This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/LMyd5AVVPstuPC5E7pVL_2qH79c.roa File: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (raw, json) Hash identifier: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA= Subject key identifier: 2C:CC:9D:E4:05:55:3E:CB:6E:3C:2E:44:EE:95:4B:FF:6A:87:EF:D7 Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Certificate serial: 019B7A5B7BBBDABBB7ED2E4C1B921820C357 Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/LMyd5AVVPstuPC5E7pVL_2qH79c.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209044 IP address blocks: 5.183.48.0/22 maxlen: 22 185.254.1.0/24 maxlen: 24 2a0e:d200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:bb:da:bb:b7:ed:2e:4c:1b:92:18:20:c3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ccc9de405553ecb6e3c2e44ee954bff6a87efd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:89:a5:68:00:ca:8c:55:7a:9a:c7:5a:9b: 23:38:14:00:bc:dd:b1:fa:f0:1e:71:bd:d8:5f:89: ea:a7:24:9a:6a:2b:4e:9d:39:4a:f8:c5:eb:a3:fe: 52:3b:b1:4b:b1:4f:4e:55:57:88:9c:f8:58:4a:aa: 21:b0:5d:d5:3e:c6:e1:c2:9a:8c:f0:cb:63:ed:5e: 36:93:60:74:14:c1:28:c2:7e:08:13:72:11:45:0c: 43:d7:a2:a8:ca:7e:6c:8b:ac:bc:7a:35:92:ba:da: fb:28:ed:fe:db:d2:2b:71:5b:06:d2:d6:0c:75:7d: 10:15:4a:85:ab:98:38:f7:3c:06:e5:36:6a:b3:3e: 9e:e5:60:bd:07:a6:21:e8:78:51:ce:d2:61:c3:69: 7b:78:33:7c:35:5d:05:2b:b6:6a:62:09:b6:8e:2a: 20:10:98:59:a6:f8:a8:77:7f:c0:42:64:5e:f6:c4: 55:7c:72:f6:ae:a7:98:b3:7c:4f:39:3d:eb:cd:55: f6:ef:41:5b:ab:13:b9:12:8f:a9:cb:9e:79:eb:34: b4:79:eb:3a:39:41:d4:f4:21:0a:2b:c0:cb:87:98: af:54:c6:81:73:72:ad:9e:4d:f2:b1:33:fd:76:9f: 98:01:53:04:22:47:8c:bc:0e:5f:48:f8:13:ef:5a: 3f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CC:9D:E4:05:55:3E:CB:6E:3C:2E:44:EE:95:4B:FF:6A:87:EF:D7 X509v3 Authority Key Identifier: keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/LMyd5AVVPstuPC5E7pVL_2qH79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.48.0/22 185.254.1.0/24 IPv6: 2a0e:d200::/29 Signature Algorithm: sha256WithRSAEncryption 7c:e9:09:4a:04:86:71:d5:a0:d8:b3:39:e5:65:54:58:d7:f9: 69:04:0d:ed:0f:9f:de:c5:82:3a:18:7b:29:05:c6:e4:36:85: b5:d9:a0:fa:0c:94:3b:e1:2f:81:c3:19:9c:65:ea:15:4c:a8: 8f:a6:b3:70:c7:4a:dd:b7:c7:c5:75:c7:7c:fb:4b:b1:80:9a: db:71:46:6c:57:1d:28:5e:4a:39:8f:33:6c:af:c6:1e:ac:14: 64:4e:e8:88:54:1b:90:70:ff:f4:14:66:87:a2:c3:68:50:3d: ce:2b:b5:ab:c0:c7:c3:96:62:6a:9a:ee:24:8f:45:a9:58:6a: 48:3f:f3:5d:b5:5d:18:79:c0:07:51:65:3e:65:fe:e9:41:1e: f2:d5:dd:30:00:b3:14:ff:b4:17:07:c0:90:94:4e:8f:ea:30: fe:91:b1:fc:90:99:52:c1:42:24:83:18:62:5b:2b:ef:fc:6b: 17:43:be:c9:1b:26:17:91:04:60:8b:2d:58:4b:6f:4c:d3:7d: d2:ce:df:70:11:6a:ca:d4:46:25:98:af:41:d9:d7:05:64:71: 24:43:1e:02:16:93:7e:52:98:85:1f:ef:da:a3:8c:8d:e5:d8: d7:93:93:d7:63:a8:b2:b9:a8:08:f0:85:d6:1b:e2:cf:94:19: 94:ca:56:24 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W3u72ru37S5MG5IYIMNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj NDQ5YWYwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2NjOWRlNDA1NTUzZWNiNmUzYzJlNDRlZTk1NGJmZjZhODdlZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleyJpWgAyoxVeprHWpsjOBQAvN2x +vAecb3YX4nqpySaaitOnTlK+MXro/5SO7FLsU9OVVeInPhYSqohsF3VPsbhwpqM 8Mtj7V42k2B0FMEown4IE3IRRQxD16Koyn5si6y8ejWSutr7KO3+29IrcVsG0tYM dX0QFUqFq5g49zwG5TZqsz6e5WC9B6Yh6HhRztJhw2l7eDN8NV0FK7ZqYgm2jiog EJhZpviod3/AQmRe9sRVfHL2rqeYs3xPOT3rzVX270FbqxO5Eo+py5556zS0ees6 OUHU9CEKK8DLh5ivVMaBc3Ktnk3ysTP9dp+YAVMEIkeMvA5fSPgT71o/4QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCzMneQFVT7LbjwuRO6VS/9qh+/XMB8GA1UdIwQY MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt YTViMmQwOWUwNWNmLzEvTE15ZDVBVlZQc3R1UEM1RTdwVkxfMnFINzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBbcwAwQA uf4BMA0EAgACMAcDBQMqDtIAMA0GCSqGSIb3DQEBCwUAA4IBAQB86QlKBIZx1aDY sznlZVRY1/lpBA3tD5/exYI6GHspBcbkNoW12aD6DJQ74S+BwxmcZeoVTKiPprNw x0rdt8fFdcd8+0uxgJrbcUZsVx0oXko5jzNsr8YerBRkTuiIVBuQcP/0FGaHosNo UD3OK7WrwMfDlmJqmu4kj0WpWGpIP/NdtV0YecAHUWU+Zf7pQR7y1d0wALMU/7QX B8CQlE6P6jD+kbH8kJlSwUIkgxhiWyvv/GsXQ77JGyYXkQRgiy1YS29M033Szt9w EWrK1EYlmK9B2dcFZHEkQx4CFpN+UpiFH+/ao4yN5djXk5PXY6iyuagI8IXWG+LP lBmUylYk -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:14 2026 by rpki-client