This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lmfc-Kns2L0qB5qYz7iWWC8ROFk.roa File: Lmfc-Kns2L0qB5qYz7iWWC8ROFk.roa (raw, json) Hash identifier: FQpyR+mK0NK+Uv3SEukoRJ836dJBGs6LCgzumsIkYLI= Subject key identifier: 2E:67:DC:F8:A9:EC:D8:BD:2A:07:9A:98:CF:B8:96:58:2F:11:38:59 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3941631C61E4AC6EA2CB267ADB3A7E Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lmfc-Kns2L0qB5qYz7iWWC8ROFk.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215672 IP address blocks: 163.5.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:41:63:1c:61:e4:ac:6e:a2:cb:26:7a:db:3a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e67dcf8a9ecd8bd2a079a98cfb896582f113859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:a0:3c:0b:7f:bd:df:b8:bf:fe:c1:13:81: 2d:b1:72:fc:e8:6a:ed:22:a0:b2:2e:64:b6:dd:be: cc:9d:69:ab:a3:ea:f6:cf:e0:41:f3:63:08:db:63: 82:d4:2c:23:c2:d3:72:5e:5d:1b:78:ae:fe:aa:d6: 4e:99:77:5a:cb:e5:7e:e9:30:0f:0e:0b:e1:ea:56: e7:a1:f5:ce:68:f0:54:a6:b2:31:30:c3:8d:99:30: a6:d5:78:b4:20:c0:d3:bf:aa:9c:0b:c1:64:12:1f: bc:57:73:58:98:24:8b:71:7b:60:fb:3e:e8:5a:c2: 3d:2b:64:ae:d3:35:32:54:a0:bd:3a:09:5e:35:bb: d0:ad:c4:bd:d3:d7:d3:26:77:38:0a:27:6c:bf:90: f5:3b:b1:52:b6:df:82:6c:17:71:46:4f:a1:76:08: 09:e7:b6:b4:15:e5:6a:c5:63:3d:93:28:87:3b:a1: 7b:f9:53:65:ff:d8:9e:55:c3:f9:fc:bd:aa:4b:71: 58:68:af:14:ba:2b:0c:aa:58:af:9b:c6:2f:c1:d3: 16:e7:00:77:7d:d9:f8:55:a7:0c:85:b5:e9:3b:98: 26:fe:60:a3:a6:41:5c:50:5a:b8:89:ae:92:59:35: 8c:70:e7:a5:dc:54:bc:d1:f0:5f:43:c7:0b:ca:96: f0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:67:DC:F8:A9:EC:D8:BD:2A:07:9A:98:CF:B8:96:58:2F:11:38:59 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lmfc-Kns2L0qB5qYz7iWWC8ROFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.148.0/24 Signature Algorithm: sha256WithRSAEncryption 08:6d:9c:30:a0:08:97:6f:29:d5:c7:4a:e0:3f:29:87:0c:ce: b7:48:8d:fe:f7:d9:9b:df:f9:79:13:9b:87:ee:8f:69:a6:a4: e0:93:2f:2f:f8:20:ae:94:26:7c:7d:70:43:c8:05:4a:11:fb: f5:83:da:53:ce:db:32:5c:c1:9b:e3:ab:77:fb:48:36:a6:42: cb:93:3f:3a:d6:27:59:07:16:f0:a7:b0:34:7f:61:53:bf:56: 12:1d:d2:01:37:06:22:e8:28:3b:57:43:7f:d6:5c:de:d7:2a: d3:50:ee:84:f9:8a:a7:54:6a:a7:8a:78:19:76:05:18:5b:76: a0:13:3b:07:48:bc:26:0c:dc:18:fb:0c:ff:4f:58:5d:f5:3a: 18:25:cf:2b:ce:9f:b0:37:38:5c:1d:b1:ec:4f:a3:bc:5a:c3: 50:e7:6e:ac:e7:96:8e:6f:bb:fe:f5:a9:d6:e2:b1:58:9f:43: b3:04:92:da:eb:da:bd:a4:87:48:66:fa:5c:0f:e8:e6:78:34: 21:e2:93:a5:b7:64:70:27:38:a7:79:02:ec:70:e4:e6:d2:cf: 04:b2:f8:37:4a:8a:9e:a0:9a:05:e8:dd:b5:0c:d9:c3:46:a2: 24:fc:f5:b0:8c:af:f5:71:1c:33:9c:00:1a:39:a8:a4:5a:e8: 35:21:5f:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OUFjHGHkrG6iyyZ62zp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTY3ZGNmOGE5ZWNkOGJkMmEwNzlhOThjZmI4OTY1ODJmMTEzODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfSgPAt/vd+4v/7BE4EtsXL86Grt IqCyLmS23b7MnWmro+r2z+BB82MI22OC1CwjwtNyXl0beK7+qtZOmXday+V+6TAP Dgvh6lbnofXOaPBUprIxMMONmTCm1Xi0IMDTv6qcC8FkEh+8V3NYmCSLcXtg+z7o WsI9K2Su0zUyVKC9OgleNbvQrcS909fTJnc4Cidsv5D1O7FStt+CbBdxRk+hdggJ 57a0FeVqxWM9kyiHO6F7+VNl/9ieVcP5/L2qS3FYaK8UuisMqlivm8YvwdMW5wB3 fdn4VacMhbXpO5gm/mCjpkFcUFq4ia6SWTWMcOel3FS80fBfQ8cLypbw3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5n3Pip7Ni9KgeamM+4llgvEThZMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTG1mYy1LbnMyTDBxQjVxWXo3aVdXQzhST0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWUMA0G CSqGSIb3DQEBCwUAA4IBAQAIbZwwoAiXbynVx0rgPymHDM63SI3+99mb3/l5E5uH 7o9ppqTgky8v+CCulCZ8fXBDyAVKEfv1g9pTztsyXMGb46t3+0g2pkLLkz861idZ Bxbwp7A0f2FTv1YSHdIBNwYi6Cg7V0N/1lze1yrTUO6E+YqnVGqningZdgUYW3ag EzsHSLwmDNwY+wz/T1hd9ToYJc8rzp+wNzhcHbHsT6O8WsNQ526s55aOb7v+9anW 4rFYn0OzBJLa69q9pIdIZvpcD+jmeDQh4pOlt2RwJzineQLscOTm0s8Esvg3Soqe oJoF6N21DNnDRqIk/PWwjK/1cRwznAAaOaikWug1IV9Y -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:37 2026 by rpki-client