This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/LmhXkywW8SZtjadhpE8Fh2dmVFk.roa File: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (raw, json) Hash identifier: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0= Subject key identifier: 2E:68:57:93:2C:16:F1:26:6D:8D:A7:61:A4:4F:05:87:67:66:54:59 Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Certificate serial: 019B7CED9D15E4EC8DA2C05F262E9D028AC4 Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/LmhXkywW8SZtjadhpE8Fh2dmVFk.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206874 IP address blocks: 185.164.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9d:15:e4:ec:8d:a2:c0:5f:26:2e:9d:02:8a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e6857932c16f1266d8da761a44f058767665459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ed:14:c8:51:b2:6e:89:72:ac:7f:d0:3e:dd: 39:d3:c5:98:bf:61:45:74:c0:15:30:cf:72:17:c3: 58:aa:83:79:7d:c9:97:48:d3:ed:5b:1e:b8:af:c3: b8:ec:4a:87:58:db:22:21:85:ac:fe:34:50:49:4d: 1a:4e:a4:23:53:17:5e:17:e4:fb:7d:3f:e4:32:71: 8e:a8:98:97:2a:c6:55:d5:62:d3:5d:6a:97:7e:e1: 03:a1:75:48:fb:d5:b9:20:32:eb:ab:a5:ad:98:f3: 38:31:db:91:e9:72:66:80:c6:54:bd:64:65:99:75: 1d:5c:c6:b3:42:e9:54:cf:d5:df:d8:c9:01:12:c8: cd:fe:df:71:2f:cb:0e:43:48:ae:74:19:ab:a1:8f: 84:01:47:7a:13:b2:6c:16:17:43:45:e8:3a:95:1f: 64:59:8d:8f:53:43:2a:c1:87:91:e1:6b:56:2e:32: fb:27:7e:09:2e:e5:e6:a0:da:47:76:4d:37:b2:b6: 65:50:5d:96:02:df:e4:a7:30:f9:13:f8:60:cb:1f: 3f:a7:f3:af:19:16:74:9c:a3:26:bc:d8:cc:d6:38: 14:5d:97:ba:a6:32:44:46:e1:b6:0d:53:39:f9:79: 05:35:20:b2:e0:c4:ca:ac:d8:d4:64:ae:cd:b1:7f: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:57:93:2C:16:F1:26:6D:8D:A7:61:A4:4F:05:87:67:66:54:59 X509v3 Authority Key Identifier: keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/LmhXkywW8SZtjadhpE8Fh2dmVFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.124.0/22 Signature Algorithm: sha256WithRSAEncryption 82:fd:c3:a4:b8:02:49:7d:39:c6:62:6e:f2:b7:b6:18:47:15: 74:f7:36:67:d8:9a:2c:38:6f:13:da:42:a1:3b:1f:1e:8f:3f: 85:ac:76:d1:e2:70:90:3f:0e:29:2f:13:41:41:74:7f:11:d3: 73:2e:2a:5c:e7:14:de:e2:d6:fa:97:43:60:b9:47:d8:db:f7: 28:cc:34:6f:c5:13:14:bb:94:d2:f2:f2:31:40:32:c7:49:51: e8:fc:b6:5a:55:3a:34:d2:e8:98:5e:1d:b7:9e:9c:89:13:44: b9:a2:60:03:67:d1:c6:41:bc:ee:c0:f5:02:3a:d0:92:01:ce: 2b:8b:23:f7:f5:68:ff:f7:11:da:f9:9a:5e:8f:6d:4e:84:be: ed:7d:a9:de:b9:e4:be:84:c0:6a:c8:c9:04:c5:09:b5:ec:82: 03:85:f4:2e:b3:2a:77:9e:25:1a:9e:04:60:c6:91:ad:75:8f: 08:79:b5:c9:94:3a:9c:d0:25:5d:a1:39:b7:b5:6d:5c:47:c6: fa:d8:d2:0c:29:56:0a:88:f0:79:30:5a:61:b0:77:02:1b:ec: 7c:46:d1:71:72:83:54:15:5f:08:24:ec:85:a7:05:ec:50:bb: 89:3f:f3:8c:df:fc:93:47:d6:b6:a1:0e:c4:f4:8e:37:e7:ac: e5:51:b3:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z0V5OyNosBfJi6dAorEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3 NGQ1YzUwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTY4NTc5MzJjMTZmMTI2NmQ4ZGE3NjFhNDRmMDU4NzY3NjY1NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge0UyFGybolyrH/QPt0508WYv2FF dMAVMM9yF8NYqoN5fcmXSNPtWx64r8O47EqHWNsiIYWs/jRQSU0aTqQjUxdeF+T7 fT/kMnGOqJiXKsZV1WLTXWqXfuEDoXVI+9W5IDLrq6WtmPM4MduR6XJmgMZUvWRl mXUdXMazQulUz9Xf2MkBEsjN/t9xL8sOQ0iudBmroY+EAUd6E7JsFhdDReg6lR9k WY2PU0MqwYeR4WtWLjL7J34JLuXmoNpHdk03srZlUF2WAt/kpzD5E/hgyx8/p/Ov GRZ0nKMmvNjM1jgUXZe6pjJERuG2DVM5+XkFNSCy4MTKrNjUZK7NsX/5VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5oV5MsFvEmbY2nYaRPBYdnZlRZMB8GA1UdIwQY MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt NTI3YTlhNGVlNjI0LzEvTG1oWGt5d1c4U1p0amFkaHBFOEZoMmRtVkZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0 LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaR8MA0G CSqGSIb3DQEBCwUAA4IBAQCC/cOkuAJJfTnGYm7yt7YYRxV09zZn2JosOG8T2kKh Ox8ejz+FrHbR4nCQPw4pLxNBQXR/EdNzLipc5xTe4tb6l0NguUfY2/cozDRvxRMU u5TS8vIxQDLHSVHo/LZaVTo00uiYXh23npyJE0S5omADZ9HGQbzuwPUCOtCSAc4r iyP39Wj/9xHa+Zpej21OhL7tfaneueS+hMBqyMkExQm17IIDhfQusyp3niUangRg xpGtdY8IebXJlDqc0CVdoTm3tW1cR8b62NIMKVYKiPB5MFphsHcCG+x8RtFxcoNU FV8IJOyFpwXsULuJP/OM3/yTR9a2oQ7E9I4356zlUbOc -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:56 2026 by rpki-client