This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/LmG7gyHrKbHSYXUsTpj5tV8fAbg.roa File: LmG7gyHrKbHSYXUsTpj5tV8fAbg.roa (raw, json) Hash identifier: iw4A1w3iXHi4RUi1v8jlo/D3rJjhr7T+jBccrHkOWO8= Subject key identifier: 2E:61:BB:83:21:EB:29:B1:D2:61:75:2C:4E:98:F9:B5:5F:1F:01:B8 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019BB69AC26C16C25CC5A6B8672DC27BCD01 Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/LmG7gyHrKbHSYXUsTpj5tV8fAbg.roa Signing time: Tue 13 Jan 2026 09:05:54 +0000 ROA not before: Tue 13 Jan 2026 09:05:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.205.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:9a:c2:6c:16:c2:5c:c5:a6:b8:67:2d:c2:7b:cd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Jan 13 09:05:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e61bb8321eb29b1d261752c4e98f9b55f1f01b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:f3:27:f0:d2:f9:2b:1e:02:2f:fc:f4:c0: 15:0e:e2:47:3a:69:93:6a:3e:bf:25:c8:82:12:b0: c3:76:66:aa:ac:84:69:75:83:4f:f7:1c:23:60:56: d6:3e:f0:d5:16:79:0b:f0:ec:42:a1:42:99:d3:51: 27:5f:01:c7:a8:97:b1:3d:34:86:2d:11:d8:35:86: 3c:55:a9:80:ec:e2:cb:0e:c0:e0:0e:2c:59:9f:16: 93:9a:ee:bb:91:14:a5:ed:2b:27:56:a4:1e:2f:5f: 53:16:f9:32:ae:55:a7:47:61:d9:3a:1d:b9:96:36: 48:dd:d6:8f:22:53:4a:87:a7:2d:c9:41:b8:77:1e: 80:9c:6f:fe:7e:29:31:fd:78:d6:ab:3a:f3:7f:51: a4:56:ed:a7:0e:21:b4:b1:0d:a9:2d:48:61:cf:02: 73:df:1d:70:72:7c:13:3f:c9:1a:51:41:c1:42:ca: b6:e1:bb:13:9c:52:80:a2:f7:6d:95:55:19:94:e1: 37:cf:22:8a:57:1d:01:14:09:0e:ef:67:16:45:d7: e2:22:44:66:e5:36:43:40:19:11:f2:29:e7:01:9b: 33:60:a8:76:c8:ca:ad:8f:00:5c:b6:f8:83:e6:a3: 2f:b4:ed:8b:14:e1:43:f9:0e:9a:58:6a:be:6e:71: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:BB:83:21:EB:29:B1:D2:61:75:2C:4E:98:F9:B5:5F:1F:01:B8 X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/LmG7gyHrKbHSYXUsTpj5tV8fAbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.35.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:5c:93:4d:7a:db:0c:bd:38:77:c9:07:71:75:7d:85:aa:34: 2f:97:f6:43:c6:3d:58:2c:22:e0:cf:a0:95:04:bb:5a:26:54: 47:67:8b:11:8b:b6:09:c1:7e:28:fb:e3:13:7f:ad:5c:12:8b: 44:2c:b0:8f:32:59:43:6f:49:17:ce:6b:fc:78:a3:8d:52:60: cf:fd:db:4f:4d:a5:46:d2:60:54:22:0c:dd:6d:9b:3f:ad:8f: 67:65:00:eb:d6:71:63:d0:bc:c5:12:16:53:4f:5a:e0:b8:ff: 96:65:6c:b0:fd:54:56:68:2a:c2:bb:73:e1:39:b0:2a:19:c4: 36:76:f3:20:cb:dc:42:a9:31:37:0e:b6:af:52:50:00:df:b6: b5:92:11:1d:9b:2b:b0:2b:64:bf:b4:cf:c8:b1:5d:79:5b:2d: b1:be:0e:52:a1:15:dc:97:04:c5:96:7a:23:4b:49:16:64:f6: 71:12:17:31:85:07:16:fe:59:f5:e9:a0:56:c1:11:45:ea:6c: d3:f0:19:5e:5f:09:a4:70:78:89:ea:71:48:2b:cc:09:f4:73: 7e:f6:d3:2e:60:80:39:96:2a:93:79:33:11:2a:0d:50:40:a0: 82:e9:49:e7:86:9b:0d:4a:b7:d6:02:43:23:2a:9b:95:98:49: 3b:c0:50:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2msJsFsJcxaa4Zy3Ce80BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjYwMTEzMDkwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTYxYmI4MzIxZWIyOWIxZDI2MTc1MmM0ZTk4ZjliNTVmMWYwMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp17zJ/DS+SseAi/89MAVDuJHOmmT aj6/JciCErDDdmaqrIRpdYNP9xwjYFbWPvDVFnkL8OxCoUKZ01EnXwHHqJexPTSG LRHYNYY8VamA7OLLDsDgDixZnxaTmu67kRSl7SsnVqQeL19TFvkyrlWnR2HZOh25 ljZI3daPIlNKh6ctyUG4dx6AnG/+fikx/XjWqzrzf1GkVu2nDiG0sQ2pLUhhzwJz 3x1wcnwTP8kaUUHBQsq24bsTnFKAovdtlVUZlOE3zyKKVx0BFAkO72cWRdfiIkRm 5TZDQBkR8innAZszYKh2yMqtjwBctviD5qMvtO2LFOFD+Q6aWGq+bnGZyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5hu4Mh6ymx0mF1LE6Y+bVfHwG4MB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvTG1HN2d5SHJLYkhTWVhVc1RwajV0VjhmQWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0jMA0G CSqGSIb3DQEBCwUAA4IBAQArXJNNetsMvTh3yQdxdX2FqjQvl/ZDxj1YLCLgz6CV BLtaJlRHZ4sRi7YJwX4o++MTf61cEotELLCPMllDb0kXzmv8eKONUmDP/dtPTaVG 0mBUIgzdbZs/rY9nZQDr1nFj0LzFEhZTT1rguP+WZWyw/VRWaCrCu3PhObAqGcQ2 dvMgy9xCqTE3DravUlAA37a1khEdmyuwK2S/tM/IsV15Wy2xvg5SoRXclwTFlnoj S0kWZPZxEhcxhQcW/ln16aBWwRFF6mzT8BleXwmkcHiJ6nFIK8wJ9HN+9tMuYIA5 liqTeTMRKg1QQKCC6UnnhpsNSrfWAkMjKpuVmEk7wFD6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:30 2026 by rpki-client