This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/lmDwmz-GtyiaNLLugK40qWh_h8s.roa File: lmDwmz-GtyiaNLLugK40qWh_h8s.roa (raw, json) Hash identifier: v9wEGxooeJNf+ZcLBoaKH/aJqtCxaC4olgQz9drbKc0= Subject key identifier: 96:60:F0:9B:3F:86:B7:28:9A:34:B2:EE:80:AE:34:A9:68:7F:87:CB Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177 Certificate serial: 019B7A5AD9306290BEFEB10BFFECE401202D Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/lmDwmz-GtyiaNLLugK40qWh_h8s.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48416 IP address blocks: 46.32.64.0/22 maxlen: 22 46.32.68.0/22 maxlen: 22 46.32.72.0/22 maxlen: 22 46.32.76.0/22 maxlen: 22 46.32.80.0/22 maxlen: 22 46.32.84.0/22 maxlen: 22 46.32.88.0/22 maxlen: 22 46.32.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:30:62:90:be:fe:b1:0b:ff:ec:e4:01:20:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9660f09b3f86b7289a34b2ee80ae34a9687f87cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:98:90:fb:45:81:44:10:32:4a:90:b1:26: 5c:2a:52:4d:b3:68:6d:f3:7c:e5:a3:4e:96:1a:a3: 17:73:cd:75:03:79:43:62:31:37:b0:e5:47:40:c1: 34:4a:05:4d:2b:e5:88:01:50:19:b1:d5:f9:cb:e7: c1:5f:9b:ba:d9:33:d2:14:2f:0e:8e:e6:09:a2:8f: 39:2e:55:1e:98:6d:3a:9b:c4:6d:b2:f1:4e:5b:92: 90:cf:0f:9c:8c:54:87:13:30:75:49:f2:24:bd:e5: 67:e8:22:2f:bd:e9:f1:db:3c:e0:99:2e:30:93:c7: c4:83:e9:c8:ec:32:9e:02:77:c7:81:9d:c9:81:fa: 29:5c:e2:cd:e8:93:68:d6:be:e7:cf:f3:96:7d:e0: fb:c9:bc:0a:dc:97:a7:ef:da:76:5a:9c:39:d3:47: 16:ef:e7:2d:58:77:13:d1:1e:d8:0f:70:7f:68:ad: 27:5b:0c:3a:b1:4f:53:3b:fe:ba:96:61:f4:35:ae: f5:f6:20:a6:92:79:aa:e1:06:16:27:be:3d:43:d6: 02:9e:0b:c7:1c:82:07:fc:07:5e:07:73:5f:a0:8c: ca:e0:1b:d2:64:4d:0a:ee:3e:57:2a:00:08:0b:6d: a4:9c:72:41:60:3e:61:df:57:51:14:7b:4b:98:10: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:F0:9B:3F:86:B7:28:9A:34:B2:EE:80:AE:34:A9:68:7F:87:CB X509v3 Authority Key Identifier: keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/lmDwmz-GtyiaNLLugK40qWh_h8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.64.0/19 Signature Algorithm: sha256WithRSAEncryption 6c:5f:ab:38:10:5e:dd:ef:d9:ad:8e:ad:7a:e5:28:a6:88:80: 29:f0:9e:02:d9:50:27:40:cb:ce:f8:df:d5:04:25:aa:66:62: 4e:f9:d9:83:aa:ea:91:57:a7:90:99:c9:47:1a:82:c9:8e:ef: 56:0d:de:25:1e:74:10:76:dd:ad:04:d4:9b:dd:82:75:db:ae: 9d:64:a1:59:95:c5:32:3a:8c:e9:7c:17:1b:89:20:2f:09:07: 59:d1:ce:3f:ee:d1:25:44:97:d8:18:fd:8e:61:00:e1:9a:72: c8:e5:2c:3b:d1:cc:2b:47:a1:3f:9b:ac:2f:39:19:20:27:39: 88:a0:01:b8:1b:97:f3:09:39:36:15:06:6b:20:da:e6:91:bd: ae:2f:f7:f7:e8:77:08:e4:fd:a2:c7:b1:39:7d:2d:31:01:b4: 33:f5:9c:47:60:34:34:06:a7:83:78:db:ed:85:5c:56:e5:f8: b6:f8:04:05:59:7c:d3:99:54:93:67:32:74:32:4f:bf:73:91: bb:a7:db:26:6b:d1:d8:75:76:52:af:23:d7:68:9b:aa:bb:1b: 76:68:d0:e2:21:09:e1:92:eb:45:cf:c7:04:fa:4d:fa:b8:8b: f2:7e:57:ba:ee:f6:98:1d:7c:e5:f0:a0:a8:08:4b:f6:37:12: 97:88:b6:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtkwYpC+/rEL/+zkASAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjQ2OTJhOTI5MWYyYzY3YjU2Y2MxNWRhNGQzMTAxMjAy MzAxNzcwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjYwZjA5YjNmODZiNzI4OWEzNGIyZWU4MGFlMzRhOTY4N2Y4N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox+YkPtFgUQQMkqQsSZcKlJNs2ht 83zlo06WGqMXc811A3lDYjE3sOVHQME0SgVNK+WIAVAZsdX5y+fBX5u62TPSFC8O juYJoo85LlUemG06m8RtsvFOW5KQzw+cjFSHEzB1SfIkveVn6CIvvenx2zzgmS4w k8fEg+nI7DKeAnfHgZ3JgfopXOLN6JNo1r7nz/OWfeD7ybwK3Jen79p2Wpw500cW 7+ctWHcT0R7YD3B/aK0nWww6sU9TO/66lmH0Na719iCmknmq4QYWJ749Q9YCngvH HIIH/AdeB3NfoIzK4BvSZE0K7j5XKgAIC22knHJBYD5h31dRFHtLmBAdHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJZg8Js/hrcomjSy7oCuNKlof4fLMB8GA1UdIwQY MBaAFOK0aSqSkfLGe1bMFdpNMQEgIwF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt YzI2NGI3NWI2Yjc4LzEvbG1Ed216LUd0eWlhTkxMdWdLNDBxV2hfaDhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4 LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiBAMA0G CSqGSIb3DQEBCwUAA4IBAQBsX6s4EF7d79mtjq165SimiIAp8J4C2VAnQMvO+N/V BCWqZmJO+dmDquqRV6eQmclHGoLJju9WDd4lHnQQdt2tBNSb3YJ1266dZKFZlcUy OozpfBcbiSAvCQdZ0c4/7tElRJfYGP2OYQDhmnLI5Sw70cwrR6E/m6wvORkgJzmI oAG4G5fzCTk2FQZrINrmkb2uL/f36HcI5P2ix7E5fS0xAbQz9ZxHYDQ0BqeDeNvt hVxW5fi2+AQFWXzTmVSTZzJ0Mk+/c5G7p9sma9HYdXZSryPXaJuquxt2aNDiIQnh kutFz8cE+k36uIvyfle67vaYHXzl8KCoCEv2NxKXiLaS -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:03 2026 by rpki-client