This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/LkCmib1EjnSWsmRLiJmBTaAWtdQ.roa File: LkCmib1EjnSWsmRLiJmBTaAWtdQ.roa (raw, json) Hash identifier: Y+N1EbekCLAZeWo8X14udOZcT4v3arJrXQJbQzZ2aNM= Subject key identifier: 2E:40:A6:89:BD:44:8E:74:96:B2:64:4B:88:99:81:4D:A0:16:B5:D4 Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Certificate serial: 019A9691053C92057CD631DCD4B1E49736D7 Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/LkCmib1EjnSWsmRLiJmBTaAWtdQ.roa Signing time: Tue 18 Nov 2025 10:44:37 +0000 ROA not before: Tue 18 Nov 2025 10:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216472 IP address blocks: 89.43.132.0/24 maxlen: 24 89.43.133.0/24 maxlen: 24 89.43.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:91:05:3c:92:05:7c:d6:31:dc:d4:b1:e4:97:36:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Validity Not Before: Nov 18 10:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e40a689bd448e7496b2644b8899814da016b5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:5e:49:ff:e7:b8:49:ae:8f:ca:4e:71:0b: b9:e6:72:76:96:7f:35:a1:3d:27:dc:37:81:06:d8: bd:0f:72:f8:51:08:9f:f9:81:73:75:fe:4e:1a:71: a1:43:91:05:f9:29:9c:85:d8:af:62:72:f0:09:f1: 8a:5f:3d:7f:9e:07:c9:9b:f1:11:d6:de:04:73:40: e5:8d:8d:c1:ba:83:7a:a6:6a:94:17:bf:7d:7c:40: 92:ce:3b:09:f4:94:b4:81:6f:d1:4d:0c:51:38:49: 50:67:2f:7a:74:0e:e0:b6:01:4d:1c:b7:83:04:f9: 06:80:3b:4b:fd:61:b1:c2:89:09:f8:d8:4d:36:5a: 53:64:19:bf:8e:5a:25:d8:69:c2:69:63:67:9d:0e: 32:61:6f:13:4a:db:fa:70:c5:11:94:ee:30:8a:1e: 12:77:af:b7:51:54:0f:1c:38:15:1a:54:3b:52:e9: b9:73:4f:17:ef:18:4f:ae:3a:7b:81:34:a1:19:d4: 88:39:d7:35:a6:8a:7a:05:05:5e:bc:dc:33:eb:71: 5c:6e:f8:4a:bb:56:9d:63:64:df:08:df:cf:02:9e: 9e:11:e1:f3:82:13:85:5b:31:91:52:2a:f3:6b:32: 2b:5a:23:ec:bd:e5:cf:ef:aa:32:18:3f:58:ed:8a: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:A6:89:BD:44:8E:74:96:B2:64:4B:88:99:81:4D:A0:16:B5:D4 X509v3 Authority Key Identifier: keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/LkCmib1EjnSWsmRLiJmBTaAWtdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.132.0-89.43.134.255 Signature Algorithm: sha256WithRSAEncryption de:5e:69:62:91:49:c9:0e:41:9d:be:98:d3:fe:d5:be:fc:c5: cd:90:9a:e4:1a:15:d4:65:7f:9a:e7:f5:b9:ef:c7:0d:60:52: 37:bc:77:88:b1:b4:a4:0c:f6:00:e7:d7:51:9e:bb:7d:85:95: e4:6d:45:12:aa:ed:20:02:d5:13:49:0f:fd:bf:68:54:87:33: 5a:a3:65:19:db:0a:46:d0:99:a9:38:fd:c8:78:93:3d:47:b6: 3a:ce:db:ea:00:87:06:d8:67:07:24:87:f8:c0:e6:6e:34:39: 71:e6:49:77:37:a8:2e:cb:fa:eb:20:7c:88:e7:4e:54:a1:1d: b3:80:b1:a0:0a:48:f2:6a:5e:bc:8a:24:28:2b:16:ec:03:d2: 32:af:21:8d:c9:f2:87:01:f5:bb:76:29:46:2d:98:69:a6:4a: 82:7b:89:dd:51:44:19:9a:be:1a:3d:09:6d:ab:c7:90:27:9a: 9b:19:de:67:74:19:df:73:32:ba:87:bc:75:37:d9:9b:35:fa: f5:98:54:e0:08:f2:5d:0c:52:ab:c4:41:5a:b7:7d:bb:2e:18: 5b:70:1d:94:8c:c2:64:b8:d1:c8:da:1b:ab:d9:a1:4a:82:19: 80:0e:c7:af:a1:fe:38:1a:78:87:eb:00:0f:ed:e8:cf:e6:d0: 8b:c3:9e:53 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqWkQU8kgV81jHc1LHklzbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0 YjdkNDcwHhcNMjUxMTE4MTA0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQwYTY4OWJkNDQ4ZTc0OTZiMjY0NGI4ODk5ODE0ZGEwMTZiNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvReSf/nuEmuj8pOcQu55nJ2ln81 oT0n3DeBBti9D3L4UQif+YFzdf5OGnGhQ5EF+SmchdivYnLwCfGKXz1/ngfJm/ER 1t4Ec0DljY3BuoN6pmqUF799fECSzjsJ9JS0gW/RTQxROElQZy96dA7gtgFNHLeD BPkGgDtL/WGxwokJ+NhNNlpTZBm/jlol2GnCaWNnnQ4yYW8TStv6cMURlO4wih4S d6+3UVQPHDgVGlQ7Uum5c08X7xhPrjp7gTShGdSIOdc1pop6BQVevNwz63FcbvhK u1adY2TfCN/PAp6eEeHzghOFWzGRUirzazIrWiPsveXP76oyGD9Y7YpUKQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC5Apom9RI50lrJkS4iZgU2gFrXUMB8GA1UdIwQY MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt ODM2Mzg0NzVkOGFiLzEvTGtDbWliMUVqblNXc21STGlKbUJUYUFXdGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJZK4QD BABZK4YwDQYJKoZIhvcNAQELBQADggEBAN5eaWKRSckOQZ2+mNP+1b78xc2QmuQa FdRlf5rn9bnvxw1gUje8d4ixtKQM9gDn11Geu32FleRtRRKq7SAC1RNJD/2/aFSH M1qjZRnbCkbQmak4/ch4kz1HtjrO2+oAhwbYZwckh/jA5m40OXHmSXc3qC7L+usg fIjnTlShHbOAsaAKSPJqXryKJCgrFuwD0jKvIY3J8ocB9bt2KUYtmGmmSoJ7id1R RBmavho9CW2rx5AnmpsZ3md0Gd9zMrqHvHU32Zs1+vWYVOAI8l0MUqvEQVq3fbsu GFtwHZSMwmS40cjaG6vZoUqCGYAOx6+h/jgaeIfrAA/t6M/m0IvDnlM= -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:21 2025 by rpki-client