This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/LPjmn9PolMemZlvU3gzZjHmr9fw.roa File: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (raw, json) Hash identifier: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc= Subject key identifier: 2C:F8:E6:9F:D3:E8:94:C7:A6:66:5B:D4:DE:0C:D9:8C:79:AB:F5:FC Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91 Certificate serial: 019B78A32D7DA3EE9980723F9E9E70B00A0B Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/LPjmn9PolMemZlvU3gzZjHmr9fw.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 46.232.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2d:7d:a3:ee:99:80:72:3f:9e:9e:70:b0:0a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cf8e69fd3e894c7a6665bd4de0cd98c79abf5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:b5:bd:8c:af:14:0e:ba:21:73:0d:94:43: 69:a0:a3:a6:d0:e1:c5:57:dd:d6:d6:86:94:aa:dc: c0:e3:cd:00:4c:c1:87:94:0d:9a:c1:33:f8:95:03: a2:bb:01:e9:ea:0b:c6:97:26:00:a2:71:09:ed:69: 1e:8a:88:1e:08:55:23:2d:69:d5:bc:9b:65:9a:28: 83:80:57:38:c6:6d:c8:9b:e8:3a:2c:6c:ba:0f:39: 1e:03:8b:bf:33:e3:c5:de:b5:6a:b8:15:65:83:0a: 9a:1e:f9:df:57:51:12:f0:83:21:2d:9d:6b:33:40: b5:95:5a:ac:43:dd:17:4a:96:db:80:c7:c4:f6:b0: e9:fe:57:c9:9d:ec:28:91:9c:df:61:08:2b:24:cb: 82:fa:8a:93:0d:55:db:b8:66:f0:fd:be:6f:03:69: ed:21:e4:58:b5:d4:ba:d3:3e:69:86:da:63:f9:27: 28:64:ce:7b:55:e2:b0:8b:8f:15:e6:8f:fa:08:13: 15:da:eb:11:69:f1:e1:6a:e2:1c:81:d1:6f:ba:fa: 03:37:92:c3:78:97:07:36:43:0a:53:5f:01:69:be: 0f:50:cf:bf:4d:22:73:c9:8d:60:12:ca:4b:0b:9b: 92:ad:57:ef:19:4e:4b:c5:ca:29:54:9a:ee:7f:f5: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:E6:9F:D3:E8:94:C7:A6:66:5B:D4:DE:0C:D9:8C:79:AB:F5:FC X509v3 Authority Key Identifier: keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/LPjmn9PolMemZlvU3gzZjHmr9fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.210.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:c9:2e:94:1b:63:71:bd:5a:f9:2d:57:25:dc:55:8c:f9:7e: 0b:b8:14:77:6f:88:b6:94:bc:24:c0:3f:95:99:60:65:c4:a5: 30:bc:cd:e2:a9:12:1f:77:18:9c:af:d7:fe:f4:c1:86:9b:67: 50:60:99:8f:00:3a:05:bf:54:dc:05:81:1f:e3:73:bc:2c:53: bf:13:7b:9b:39:33:f1:e8:d2:bb:71:6b:9e:76:7e:4e:31:c1: ca:ba:50:05:1d:af:ea:79:3d:6c:4e:30:1b:7a:e2:85:8e:ae: 82:26:72:ea:58:0f:a9:bc:03:17:7f:47:97:65:70:12:23:9a: 62:c7:c1:d5:3c:cc:3c:95:30:ee:c6:f9:39:3a:69:b7:c0:cd: 66:14:6a:f0:2b:93:f5:24:4f:77:5a:aa:03:6c:cc:9d:6c:dd: 50:0e:b8:83:40:d0:67:dc:60:ac:2a:12:80:fd:d9:7b:31:7f: 07:1e:9b:d4:22:97:8c:bd:90:91:fb:93:19:d7:96:c0:57:79: 91:a7:f8:8a:eb:57:56:08:10:f3:0b:16:c1:17:be:48:b0:fa: 60:87:6e:ee:bd:a3:04:dc:f7:99:60:27:74:cc:cc:00:f7:7f: 54:0e:82:f8:3f:35:65:aa:fd:51:6a:8a:20:7a:c0:52:70:95: f9:8b:19:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oy19o+6ZgHI/np5wsAoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5 MGFhOTEwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Y4ZTY5ZmQzZTg5NGM3YTY2NjViZDRkZTBjZDk4Yzc5YWJmNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuG1vYyvFA66IXMNlENpoKOm0OHF V93W1oaUqtzA480ATMGHlA2awTP4lQOiuwHp6gvGlyYAonEJ7WkeiogeCFUjLWnV vJtlmiiDgFc4xm3Im+g6LGy6DzkeA4u/M+PF3rVquBVlgwqaHvnfV1ES8IMhLZ1r M0C1lVqsQ90XSpbbgMfE9rDp/lfJnewokZzfYQgrJMuC+oqTDVXbuGbw/b5vA2nt IeRYtdS60z5phtpj+ScoZM57VeKwi48V5o/6CBMV2usRafHhauIcgdFvuvoDN5LD eJcHNkMKU18Bab4PUM+/TSJzyY1gEspLC5uSrVfvGU5LxcopVJruf/WwhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCz45p/T6JTHpmZb1N4M2Yx5q/X8MB8GA1UdIwQY MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt ODU0MzgxNjg2YzdiLzEvTFBqbW45UG9sTWVtWmx2VTNnelpqSG1yOWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLujSMA0G CSqGSIb3DQEBCwUAA4IBAQBKyS6UG2NxvVr5LVcl3FWM+X4LuBR3b4i2lLwkwD+V mWBlxKUwvM3iqRIfdxicr9f+9MGGm2dQYJmPADoFv1TcBYEf43O8LFO/E3ubOTPx 6NK7cWuedn5OMcHKulAFHa/qeT1sTjAbeuKFjq6CJnLqWA+pvAMXf0eXZXASI5pi x8HVPMw8lTDuxvk5Omm3wM1mFGrwK5P1JE93WqoDbMydbN1QDriDQNBn3GCsKhKA /dl7MX8HHpvUIpeMvZCR+5MZ15bAV3mRp/iK61dWCBDzCxbBF75IsPpgh27uvaME 3PeZYCd0zMwA939UDoL4PzVlqv1RaoogesBScJX5ixmV -----END CERTIFICATE-----Generated at Wed Jan 21 10:35:05 2026 by rpki-client