This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/lMxeGirQXYR0GmDk4V1MklHdGZ0.roa File: lMxeGirQXYR0GmDk4V1MklHdGZ0.roa (raw, json) Hash identifier: FHwqA5/kX+tzwJy24N20vnc6oaI1ZNK+QVCJ/kD2Qfg= Subject key identifier: 94:CC:5E:1A:2A:D0:5D:84:74:1A:60:E4:E1:5D:4C:92:51:DD:19:9D Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1 Certificate serial: 019B7CED3D4C9029936F2F904691EBA3C888 Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/lMxeGirQXYR0GmDk4V1MklHdGZ0.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205868 IP address blocks: 37.130.140.0/22 maxlen: 24 146.66.228.0/24 maxlen: 24 2a00:7380:feed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3d:4c:90:29:93:6f:2f:90:46:91:eb:a3:c8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94cc5e1a2ad05d84741a60e4e15d4c9251dd199d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:04:86:23:28:e4:bb:93:41:59:bb:26:db: 9c:0e:da:96:7f:03:00:a5:af:24:3b:c3:30:7f:06: 0b:93:fd:89:c3:1a:b0:9a:ce:4d:87:9e:01:a5:db: 35:8b:12:5a:1c:9a:9c:f8:13:56:22:ab:43:ae:37: 06:e4:2c:91:ec:e5:e7:5f:a4:06:22:f2:f4:e6:49: c3:ca:a1:1a:66:1b:fb:02:d1:18:6f:17:02:d9:37: ab:ee:42:99:b1:b1:6e:6c:31:9a:da:0f:c2:72:dc: 65:20:2d:15:37:3d:24:c8:c6:ed:06:e0:90:53:b3: e4:84:41:fe:9d:9a:94:ae:16:61:bf:7d:3c:68:24: fd:6e:4a:b0:83:fb:7e:36:f8:d4:b3:77:e6:d2:64: 6d:fc:ff:d3:ee:35:5f:55:96:cf:8c:4c:ca:63:6d: 54:f9:32:89:ee:0a:86:66:32:d1:0e:9e:df:96:ed: 3d:e2:37:1c:08:62:3a:e8:db:75:e9:e9:f1:2c:0b: fa:33:98:62:48:91:8f:3e:fa:93:d5:ba:74:63:45: 52:2b:32:d4:4b:2a:d1:d1:97:c9:b3:a7:b0:28:37: b9:06:76:99:30:1b:c3:8c:b6:12:dc:80:fb:31:a6: f9:67:0a:41:09:a3:10:2a:97:28:2f:fd:d5:2d:37: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CC:5E:1A:2A:D0:5D:84:74:1A:60:E4:E1:5D:4C:92:51:DD:19:9D X509v3 Authority Key Identifier: keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/lMxeGirQXYR0GmDk4V1MklHdGZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.140.0/22 146.66.228.0/24 IPv6: 2a00:7380:feed::/48 Signature Algorithm: sha256WithRSAEncryption 5f:32:86:55:54:7a:b1:bf:d5:40:dc:62:02:80:bd:59:99:2c: 93:24:0c:01:2b:85:be:17:9e:3e:69:b9:e9:bd:16:bc:63:bf: f3:a0:38:c1:6e:08:d7:bd:e0:c0:9e:89:51:ee:7e:97:92:a6: 41:8c:f8:f8:c2:62:08:9f:8d:5e:78:48:10:0d:9b:9a:93:2d: 3d:60:1c:1b:3f:b1:a1:30:f9:a6:93:07:91:44:3b:9b:96:8c: 2f:1e:89:62:b6:73:aa:01:20:82:a5:38:26:33:33:05:ea:02: 4c:aa:aa:d7:bb:68:d3:b9:14:c8:45:7a:a9:2f:a4:7b:22:06: 42:5f:1d:c6:cf:b0:6c:59:ea:3f:e9:bb:e6:6e:58:89:bd:cd: 58:95:96:bc:79:bb:2d:6c:46:dd:ad:2d:47:ee:c9:d7:d3:0d: c8:6e:99:2e:d4:56:73:b5:1f:20:24:9e:a5:fb:28:ea:9b:3b: d3:b1:43:72:a0:3e:4e:50:7e:46:cc:51:96:50:fc:bc:73:b1: 99:9b:5c:49:44:3d:ea:75:4b:46:65:1e:02:a6:bc:ae:5c:49: d5:99:1f:3e:d9:2e:73:5b:d9:c6:e0:76:a7:0c:c4:7f:43:09: 97:d3:e6:cb:99:f2:43:37:b5:cf:6d:9c:5e:04:29:65:d0:29: 79:1c:eb:3b -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87T1MkCmTby+QRpHro8iIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODhlZjM3M2Y4ZjAwZTAxYzI1Y2Y5MjRiNGYyZThlYzZh MjE5ZDEwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGNjNWUxYTJhZDA1ZDg0NzQxYTYwZTRlMTVkNGM5MjUxZGQxOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5YEhiMo5LuTQVm7JtucDtqWfwMA pa8kO8MwfwYLk/2Jwxqwms5Nh54Bpds1ixJaHJqc+BNWIqtDrjcG5CyR7OXnX6QG IvL05knDyqEaZhv7AtEYbxcC2Ter7kKZsbFubDGa2g/CctxlIC0VNz0kyMbtBuCQ U7PkhEH+nZqUrhZhv308aCT9bkqwg/t+NvjUs3fm0mRt/P/T7jVfVZbPjEzKY21U +TKJ7gqGZjLRDp7flu094jccCGI66Nt16enxLAv6M5hiSJGPPvqT1bp0Y0VSKzLU SyrR0ZfJs6ewKDe5BnaZMBvDjLYS3ID7Mab5ZwpBCaMQKpcoL/3VLTeYhQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJTMXhoq0F2EdBpg5OFdTJJR3RmdMB8GA1UdIwQY MBaAFCaI7zc/jwDgHCXPkktPLo7GohnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAt N2Y3OGEzYmFhN2MxLzEvbE14ZUdpclFYWVIwR21EazRWMU1rbEhkR1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAtN2Y3OGEzYmFhN2Mx LzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCJYKMAwQA kkLkMA8EAgACMAkDBwAqAHOA/u0wDQYJKoZIhvcNAQELBQADggEBAF8yhlVUerG/ 1UDcYgKAvVmZLJMkDAErhb4Xnj5puem9Frxjv/OgOMFuCNe94MCeiVHufpeSpkGM +PjCYgifjV54SBANm5qTLT1gHBs/saEw+aaTB5FEO5uWjC8eiWK2c6oBIIKlOCYz MwXqAkyqqte7aNO5FMhFeqkvpHsiBkJfHcbPsGxZ6j/pu+ZuWIm9zViVlrx5uy1s Rt2tLUfuydfTDchumS7UVnO1HyAknqX7KOqbO9OxQ3KgPk5QfkbMUZZQ/LxzsZmb XElEPep1S0ZlHgKmvK5cSdWZHz7ZLnNb2cbgdqcMxH9DCZfT5suZ8kM3tc9tnF4E KWXQKXkc6zs= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:55 2026 by rpki-client