This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/LmCyUHA2oYKOr6Tu-e3enZ-3Euo.roa File: LmCyUHA2oYKOr6Tu-e3enZ-3Euo.roa (raw, json) Hash identifier: QNOaVHtMtObHvFJPtI9bfJ41PDq8SxeAvWFGAT0Oa+Q= Subject key identifier: 2E:60:B2:50:70:36:A1:82:8E:AF:A4:EE:F9:ED:DE:9D:9F:B7:12:EA Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f Certificate serial: 019B797E2B6152224C37AF87A07C08EA76A6 Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/LmCyUHA2oYKOr6Tu-e3enZ-3Euo.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43012 IP address blocks: 77.91.216.0/21 maxlen: 22 194.59.52.0/22 maxlen: 23 2a02:2538::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2b:61:52:22:4c:37:af:87:a0:7c:08:ea:76:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e60b2507036a1828eafa4eef9edde9d9fb712ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:f9:0b:78:bb:58:27:b5:00:5a:fa:73:6c: bf:dd:d0:e8:ac:e0:0f:53:68:cd:e8:be:5c:73:e9: 73:42:1f:6c:69:d7:43:4e:9e:32:2f:85:1b:3e:0f: 63:1d:84:c3:9f:27:06:82:b7:1f:ee:fe:10:8d:5c: 1a:6c:a5:38:f1:58:c6:27:45:8c:f6:b1:a6:21:c5: 72:37:83:f4:71:81:2a:b5:6b:92:90:f6:9f:fd:28: 46:53:ce:fc:bf:85:a8:6f:7d:cb:8f:99:67:ba:90: 6f:76:41:3c:5d:e0:95:21:4e:fb:64:54:45:ac:7f: 24:e3:1a:08:b2:67:e3:8a:2a:79:1d:3d:52:2c:f6: 84:e3:43:70:eb:c1:b4:7f:b7:aa:d4:25:82:b1:0f: 1f:42:68:bc:3f:61:43:56:4e:6e:71:93:47:ae:f5: 2b:2a:04:e9:55:0e:57:8b:41:1c:25:40:4f:0f:84: 9c:9b:ac:ca:5f:1c:aa:b4:fa:e7:06:f7:45:87:a8: 6e:ba:13:db:64:a5:62:15:bc:c3:af:ed:61:e6:ac: 93:c7:bd:7f:f2:d1:cd:68:57:f6:db:8c:7d:6e:21: e6:76:6a:43:72:05:18:53:16:11:df:6c:e5:e6:b7: b0:89:28:c2:93:b2:c9:e5:c7:82:10:a3:8e:2c:d5: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:B2:50:70:36:A1:82:8E:AF:A4:EE:F9:ED:DE:9D:9F:B7:12:EA X509v3 Authority Key Identifier: keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/LmCyUHA2oYKOr6Tu-e3enZ-3Euo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.216.0/21 194.59.52.0/22 IPv6: 2a02:2538::/32 Signature Algorithm: sha256WithRSAEncryption 3b:9b:0c:37:c4:d6:5b:b1:42:94:b6:98:23:f6:6b:21:b9:e7: 2d:2a:ef:46:ac:84:6b:a5:71:f7:9e:7e:7b:55:c3:ac:aa:6b: 61:54:b1:b7:4a:53:17:5c:46:e4:cf:c2:ae:36:8f:30:83:cf: 69:76:14:cd:b3:43:e1:d3:45:69:57:18:bb:a2:e9:22:15:87: 12:8e:53:0e:54:e4:1e:dd:eb:c7:a4:fd:2d:62:89:a4:8f:34: a0:f0:52:8e:8e:7d:72:b6:cf:63:1a:14:70:0e:97:7b:96:72: 2a:43:c9:e0:c5:a8:9c:ec:bb:a3:ed:86:9d:66:2b:57:36:73: c4:84:73:7f:58:47:56:40:21:02:6d:b6:c2:a0:20:42:31:1c: de:03:4c:c1:3e:08:4a:d9:8e:61:9b:db:0b:25:57:8a:1d:c2: 70:e8:6b:7a:b7:94:44:bf:14:88:73:74:b8:53:7d:5f:17:c0: f6:89:7d:3f:48:b8:e1:b2:73:67:c0:64:be:d8:a6:17:08:e0: a7:c7:d9:3b:ea:b5:29:2a:62:e3:c2:49:7f:48:f6:53:28:c9: 64:6c:50:b7:bd:88:b9:c5:b9:0c:5f:d4:6e:36:92:50:71:e6: 42:dc:8e:4b:80:e9:74:30:12:12:26:2a:dd:3d:f9:78:ba:d8: 51:5d:bd:2a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fithUiJMN6+HoHwI6namMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh Y2ZjMmYwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTYwYjI1MDcwMzZhMTgyOGVhZmE0ZWVmOWVkZGU5ZDlmYjcxMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R35C3i7WCe1AFr6c2y/3dDorOAP U2jN6L5cc+lzQh9saddDTp4yL4UbPg9jHYTDnycGgrcf7v4QjVwabKU48VjGJ0WM 9rGmIcVyN4P0cYEqtWuSkPaf/ShGU878v4Wob33Lj5lnupBvdkE8XeCVIU77ZFRF rH8k4xoIsmfjiip5HT1SLPaE40Nw68G0f7eq1CWCsQ8fQmi8P2FDVk5ucZNHrvUr KgTpVQ5Xi0EcJUBPD4Scm6zKXxyqtPrnBvdFh6huuhPbZKViFbzDr+1h5qyTx71/ 8tHNaFf224x9biHmdmpDcgUYUxYR32zl5rewiSjCk7LJ5ceCEKOOLNX2bQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC5gslBwNqGCjq+k7vnt3p2ftxLqMB8GA1UdIwQY MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt ZTg4OWE2ZTZiZWFjLzEvTG1DeVVIQTJvWUtPcjZUdS1lM2VuWi0zRXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTVvYAwQC wjs0MA0EAgACMAcDBQAqAiU4MA0GCSqGSIb3DQEBCwUAA4IBAQA7mww3xNZbsUKU tpgj9mshuectKu9GrIRrpXH3nn57VcOsqmthVLG3SlMXXEbkz8KuNo8wg89pdhTN s0Ph00VpVxi7oukiFYcSjlMOVOQe3evHpP0tYomkjzSg8FKOjn1yts9jGhRwDpd7 lnIqQ8ngxaic7Luj7YadZitXNnPEhHN/WEdWQCECbbbCoCBCMRzeA0zBPghK2Y5h m9sLJVeKHcJw6Gt6t5REvxSIc3S4U31fF8D2iX0/SLjhsnNnwGS+2KYXCOCnx9k7 6rUpKmLjwkl/SPZTKMlkbFC3vYi5xbkMX9RuNpJQceZC3I5LgOl0MBISJirdPfl4 uthRXb0q -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:23 2026 by rpki-client