This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/LUMm3KJ9jrucAwBkA9m77rrSEdo.roa File: LUMm3KJ9jrucAwBkA9m77rrSEdo.roa (raw, json) Hash identifier: 4Aa+6eJWayt69d6T35V+izmgz8oph51HxBJxpwGYcp0= Subject key identifier: 2D:43:26:DC:A2:7D:8E:BB:9C:03:00:64:03:D9:BB:EE:BA:D2:11:DA Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc Certificate serial: 019B7BA4EEC6205E256940D1F8A1F5D493AD Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/LUMm3KJ9jrucAwBkA9m77rrSEdo.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201922 IP address blocks: 185.179.35.0/24 maxlen: 24 2a02:6c20:3::/48 maxlen: 48 2a02:6c20:807::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ee:c6:20:5e:25:69:40:d1:f8:a1:f5:d4:93:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d4326dca27d8ebb9c03006403d9bbeebad211da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:c1:1b:50:2a:2c:ba:2a:85:f4:29:f0:97: 27:a5:e2:b8:2e:76:45:91:a0:23:d3:06:22:db:f7: 00:2d:f4:3a:9c:8f:88:18:51:60:34:c0:ef:66:fa: df:38:40:ec:52:80:6a:6b:03:90:b3:f6:ae:91:b9: b9:e4:23:db:3e:42:22:10:cd:1a:78:20:de:ae:cb: b6:92:96:1a:39:e5:b0:88:23:31:76:00:00:33:27: cd:1a:60:15:39:8d:2f:2e:60:a7:a9:90:c7:15:9b: 64:e7:85:b6:e6:8e:68:3a:c6:4a:f6:74:c1:e6:1f: 5a:6e:90:76:7c:02:c7:31:e5:2d:ed:c5:61:68:33: 4d:00:b1:3a:ee:39:af:62:86:40:6b:17:60:95:d1: cb:6d:c9:a9:19:89:be:ed:07:04:69:50:af:41:9c: bc:9b:2b:82:88:2c:d5:68:7c:f8:53:18:c1:56:08: 6d:69:bf:61:ad:21:8f:4e:ad:ef:81:e2:2a:76:70: aa:11:e2:01:7d:4b:ff:f8:74:50:a9:e0:4f:de:7d: 20:98:ef:38:ac:20:69:41:a7:34:2c:17:3e:65:5d: a4:6e:70:d5:e4:4c:89:c5:7c:d7:93:b4:10:bf:f5: 99:b6:df:e0:94:03:03:23:2a:6b:f4:a1:f0:0e:24: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:43:26:DC:A2:7D:8E:BB:9C:03:00:64:03:D9:BB:EE:BA:D2:11:DA X509v3 Authority Key Identifier: keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/LUMm3KJ9jrucAwBkA9m77rrSEdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.35.0/24 IPv6: 2a02:6c20:3::/48 2a02:6c20:807::/48 Signature Algorithm: sha256WithRSAEncryption e0:2b:35:92:ae:99:c7:8e:f9:5c:40:5e:13:ac:f0:a7:18:28: 6b:bb:da:7f:f3:40:cb:5e:a7:ac:69:c5:56:e6:9c:d1:bb:8e: a9:5a:54:2d:5c:76:e5:ad:35:16:03:c6:c3:33:ba:0c:83:a3: ce:eb:d7:db:02:59:e3:27:78:fb:87:71:bb:3d:b4:9b:8d:fe: 63:47:de:c9:06:ec:ad:07:02:12:bf:87:a8:73:8b:6e:16:4f: 9c:1d:00:d4:77:f9:86:cc:9b:f1:dc:74:6d:d0:d8:99:b4:d8: 23:33:e3:cf:d8:b1:f1:39:c3:c4:d2:77:8e:27:56:70:d3:32: 74:76:6d:18:f6:e7:3f:1e:c9:38:ee:92:55:3c:0c:9f:04:df: db:8e:a3:24:c9:a0:c3:4b:dd:73:57:58:e7:6d:30:d1:a0:b0: 97:db:77:d2:4a:10:d5:56:01:29:26:c0:60:74:1c:ae:f8:66: c7:fa:9f:d5:98:e2:03:43:b0:06:25:ba:49:c2:d3:69:ed:23: f8:29:e0:33:70:d6:91:ac:22:87:23:8d:ba:4b:d6:55:3f:eb: 02:d2:e8:85:53:e7:21:74:d8:b6:d6:27:d2:ec:51:df:97:73: 7d:51:be:36:2f:73:18:1c:ee:d5:2d:97:1c:9f:bf:bd:26:eb: df:c1:2c:32 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7pO7GIF4laUDR+KH11JOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjU5Yjc5MWM3YTExZDIzMmE5NWM3ZWYxNjkyODVjYWVh Njk1YmMwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDQzMjZkY2EyN2Q4ZWJiOWMwMzAwNjQwM2Q5YmJlZWJhZDIxMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWPBG1AqLLoqhfQp8JcnpeK4LnZF kaAj0wYi2/cALfQ6nI+IGFFgNMDvZvrfOEDsUoBqawOQs/aukbm55CPbPkIiEM0a eCDersu2kpYaOeWwiCMxdgAAMyfNGmAVOY0vLmCnqZDHFZtk54W25o5oOsZK9nTB 5h9abpB2fALHMeUt7cVhaDNNALE67jmvYoZAaxdgldHLbcmpGYm+7QcEaVCvQZy8 myuCiCzVaHz4UxjBVghtab9hrSGPTq3vgeIqdnCqEeIBfUv/+HRQqeBP3n0gmO84 rCBpQac0LBc+ZV2kbnDV5EyJxXzXk7QQv/WZtt/glAMDIypr9KHwDiTjqwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFC1DJtyifY67nAMAZAPZu+660hHaMB8GA1UdIwQY MBaAFO61m3kcehHSMqlcfvFpKFyuppW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JXYmVSeDZFZEl5cVZ4LThXa29YSzZtbGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lZmZmNzEtN2QxMS00YTFhLThhZDMt YTY3ZDhjN2VkN2NhLzEvTFVNbTNLSjlqcnVjQXdCa0E5bTc3cnJTRWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lZmZmNzEtN2QxMS00YTFhLThhZDMtYTY3ZDhjN2VkN2Nh LzEvN3JXYmVSeDZFZEl5cVZ4LThXa29YSzZtbGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAubMjMBgE AgACMBIDBwAqAmwgAAMDBwAqAmwgCAcwDQYJKoZIhvcNAQELBQADggEBAOArNZKu mceO+VxAXhOs8KcYKGu72n/zQMtep6xpxVbmnNG7jqlaVC1cduWtNRYDxsMzugyD o87r19sCWeMnePuHcbs9tJuN/mNH3skG7K0HAhK/h6hzi24WT5wdANR3+YbMm/Hc dG3Q2Jm02CMz48/YsfE5w8TSd44nVnDTMnR2bRj25z8eyTjuklU8DJ8E39uOoyTJ oMNL3XNXWOdtMNGgsJfbd9JKENVWASkmwGB0HK74Zsf6n9WY4gNDsAYluknC02nt I/gp4DNw1pGsIocjjbpL1lU/6wLS6IVT5yF02LbWJ9LsUd+Xc31RvjYvcxgc7tUt lxyfv70m69/BLDI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:26 2026 by rpki-client