This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/LpNRmtsCoRjao-6dvwj2HPVgG4s.roa File: LpNRmtsCoRjao-6dvwj2HPVgG4s.roa (raw, json) Hash identifier: kvWzFrGBwO1uv+vNoO53LU8Aj/p6EPQlI2j6iM0S5QI= Subject key identifier: 2E:93:51:9A:DB:02:A1:18:DA:A3:EE:9D:BF:08:F6:1C:F5:60:1B:8B Certificate issuer: /CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00 Certificate serial: 019B7C7FC77447185194819F5C3FDD004FBF Authority key identifier: 6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/LpNRmtsCoRjao-6dvwj2HPVgG4s.roa Signing time: Fri 02 Jan 2026 02:18:27 +0000 ROA not before: Fri 02 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56526 IP address blocks: 192.166.132.0/24 maxlen: 24 192.166.133.0/24 maxlen: 24 192.166.134.0/24 maxlen: 24 192.166.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c7:74:47:18:51:94:81:9f:5c:3f:dd:00:4f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e93519adb02a118daa3ee9dbf08f61cf5601b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:d4:ad:6f:ba:f7:dc:c3:3b:87:e7:e3:f2: 58:85:6c:0c:2c:34:9f:7e:eb:e3:1b:e7:e5:2b:c6: b4:64:93:19:e4:dd:e4:ea:0c:cf:90:99:7c:b1:bf: 00:c6:c0:7b:aa:e0:6f:5b:8a:c3:dd:74:01:93:75: de:24:0b:1d:9e:27:58:95:a7:b8:92:89:0d:75:6b: 3f:be:01:35:c2:c2:44:b4:d1:c7:fb:aa:3e:ee:de: 0a:16:19:9a:b6:56:db:ea:10:a0:17:de:ef:12:1c: 45:15:d5:06:1b:b8:5c:92:b1:30:70:f7:e8:8f:da: e5:ff:85:b6:55:58:d8:c0:8e:fc:2a:0d:85:3a:3d: f4:3e:f4:be:90:be:36:3a:07:53:83:86:01:e8:7e: 67:52:24:49:1a:3c:24:61:77:bc:ae:70:9d:51:15: 4c:5c:e9:49:3b:1e:6c:cc:3b:fe:09:46:83:86:4f: 88:05:41:9a:9e:3e:c3:a2:bb:f1:43:f3:1d:77:b4: 33:d8:f2:1e:c5:ab:ff:6f:ff:3f:69:26:2c:8d:94: 90:f9:9d:c5:86:4f:05:8f:ca:5c:b5:25:d3:2f:bc: d3:f8:80:95:83:8e:47:96:ad:19:d9:3b:e0:56:2b: 97:ff:52:e9:b5:b1:86:ac:0e:ab:9a:0f:55:13:44: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:51:9A:DB:02:A1:18:DA:A3:EE:9D:BF:08:F6:1C:F5:60:1B:8B X509v3 Authority Key Identifier: keyid:6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/LpNRmtsCoRjao-6dvwj2HPVgG4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.132.0/22 Signature Algorithm: sha256WithRSAEncryption 78:f0:9d:40:ca:e4:8c:3b:32:a9:c8:fb:d3:c9:97:65:a1:5e: 23:7c:87:e6:93:14:2a:c0:fc:e6:ba:bf:6c:01:d1:46:b0:e4: f6:11:4a:b2:a4:46:58:a5:05:89:e1:c7:b3:e5:a6:31:07:4f: eb:dc:f6:f3:cd:69:b4:ca:2b:bd:bd:fa:67:0e:1d:28:04:5b: fc:a8:a3:29:63:f1:1c:9e:28:0e:34:b3:b8:04:14:3a:6d:d1: 89:08:b2:90:45:1f:30:5a:d6:fc:bd:95:39:f0:c8:3b:f6:bd: 52:c8:4e:d7:9a:a2:9a:56:aa:62:45:5b:b1:31:3b:a0:21:18: 19:1f:df:fa:e3:b2:e8:fb:69:8f:6e:8a:05:dd:af:0d:7c:31: 40:cc:ba:2b:de:b3:39:98:65:02:22:2c:05:ef:1e:00:8b:69: 5e:a5:c7:46:2e:25:33:b5:b2:ef:a2:de:1e:55:cb:73:ea:3b: 05:03:5c:35:8f:49:c1:79:5f:bd:d7:2a:ea:e4:a9:37:fe:6e: 75:42:29:39:df:66:9b:b6:80:77:0e:07:5c:37:0c:50:9b:4f: fb:5d:fe:22:fa:f4:45:84:7c:fe:df:70:c6:05:f9:9a:fb:6a: 04:c8:43:c6:d8:8e:9a:74:47:71:5e:30:fb:3f:91:48:69:ee: 2a:62:9a:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f8d0RxhRlIGfXD/dAE+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOGY3MWExOGRjZWM0MzQ3Y2M3YjRkMDJiYzg3ODRlOGFj MjdiMDAwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTkzNTE5YWRiMDJhMTE4ZGFhM2VlOWRiZjA4ZjYxY2Y1NjAxYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eTUrW+699zDO4fn4/JYhWwMLDSf fuvjG+flK8a0ZJMZ5N3k6gzPkJl8sb8AxsB7quBvW4rD3XQBk3XeJAsdnidYlae4 kokNdWs/vgE1wsJEtNHH+6o+7t4KFhmatlbb6hCgF97vEhxFFdUGG7hckrEwcPfo j9rl/4W2VVjYwI78Kg2FOj30PvS+kL42OgdTg4YB6H5nUiRJGjwkYXe8rnCdURVM XOlJOx5szDv+CUaDhk+IBUGanj7DorvxQ/Mdd7Qz2PIexav/b/8/aSYsjZSQ+Z3F hk8Fj8pctSXTL7zT+ICVg45Hlq0Z2TvgViuX/1LptbGGrA6rmg9VE0QFwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6TUZrbAqEY2qPunb8I9hz1YBuLMB8GA1UdIwQY MBaAFGuPcaGNzsQ0fMe00CvIeE6KwnsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hODYyNmItMzMwYS00ZTg0LTg0OTIt ZDk3Y2U1ZDQxYmIzLzEvTHBOUm10c0NvUmphby02ZHZ3ajJIUFZnRzRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hODYyNmItMzMwYS00ZTg0LTg0OTItZDk3Y2U1ZDQxYmIz LzEvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKaEMA0G CSqGSIb3DQEBCwUAA4IBAQB48J1AyuSMOzKpyPvTyZdloV4jfIfmkxQqwPzmur9s AdFGsOT2EUqypEZYpQWJ4cez5aYxB0/r3PbzzWm0yiu9vfpnDh0oBFv8qKMpY/Ec nigONLO4BBQ6bdGJCLKQRR8wWtb8vZU58Mg79r1SyE7XmqKaVqpiRVuxMTugIRgZ H9/647Lo+2mPbooF3a8NfDFAzLor3rM5mGUCIiwF7x4Ai2lepcdGLiUztbLvot4e Vctz6jsFA1w1j0nBeV+91yrq5Kk3/m51Qik532abtoB3DgdcNwxQm0/7Xf4i+vRF hHz+33DGBfma+2oEyEPG2I6adEdxXjD7P5FIae4qYprJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:16 2026 by rpki-client