This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/lmGJr61Mn429__yMZ50UIOtKDTo.roa File: lmGJr61Mn429__yMZ50UIOtKDTo.roa (raw, json) Hash identifier: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA= Subject key identifier: 96:61:89:AF:AD:4C:9F:8D:BD:FF:FC:8C:67:9D:14:20:EB:4A:0D:3A Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Certificate serial: 019B7C111070B3D60906EA898AC22D2BAF48 Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/lmGJr61Mn429__yMZ50UIOtKDTo.roa Signing time: Fri 02 Jan 2026 00:17:31 +0000 ROA not before: Fri 02 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5539 IP address blocks: 31.214.222.0/23 maxlen: 23 45.15.240.0/24 maxlen: 24 109.230.244.0/23 maxlen: 23 185.143.68.0/23 maxlen: 23 2a07:3340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:10:70:b3:d6:09:06:ea:89:8a:c2:2d:2b:af:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Validity Not Before: Jan 2 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966189afad4c9f8dbdfffc8c679d1420eb4a0d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:cb:77:60:39:92:30:66:1e:86:e0:f5:a6: 77:ae:24:91:8d:e2:e9:f7:90:e9:f5:5e:84:14:7f: ab:ac:2f:26:b8:f2:8b:24:9e:4c:48:68:10:8f:e9: d3:d3:f5:75:3f:ea:98:4f:f1:de:ca:c5:c0:47:dc: 61:82:1a:54:03:e4:d4:0b:82:0a:8f:47:54:f0:f0: 17:12:67:f6:4f:cf:1e:4c:9f:b4:06:5e:a4:e0:1a: 1a:6d:65:c3:a9:3e:19:19:81:86:5c:3d:8a:af:63: c3:20:95:b3:4a:f9:51:98:f8:86:d9:45:f1:28:db: bb:8f:a1:86:ef:40:1b:15:de:d1:1a:54:0b:54:d2: 50:6a:2e:31:5d:b0:56:a8:41:9f:6a:9c:5c:29:82: af:af:dc:2b:33:10:b3:46:dc:63:9b:d7:de:bf:71: b2:01:f5:95:56:f6:82:76:e5:58:02:39:65:67:ff: c8:1c:69:53:b7:12:9c:58:f7:82:31:e3:70:08:15: f9:6f:83:41:97:1f:6f:80:7d:4a:63:d1:0a:ca:82: 31:4a:0e:18:ea:7e:59:f0:54:79:12:c6:cb:41:2d: ac:79:b4:d1:4d:28:53:91:4f:09:1a:a8:f3:28:65: 3d:be:20:c8:3a:87:86:08:eb:52:e1:7c:6d:10:f2: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:89:AF:AD:4C:9F:8D:BD:FF:FC:8C:67:9D:14:20:EB:4A:0D:3A X509v3 Authority Key Identifier: keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/lmGJr61Mn429__yMZ50UIOtKDTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.222.0/23 45.15.240.0/24 109.230.244.0/23 185.143.68.0/23 IPv6: 2a07:3340::/48 Signature Algorithm: sha256WithRSAEncryption 32:87:08:36:83:ca:3c:52:cb:a9:52:6e:79:cb:e0:00:e2:6c: 4b:83:3e:55:68:af:eb:81:71:ba:04:e6:d6:b1:f1:0b:38:b6: 74:a4:82:d1:9e:36:bf:85:bb:e6:68:f6:9f:bb:84:ee:c5:61: 58:5a:d9:18:4a:1b:75:27:26:1e:0b:5d:61:1a:f9:50:2c:f4: 5b:7f:7a:6e:57:12:12:6d:b5:3d:95:3a:ec:fe:cb:2d:f1:62: 84:f6:1d:bb:eb:ff:db:ec:55:8a:a4:49:c9:c4:3c:49:b2:68: 00:ae:7c:99:96:6e:c3:e3:4e:a0:48:6c:d1:f0:f0:ff:04:e0: 7d:77:72:77:05:d5:df:ae:fc:4b:44:b6:ab:f3:fc:70:6a:d7: 3a:b7:9f:3d:10:91:93:06:ad:b5:41:20:f9:83:70:66:b4:80: e1:be:70:1f:38:16:f4:16:98:09:c6:3a:38:be:4c:a5:92:dd: 6e:5d:ea:db:e7:cc:18:d0:27:ae:58:07:85:02:a2:45:ec:a6: 96:9a:75:25:70:54:fd:1b:5e:40:b5:20:39:51:28:c3:41:0f: 1e:73:24:31:b6:ba:0f:60:2c:a3:ba:97:de:8a:7b:71:19:8b: e6:ce:39:d6:a7:77:1c:74:59:3a:f8:b5:1d:fe:a3:5f:07:b2: 06:63:b4:58 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8ERBws9YJBuqJisItK69IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw ZjgwZTkwHhcNMjYwMTAyMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjYxODlhZmFkNGM5ZjhkYmRmZmZjOGM2NzlkMTQyMGViNGEwZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5brLd2A5kjBmHobg9aZ3riSRjeLp 95Dp9V6EFH+rrC8muPKLJJ5MSGgQj+nT0/V1P+qYT/HeysXAR9xhghpUA+TUC4IK j0dU8PAXEmf2T88eTJ+0Bl6k4BoabWXDqT4ZGYGGXD2Kr2PDIJWzSvlRmPiG2UXx KNu7j6GG70AbFd7RGlQLVNJQai4xXbBWqEGfapxcKYKvr9wrMxCzRtxjm9fev3Gy AfWVVvaCduVYAjllZ//IHGlTtxKcWPeCMeNwCBX5b4NBlx9vgH1KY9EKyoIxSg4Y 6n5Z8FR5EsbLQS2sebTRTShTkU8JGqjzKGU9viDIOoeGCOtS4XxtEPLimwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJZhia+tTJ+Nvf/8jGedFCDrSg06MB8GA1UdIwQY MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt YWY1MGZiNWNjNzdhLzEvbG1HSnI2MU1uNDI5X195TVo1MFVJT3RLRFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBH9beAwQA LQ/wAwQBbeb0AwQBuY9EMA8EAgACMAkDBwAqBzNAAAAwDQYJKoZIhvcNAQELBQAD ggEBADKHCDaDyjxSy6lSbnnL4ADibEuDPlVor+uBcboE5tax8Qs4tnSkgtGeNr+F u+Zo9p+7hO7FYVha2RhKG3UnJh4LXWEa+VAs9Ft/em5XEhJttT2VOuz+yy3xYoT2 Hbvr/9vsVYqkScnEPEmyaACufJmWbsPjTqBIbNHw8P8E4H13cncF1d+u/EtEtqvz /HBq1zq3nz0QkZMGrbVBIPmDcGa0gOG+cB84FvQWmAnGOji+TKWS3W5d6tvnzBjQ J65YB4UCokXsppaadSVwVP0bXkC1IDlRKMNBDx5zJDG2ug9gLKO6l96Ke3EZi+bO Odandxx0WTr4tR3+o18HsgZjtFg= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:12 2026 by rpki-client