This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/LMLTnNGG_mpCcb8xX_bRIdktAnI.roa File: LMLTnNGG_mpCcb8xX_bRIdktAnI.roa (raw, json) Hash identifier: mg+RjP9njwHkTHKFXLCklOqta6CcqWTUZ1IVf8HvCmM= Subject key identifier: 2C:C2:D3:9C:D1:86:FE:6A:42:71:BF:31:5F:F6:D1:21:D9:2D:02:72 Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00 Certificate serial: 019BF94691ED1E6C6096FF3240ACA875A2DD Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/LMLTnNGG_mpCcb8xX_bRIdktAnI.roa Signing time: Mon 26 Jan 2026 07:48:30 +0000 ROA not before: Mon 26 Jan 2026 07:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6855 IP address blocks: 78.98.0.0/15 maxlen: 15 84.47.0.0/17 maxlen: 17 87.197.0.0/16 maxlen: 16 91.127.0.0/16 maxlen: 16 95.102.0.0/15 maxlen: 15 95.102.128.0/17 maxlen: 17 95.103.0.0/18 maxlen: 18 95.103.64.0/18 maxlen: 18 178.40.0.0/15 maxlen: 15 178.41.128.0/17 maxlen: 17 185.19.72.0/22 maxlen: 22 194.154.224.0/19 maxlen: 19 195.91.0.0/17 maxlen: 17 195.146.128.0/19 maxlen: 19 195.146.130.0/24 maxlen: 24 195.146.136.0/24 maxlen: 24 212.5.192.0/19 maxlen: 19 213.81.128.0/17 maxlen: 17 213.81.197.0/24 maxlen: 24 213.160.160.0/19 maxlen: 19 2a00:12a8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:46:91:ed:1e:6c:60:96:ff:32:40:ac:a8:75:a2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00 Validity Not Before: Jan 26 07:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc2d39cd186fe6a4271bf315ff6d121d92d0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:9f:90:7a:27:ea:d3:a6:de:c5:c7:26:87: 44:5d:1e:c7:5a:0b:55:58:d2:08:3b:f0:37:25:8d: 5c:24:60:47:9b:11:04:ba:b4:69:f4:02:d8:73:17: 0f:94:11:b0:ff:b4:2b:cc:4e:ff:40:00:17:42:0c: e5:bb:81:05:e6:2c:7b:11:66:bf:69:a1:e0:6c:29: fe:74:36:fb:72:d1:a1:bb:6e:b5:f2:ae:f2:3e:2b: 58:1b:6a:5b:66:da:e4:71:61:60:ed:80:97:74:20: 72:f1:37:97:1a:b9:4f:ec:ab:63:b8:44:48:c7:f2: 17:ec:70:2b:a6:d7:97:a7:83:77:7d:58:8f:bb:38: 94:a6:d3:75:b5:ec:0f:bb:d3:37:42:5f:8b:85:f3: 25:63:6f:9a:c6:56:50:31:98:ab:28:77:47:0c:68: 9c:9f:24:c7:e0:33:87:e2:ef:61:de:b7:d6:01:33: 70:35:e9:ef:ea:8b:81:dd:83:68:c7:b6:7a:d9:75: 13:26:4c:7f:85:8c:b4:89:95:1c:da:b9:ab:7e:95: 3a:23:4b:05:79:e7:d1:5d:fc:21:fc:3f:24:92:c9: 97:02:13:8c:28:63:4a:90:ed:7a:38:1e:d3:84:21: 3b:bc:a8:28:42:b7:12:8d:0b:c1:fc:1c:08:74:5b: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:D3:9C:D1:86:FE:6A:42:71:BF:31:5F:F6:D1:21:D9:2D:02:72 X509v3 Authority Key Identifier: keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/LMLTnNGG_mpCcb8xX_bRIdktAnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.98.0.0/15 84.47.0.0/17 87.197.0.0/16 91.127.0.0/16 95.102.0.0/15 178.40.0.0/15 185.19.72.0/22 194.154.224.0/19 195.91.0.0/17 195.146.128.0/19 212.5.192.0/19 213.81.128.0/17 213.160.160.0/19 IPv6: 2a00:12a8::/29 Signature Algorithm: sha256WithRSAEncryption 82:37:3f:b8:df:fd:48:64:09:57:76:79:c9:be:ee:4e:53:65: 60:f9:13:fe:62:de:fe:5a:6a:2b:3e:40:f0:f9:62:92:82:a0: b2:8d:ff:8c:36:70:40:3c:4e:39:66:17:1e:3c:39:f2:e1:1e: 36:15:55:c4:16:38:e2:8b:bf:d2:62:5a:1b:3e:8a:7b:3a:63: b5:73:4e:60:a8:59:10:4a:58:b6:d2:bf:fd:0e:74:de:83:62: b6:18:75:1a:aa:4d:03:3f:cc:3d:72:ec:b9:92:83:11:d9:24: 58:e3:d3:50:8e:1b:3a:06:73:33:39:e4:3a:ec:ca:fa:99:dc: 0b:8c:ac:ec:33:44:77:5b:b8:4b:c0:38:65:39:00:9c:1b:43: c6:3c:86:04:52:42:4f:b5:e5:49:6a:d4:4a:58:c1:6d:f9:6e: 5d:8f:aa:87:98:57:26:14:6e:f5:59:c4:87:2e:16:37:b3:62: b4:b1:94:70:dc:f2:12:69:12:4b:2b:1b:9f:1a:37:08:3f:9f: ef:bc:95:54:5a:7c:32:8f:8d:6d:7e:64:bf:85:21:a8:3a:36: 6c:d9:6d:4b:c2:a5:a9:51:b9:f0:89:ca:dc:e3:93:f9:50:3c: a4:8c:37:a7:93:cb:dc:e9:1e:ba:90:16:bc:7e:15:a7:77:1c: 99:5b:44:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZv5RpHtHmxglv8yQKyodaLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNTY0NmY3ZDhhZmMwYTkzM2ZiMzMzMzNmMzcwMTNkODNh MDRkMDAwHhcNMjYwMTI2MDc0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MyZDM5Y2QxODZmZTZhNDI3MWJmMzE1ZmY2ZDEyMWQ5MmQwMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaWfkHon6tOm3sXHJodEXR7HWgtV WNIIO/A3JY1cJGBHmxEEurRp9ALYcxcPlBGw/7QrzE7/QAAXQgzlu4EF5ix7EWa/ aaHgbCn+dDb7ctGhu2618q7yPitYG2pbZtrkcWFg7YCXdCBy8TeXGrlP7KtjuERI x/IX7HArpteXp4N3fViPuziUptN1tewPu9M3Ql+LhfMlY2+axlZQMZirKHdHDGic nyTH4DOH4u9h3rfWATNwNenv6ouB3YNox7Z62XUTJkx/hYy0iZUc2rmrfpU6I0sF eefRXfwh/D8kksmXAhOMKGNKkO16OB7ThCE7vKgoQrcSjQvB/BwIdFvOOwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFCzC05zRhv5qQnG/MV/20SHZLQJyMB8GA1UdIwQY MBaAFJ9WRvfYr8CpM/szMz83AT2DoE0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUt N2QzMmNhMDY1YjY2LzEvTE1MVG5OR0dfbXBDY2I4eFhfYlJJZGt0QW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUtN2QzMmNhMDY1YjY2 LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBPBAIAATBJAwMBTmIDBAdU LwADAwBXxQMDAFt/AwMBX2YDAwGyKAMEArkTSAMEBcKa4AMEB8NbAAMEBcOSgAME BdQFwAMEB9VRgAMEBdWgoDANBAIAAjAHAwUDKgASqDANBgkqhkiG9w0BAQsFAAOC AQEAgjc/uN/9SGQJV3Z5yb7uTlNlYPkT/mLe/lpqKz5A8PlikoKgso3/jDZwQDxO OWYXHjw58uEeNhVVxBY44ou/0mJaGz6KezpjtXNOYKhZEEpYttK//Q503oNithh1 GqpNAz/MPXLsuZKDEdkkWOPTUI4bOgZzMznkOuzK+pncC4ys7DNEd1u4S8A4ZTkA nBtDxjyGBFJCT7XlSWrUSljBbfluXY+qh5hXJhRu9VnEhy4WN7NitLGUcNzyEmkS Sysbnxo3CD+f77yVVFp8Mo+NbX5kv4UhqDo2bNltS8KlqVG58InK3OOT+VA8pIw3 p5PL3OkeupAWvH4Vp3ccmVtE0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 14:43:24 2026 by rpki-client