This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa File: LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa (raw, json) Hash identifier: YC+Err1nsYN5JZkJiiNrSk4ckkPdFmlbNmlV49Qluo4= Subject key identifier: 2C:C1:F4:27:92:7B:63:40:6E:55:CC:46:A0:E2:F9:CD:FC:93:A8:48 Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8 Certificate serial: 019B7CEE073231FA7869D0F317B614C30824 Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198854 IP address blocks: 194.33.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:07:32:31:fa:78:69:d0:f3:17:b6:14:c3:08:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc1f427927b63406e55cc46a0e2f9cdfc93a848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:8b:bb:6a:50:dd:88:36:3f:f3:e0:90:d8: 54:32:3b:95:d6:8d:ae:23:4f:f2:7f:4d:66:1f:d2: ca:3f:6c:31:d4:e0:ae:94:f0:60:48:7f:01:c4:8f: e5:a1:6d:df:83:2b:87:ab:0b:75:1a:ea:7e:bf:d6: 48:a8:de:b0:26:d4:37:c8:4a:8c:8e:53:8d:2a:e0: 9c:ca:81:8b:a1:98:24:6e:59:1c:7a:b1:0a:7a:e1: e6:f8:e9:f2:fd:fa:47:f3:5d:7b:30:2f:de:bf:45: 5f:fb:2b:39:74:30:64:c9:ea:de:66:3c:14:e4:9b: da:35:da:97:fa:ac:79:08:a7:fa:22:dd:bf:df:1b: f3:53:ad:91:a8:48:d0:a8:26:28:ab:3d:52:9b:ad: ca:39:8e:80:d7:00:f8:56:48:51:bc:93:11:a0:d7: e0:f5:a9:b9:d2:22:c1:ac:44:6d:7b:b9:7c:c2:c9: cc:66:5e:a2:bf:88:62:4d:96:75:fa:7b:b5:fd:cb: 9a:20:3d:88:df:eb:69:fa:3d:c4:12:a4:a4:41:fb: 3a:7c:d8:ee:d7:ac:4e:44:d3:06:eb:75:2b:ae:a4: bf:f9:ae:25:13:61:f8:5b:e8:80:1b:cc:5f:3d:4e: d5:74:72:8f:95:f8:da:e4:82:b8:c4:f0:6f:35:dc: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:F4:27:92:7B:63:40:6E:55:CC:46:A0:E2:F9:CD:FC:93:A8:48 X509v3 Authority Key Identifier: keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.83.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:29:21:a3:70:9b:39:a3:60:ae:cb:34:8f:a9:66:ba:7f:35: 51:95:6d:5a:ed:0d:fe:4c:d2:89:bb:d9:e0:0e:37:61:55:7a: 80:a5:da:e7:8e:e0:64:4c:77:48:77:6c:1f:d8:3e:c3:6e:79: 95:ab:43:2e:07:85:fd:b5:a2:3d:d2:a6:0e:61:24:cb:8c:11: 12:bc:5c:1c:eb:fb:bd:31:83:62:40:9c:7c:69:1c:1b:41:d0: f7:4e:52:7b:60:31:28:02:8c:40:34:6c:e4:75:06:9e:0b:f4: a4:a9:3a:0a:fa:16:ab:25:9b:9b:f3:ff:21:1b:52:08:43:81: 2b:a6:45:32:11:62:3c:1e:59:69:c8:cf:79:b5:84:9c:ad:51: 2b:27:6b:27:64:82:79:f2:e6:0b:e4:54:f1:25:cf:80:4d:af: eb:2a:d6:6e:ac:83:78:e5:2a:a6:e9:65:0a:9b:a6:7c:6d:bc: c0:47:ea:69:17:be:ea:63:09:5d:70:ae:d2:87:a0:38:36:f7: 4f:47:51:8c:d9:c5:c4:c3:a5:ce:31:66:1e:fe:35:f5:8d:e6: 0c:0b:ff:bf:be:43:da:a7:4d:be:cc:a1:00:ed:9a:b2:a2:9c: 54:3d:b2:03:99:15:d5:56:58:fa:84:61:11:94:1a:ea:cb:5e: de:95:08:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gcyMfp4adDzF7YUwwgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZjFjOThkM2E3NzgyNGUyMzZiMmM0Y2RkOTM3OGMwNTA5 YTNkZTgwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MxZjQyNzkyN2I2MzQwNmU1NWNjNDZhMGUyZjljZGZjOTNhODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6GLu2pQ3Yg2P/PgkNhUMjuV1o2u I0/yf01mH9LKP2wx1OCulPBgSH8BxI/loW3fgyuHqwt1Gup+v9ZIqN6wJtQ3yEqM jlONKuCcyoGLoZgkblkcerEKeuHm+Ony/fpH8117MC/ev0Vf+ys5dDBkyereZjwU 5JvaNdqX+qx5CKf6It2/3xvzU62RqEjQqCYoqz1Sm63KOY6A1wD4VkhRvJMRoNfg 9am50iLBrERte7l8wsnMZl6iv4hiTZZ1+nu1/cuaID2I3+tp+j3EEqSkQfs6fNju 16xORNMG63UrrqS/+a4lE2H4W+iAG8xfPU7VdHKPlfja5IK4xPBvNdwdRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzB9CeSe2NAblXMRqDi+c38k6hIMB8GA1UdIwQY MBaAFI/xyY06d4JOI2ssTN2TeMBQmj3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEt ZmJkNzAzZWU2YzkzLzEvTE1IMEo1SjdZMEJ1VmN4R29PTDV6ZnlUcUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEtZmJkNzAzZWU2Yzkz LzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFTMA0G CSqGSIb3DQEBCwUAA4IBAQAsKSGjcJs5o2CuyzSPqWa6fzVRlW1a7Q3+TNKJu9ng DjdhVXqApdrnjuBkTHdId2wf2D7DbnmVq0MuB4X9taI90qYOYSTLjBESvFwc6/u9 MYNiQJx8aRwbQdD3TlJ7YDEoAoxANGzkdQaeC/SkqToK+harJZub8/8hG1IIQ4Er pkUyEWI8HllpyM95tYScrVErJ2snZIJ58uYL5FTxJc+ATa/rKtZurIN45Sqm6WUK m6Z8bbzAR+ppF77qYwldcK7Sh6A4NvdPR1GM2cXEw6XOMWYe/jX1jeYMC/+/vkPa p02+zKEA7ZqyopxUPbIDmRXVVlj6hGERlBrqy17elQgN -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:22 2026 by rpki-client