This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa File: LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa (raw, json) Hash identifier: IeCaOVu0UoDFXz4huIJasKVw/iNCvSqG8pZqqp+jQ3I= Subject key identifier: 2E:66:4B:EC:D4:09:DC:20:3E:0A:18:0E:B6:B3:1D:DF:68:EF:64:12 Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Certificate serial: 019B7B36D33E62ECEDAB74107140537F3AD0 Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 31.25.8.0/23 maxlen: 23 185.83.20.0/22 maxlen: 22 185.175.91.0/24 maxlen: 24 212.104.208.0/24 maxlen: 24 2a11:bd80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d3:3e:62:ec:ed:ab:74:10:71:40:53:7f:3a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e664becd409dc203e0a180eb6b31ddf68ef6412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:5c:46:58:d2:b6:6e:6d:22:13:ed:00:ec: 49:36:d1:e5:63:1a:20:36:c0:53:ff:a7:f1:ef:00: 43:23:7b:67:ff:ce:fc:1d:7d:82:bf:16:d6:34:ea: ee:cb:d0:9b:9f:88:cb:27:65:e2:93:e4:77:61:28: 5f:3f:39:78:c5:e5:42:73:7e:0e:24:41:bc:c6:65: 03:76:58:b7:66:e2:9d:ec:23:39:af:c2:cb:d9:23: cb:a6:f1:71:5e:77:2d:66:80:83:20:d8:9a:6f:fd: ff:19:1a:92:e9:6a:9e:4c:86:ba:99:7c:7f:74:db: 1d:56:3a:e6:1f:c5:b4:e3:8e:3c:fd:10:6a:1c:bc: 09:99:b7:c6:80:28:6c:8e:59:cc:99:fb:e6:25:d0: 98:1b:23:b8:47:1d:77:4e:98:d1:4a:f5:b0:b3:84: fd:b3:8e:cc:a1:fc:09:7d:4f:3f:a8:a1:64:02:c3: 82:3f:8b:68:e8:b4:32:cd:f1:c9:c5:f1:e1:3f:8e: 2a:cf:b5:65:43:71:e4:8e:f3:66:0a:b5:85:a4:52: 9c:47:f0:55:47:e2:04:0a:aa:12:d1:a3:40:a7:cb: cb:af:bf:92:8d:a2:8d:7b:7a:15:71:d0:10:31:1d: 0d:38:b8:d8:2f:56:ef:57:3c:48:bd:4a:74:4b:3b: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:66:4B:EC:D4:09:DC:20:3E:0A:18:0E:B6:B3:1D:DF:68:EF:64:12 X509v3 Authority Key Identifier: keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.8.0/23 185.83.20.0/22 185.175.91.0/24 212.104.208.0/24 IPv6: 2a11:bd80::/32 Signature Algorithm: sha256WithRSAEncryption 9b:14:f6:36:89:4f:55:b9:85:8b:df:83:ee:0d:3f:19:9a:c0: 10:ca:4f:12:bc:49:43:2f:6f:49:d0:04:87:dc:89:13:a5:bf: 10:47:d7:43:7e:4f:c8:51:90:17:60:b9:33:5d:f3:ac:91:f6: 21:af:f4:a6:d7:08:dd:5c:23:37:3d:01:64:67:40:a4:05:89: 01:d8:25:44:2e:ec:f3:6a:6a:d2:f7:d9:de:93:0e:0e:7f:53: cd:37:58:16:61:39:a2:c1:cd:01:e8:a4:d8:06:4f:8b:d6:0e: 13:00:d7:9c:96:bf:cc:66:1e:99:4f:6d:b7:3b:da:5a:3f:66: d6:32:6d:6e:3a:7a:81:62:e8:0c:f8:3f:fb:01:03:2a:28:f3: 5b:8f:7f:9d:ef:bd:76:7e:41:74:19:cb:49:66:64:48:35:37: bb:9d:53:e4:f8:a6:10:9c:2b:dd:3b:aa:ee:6b:23:88:11:90: 04:2f:06:37:fe:1c:71:30:bd:52:c2:a8:d1:9a:e0:16:5d:7a: e8:08:4a:db:3b:a1:a4:b0:a8:88:32:4d:cf:62:a1:10:75:40: 3d:4f:de:82:7d:d7:22:40:44:a6:e4:48:cb:d4:32:1a:97:86: ef:67:84:15:9e:12:93:3a:f3:bd:ae:59:01:61:8b:1d:9b:8a: e3:f3:ab:3a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NtM+Yuztq3QQcUBTfzrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl MGY0ZGYwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTY2NGJlY2Q0MDlkYzIwM2UwYTE4MGViNmIzMWRkZjY4ZWY2NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnFcRljStm5tIhPtAOxJNtHlYxog NsBT/6fx7wBDI3tn/878HX2CvxbWNOruy9Cbn4jLJ2Xik+R3YShfPzl4xeVCc34O JEG8xmUDdli3ZuKd7CM5r8LL2SPLpvFxXnctZoCDINiab/3/GRqS6WqeTIa6mXx/ dNsdVjrmH8W04448/RBqHLwJmbfGgChsjlnMmfvmJdCYGyO4Rx13TpjRSvWws4T9 s47MofwJfU8/qKFkAsOCP4to6LQyzfHJxfHhP44qz7VlQ3HkjvNmCrWFpFKcR/BV R+IECqoS0aNAp8vLr7+SjaKNe3oVcdAQMR0NOLjYL1bvVzxIvUp0SztcEQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFC5mS+zUCdwgPgoYDrazHd9o72QSMB8GA1UdIwQY MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt ZjkzZDFmODE1YjdkLzEvTG1aTDdOUUozQ0EtQ2hnT3RyTWQzMmp2WkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBHxkIAwQC uVMUAwQAua9bAwQA1GjQMA0EAgACMAcDBQAqEb2AMA0GCSqGSIb3DQEBCwUAA4IB AQCbFPY2iU9VuYWL34PuDT8ZmsAQyk8SvElDL29J0ASH3IkTpb8QR9dDfk/IUZAX YLkzXfOskfYhr/Sm1wjdXCM3PQFkZ0CkBYkB2CVELuzzamrS99nekw4Of1PNN1gW YTmiwc0B6KTYBk+L1g4TANeclr/MZh6ZT223O9paP2bWMm1uOnqBYugM+D/7AQMq KPNbj3+d7712fkF0GctJZmRINTe7nVPk+KYQnCvdO6ruayOIEZAELwY3/hxxML1S wqjRmuAWXXroCErbO6GksKiIMk3PYqEQdUA9T96CfdciQESm5EjL1DIal4bvZ4QV nhKTOvO9rlkBYYsdm4rj86s6 -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:40 2026 by rpki-client