This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/LMMdVEDfefO9DMTodcqsmRU-LHM.roa File: LMMdVEDfefO9DMTodcqsmRU-LHM.roa (raw, json) Hash identifier: hRe5cV7EwZ0Fcxo17tUpXTTj4tA391QQdgKYjlbkJTk= Subject key identifier: 2C:C3:1D:54:40:DF:79:F3:BD:0C:C4:E8:75:CA:AC:99:15:3E:2C:73 Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399 Certificate serial: 019B7E38DBEDF7B6A597C4583AE456070770 Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/LMMdVEDfefO9DMTodcqsmRU-LHM.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209240 IP address blocks: 92.119.236.0/22 maxlen: 24 92.119.236.0/24 maxlen: 24 92.119.237.0/24 maxlen: 24 92.119.238.0/24 maxlen: 24 92.119.239.0/24 maxlen: 24 2a09:bc40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:db:ed:f7:b6:a5:97:c4:58:3a:e4:56:07:07:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399 Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc31d5440df79f3bd0cc4e875caac99153e2c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:fb:7c:81:8a:8d:7a:73:ea:e3:14:80:e4: 56:37:29:07:3d:6f:aa:60:33:52:40:62:35:b5:db: 03:4d:5d:71:5a:da:29:45:38:43:d9:16:1a:85:03: 34:65:c1:90:f6:24:e4:02:e7:fb:e9:8f:12:9c:94: 56:0d:d8:0c:fb:50:54:64:5c:55:47:8f:9d:59:12: b0:31:b5:f8:c3:28:21:b2:76:68:36:89:b2:e5:79: 62:63:18:64:89:b2:09:14:17:4c:fb:83:76:87:ba: 90:43:a9:a2:50:06:7e:fc:a2:52:ae:f0:3d:60:0e: cd:4e:20:6c:f9:70:1e:dc:fa:94:f3:82:f7:69:a8: 37:9b:a1:5d:f2:c4:4b:09:b1:0f:f2:ed:ac:1c:c7: a6:7d:1a:9f:d4:97:e2:8d:87:4f:60:2b:0c:fa:fe: 12:0d:cd:a2:b9:53:34:4f:11:b0:17:f4:d2:11:14: e9:8e:bd:30:1b:06:cc:a2:ab:3d:6a:a7:3c:d1:7f: 01:88:b8:e2:00:99:95:45:96:8e:ef:b9:7d:00:dd: a8:ef:28:40:24:9e:d8:aa:ea:a4:42:ff:61:95:fb: 7b:2f:47:95:52:57:94:9d:18:89:e6:62:8e:fe:b3: ed:75:e3:38:f7:11:28:54:82:eb:5a:39:22:c1:b9: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:1D:54:40:DF:79:F3:BD:0C:C4:E8:75:CA:AC:99:15:3E:2C:73 X509v3 Authority Key Identifier: keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/LMMdVEDfefO9DMTodcqsmRU-LHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.236.0/22 IPv6: 2a09:bc40::/29 Signature Algorithm: sha256WithRSAEncryption 3d:16:2a:8d:d1:11:ac:c2:32:61:f7:c2:13:15:17:a0:11:1e: 18:b5:7f:3e:6e:d0:c6:59:90:af:22:25:37:c4:01:0c:c9:dd: 00:12:09:7e:f6:37:92:8d:7a:99:cd:38:8f:87:9e:f7:44:7c: 29:6e:81:68:5c:87:78:b5:0d:82:0b:4e:31:b5:8d:98:51:e3: 26:ef:bf:ab:43:44:ed:a7:8a:78:d6:3b:59:18:ef:38:95:e7: b2:ce:36:84:0c:25:38:94:42:b6:31:ae:d2:6b:e4:1b:c9:02: 72:7e:e9:0b:2a:af:6f:ad:ef:6c:9c:b6:5e:af:55:03:85:96: b6:b8:18:1d:1f:fd:4c:ac:ab:1a:68:11:30:bb:12:a3:5f:e4: 1a:e8:98:40:67:3e:03:64:b9:15:10:d9:06:5f:f3:d4:e9:70: a2:21:aa:8e:4e:a0:f9:31:c2:55:bf:81:e0:d3:96:fc:19:5f: 92:ce:71:ac:eb:cf:1b:bf:32:af:74:01:e7:34:f8:bf:97:bc: 88:22:43:cd:a3:6d:6d:5a:b9:f9:2b:55:0c:4e:de:7c:9f:94: ec:ad:53:bc:c4:fe:3d:d3:85:77:b3:9b:ef:51:e4:60:f4:4f: 93:97:0c:22:f5:e2:0a:31:74:d4:10:0c:f2:10:4c:57:34:6e: 68:ba:09:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ONvt97all8RYOuRWBwdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzc3MzEyZTBkMmNlYzg0NWEwNDYxMzg0NWY4YTFiZTI2 M2MzOTkwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MzMWQ1NDQwZGY3OWYzYmQwY2M0ZTg3NWNhYWM5OTE1M2UyYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8T7fIGKjXpz6uMUgORWNykHPW+q YDNSQGI1tdsDTV1xWtopRThD2RYahQM0ZcGQ9iTkAuf76Y8SnJRWDdgM+1BUZFxV R4+dWRKwMbX4wyghsnZoNomy5XliYxhkibIJFBdM+4N2h7qQQ6miUAZ+/KJSrvA9 YA7NTiBs+XAe3PqU84L3aag3m6Fd8sRLCbEP8u2sHMemfRqf1JfijYdPYCsM+v4S Dc2iuVM0TxGwF/TSERTpjr0wGwbMoqs9aqc80X8BiLjiAJmVRZaO77l9AN2o7yhA JJ7YquqkQv9hlft7L0eVUleUnRiJ5mKO/rPtdeM49xEoVILrWjkiwbkNfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCzDHVRA33nzvQzE6HXKrJkVPixzMB8GA1UdIwQY MBaAFFPHcxLg0s7IRaBGE4RfihviY8OZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjct YzliZjU1ZDlkMWJhLzEvTE1NZFZFRGZlZk85RE1Ub2RjcXNtUlUtTEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjctYzliZjU1ZDlkMWJh LzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXHfsMA0E AgACMAcDBQMqCbxAMA0GCSqGSIb3DQEBCwUAA4IBAQA9FiqN0RGswjJh98ITFReg ER4YtX8+btDGWZCvIiU3xAEMyd0AEgl+9jeSjXqZzTiPh573RHwpboFoXId4tQ2C C04xtY2YUeMm77+rQ0Ttp4p41jtZGO84leeyzjaEDCU4lEK2Ma7Sa+QbyQJyfukL Kq9vre9snLZer1UDhZa2uBgdH/1MrKsaaBEwuxKjX+Qa6JhAZz4DZLkVENkGX/PU 6XCiIaqOTqD5McJVv4Hg05b8GV+SznGs688bvzKvdAHnNPi/l7yIIkPNo21tWrn5 K1UMTt58n5TsrVO8xP4904V3s5vvUeRg9E+Tlwwi9eIKMXTUEAzyEExXNG5ouglD -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:27 2026 by rpki-client