This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa File: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (raw, json) Hash identifier: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ= Subject key identifier: 96:6C:C8:F2:62:8A:ED:53:4A:E1:B4:B4:04:47:84:67:DC:21:CA:B2 Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972 Certificate serial: 019B77588AD2FF2A32C76905A7B6305C5319 Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28685 IP address blocks: 37.0.80.0/20 maxlen: 24 37.153.192.0/18 maxlen: 24 46.44.128.0/18 maxlen: 24 84.246.0.0/18 maxlen: 24 89.146.0.0/18 maxlen: 24 212.121.96.0/19 maxlen: 24 213.144.224.0/19 maxlen: 24 213.247.64.0/18 maxlen: 24 2a02:22a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8a:d2:ff:2a:32:c7:69:05:a7:b6:30:5c:53:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966cc8f2628aed534ae1b4b404478467dc21cab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:94:53:6d:b1:b6:d1:75:4c:b9:b8:18:a6: 48:95:61:a0:dc:2a:c0:25:c8:80:26:d6:11:c3:0d: 12:95:9a:5f:3d:11:e1:3c:f8:e5:12:11:7b:0b:d8: 77:07:59:cb:f9:7d:1b:77:7c:31:4d:10:38:27:b1: db:65:7c:20:46:42:86:8a:60:18:9c:94:4f:42:29: 72:ca:75:65:32:a9:9c:3b:70:ae:43:dd:71:ab:bc: 25:f1:d1:4e:c4:84:59:5c:b7:dd:b2:3e:7a:1e:3f: c1:2d:8e:1d:84:f3:44:8b:49:dc:f5:6b:94:70:8d: e7:eb:47:91:5e:04:c4:b7:9b:94:83:4a:db:20:2a: c2:3a:e8:56:a7:3c:84:66:97:23:4a:48:9a:a3:de: e1:83:9c:9a:00:58:59:59:9b:25:a0:24:99:2c:ac: 5b:ce:3c:cb:b4:2b:cf:51:67:6f:b4:15:e5:a0:ba: 69:e5:72:2d:ec:fd:03:ac:24:8f:c7:f3:43:9b:65: 64:6a:42:43:c6:94:d5:5a:99:e3:12:e0:57:5c:88: 1f:4e:89:8b:02:76:4c:66:27:e1:9a:18:94:f5:d0: 1e:96:a1:e7:06:a3:73:6a:d6:ac:18:5d:a1:05:f8: 4d:1b:ff:26:04:59:ec:a7:02:3f:44:e7:c0:47:fb: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6C:C8:F2:62:8A:ED:53:4A:E1:B4:B4:04:47:84:67:DC:21:CA:B2 X509v3 Authority Key Identifier: keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.80.0/20 37.153.192.0/18 46.44.128.0/18 84.246.0.0/18 89.146.0.0/18 212.121.96.0/19 213.144.224.0/19 213.247.64.0/18 IPv6: 2a02:22a0::/32 Signature Algorithm: sha256WithRSAEncryption 35:4e:6a:1b:0c:0a:0b:e4:13:70:d6:96:bb:00:c1:f9:dd:b5: ce:5d:c6:06:83:81:84:e2:6c:d1:1d:92:3d:9c:05:2a:56:22: a7:ee:5b:d6:2d:ad:ee:29:84:b7:04:78:3a:84:a7:a6:a8:60: 30:a2:4c:62:64:a0:e2:92:78:fb:2d:75:01:35:1c:b4:c3:55: b4:b8:70:77:0b:41:d9:ae:34:ac:40:bc:c2:62:f2:8a:b3:72: 22:26:a9:07:b1:23:0c:d5:66:e1:b9:19:8f:d4:62:5f:b6:19: 3b:be:a3:ec:0c:6c:6a:a1:6b:27:e8:bf:d9:b3:94:ae:a6:92: 3b:36:23:4a:c3:de:ff:86:d6:e0:68:3b:b5:11:96:00:81:15: e4:b8:b8:8b:f4:da:8f:38:02:88:a6:6f:34:5d:27:3d:2e:d6: f6:72:28:41:6e:a3:25:4a:0a:08:98:0e:0c:8c:dc:b5:c0:16: 1c:c5:0d:bd:c4:7e:35:80:ee:ab:80:9f:32:9a:44:fa:ac:e7: 7f:8f:cf:c4:7f:f3:bb:39:2a:eb:b9:35:dd:51:37:63:ed:ea: f3:fa:9a:4a:71:8c:18:c8:1c:17:59:f5:e4:ee:97:23:27:4a: f1:a5:25:80:f7:dd:70:85:ab:5b:c2:5f:96:2f:bc:de:c1:fe: 60:f4:05:38 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt3WIrS/yoyx2kFp7YwXFMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzY2YTc4NmU2ZWYzMTY3NGJlYzY4MzNjNzhhZWJlYzE2 MzM5NzIwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZjYzhmMjYyOGFlZDUzNGFlMWI0YjQwNDQ3ODQ2N2RjMjFjYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6UU22xttF1TLm4GKZIlWGg3CrA JciAJtYRww0SlZpfPRHhPPjlEhF7C9h3B1nL+X0bd3wxTRA4J7HbZXwgRkKGimAY nJRPQilyynVlMqmcO3CuQ91xq7wl8dFOxIRZXLfdsj56Hj/BLY4dhPNEi0nc9WuU cI3n60eRXgTEt5uUg0rbICrCOuhWpzyEZpcjSkiao97hg5yaAFhZWZsloCSZLKxb zjzLtCvPUWdvtBXloLpp5XIt7P0DrCSPx/NDm2VkakJDxpTVWpnjEuBXXIgfTomL AnZMZifhmhiU9dAelqHnBqNzatasGF2hBfhNG/8mBFnspwI/ROfAR/vq4wIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJZsyPJiiu1TSuG0tARHhGfcIcqyMB8GA1UdIwQY MBaAFBTGanhubvMWdL7Ggzx4rr7BYzlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWIt MzllNzZkYjJmODA4LzEvbG16SThtS0s3Vk5LNGJTMEJFZUVaOXdoeXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWItMzllNzZkYjJmODA4 LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEJQBQAwQG JZnAAwQGLiyAAwQGVPYAAwQGWZIAAwQF1HlgAwQF1ZDgAwQG1fdAMA0EAgACMAcD BQAqAiKgMA0GCSqGSIb3DQEBCwUAA4IBAQA1TmobDAoL5BNw1pa7AMH53bXOXcYG g4GE4mzRHZI9nAUqViKn7lvWLa3uKYS3BHg6hKemqGAwokxiZKDiknj7LXUBNRy0 w1W0uHB3C0HZrjSsQLzCYvKKs3IiJqkHsSMM1WbhuRmP1GJfthk7vqPsDGxqoWsn 6L/Zs5SuppI7NiNKw97/htbgaDu1EZYAgRXkuLiL9NqPOAKIpm80XSc9Ltb2cihB bqMlSgoImA4MjNy1wBYcxQ29xH41gO6rgJ8ymkT6rOd/j8/Ef/O7OSrruTXdUTdj 7erz+ppKcYwYyBwXWfXk7pcjJ0rxpSWA991whatbwl+WL7zewf5g9AU4 -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:47 2026 by rpki-client