This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/LmCE4vBv57eU5WHq9fR2fqAFtRA.roa
File: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (raw, json)
Hash identifier: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=
Subject key identifier: 2E:60:84:E2:F0:6F:E7:B7:94:E5:61:EA:F5:F4:76:7E:A0:05:B5:10
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019B79ED1052D4713830A7A455DC68403A36
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/LmCE4vBv57eU5WHq9fR2fqAFtRA.roa
Signing time: Thu 01 Jan 2026 14:18:57 +0000
ROA not before: Thu 01 Jan 2026 14:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42424
IP address blocks: 194.126.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:10:52:d4:71:38:30:a7:a4:55:dc:68:40:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jan 1 14:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e6084e2f06fe7b794e561eaf5f4767ea005b510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:6b:38:b9:84:34:48:53:72:ac:c4:61:ca:
73:d7:d7:15:a0:91:03:9f:0d:b2:a0:9b:99:47:62:
c3:93:8f:3c:0c:44:52:28:6b:fd:f6:29:f4:c6:e2:
6a:34:0e:0c:9b:7d:d0:45:00:db:b7:49:9a:a8:8b:
07:5b:36:ea:1d:dc:16:3c:af:a5:8e:c2:a3:40:9a:
10:a0:06:7f:15:5d:c6:44:1d:26:41:98:33:7e:da:
ac:69:b2:54:11:00:e2:d3:1e:99:90:47:27:94:d7:
59:52:c9:b1:85:98:74:e7:23:b5:4d:d6:75:6f:17:
ec:16:9b:7a:33:d8:fe:a2:f4:14:00:0c:d0:19:ca:
c7:87:2e:23:c6:d2:c2:df:59:ba:ec:32:bb:2f:15:
bf:64:58:33:77:45:1c:c5:a0:34:09:fa:04:d1:41:
e2:90:4f:0d:7f:e8:a1:1f:79:be:0f:65:4d:43:5d:
1f:a0:65:ab:b3:a8:c6:8f:e0:23:a0:fd:b5:09:ba:
47:f3:e2:4a:01:27:ab:40:d1:0c:56:9b:07:e9:de:
a7:6a:4f:be:de:92:94:f2:cd:b9:27:50:4a:a8:22:
4f:31:5e:93:9a:cf:98:b8:76:4e:44:42:3a:2e:9f:
0d:f8:7a:2a:20:b5:07:ba:a0:ac:a5:b6:f2:28:c0:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:84:E2:F0:6F:E7:B7:94:E5:61:EA:F5:F4:76:7E:A0:05:B5:10
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/LmCE4vBv57eU5WHq9fR2fqAFtRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.146.0/24
Signature Algorithm: sha256WithRSAEncryption
94:0f:bc:f7:a9:0b:30:82:d0:9b:8f:15:b3:e7:02:5f:bc:e1:
d3:42:fd:b3:6a:ea:89:ca:26:05:5e:ff:79:cd:50:f1:70:5d:
94:fd:80:1e:cf:f3:34:82:52:75:92:50:3d:30:bf:82:be:c3:
88:16:a5:41:94:7a:ab:a7:d8:0c:c8:21:10:0b:d5:79:85:f0:
87:97:62:a4:76:97:11:d4:4e:bb:e8:b9:f5:5c:3d:60:cf:df:
61:76:28:43:b0:a6:3f:ce:18:40:70:4c:49:b3:39:95:40:5f:
ae:c3:37:94:6c:fb:a2:e4:5f:61:46:47:5f:ef:c6:d9:37:a9:
84:a5:ce:00:b8:0b:9c:21:7a:c9:ea:84:d6:03:a3:20:0c:25:
49:8e:eb:18:c6:e9:29:51:61:73:37:9e:dc:9c:75:90:19:5c:
26:65:af:af:e2:88:a2:62:30:90:72:46:25:0a:83:3e:53:19:
50:a9:6c:89:f5:c9:06:39:55:1d:3d:4f:09:55:90:64:97:3c:
68:fa:1f:0b:78:7f:99:94:c3:54:6d:c1:23:55:ea:fe:a5:d6:
81:0b:e8:e8:23:32:58:47:0d:9b:a5:1f:4b:ed:3c:96:19:76:
8d:1d:24:f1:3d:bd:76:e7:f7:0e:65:22:ae:2e:6f:41:d9:ff:
1e:91:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:02 2026 by rpki-client