This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa File: LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa (raw, json) Hash identifier: CkETkgnVG1yQmzjfyTKrIRsozHVlr4Sy6Z354+68ntk= Subject key identifier: 2C:CD:2E:5E:62:D8:62:1C:27:36:9E:04:3F:57:65:76:75:CA:DC:D7 Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Certificate serial: 019B76EB3DBEDDD2F1D2D4E67FFA9F12D107 Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215790 IP address blocks: 185.238.40.0/22 maxlen: 22 185.238.40.0/24 maxlen: 24 185.238.41.0/24 maxlen: 24 185.238.42.0/24 maxlen: 24 185.238.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3d:be:dd:d2:f1:d2:d4:e6:7f:fa:9f:12:d1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ccd2e5e62d8621c27369e043f57657675cadcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:8e:fb:ef:26:97:5b:47:d8:b7:42:65:c2: 81:9f:01:6c:c7:bd:74:c4:f1:c4:42:21:9a:3f:88: aa:ad:55:05:4a:2b:9e:e6:ca:af:d3:5c:51:54:bb: 68:45:f7:7f:bd:75:b5:15:d6:56:11:fb:53:fa:45: 5d:34:5b:82:25:02:42:b2:d5:ce:77:62:2c:74:85: 19:02:a5:57:a3:07:7a:d8:df:e2:83:84:60:8b:57: 14:18:59:dc:9a:22:f6:43:3c:5e:11:93:7b:89:a5: cc:fb:ed:4d:8c:3c:4a:e5:e9:f6:5a:57:6e:3c:dc: 22:9f:43:02:64:aa:26:44:60:d4:e1:a1:fd:0d:53: 84:cb:5b:de:f6:38:67:bf:e5:3a:f2:c2:2f:c4:38: 2c:9a:3b:0f:69:7e:50:6b:26:ed:be:cf:f8:a7:33: a8:af:9d:f4:b9:8e:23:89:aa:60:2a:24:9a:ce:a2: d4:8e:de:bf:72:43:d5:a3:09:07:28:9f:28:05:79: 10:33:9a:91:ea:ea:ad:22:c3:29:b4:24:7d:0f:27: 46:8f:81:0f:87:eb:fb:84:dc:0f:66:85:de:66:79: 4b:97:07:45:00:98:48:5b:2d:75:e5:9c:45:e3:8b: 1e:b5:a6:4b:5d:f3:b9:d8:38:67:83:1e:94:03:8e: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:2E:5E:62:D8:62:1C:27:36:9E:04:3F:57:65:76:75:CA:DC:D7 X509v3 Authority Key Identifier: keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.40.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:4a:5b:b0:51:d0:ed:ef:f3:b1:4e:b8:14:d5:e3:6d:ae:d0: 66:69:de:ce:b6:a3:0c:ff:ed:8e:a8:8b:34:58:52:eb:20:4b: 32:7d:6e:22:d3:20:9f:4b:2b:b9:cc:bc:4f:48:0f:c5:73:d4: 00:be:ae:29:f1:ca:72:54:51:dc:fa:cc:c8:5e:fb:2e:bd:5e: a1:34:b3:a4:fe:f2:b2:47:61:28:e1:b3:7a:58:9b:c8:c2:e4: 96:cc:ed:6d:f0:fa:e0:b5:1f:6c:e0:da:91:5a:7c:3f:ca:4f: 60:9f:2d:9f:65:cf:d5:69:e9:6e:e9:83:09:90:bf:28:89:7c: fa:08:ee:08:26:df:d9:f9:68:12:00:f2:89:a8:6c:8b:e8:93: a6:18:42:7c:a2:9b:37:75:9e:fd:81:33:e0:27:d7:40:42:6a: 6c:81:f3:69:67:c3:7b:b6:5f:ff:38:57:d6:59:f4:32:1e:94: 9c:e5:27:9f:17:83:e1:d4:fb:66:34:17:82:bd:d9:2f:26:2b: 57:8c:b9:b8:57:5d:40:87:fe:3a:8f:7d:a9:00:42:89:3d:cc: 9d:99:95:f8:d6:67:cb:66:a9:32:a2:af:5c:c1:38:f6:66:6b: 64:41:25:80:51:86:50:a0:01:a8:b2:28:90:e7:e4:9b:6d:07: e4:6a:88:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26z2+3dLx0tTmf/qfEtEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3 Yzc4MzMwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2NkMmU1ZTYyZDg2MjFjMjczNjllMDQzZjU3NjU3Njc1Y2FkY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssSO++8ml1tH2LdCZcKBnwFsx710 xPHEQiGaP4iqrVUFSiue5sqv01xRVLtoRfd/vXW1FdZWEftT+kVdNFuCJQJCstXO d2IsdIUZAqVXowd62N/ig4Rgi1cUGFncmiL2QzxeEZN7iaXM++1NjDxK5en2Wldu PNwin0MCZKomRGDU4aH9DVOEy1ve9jhnv+U68sIvxDgsmjsPaX5Qaybtvs/4pzOo r530uY4jiapgKiSazqLUjt6/ckPVowkHKJ8oBXkQM5qR6uqtIsMptCR9DydGj4EP h+v7hNwPZoXeZnlLlwdFAJhIWy115ZxF44setaZLXfO52Dhngx6UA44SOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzNLl5i2GIcJzaeBD9XZXZ1ytzXMB8GA1UdIwQY MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt MzJlZmY5NWIzOWRjLzEvTE0wdVhtTFlZaHduTnA0RVAxZGxkblhLM05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue4oMA0G CSqGSIb3DQEBCwUAA4IBAQB7SluwUdDt7/OxTrgU1eNtrtBmad7OtqMM/+2OqIs0 WFLrIEsyfW4i0yCfSyu5zLxPSA/Fc9QAvq4p8cpyVFHc+szIXvsuvV6hNLOk/vKy R2Eo4bN6WJvIwuSWzO1t8PrgtR9s4NqRWnw/yk9gny2fZc/Vaelu6YMJkL8oiXz6 CO4IJt/Z+WgSAPKJqGyL6JOmGEJ8ops3dZ79gTPgJ9dAQmpsgfNpZ8N7tl//OFfW WfQyHpSc5SefF4Ph1PtmNBeCvdkvJitXjLm4V11Ah/46j32pAEKJPcydmZX41mfL Zqkyoq9cwTj2ZmtkQSWAUYZQoAGosiiQ5+SbbQfkaogw -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:05 2026 by rpki-client