This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/LMW0aePUvQsZOt8hq5DaRjAcjS4.roa File: LMW0aePUvQsZOt8hq5DaRjAcjS4.roa (raw, json) Hash identifier: gkvc2HFCiL+UIBjgtjN3d9pJgU/K71FhIXqf8pPSFiM= Subject key identifier: 2C:C5:B4:69:E3:D4:BD:0B:19:3A:DF:21:AB:90:DA:46:30:1C:8D:2E Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93 Certificate serial: 019B7BA50E76112389DC63438CD852972B0C Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/LMW0aePUvQsZOt8hq5DaRjAcjS4.roa Signing time: Thu 01 Jan 2026 22:19:33 +0000 ROA not before: Thu 01 Jan 2026 22:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197303 IP address blocks: 91.220.11.0/24 maxlen: 24 94.158.18.0/24 maxlen: 24 94.158.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0e:76:11:23:89:dc:63:43:8c:d8:52:97:2b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc5b469e3d4bd0b193adf21ab90da46301c8d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:90:0c:80:42:22:be:05:f5:31:70:38:b3: db:bd:25:53:8b:a0:90:30:33:6e:e4:7d:23:3b:a6: 8f:0e:a5:13:4e:77:f9:a3:80:8d:3d:1a:11:50:b7: e7:e8:2c:68:d4:c1:e5:7e:de:46:a1:3e:53:a7:c2: 36:82:c8:34:48:d6:f5:c4:7d:e3:36:d1:0d:a5:4f: 66:ce:cd:0c:36:60:80:8f:c1:84:22:8f:1f:2b:1e: 04:59:3e:2b:1e:76:f3:72:0c:90:27:83:b0:05:c9: 00:46:00:58:73:91:27:a9:5f:50:85:b3:81:5e:d5: 45:de:69:1d:2e:f9:d1:54:4d:52:43:75:78:1a:24: ea:48:21:5f:5d:7e:81:11:17:d4:b9:73:db:0e:27: ba:64:1a:5f:c0:17:55:43:93:76:62:45:20:6a:d3: 29:ff:95:e5:b6:c7:04:9c:52:17:2d:f6:59:6c:85: 3b:09:7c:4d:9a:89:97:96:79:62:67:4c:36:81:c7: 6e:b2:73:3c:d3:50:0d:9b:bb:de:83:2f:38:16:d3: 54:d9:a6:3b:47:c3:77:5c:99:07:2b:4d:7f:5a:bd: 63:54:50:c9:74:e4:ff:9b:c3:63:22:ae:df:69:98: a3:23:15:7a:51:33:63:f3:6b:99:93:f0:80:c0:04: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C5:B4:69:E3:D4:BD:0B:19:3A:DF:21:AB:90:DA:46:30:1C:8D:2E X509v3 Authority Key Identifier: keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/LMW0aePUvQsZOt8hq5DaRjAcjS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.11.0/24 94.158.18.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:ff:75:aa:2f:8f:98:df:ec:b0:18:bc:26:47:dc:95:1b:0a: 59:64:d0:75:9d:e0:fc:30:98:c3:cf:fe:d9:d2:32:cf:3d:e0: 44:a4:2a:9e:cd:e3:73:91:d3:96:19:e2:1a:8b:27:e8:a0:98: ae:44:b4:4d:38:02:1e:76:7d:ed:d6:b2:53:32:49:38:31:32: bf:e0:a1:0c:04:c8:7d:b0:df:a5:14:95:3f:72:72:ad:f5:db: d9:02:62:9f:20:64:64:c5:c5:b7:70:68:b0:fa:ef:d3:af:58: 42:04:ba:d2:0f:9d:93:ee:74:c3:b2:cb:fc:ae:c6:23:a4:e3: 52:56:a0:22:e2:24:b1:e7:4f:a2:7f:a1:4f:b7:ed:fc:91:03: 2e:00:7e:38:78:e6:41:e9:08:30:78:16:74:30:0c:d4:79:b4: 45:08:c5:db:e9:57:33:f9:01:24:91:da:6b:ff:36:74:ef:60: ab:f6:42:ca:65:87:9d:f7:a5:d1:29:9f:86:bc:e4:a0:5c:12: 55:29:41:7a:c1:18:f3:3d:fc:6b:c4:3b:27:02:c5:7f:48:7c: 6b:23:a2:c2:7e:5a:04:c9:3c:70:d6:79:00:85:33:b9:00:83: 91:48:15:8d:16:a7:d0:e2:21:f5:b3:82:d5:52:b4:dd:e3:db: 09:91:65:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pQ52ESOJ3GNDjNhSlysMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTU2NTZjNjlkNTUzZGE5MmI3ODM4NTBlMTViMTcwNGU4 NzZkOTMwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2M1YjQ2OWUzZDRiZDBiMTkzYWRmMjFhYjkwZGE0NjMwMWM4ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOSQDIBCIr4F9TFwOLPbvSVTi6CQ MDNu5H0jO6aPDqUTTnf5o4CNPRoRULfn6Cxo1MHlft5GoT5Tp8I2gsg0SNb1xH3j NtENpU9mzs0MNmCAj8GEIo8fKx4EWT4rHnbzcgyQJ4OwBckARgBYc5EnqV9QhbOB XtVF3mkdLvnRVE1SQ3V4GiTqSCFfXX6BERfUuXPbDie6ZBpfwBdVQ5N2YkUgatMp /5XltscEnFIXLfZZbIU7CXxNmomXlnliZ0w2gcdusnM801ANm7vegy84FtNU2aY7 R8N3XJkHK01/Wr1jVFDJdOT/m8NjIq7faZijIxV6UTNj82uZk/CAwAQIMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCzFtGnj1L0LGTrfIauQ2kYwHI0uMB8GA1UdIwQY MBaAFMtVZWxp1VPakreDhQ4VsXBOh22TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80ZTIxNTAtNjY5ZC00NTU0LWI3Nzkt MmJiODg2MWEzZTRkLzEvTE1XMGFlUFV2UXNaT3Q4aHE1RGFSakFjalM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80ZTIxNTAtNjY5ZC00NTU0LWI3NzktMmJiODg2MWEzZTRk LzEveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9wLAwQB Xp4SMA0GCSqGSIb3DQEBCwUAA4IBAQA+/3WqL4+Y3+ywGLwmR9yVGwpZZNB1neD8 MJjDz/7Z0jLPPeBEpCqezeNzkdOWGeIaiyfooJiuRLRNOAIedn3t1rJTMkk4MTK/ 4KEMBMh9sN+lFJU/cnKt9dvZAmKfIGRkxcW3cGiw+u/Tr1hCBLrSD52T7nTDssv8 rsYjpONSVqAi4iSx50+if6FPt+38kQMuAH44eOZB6QgweBZ0MAzUebRFCMXb6Vcz +QEkkdpr/zZ072Cr9kLKZYed96XRKZ+GvOSgXBJVKUF6wRjzPfxrxDsnAsV/SHxr I6LCfloEyTxw1nkAhTO5AIORSBWNFqfQ4iH1s4LVUrTd49sJkWU/ -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:50 2026 by rpki-client