This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Lmpnm_eG7Wa2Tm3bZcIpGqSGxCM.roa File: Lmpnm_eG7Wa2Tm3bZcIpGqSGxCM.roa (raw, json) Hash identifier: Ob0cJMJ7DHSxJcoetvlMoGhvqMBVuD38/ibQA4827fo= Subject key identifier: 2E:6A:67:9B:F7:86:ED:66:B6:4E:6D:DB:65:C2:29:1A:A4:86:C4:23 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AEDF2E7971AE8E7B7A545D3F324450394 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Lmpnm_eG7Wa2Tm3bZcIpGqSGxCM.roa Signing time: Fri 05 Dec 2025 09:58:30 +0000 ROA not before: Fri 05 Dec 2025 09:58:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209874 IP address blocks: 5.83.150.0/24 maxlen: 24 5.175.179.0/24 maxlen: 24 5.231.25.0/24 maxlen: 24 5.231.82.0/24 maxlen: 24 5.231.96.0/24 maxlen: 24 5.231.244.0/24 maxlen: 24 5.231.247.0/24 maxlen: 24 77.90.39.0/24 maxlen: 24 87.239.129.0/24 maxlen: 24 89.106.77.0/24 maxlen: 24 94.103.167.0/24 maxlen: 24 94.249.150.0/24 maxlen: 24 94.249.153.0/24 maxlen: 24 94.249.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:f2:e7:97:1a:e8:e7:b7:a5:45:d3:f3:24:45:03:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 5 09:58:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e6a679bf786ed66b64e6ddb65c2291aa486c423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:68:60:89:f8:46:9e:cc:9d:e4:4e:39:dd: ed:62:80:21:f3:2a:2e:ca:f1:7e:13:62:0d:68:6d: 73:4e:11:88:a2:fe:24:38:88:72:8b:c7:92:7e:9b: f4:67:fb:94:84:99:df:bc:fe:c6:83:32:b5:4a:94: e9:11:f8:5e:3a:39:c5:ed:66:88:87:bb:cf:90:33: 58:50:38:d8:7e:cf:a6:ba:4c:aa:ad:58:c2:48:b1: c0:46:b5:d3:e8:26:fd:1f:1b:c9:e1:20:f0:84:dc: 1d:ed:1a:9b:fc:d8:78:38:4c:42:cd:d3:7b:07:a9: 1e:85:aa:36:55:6b:d5:15:c0:67:02:38:07:ff:ed: d2:3b:16:db:31:75:1b:50:56:75:bb:b4:f3:02:f5: 74:96:da:41:56:47:fd:c8:d4:08:00:07:18:4b:82: 76:66:1a:e4:a3:34:73:28:3e:f5:ed:9a:b7:72:27: 81:f6:2c:23:c9:fa:1f:c9:68:a7:8c:b5:e1:7e:8c: e2:85:51:68:0a:b0:53:73:07:93:d2:aa:0b:7b:49: 2a:65:81:52:a1:ce:e5:08:ee:a2:30:65:9f:4f:ee: 95:19:9a:df:04:bc:a4:dd:44:6a:8c:80:e8:0a:9d: 1f:c2:3d:a6:63:cb:58:13:a8:cd:93:d4:86:04:91: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:67:9B:F7:86:ED:66:B6:4E:6D:DB:65:C2:29:1A:A4:86:C4:23 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Lmpnm_eG7Wa2Tm3bZcIpGqSGxCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.150.0/24 5.175.179.0/24 5.231.25.0/24 5.231.82.0/24 5.231.96.0/24 5.231.244.0/24 5.231.247.0/24 77.90.39.0/24 87.239.129.0/24 89.106.77.0/24 94.103.167.0/24 94.249.150.0/24 94.249.153.0/24 94.249.197.0/24 Signature Algorithm: sha256WithRSAEncryption a9:25:89:7a:26:9d:67:12:43:1c:7b:22:fa:07:41:03:58:44: de:52:06:ad:09:36:05:af:93:57:6b:f1:3a:b7:b5:35:5a:f0: 46:c3:f7:9c:ac:1b:0d:89:56:8f:df:ec:44:52:73:cc:da:d4: 59:25:8d:5d:a0:70:fd:35:cc:e0:80:81:f9:13:bf:14:44:7f: db:2d:e9:ea:5d:73:be:da:66:0d:be:1e:3c:f2:0e:d7:f9:2f: 04:b6:fe:6f:4a:bd:21:46:cb:2f:04:b9:09:c1:13:aa:d4:82: b9:83:d3:b4:9f:6e:74:1d:cb:af:71:bd:5b:4e:de:8a:32:c8: 8c:a1:9c:70:fc:92:05:ca:fe:b3:4a:6c:b1:63:28:bf:a2:d9: 0d:bb:73:9f:b3:72:18:92:7d:bf:9d:aa:5f:c3:a0:3a:11:58: 7f:f1:41:d6:b1:6e:7f:59:4e:01:98:ba:2c:54:50:98:51:02: 47:e7:05:b5:74:20:1f:12:ec:78:54:63:a3:cc:23:e5:0e:d3: 95:4e:f0:2b:98:fd:dd:56:88:18:c6:19:53:43:75:e4:d2:fa: 83:55:1d:fc:d4:8e:e4:b1:82:1f:3e:70:b3:cc:74:e2:65:92: d4:8b:6a:3c:0f:81:ed:ac:0c:39:13:65:4a:eb:05:74:c7:bf: fb:be:d4:9d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrt8ueXGujnt6VF0/MkRQOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA1MDk1ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTZhNjc5YmY3ODZlZDY2YjY0ZTZkZGI2NWMyMjkxYWE0ODZjNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVhoYIn4Rp7MneROOd3tYoAh8you yvF+E2INaG1zThGIov4kOIhyi8eSfpv0Z/uUhJnfvP7GgzK1SpTpEfheOjnF7WaI h7vPkDNYUDjYfs+mukyqrVjCSLHARrXT6Cb9HxvJ4SDwhNwd7Rqb/Nh4OExCzdN7 B6kehao2VWvVFcBnAjgH/+3SOxbbMXUbUFZ1u7TzAvV0ltpBVkf9yNQIAAcYS4J2 ZhrkozRzKD717Zq3cieB9iwjyfofyWinjLXhfozihVFoCrBTcweT0qoLe0kqZYFS oc7lCO6iMGWfT+6VGZrfBLyk3URqjIDoCp0fwj2mY8tYE6jNk9SGBJEIlQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFC5qZ5v3hu1mtk5t22XCKRqkhsQjMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTG1wbm1fZUc3V2EyVG0zYlpjSXBHcVNHeENNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQABVOWAwQA Ba+zAwQABecZAwQABedSAwQABedgAwQABef0AwQABef3AwQATVonAwQAV++BAwQA WWpNAwQAXmenAwQAXvmWAwQAXvmZAwQAXvnFMA0GCSqGSIb3DQEBCwUAA4IBAQCp JYl6Jp1nEkMceyL6B0EDWETeUgatCTYFr5NXa/E6t7U1WvBGw/ecrBsNiVaP3+xE UnPM2tRZJY1doHD9NczggIH5E78URH/bLenqXXO+2mYNvh488g7X+S8Etv5vSr0h RssvBLkJwROq1IK5g9O0n250Hcuvcb1bTt6KMsiMoZxw/JIFyv6zSmyxYyi/otkN u3Ofs3IYkn2/napfw6A6EVh/8UHWsW5/WU4BmLosVFCYUQJH5wW1dCAfEux4VGOj zCPlDtOVTvArmP3dVogYxhlTQ3Xk0vqDVR381I7ksYIfPnCzzHTiZZLUi2o8D4Ht rAw5E2VK6wV0x7/7vtSd -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:58 2025 by rpki-client