This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/lmrDVLC3MX4apmwUsIhhFXzT4oE.roa File: lmrDVLC3MX4apmwUsIhhFXzT4oE.roa (raw, json) Hash identifier: GnyjO/iKh9nOd9g6a/IX/ILurh3PEjUTOuyoAPcFtSE= Subject key identifier: 96:6A:C3:54:B0:B7:31:7E:1A:A6:6C:14:B0:88:61:15:7C:D3:E2:81 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B79108B794DC3583C1027ECAEC540B6D5 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/lmrDVLC3MX4apmwUsIhhFXzT4oE.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 194.163.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8b:79:4d:c3:58:3c:10:27:ec:ae:c5:40:b6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966ac354b0b7317e1aa66c14b08861157cd3e281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:a5:63:b5:63:08:0d:6a:60:7a:ab:f9:78: b9:4f:a0:43:2d:67:09:b6:a9:f7:a2:8b:1b:23:59: a4:b0:62:f9:a2:87:ca:dd:15:c3:da:7f:46:e1:c8: 68:68:61:55:a9:f5:63:e1:4b:1d:48:5e:2e:8e:77: 22:3f:56:a8:b8:59:dc:40:8a:e1:59:0e:62:9f:e7: b5:30:50:82:1b:77:61:72:ba:75:c1:a9:14:79:1a: 02:da:82:c7:48:93:7f:86:31:af:83:67:99:2a:b0: 90:6c:1c:6a:8a:3f:2f:f8:5f:66:6d:ed:03:b6:8d: 46:92:37:5e:72:b9:7f:4a:0f:45:b6:40:56:3c:11: df:d3:57:45:d4:f0:ab:74:89:37:5a:1f:e1:71:92: 5e:ca:e4:06:aa:86:47:42:c2:49:0a:76:d0:de:20: ce:6a:5a:32:0b:88:da:49:f2:69:ce:43:3b:1b:a3: a6:c0:46:00:0a:66:2b:16:b3:0f:43:89:3c:f0:87: 7d:d6:76:0e:9f:e4:7b:d4:af:97:22:32:a8:19:0d: d2:76:af:6d:bb:85:f0:41:52:26:f7:0e:dd:12:f5: d6:f5:3e:ae:46:36:1d:42:0c:7f:e9:74:42:60:2b: b2:7c:21:1f:d6:c8:5f:84:d8:4a:13:30:31:13:a1: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:C3:54:B0:B7:31:7E:1A:A6:6C:14:B0:88:61:15:7C:D3:E2:81 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/lmrDVLC3MX4apmwUsIhhFXzT4oE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.80.0/22 Signature Algorithm: sha256WithRSAEncryption a0:f8:80:b0:c9:1f:f5:8d:29:f8:82:56:48:40:f8:f0:73:86: 2e:b8:3c:67:ab:15:dc:ab:85:c1:ab:36:55:09:39:03:b0:c5: 88:48:d0:36:de:ef:d1:3e:98:48:ef:73:73:2c:9f:a5:53:44: e7:e1:44:49:50:8d:f7:5b:d1:d8:e7:e7:84:ba:b2:4a:cf:ea: 87:46:95:8a:9b:19:52:de:a5:99:c9:6c:a0:53:12:4e:2c:ab: b2:16:70:5b:b6:21:1a:58:4f:1e:6d:21:9c:14:ab:3b:03:5e: 34:6f:c3:96:9d:5b:37:ef:56:2c:cf:b8:b4:a3:7e:29:62:e8: 9c:df:86:5c:7c:a2:20:f4:cf:f8:bb:63:ec:89:89:06:18:55: 55:26:a2:d3:f6:fb:d7:c0:9b:41:d3:2f:e7:cf:9d:4c:83:f7: 16:9f:82:4b:b9:38:7f:1d:d8:82:0c:7d:fb:d9:1a:bb:a8:e7: 2a:1a:c2:c1:11:54:2e:41:ac:e2:41:34:f0:ef:13:e0:fc:43: b7:c6:d4:7b:60:0a:dd:b1:02:a3:f0:30:69:7a:67:dd:aa:cd: 96:98:f5:73:6a:96:b8:5c:a9:59:6b:12:61:50:df:ea:bf:0c: 48:79:7a:9d:0f:39:94:14:26:0e:a7:99:66:cc:b6:b5:14:34: 06:74:68:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIt5TcNYPBAn7K7FQLbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZhYzM1NGIwYjczMTdlMWFhNjZjMTRiMDg4NjExNTdjZDNlMjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2lY7VjCA1qYHqr+Xi5T6BDLWcJ tqn3oosbI1mksGL5oofK3RXD2n9G4choaGFVqfVj4UsdSF4ujnciP1aouFncQIrh WQ5in+e1MFCCG3dhcrp1wakUeRoC2oLHSJN/hjGvg2eZKrCQbBxqij8v+F9mbe0D to1Gkjdecrl/Sg9FtkBWPBHf01dF1PCrdIk3Wh/hcZJeyuQGqoZHQsJJCnbQ3iDO aloyC4jaSfJpzkM7G6OmwEYACmYrFrMPQ4k88Id91nYOn+R71K+XIjKoGQ3Sdq9t u4XwQVIm9w7dEvXW9T6uRjYdQgx/6XRCYCuyfCEf1shfhNhKEzAxE6FMJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJZqw1SwtzF+GqZsFLCIYRV80+KBMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvbG1yRFZMQzNNWDRhcG13VXNJaGhGWHpUNG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwqNQMA0G CSqGSIb3DQEBCwUAA4IBAQCg+ICwyR/1jSn4glZIQPjwc4YuuDxnqxXcq4XBqzZV CTkDsMWISNA23u/RPphI73NzLJ+lU0Tn4URJUI33W9HY5+eEurJKz+qHRpWKmxlS 3qWZyWygUxJOLKuyFnBbtiEaWE8ebSGcFKs7A140b8OWnVs371Ysz7i0o34pYuic 34ZcfKIg9M/4u2PsiYkGGFVVJqLT9vvXwJtB0y/nz51Mg/cWn4JLuTh/HdiCDH37 2Rq7qOcqGsLBEVQuQaziQTTw7xPg/EO3xtR7YArdsQKj8DBpemfdqs2WmPVzapa4 XKlZaxJhUN/qvwxIeXqdDzmUFCYOp5lmzLa1FDQGdGgM -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:46 2026 by rpki-client