This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/lmShAguKDpqteUFiiwxYcMXfQMA.roa
File: lmShAguKDpqteUFiiwxYcMXfQMA.roa (raw, json)
Hash identifier: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=
Subject key identifier: 96:64:A1:02:0B:8A:0E:9A:AD:79:41:62:8B:0C:58:70:C5:DF:40:C0
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019B77C711D16A42F957E5A982FFF4274E7C
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/lmShAguKDpqteUFiiwxYcMXfQMA.roa
Signing time: Thu 01 Jan 2026 04:18:13 +0000
ROA not before: Thu 01 Jan 2026 04:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61241
IP address blocks: 45.136.132.0/22 maxlen: 24
45.136.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:11:d1:6a:42:f9:57:e5:a9:82:ff:f4:27:4e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jan 1 04:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9664a1020b8a0e9aad7941628b0c5870c5df40c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:61:11:a9:2a:f6:45:65:10:24:3b:4c:34:61:
84:e6:f9:78:c2:93:1e:73:74:b6:90:da:1d:33:5c:
dc:75:76:2f:6c:cf:f8:74:64:2a:c4:71:da:56:39:
39:0c:e1:55:2a:21:08:00:c0:68:7a:6a:27:7f:67:
e7:da:9d:6f:60:33:86:65:c9:23:20:69:04:ce:0c:
f1:d1:39:95:f6:d3:d1:e5:e4:61:4a:f0:fb:c3:38:
ff:70:71:d0:5e:5b:a5:81:ff:bc:b2:19:d1:4f:ac:
e7:f0:d0:82:19:ef:d2:5f:0e:62:c2:68:50:3b:6e:
6f:df:d1:22:ae:c2:b7:95:e3:72:1f:14:fb:88:4f:
ca:81:b6:89:90:57:eb:3d:8d:99:2b:eb:8e:c7:98:
17:6e:d4:a0:82:10:4b:f4:b2:5a:ad:47:58:0f:1d:
71:2c:af:e9:63:32:8a:33:d2:16:ec:a3:b4:b5:2b:
38:61:99:28:00:40:1a:a0:73:4c:9f:ef:6c:61:78:
6c:b6:63:36:e8:b0:37:34:ae:e2:65:66:f2:47:3e:
07:62:33:78:8d:51:eb:e7:b4:11:89:b4:28:e6:7d:
77:a7:12:88:48:ad:14:32:7f:3c:f1:9b:f9:03:82:
af:7f:09:42:c2:b0:38:9e:2b:0d:dc:ae:e0:03:ae:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:A1:02:0B:8A:0E:9A:AD:79:41:62:8B:0C:58:70:C5:DF:40:C0
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/lmShAguKDpqteUFiiwxYcMXfQMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.132.0/22
Signature Algorithm: sha256WithRSAEncryption
30:1f:2a:76:ad:ba:8a:55:0a:cd:49:1b:c8:d5:a7:17:80:b2:
b0:62:7e:3d:8a:35:29:14:1d:53:79:97:71:bb:c2:8d:7a:08:
78:bf:89:52:db:ee:3a:e3:b8:4b:d5:ff:d4:4e:a5:50:1a:cd:
62:00:47:21:87:f5:02:74:03:29:50:4c:60:7b:a7:94:73:7e:
89:86:82:b9:cc:75:6c:df:b6:7c:7c:a3:60:2e:5e:07:b8:5d:
67:6b:f6:c8:e0:aa:16:8c:3b:fc:30:f0:87:f3:c6:14:aa:e1:
8b:55:24:cf:23:1d:e9:e8:7a:00:b0:38:c2:d7:0e:0d:1e:f4:
27:a6:0e:5a:ff:53:ea:a5:47:35:3e:a4:ab:ee:28:37:f7:dc:
83:15:7b:7b:b0:fa:e1:06:3a:83:7c:76:86:41:20:86:29:a3:
70:e7:b0:66:69:1f:74:68:43:c6:dd:89:99:e1:0a:aa:6f:5a:
aa:82:b9:54:f9:e1:66:8d:48:27:79:50:1a:1a:15:fc:f9:0e:
ec:7d:3b:5d:d0:ee:55:fa:c7:7a:e0:25:c1:1f:c8:72:87:68:
1c:e4:fb:a3:1f:ee:a3:3a:ac:de:f1:c5:99:e8:f6:09:ff:f9:
8a:cf:68:9a:69:46:29:e2:bd:94:c6:cb:81:fd:b1:7d:d6:a7:
c4:4e:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:21 2026 by rpki-client