This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa File: LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa (raw, json) Hash identifier: gJ+6292a/zmiB+7Lg48nmQHbNWGgX6ni2+hF6SfxqDs= Subject key identifier: 2C:CF:DF:C1:33:98:DD:B5:8A:53:CE:8A:E5:5F:3E:DD:56:89:E7:1A Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Certificate serial: 019B7A5B93A7148FB885B5FB16504D6A8714 Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44049 IP address blocks: 91.199.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:93:a7:14:8f:b8:85:b5:fb:16:50:4d:6a:87:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ccfdfc13398ddb58a53ce8ae55f3edd5689e71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:22:42:0c:71:c3:9c:05:c5:4e:3f:99:1b: 3a:db:ca:9f:8e:3d:3a:3b:5b:70:c6:ee:1e:58:22: 78:6e:14:6d:73:86:b5:22:23:0d:4d:9c:79:29:15: 0c:03:69:ce:ed:51:49:99:c6:65:be:84:94:21:0e: f9:48:0d:2d:4a:fa:b1:10:58:9f:2b:3e:a7:65:97: 3b:30:71:6f:84:95:fb:ac:6e:f3:66:74:07:51:55: 3b:e9:22:fc:ee:75:0c:01:d0:98:47:35:77:72:cf: 02:8e:bf:66:25:b7:9c:9e:2f:45:97:f3:a2:5e:5c: d3:8f:00:cb:f7:c0:42:2f:9e:f6:dd:76:27:90:28: 94:b9:85:d2:1e:eb:a8:3a:63:23:33:d6:d4:71:a2: f1:25:c2:88:a5:0f:5b:08:bd:ff:e8:a9:bd:da:18: 31:1a:a1:2b:fc:6d:d7:60:67:88:7d:58:79:6f:af: 3b:69:52:b8:ab:53:4d:1e:79:1b:63:d3:fc:6a:e0: 1b:bb:57:35:24:01:5c:3d:de:0d:a0:e3:f6:ce:3a: 37:01:6d:2b:e0:6c:46:91:75:46:ff:22:9e:76:6f: 3b:42:4a:d2:2c:dd:64:06:8e:57:c1:ae:db:c2:d6: a5:57:77:fe:a8:66:8b:93:32:5e:db:6a:c5:ba:37: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CF:DF:C1:33:98:DD:B5:8A:53:CE:8A:E5:5F:3E:DD:56:89:E7:1A X509v3 Authority Key Identifier: keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.13.0/24 Signature Algorithm: sha256WithRSAEncryption 08:7d:b5:a3:e1:40:bc:e0:da:64:2f:9c:0a:1a:59:64:1e:00: fd:fa:e4:01:bc:d5:31:50:fb:37:50:fd:f0:82:4e:22:37:0a: d4:85:f8:ae:8a:33:ef:e1:07:82:bd:a1:65:72:24:5d:9f:41: 03:2b:29:80:34:fe:55:e6:4a:19:1f:2a:42:66:5a:24:ff:99: bc:2c:53:67:a0:33:9f:98:27:b4:63:f2:44:24:ba:c6:f4:57: af:5b:b8:36:9f:8f:80:47:df:c2:5b:c6:e4:06:d6:d0:2c:c8: 0e:ff:a8:b1:25:7a:ce:ec:7f:30:d9:06:56:f4:47:9f:c5:c3: 74:1a:1e:ff:46:6e:e9:6b:ce:68:27:68:e6:66:a2:41:4d:ba: 3c:30:3a:25:c0:c9:97:af:43:a3:fc:de:02:a1:4c:b9:22:15: 8f:fc:4c:6a:7e:dc:e0:27:46:e3:7b:58:cc:92:d9:7a:86:b1: 0d:69:e8:63:ae:3d:e0:4e:a5:e6:28:7e:21:a0:c4:cd:52:79: 5e:0e:ad:bb:dd:02:0c:59:75:9f:bd:a9:63:c2:8c:97:07:4b: 17:d0:c7:23:c8:2f:36:f9:b0:65:2f:e0:c8:82:5c:0e:85:c2: 63:cb:c5:74:da:e1:17:33:4d:fc:d7:12:79:91:06:e2:16:41: 40:90:10:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5OnFI+4hbX7FlBNaocUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5 ZmIyZGMwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2NmZGZjMTMzOThkZGI1OGE1M2NlOGFlNTVmM2VkZDU2ODllNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUEiQgxxw5wFxU4/mRs628qfjj06 O1twxu4eWCJ4bhRtc4a1IiMNTZx5KRUMA2nO7VFJmcZlvoSUIQ75SA0tSvqxEFif Kz6nZZc7MHFvhJX7rG7zZnQHUVU76SL87nUMAdCYRzV3cs8Cjr9mJbecni9Fl/Oi XlzTjwDL98BCL5723XYnkCiUuYXSHuuoOmMjM9bUcaLxJcKIpQ9bCL3/6Km92hgx GqEr/G3XYGeIfVh5b687aVK4q1NNHnkbY9P8auAbu1c1JAFcPd4NoOP2zjo3AW0r 4GxGkXVG/yKedm87QkrSLN1kBo5Xwa7bwtalV3f+qGaLkzJe22rFujfxsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzP38EzmN21ilPOiuVfPt1WiecaMB8GA1UdIwQY MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt NGMyZmJkZDU2Mjc5LzEvTE1fZndUT1kzYldLVTg2SzVWOC0zVmFKNXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5 LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cNMA0G CSqGSIb3DQEBCwUAA4IBAQAIfbWj4UC84NpkL5wKGllkHgD9+uQBvNUxUPs3UP3w gk4iNwrUhfiuijPv4QeCvaFlciRdn0EDKymANP5V5koZHypCZlok/5m8LFNnoDOf mCe0Y/JEJLrG9FevW7g2n4+AR9/CW8bkBtbQLMgO/6ixJXrO7H8w2QZW9EefxcN0 Gh7/Rm7pa85oJ2jmZqJBTbo8MDolwMmXr0Oj/N4CoUy5IhWP/ExqftzgJ0bje1jM ktl6hrENaehjrj3gTqXmKH4hoMTNUnleDq273QIMWXWfvaljwoyXB0sX0McjyC82 +bBlL+DIglwOhcJjy8V02uEXM0381xJ5kQbiFkFAkBCk -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:15 2026 by rpki-client