This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/LmAKZqBdTFF5oLsEoluyDIA0344.roa File: LmAKZqBdTFF5oLsEoluyDIA0344.roa (raw, json) Hash identifier: hZY8m7f3JelI/bgQwSPE+IWZx3xID2uYH6Ji+lC9gck= Subject key identifier: 2E:60:0A:66:A0:5D:4C:51:79:A0:BB:04:A2:5B:B2:0C:80:34:DF:8E Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b Certificate serial: 019B7DCA5D83BFF390CD867CCE5606B142A2 Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/LmAKZqBdTFF5oLsEoluyDIA0344.roa Signing time: Fri 02 Jan 2026 08:19:32 +0000 ROA not before: Fri 02 Jan 2026 08:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198143 IP address blocks: 193.150.24.0/23 maxlen: 23 193.150.24.0/24 maxlen: 24 193.150.25.0/24 maxlen: 24 2001:67c:24a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5d:83:bf:f3:90:cd:86:7c:ce:56:06:b1:42:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e600a66a05d4c5179a0bb04a25bb20c8034df8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:40:0f:f7:e7:5e:a6:8a:8d:bc:40:ad:c9:ba: 38:57:ac:1b:53:a6:1e:c1:bb:13:cd:29:be:a3:28: b1:4b:65:c6:76:9d:3e:76:ec:57:84:fa:61:58:9a: 6f:5a:31:81:e4:db:36:35:f6:01:d6:be:d1:a7:d5: 47:ce:4d:43:70:13:c9:ad:d3:4f:8f:e6:20:20:b4: 59:39:a1:88:8b:1b:3b:7e:dc:2a:a3:59:38:ed:c2: 0c:91:1a:66:ed:52:55:97:49:eb:5a:8e:94:16:52: ac:9e:6b:1f:9b:ac:e6:8d:04:72:32:1e:0f:47:ed: c1:02:5a:f6:52:43:74:c2:41:9e:e4:31:70:27:cc: 5a:ae:12:ef:11:11:d9:17:23:a2:d5:6e:d2:b3:87: 02:b0:f6:05:0e:59:aa:e0:4f:81:a6:dc:4e:dc:5d: ee:a9:e7:79:86:cd:c8:cb:7c:65:c1:98:0f:8c:15: be:9e:07:5b:ed:5d:9b:bb:37:dc:e2:4a:c7:cf:b9: 62:57:0d:6c:7d:83:a5:ec:75:bf:95:9f:72:6f:1f: b8:fe:1e:21:87:12:72:ce:fd:50:82:fa:d1:d7:2b: 91:d1:ff:f7:c4:f2:31:59:07:63:82:ed:c6:be:a3: 99:3f:18:24:60:96:20:08:a8:f8:4c:c5:5f:ff:67: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:0A:66:A0:5D:4C:51:79:A0:BB:04:A2:5B:B2:0C:80:34:DF:8E X509v3 Authority Key Identifier: keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/LmAKZqBdTFF5oLsEoluyDIA0344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.24.0/23 IPv6: 2001:67c:24a0::/48 Signature Algorithm: sha256WithRSAEncryption d1:0c:be:6a:18:5f:b6:cd:33:54:a4:90:c9:03:5e:8f:08:d3: aa:48:76:86:b6:8f:86:ce:df:9e:01:8d:32:76:e0:6d:0e:58: 59:2e:e2:ff:32:75:8d:8c:1d:a4:0a:a7:81:7a:1f:2e:59:e2: ed:87:f4:79:c6:1c:6f:95:b0:7e:1e:84:02:c3:04:f5:45:2a: e1:02:09:72:d4:e1:b9:1e:f2:9e:21:24:3d:10:aa:1a:67:c7: 49:6c:ed:77:d6:66:12:43:97:25:21:3d:6d:0b:f8:8b:2d:6a: 8f:fe:69:f5:78:f0:f0:d4:53:e9:30:d9:ab:cb:c8:66:30:32: 6e:4b:67:2a:b6:d8:9c:d2:5f:62:87:9f:f5:ae:3d:43:df:6c: eb:a5:ea:a6:17:75:27:f7:79:56:d7:03:43:c7:57:e8:ab:1f: 3f:f5:0b:81:27:d3:c7:e6:3e:c3:33:09:f7:8a:70:cb:c5:39: ec:e3:20:13:dc:19:dd:f7:85:f4:db:d7:97:8c:17:3c:62:5e: 7f:32:8e:6c:21:94:cd:57:33:01:ad:c1:11:41:c2:06:a8:68: 06:aa:79:88:60:42:8d:a2:92:82:96:c1:27:f5:f6:9a:33:ef: aa:21:b7:3f:23:1e:f5:7b:c6:a0:50:5d:69:23:f1:fd:4d:56: da:08:b8:1f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yl2Dv/OQzYZ8zlYGsUKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTI4NDI5MDM0ZGNmYmEwMWY3ZmZmNWM3Y2M4ODU2ZDRk MDZlMWIwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTYwMGE2NmEwNWQ0YzUxNzlhMGJiMDRhMjViYjIwYzgwMzRkZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kAP9+depoqNvECtybo4V6wbU6Ye wbsTzSm+oyixS2XGdp0+duxXhPphWJpvWjGB5Ns2NfYB1r7Rp9VHzk1DcBPJrdNP j+YgILRZOaGIixs7ftwqo1k47cIMkRpm7VJVl0nrWo6UFlKsnmsfm6zmjQRyMh4P R+3BAlr2UkN0wkGe5DFwJ8xarhLvERHZFyOi1W7Ss4cCsPYFDlmq4E+BptxO3F3u qed5hs3Iy3xlwZgPjBW+ngdb7V2buzfc4krHz7liVw1sfYOl7HW/lZ9ybx+4/h4h hxJyzv1QgvrR1yuR0f/3xPIxWQdjgu3GvqOZPxgkYJYgCKj4TMVf/2e+vQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC5gCmagXUxReaC7BKJbsgyANN+OMB8GA1UdIwQY MBaAFB9ShCkDTc+6Aff/9cfMiFbU0G4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzNiYjUtMDY2MS00NTZjLTllMWUt MjUzYmU5ZjZlZDNkLzEvTG1BS1pxQmRURkY1b0xzRW9sdXlESUEwMzQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzNiYjUtMDY2MS00NTZjLTllMWUtMjUzYmU5ZjZlZDNk LzEvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwZYYMA8E AgACMAkDBwAgAQZ8JKAwDQYJKoZIhvcNAQELBQADggEBANEMvmoYX7bNM1SkkMkD Xo8I06pIdoa2j4bO354BjTJ24G0OWFku4v8ydY2MHaQKp4F6Hy5Z4u2H9HnGHG+V sH4ehALDBPVFKuECCXLU4bke8p4hJD0Qqhpnx0ls7XfWZhJDlyUhPW0L+Istao/+ afV48PDUU+kw2avLyGYwMm5LZyq22JzSX2KHn/WuPUPfbOul6qYXdSf3eVbXA0PH V+irHz/1C4En08fmPsMzCfeKcMvFOezjIBPcGd33hfTb15eMFzxiXn8yjmwhlM1X MwGtwRFBwgaoaAaqeYhgQo2ikoKWwSf19poz76ohtz8jHvV7xqBQXWkj8f1NVtoI uB8= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:34 2026 by rpki-client