This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/LMFtBS2aexBP5idp4kn9Cblsyrg.roa File: LMFtBS2aexBP5idp4kn9Cblsyrg.roa (raw, json) Hash identifier: SFFRBNG1AmZ+gynl5+RE9vwnB25aOjb/67Op7mUiN24= Subject key identifier: 2C:C1:6D:05:2D:9A:7B:10:4F:E6:27:69:E2:49:FD:09:B9:6C:CA:B8 Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3 Certificate serial: 019B7E393E3AEEE1DA0204A16056EF7DA752 Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/LMFtBS2aexBP5idp4kn9Cblsyrg.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57270 IP address blocks: 193.194.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3e:3a:ee:e1:da:02:04:a1:60:56:ef:7d:a7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc16d052d9a7b104fe62769e249fd09b96ccab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:5b:01:3f:8d:0a:93:d1:b5:fd:fa:3e:6a: c2:1c:e2:24:df:56:d1:b5:f8:31:d9:8b:cc:b7:58: 6e:6a:15:2c:47:2a:28:67:52:c5:88:8e:b9:f9:27: ba:71:92:82:ac:96:28:ea:42:d2:0c:9b:87:b3:17: 1b:ed:de:23:b8:7b:b9:86:f1:ba:ac:6b:27:2b:7c: 75:89:3c:b9:9b:20:be:a9:06:39:c8:ed:f1:74:ae: 5b:eb:8c:86:bb:fd:bd:37:3b:09:c5:ba:89:6a:c2: 1a:ae:8a:53:09:c8:f4:e3:0a:dc:4a:09:b4:b2:1a: 79:7a:f0:b9:ae:d2:25:c5:04:bf:08:ee:b0:8c:e8: 2b:8a:b2:4c:b2:ee:06:fe:17:19:9c:80:fd:2d:0c: 49:05:80:4e:c0:51:68:c0:c2:9e:ea:3c:7d:50:ea: 6b:1d:d1:20:c2:cf:c3:aa:1d:ba:c8:99:e7:34:68: e4:d8:34:96:46:49:4f:72:95:72:99:f1:2d:4c:94: 62:b5:f3:1f:ef:3b:3a:20:44:de:3a:81:c6:b8:01: de:f5:62:83:c2:8c:2c:81:60:13:3c:ad:90:32:b5: 41:0a:75:84:df:4c:ed:be:ed:df:c5:e4:e3:fb:4a: bb:a6:f4:b3:59:25:25:24:b6:41:d0:c2:8e:dd:fd: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:6D:05:2D:9A:7B:10:4F:E6:27:69:E2:49:FD:09:B9:6C:CA:B8 X509v3 Authority Key Identifier: keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/LMFtBS2aexBP5idp4kn9Cblsyrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.106.0/23 Signature Algorithm: sha256WithRSAEncryption 83:ea:d4:05:45:63:58:fb:12:ef:c0:7f:f2:b4:ff:11:9c:b9: ee:85:cc:77:58:00:04:a2:98:2f:39:fc:ee:7f:bf:62:9a:dc: ed:70:0f:35:4c:cf:c3:bf:d0:b5:58:ed:3d:de:eb:99:4b:3b: ad:0c:63:0d:ac:15:9f:e6:04:71:9c:d2:8f:19:61:46:d0:51: bf:27:c1:7a:45:4b:29:8d:9d:67:f8:8b:1d:51:72:5a:bd:29: 32:a6:21:65:d9:49:2c:aa:32:56:b1:dd:5c:44:86:cb:8d:09: 63:6d:14:fe:a3:4f:44:c4:67:e5:cc:50:43:5d:fc:15:64:51: 0c:eb:df:b0:62:bb:1c:3a:ee:9b:74:4c:c1:81:ec:89:2b:e9: e7:7e:fb:76:18:fa:11:bd:88:ad:82:b5:d8:77:11:c8:39:24: 88:e8:80:26:2d:25:27:0d:27:2c:56:33:a2:e6:dd:d8:ff:d3: f1:57:98:3d:50:8c:43:a5:c9:a7:40:45:7c:96:4e:f0:b4:00: cd:24:4f:e2:de:f8:c8:f3:e8:84:16:a5:39:ea:9f:58:99:ea: be:c7:91:ea:e0:3a:55:b7:1d:ad:e3:f1:0a:c6:ac:8e:80:cd: c1:77:35:87:6c:2a:6f:bb:d9:8e:a8:6d:f4:c7:5d:2e:cf:20: 16:f6:8e:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OT467uHaAgShYFbvfadSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3 NjhmYzMwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MxNmQwNTJkOWE3YjEwNGZlNjI3NjllMjQ5ZmQwOWI5NmNjYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxVbAT+NCpPRtf36PmrCHOIk31bR tfgx2YvMt1huahUsRyooZ1LFiI65+Se6cZKCrJYo6kLSDJuHsxcb7d4juHu5hvG6 rGsnK3x1iTy5myC+qQY5yO3xdK5b64yGu/29NzsJxbqJasIaropTCcj04wrcSgm0 shp5evC5rtIlxQS/CO6wjOgrirJMsu4G/hcZnID9LQxJBYBOwFFowMKe6jx9UOpr HdEgws/Dqh26yJnnNGjk2DSWRklPcpVymfEtTJRitfMf7zs6IETeOoHGuAHe9WKD wowsgWATPK2QMrVBCnWE30ztvu3fxeTj+0q7pvSzWSUlJLZB0MKO3f08VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzBbQUtmnsQT+YnaeJJ/Qm5bMq4MB8GA1UdIwQY MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct Njk5Y2Y3YjA5NTkwLzEvTE1GdEJTMmFleEJQNWlkcDRrbjlDYmxzeXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcJqMA0G CSqGSIb3DQEBCwUAA4IBAQCD6tQFRWNY+xLvwH/ytP8RnLnuhcx3WAAEopgvOfzu f79imtztcA81TM/Dv9C1WO093uuZSzutDGMNrBWf5gRxnNKPGWFG0FG/J8F6RUsp jZ1n+IsdUXJavSkypiFl2UksqjJWsd1cRIbLjQljbRT+o09ExGflzFBDXfwVZFEM 69+wYrscOu6bdEzBgeyJK+nnfvt2GPoRvYitgrXYdxHIOSSI6IAmLSUnDScsVjOi 5t3Y/9PxV5g9UIxDpcmnQEV8lk7wtADNJE/i3vjI8+iEFqU56p9Ymeq+x5Hq4DpV tx2t4/EKxqyOgM3BdzWHbCpvu9mOqG30x10uzyAW9o5e -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:34 2026 by rpki-client