This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lAmmWkGs5LyT9RfeItAfnxG8bbk.roa File: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (raw, json) Hash identifier: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw= Subject key identifier: 94:09:A6:5A:41:AC:E4:BC:93:F5:17:DE:22:D0:1F:9F:11:BC:6D:B9 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791013B6178BAAE1CCA03FD3DABCCC68 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lAmmWkGs5LyT9RfeItAfnxG8bbk.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 46.37.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:13:b6:17:8b:aa:e1:cc:a0:3f:d3:da:bc:cc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9409a65a41ace4bc93f517de22d01f9f11bc6db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:57:90:bf:83:c7:cd:27:f2:35:b9:96:f5: 1c:da:8a:c5:f0:da:15:7d:16:8e:52:ed:f7:03:9c: f4:bc:02:34:04:09:40:bb:b2:44:00:1e:03:6d:22: f2:07:40:69:9b:49:64:d8:e6:78:a8:3b:2c:06:8f: 0f:39:7e:72:7d:6b:70:66:5c:a7:d8:65:bb:98:62: 65:69:55:84:bb:cb:08:b5:92:8f:cb:5e:0b:21:b3: c3:d3:54:fe:3d:55:d1:ef:95:5c:da:f6:ae:81:9a: e0:b1:0a:3e:29:e4:e8:67:f5:21:d6:2d:d8:1b:45: dc:be:4a:03:a6:85:0c:91:45:cf:1c:da:1a:bc:96: a4:ab:21:52:f6:46:bf:a0:4c:68:f0:e4:a5:a1:86: fd:aa:3f:4e:61:07:4c:09:86:ed:a4:6f:27:8c:01: 97:ea:8f:24:f7:2d:33:b2:c2:96:ea:a8:a8:f3:68: ff:9f:b6:9f:93:de:a9:83:c7:a2:ef:2d:57:f5:08: 07:b2:c5:7d:eb:64:0e:73:2c:0e:21:41:60:4b:bb: ac:69:b1:6b:85:d2:8a:31:73:d7:06:e4:bb:37:30: c7:07:01:d6:66:b5:4c:ae:be:04:92:78:71:37:ea: de:a6:b4:59:07:7f:7a:24:0b:c4:b2:c9:3b:f3:2e: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:09:A6:5A:41:AC:E4:BC:93:F5:17:DE:22:D0:1F:9F:11:BC:6D:B9 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lAmmWkGs5LyT9RfeItAfnxG8bbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.127.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:32:72:95:61:9d:12:fe:b7:57:2e:b7:10:22:c0:dc:5c:d8: f6:16:44:6a:12:2c:de:a0:12:91:fc:b0:6d:42:95:d9:1b:c9: c0:62:54:93:80:13:23:d6:53:cc:63:96:3c:e7:4f:cf:50:db: 3c:f1:7c:79:d5:84:58:8d:4b:cf:9c:d7:8e:28:3c:67:92:11: b1:a4:36:1f:42:71:80:cf:7d:3d:a0:e9:8c:23:90:6e:4a:37: bb:e8:47:d8:05:7d:0f:3e:92:37:7a:2c:55:08:c8:fa:fb:3a: 46:a9:a7:22:7c:ce:a1:a3:4b:79:9c:15:e7:af:b0:71:d9:9b: ca:dd:b8:6d:0c:57:be:96:ee:d5:3b:09:6f:9d:77:fe:dd:af: 08:95:04:ce:32:f8:b1:91:bc:06:59:6c:65:62:aa:36:98:0c: 58:59:f3:29:70:7b:65:13:c7:bc:33:c8:86:a1:6a:a3:b4:4d: b0:e5:83:4e:66:5f:bd:96:3f:03:6f:88:c1:50:09:44:9d:b0: 77:3c:26:4f:14:92:f6:54:6d:ff:72:02:70:be:c3:ae:e6:06: ac:3f:47:14:b1:cd:a8:1a:99:c6:71:56:ea:2c:95:8d:3c:53: 2b:1e:2f:79:6e:57:36:df:78:19:db:6d:75:4f:1e:14:c9:3c: a3:3f:ef:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBO2F4uq4cygP9PavMxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDA5YTY1YTQxYWNlNGJjOTNmNTE3ZGUyMmQwMWY5ZjExYmM2ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNpXkL+Dx80n8jW5lvUc2orF8NoV fRaOUu33A5z0vAI0BAlAu7JEAB4DbSLyB0Bpm0lk2OZ4qDssBo8POX5yfWtwZlyn 2GW7mGJlaVWEu8sItZKPy14LIbPD01T+PVXR75Vc2vaugZrgsQo+KeToZ/Uh1i3Y G0XcvkoDpoUMkUXPHNoavJakqyFS9ka/oExo8OSloYb9qj9OYQdMCYbtpG8njAGX 6o8k9y0zssKW6qio82j/n7afk96pg8ei7y1X9QgHssV962QOcywOIUFgS7usabFr hdKKMXPXBuS7NzDHBwHWZrVMrr4EknhxN+reprRZB396JAvEssk78y5JmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQJplpBrOS8k/UX3iLQH58RvG25MB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvbEFtbVdrR3M1THlUOVJmZUl0QWZueEc4YmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV/MA0G CSqGSIb3DQEBCwUAA4IBAQA9MnKVYZ0S/rdXLrcQIsDcXNj2FkRqEizeoBKR/LBt QpXZG8nAYlSTgBMj1lPMY5Y850/PUNs88Xx51YRYjUvPnNeOKDxnkhGxpDYfQnGA z309oOmMI5BuSje76EfYBX0PPpI3eixVCMj6+zpGqacifM6ho0t5nBXnr7Bx2ZvK 3bhtDFe+lu7VOwlvnXf+3a8IlQTOMvixkbwGWWxlYqo2mAxYWfMpcHtlE8e8M8iG oWqjtE2w5YNOZl+9lj8Db4jBUAlEnbB3PCZPFJL2VG3/cgJwvsOu5gasP0cUsc2o GpnGcVbqLJWNPFMrHi95blc233gZ2211Tx4UyTyjP+8x -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:13 2026 by rpki-client