This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LUmo_SL0q3cLrHzA4cMBh1Soy1c.roa File: LUmo_SL0q3cLrHzA4cMBh1Soy1c.roa (raw, json) Hash identifier: zO6RVbnurdQAmKQSEyhO5pP7H0ZHhdJ0IYMYWiBPP18= Subject key identifier: 2D:49:A8:FD:22:F4:AB:77:0B:AC:7C:C0:E1:C3:01:87:54:A8:CB:57 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BA3B17981AB7A780BC56BA318B76FD999 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LUmo_SL0q3cLrHzA4cMBh1Soy1c.roa Signing time: Fri 09 Jan 2026 16:57:55 +0000 ROA not before: Fri 09 Jan 2026 16:57:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.58.138.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 31.59.59.0/24 maxlen: 24 31.59.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:b1:79:81:ab:7a:78:0b:c5:6b:a3:18:b7:6f:d9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 9 16:57:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d49a8fd22f4ab770bac7cc0e1c3018754a8cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:96:74:cf:17:af:c0:ca:d3:2a:8d:f1:ee: c1:9a:44:de:a1:01:2a:52:31:37:44:2e:82:5f:5f: 60:29:94:51:70:cf:a3:64:ec:ac:e6:0d:e2:bd:53: 97:5b:2e:33:10:37:51:b3:ea:cf:9a:34:41:17:fb: 3d:df:b4:39:7a:25:ee:54:e2:13:1d:73:44:5c:6a: e7:6f:f3:c4:d2:19:ce:c8:d8:57:2b:0f:e3:ca:cb: 5b:53:f0:6e:ac:ee:da:78:30:c6:81:3c:0c:62:62: ca:47:36:54:ff:bc:60:6d:48:cb:7c:3c:dc:b2:e4: 78:d1:cf:d3:ff:86:5b:f0:8a:56:e6:75:ab:b2:ed: fb:aa:18:41:42:f7:da:5e:a4:37:32:ea:7f:25:ad: 6a:20:e8:89:12:40:f5:ef:46:7d:8d:4f:3c:ce:7b: 88:da:1c:01:01:d2:86:2b:ae:38:6c:1e:fa:4a:c9: b1:31:da:84:48:7d:dc:1b:06:0b:84:22:f1:6d:92: d7:c6:47:de:49:0c:e3:43:fb:c2:5b:59:6b:2b:e4: d2:95:06:c6:c4:5d:08:b2:96:c4:56:a8:24:09:e5: 07:bb:3a:c0:93:9d:96:bb:86:c7:f2:79:73:df:7e: c3:ac:a1:e4:60:19:8d:7f:aa:22:6b:e6:00:87:de: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:49:A8:FD:22:F4:AB:77:0B:AC:7C:C0:E1:C3:01:87:54:A8:CB:57 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LUmo_SL0q3cLrHzA4cMBh1Soy1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.57.191.0/24 31.57.221.0/24 31.58.131.0/24 31.58.138.0/24 31.58.231.0/24 31.59.59.0/24 31.59.208.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:71:c6:8e:7b:1c:ee:fc:e8:e0:41:0c:96:1c:9f:1d:20:2a: 75:d2:56:76:6d:f1:9e:70:04:eb:dc:78:a6:8a:f5:6a:d7:89: 5f:21:a8:ad:2f:75:98:ea:2f:74:9f:26:d6:44:e7:03:f9:67: 52:c5:3f:3b:63:a9:be:32:dd:14:d3:e8:e3:5b:e4:ee:2f:d5: e8:13:76:32:19:7d:f8:74:06:c8:17:f8:04:9c:36:4d:a2:1f: ec:b7:66:b5:bb:cb:a0:a1:f4:55:5f:63:44:6c:db:5f:f5:5d: 9c:57:28:39:b1:8a:44:e4:23:51:f7:a1:c5:31:4b:7e:16:f0: 13:b5:47:4c:4a:34:f2:71:5e:a3:d0:b1:60:0d:82:d0:1a:7d: 54:c9:06:c7:22:68:96:9f:19:e9:28:1a:00:45:9e:00:e4:2b: b7:6b:69:e5:ba:6c:af:dc:32:62:c9:4c:cd:2e:47:93:03:07: 09:3c:2d:ce:23:54:a9:54:32:7f:c3:41:a6:a1:5e:a8:54:54: de:63:79:e6:c1:00:f9:f5:26:91:5a:95:6c:96:09:ec:21:c7: 16:79:42:2c:0e:ac:09:a7:30:42:52:b0:1c:98:74:be:3a:05: 25:08:11:39:26:cc:c8:de:48:90:5a:ca:06:8f:a2:56:ef:4d: 2a:55:c8:e6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZujsXmBq3p4C8Vroxi3b9mZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA5MTY1NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDQ5YThmZDIyZjRhYjc3MGJhYzdjYzBlMWMzMDE4NzU0YThjYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoyWdM8Xr8DK0yqN8e7BmkTeoQEq UjE3RC6CX19gKZRRcM+jZOys5g3ivVOXWy4zEDdRs+rPmjRBF/s937Q5eiXuVOIT HXNEXGrnb/PE0hnOyNhXKw/jystbU/BurO7aeDDGgTwMYmLKRzZU/7xgbUjLfDzc suR40c/T/4Zb8IpW5nWrsu37qhhBQvfaXqQ3Mup/Ja1qIOiJEkD170Z9jU88znuI 2hwBAdKGK644bB76SsmxMdqESH3cGwYLhCLxbZLXxkfeSQzjQ/vCW1lrK+TSlQbG xF0IspbEVqgkCeUHuzrAk52Wu4bH8nlz337DrKHkYBmNf6oia+YAh968FQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFC1JqP0i9Kt3C6x8wOHDAYdUqMtXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTFVtb19TTDBxM2NMckh6QTRjTUJoMVNveTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAHzh9AwQA HziNAwQAHzm/AwQAHzndAwQAHzqDAwQAHzqKAwQAHzrnAwQAHzs7AwQAHzvQMA0G CSqGSIb3DQEBCwUAA4IBAQBLccaOexzu/OjgQQyWHJ8dICp10lZ2bfGecATr3Him ivVq14lfIaitL3WY6i90nybWROcD+WdSxT87Y6m+Mt0U0+jjW+TuL9XoE3YyGX34 dAbIF/gEnDZNoh/st2a1u8ugofRVX2NEbNtf9V2cVyg5sYpE5CNR96HFMUt+FvAT tUdMSjTycV6j0LFgDYLQGn1UyQbHImiWnxnpKBoARZ4A5Cu3a2nlumyv3DJiyUzN LkeTAwcJPC3OI1SpVDJ/w0GmoV6oVFTeY3nmwQD59SaRWpVslgnsIccWeUIsDqwJ pzBCUrAcmHS+OgUlCBE5JszI3kiQWsoGj6JW700qVcjm -----END CERTIFICATE-----Generated at Sat Jan 10 09:44:22 2026 by rpki-client