb024df9364bd3c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:61:2f:61:29:d2:c2:75:21:52:82:e6:d4: 0c:ee:b3:80:33:ed:a1:05:5b:63:33:41:da:46:b3: 35:3c:c4:75:50:df:b8:3b:f1:c1:a1:dc:2b:21:29: aa:65:1d:7d:64:d3:b1:b9:77:ec:82:32:b6:65:b0: 8a:68:bd:58:50:e2:68:f1:b0:b4:d2:19:b8:c2:05: ae:a1:b9:9d:99:02:6e:c8:fe:3d:74:99:5d:86:f8: cc:63:27:13:ae:96:f6:63:fa:3f:7e:1f:86:7c:ea: 9c:16:2b:f8:54:3f:c9:6a:5a:da:ee:15:b3:ff:c1: 02:25:10:86:ff:bb:ed:9a:a7:ba:d7:2b:d7:a2:f3: ca:d0:44:3b:ac:c6:66:df:4a:7d:1d:4c:9d:a4:0f: 86:04:92:28:c0:54:1e:71:a8:dc:a9:31:77:a0:cc: e9:25:b2:be:84:ef:61:b8:7d:89:1c:f8:d2:b0:63: 25:5d:af:b4:81:cc:31:d9:05:3b:fe:9a:ca:a6:20: 97:c9:9e:2c:33:d6:d9:7e:00:91:26:d6:dc:59:93: ac:b6:6c:65:54:bd:37:49:cc:3c:46:44:ef:b0:02: 42:df:8b:01:af:0e:f3:02:64:e8:33:ff:d8:60:cc: 3b:44:6f:bf:f2:a9:38:4a:86:1e:64:2a:6b:a1:08: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:29:A0:D8:E7:2B:A5:06:F6:A9:74:3B:B0:24:DF:93:64:BD:3C:9C X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Limg2OcrpQb2qXQ7sCTfk2S9PJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a70::/44 Signature Algorithm: sha256WithRSAEncryption c4:97:4e:84:8f:01:d5:c7:48:63:5d:0f:eb:93:ad:34:6d:b9: f1:b5:de:f0:1a:66:c5:00:63:27:ec:8e:96:19:a8:1f:cb:a0: 4b:1e:66:46:c4:08:48:d0:b2:68:99:8d:49:56:62:d3:1e:70: 2e:d2:37:a2:ee:d9:9c:50:05:96:17:dd:28:c4:c4:7a:7e:00: 88:dc:26:84:ca:0f:78:ac:03:89:f4:56:98:73:34:56:b5:18: e5:91:86:b6:75:07:06:0a:24:66:29:3a:21:e0:ec:32:ee:4b: 37:02:54:45:9b:01:3f:99:c3:88:2f:30:59:cc:6e:e8:6d:36: b2:c2:1f:d7:ae:c2:4a:31:1a:c9:4f:6d:23:74:24:d0:9d:fe: 30:93:fa:ab:e2:fe:55:09:ad:26:4f:e8:b1:2d:79:83:5d:b8: e1:4b:02:d5:4a:fa:22:04:0e:b2:62:d1:49:9c:8a:a2:4e:6e: 10:24:ab:7f:fd:f5:47:d8:a4:f3:ae:50:1b:98:4d:bf:ee:c3: ac:ab:61:a1:15:36:99:3e:1c:bf:2c:1a:56:1c:16:6e:b9:e2: ab:3f:a9:f5:6f:d2:0a:41:3f:ac:22:48:38:d1:07:86:a5:f7: 17:3b:ad:9b:bb:93:77:55:48:ca:8e:85:7e:d9:79:e1:64:81: 93:c0:ce:f7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptLoKdAM6k99w7LdghPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTI5YTBkOGU3MmJhNTA2ZjZhOTc0M2JiMDI0ZGY5MzY0YmQzYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWlhL2Ep0sJ1IVKC5tQM7rOAM+2h BVtjM0HaRrM1PMR1UN+4O/HBodwrISmqZR19ZNOxuXfsgjK2ZbCKaL1YUOJo8bC0 0hm4wgWuobmdmQJuyP49dJldhvjMYycTrpb2Y/o/fh+GfOqcFiv4VD/Jalra7hWz /8ECJRCG/7vtmqe61yvXovPK0EQ7rMZm30p9HUydpA+GBJIowFQecajcqTF3oMzp JbK+hO9huH2JHPjSsGMlXa+0gcwx2QU7/prKpiCXyZ4sM9bZfgCRJtbcWZOstmxl VL03Scw8RkTvsAJC34sBrw7zAmToM//YYMw7RG+/8qk4SoYeZCproQikmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC4poNjnK6UG9ql0O7Ak35NkvTycMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTGltZzJPY3JwUWIycVhRN3NDVGZrMlM5UEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIpw MA0GCSqGSIb3DQEBCwUAA4IBAQDEl06EjwHVx0hjXQ/rk600bbnxtd7wGmbFAGMn 7I6WGagfy6BLHmZGxAhI0LJomY1JVmLTHnAu0jei7tmcUAWWF90oxMR6fgCI3CaE yg94rAOJ9FaYczRWtRjlkYa2dQcGCiRmKToh4Owy7ks3AlRFmwE/mcOILzBZzG7o bTaywh/XrsJKMRrJT20jdCTQnf4wk/qr4v5VCa0mT+ixLXmDXbjhSwLVSvoiBA6y YtFJnIqiTm4QJKt//fVH2KTzrlAbmE2/7sOsq2GhFTaZPhy/LBpWHBZuueKrP6n1 b9IKQT+sIkg40QeGpfcXO62bu5N3VUjKjoV+2XnhZIGTwM73 -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:19 2026 by rpki-client