This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LmZ65ahj31rbnRy9vWbROzqmhcU.roa File: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (raw, json) Hash identifier: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw= Subject key identifier: 2E:66:7A:E5:A8:63:DF:5A:DB:9D:1C:BD:BD:66:D1:3B:3A:A6:85:C5 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B79DE2EAEE9292A9FB18EFB88FBDF Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LmZ65ahj31rbnRy9vWbROzqmhcU.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200908 IP address blocks: 69.40.204.0/22 maxlen: 24 188.93.117.0/24 maxlen: 24 193.163.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:de:2e:ae:e9:29:2a:9f:b1:8e:fb:88:fb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e667ae5a863df5adb9d1cbdbd66d13b3aa685c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:3c:e4:8e:89:28:dd:c7:99:c2:84:3f:42: f1:ac:db:98:32:a8:38:59:21:c3:8e:41:ed:31:d6: 1d:5d:5a:bf:15:30:74:a7:47:6d:23:29:1d:f5:db: c3:c3:cf:03:23:58:e7:7c:c1:a1:82:fc:ac:f5:d2: 55:c8:ed:97:04:90:a0:f8:67:bf:2c:25:77:24:54: dd:2b:4d:18:b9:3e:f0:d1:36:02:b0:45:c4:f7:09: 49:ba:60:5f:7c:ea:fc:b0:30:9f:a2:c4:db:4d:d7: c8:14:41:6e:e2:5d:de:3f:f8:a3:96:ae:37:d2:7b: 1f:08:e0:27:60:c5:19:13:97:ef:79:5d:b0:be:30: da:8a:06:b1:76:83:e5:78:6f:5c:ed:18:98:43:3b: 71:57:ae:b2:df:00:bf:5d:39:e3:af:e9:86:b6:83: ad:d6:d1:4a:78:0d:99:e6:4b:54:34:26:d2:b2:8d: ab:ab:99:04:07:6f:6e:51:1c:2a:f4:9f:82:7f:66: 0a:4a:11:40:33:5b:89:5c:09:65:d1:74:93:8c:37: b1:e5:54:70:d9:42:c7:40:87:42:e7:86:50:8c:b5: 88:d0:5e:41:41:c3:90:52:34:75:6b:fb:55:22:63: b2:e5:90:c9:bc:2b:cb:1a:fb:21:b7:76:b9:ee:7d: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:66:7A:E5:A8:63:DF:5A:DB:9D:1C:BD:BD:66:D1:3B:3A:A6:85:C5 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LmZ65ahj31rbnRy9vWbROzqmhcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.40.204.0/22 188.93.117.0/24 193.163.117.0/24 Signature Algorithm: sha256WithRSAEncryption 15:55:42:a8:b3:ef:8f:e2:3c:1e:b8:cf:ef:be:f6:b3:24:b9: 6a:9c:25:5c:4b:1c:44:d2:f2:68:8a:3d:f7:ee:d2:ae:a3:c9: bf:5b:96:c5:53:d5:90:d6:7f:75:02:fd:85:8a:02:70:95:bd: 37:7b:b1:dd:c4:41:5d:57:78:c2:c3:85:8e:c1:90:4d:00:9a: 1d:90:a2:a9:36:b3:d7:b7:15:78:39:0f:59:14:1c:2c:46:1b: 79:6a:d3:dd:bf:4d:33:6f:ce:37:05:d0:51:9a:43:89:32:92: 76:e4:7a:3a:ff:25:0b:8d:97:1d:43:28:1b:6c:cd:3f:1c:db: 8c:5d:c1:4e:84:6d:d1:1a:a7:42:ce:8e:1a:73:02:11:3d:4b: 85:71:2a:21:37:c4:39:fe:a8:3d:d6:4e:4d:9a:1b:ed:fc:b6: aa:df:ef:38:58:c4:4e:2e:3e:b9:b4:b7:5a:a9:04:8a:04:21: 61:66:60:6d:63:f1:45:68:14:a3:18:8e:e4:10:af:b5:bb:69: 29:46:8f:2a:3e:29:e5:a9:76:c2:cf:22:a8:5d:12:83:ab:51: 6b:62:67:4b:7a:f9:3c:12:c9:3d:11:34:2c:9f:d9:5c:2c:cc: 36:fd:6a:c4:78:75:1a:ab:b4:77:84:53:5c:7b:ea:5f:2d:69: 98:c2:70:0f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W3neLq7pKSqfsY77iPvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTY2N2FlNWE4NjNkZjVhZGI5ZDFjYmRiZDY2ZDEzYjNhYTY4NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05085I6JKN3HmcKEP0LxrNuYMqg4 WSHDjkHtMdYdXVq/FTB0p0dtIykd9dvDw88DI1jnfMGhgvys9dJVyO2XBJCg+Ge/ LCV3JFTdK00YuT7w0TYCsEXE9wlJumBffOr8sDCfosTbTdfIFEFu4l3eP/ijlq43 0nsfCOAnYMUZE5fveV2wvjDaigaxdoPleG9c7RiYQztxV66y3wC/XTnjr+mGtoOt 1tFKeA2Z5ktUNCbSso2rq5kEB29uURwq9J+Cf2YKShFAM1uJXAll0XSTjDex5VRw 2ULHQIdC54ZQjLWI0F5BQcOQUjR1a/tVImOy5ZDJvCvLGvsht3a57n3OzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC5meuWoY99a250cvb1m0Ts6poXFMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvTG1aNjVhaGozMXJiblJ5OXZXYlJPenFtaGNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCRSjMAwQA vF11AwQAwaN1MA0GCSqGSIb3DQEBCwUAA4IBAQAVVUKos++P4jweuM/vvvazJLlq nCVcSxxE0vJoij337tKuo8m/W5bFU9WQ1n91Av2FigJwlb03e7HdxEFdV3jCw4WO wZBNAJodkKKpNrPXtxV4OQ9ZFBwsRht5atPdv00zb843BdBRmkOJMpJ25Ho6/yUL jZcdQygbbM0/HNuMXcFOhG3RGqdCzo4acwIRPUuFcSohN8Q5/qg91k5Nmhvt/Laq 3+84WMROLj65tLdaqQSKBCFhZmBtY/FFaBSjGI7kEK+1u2kpRo8qPinlqXbCzyKo XRKDq1FrYmdLevk8Esk9ETQsn9lcLMw2/WrEeHUaq7R3hFNce+pfLWmYwnAP -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:39 2026 by rpki-client