This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/1n7UaGQqcjlKc-RwheHn58VAL2g.roa File: 1n7UaGQqcjlKc-RwheHn58VAL2g.roa (raw, json) Hash identifier: LsStmQogy/wtEZhVT3UaRq1oPn/P6s0GMZ58Y7YS8GQ= Subject key identifier: D6:7E:D4:68:64:2A:72:39:4A:73:E4:70:85:E1:E7:E7:C5:40:2F:68 Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Certificate serial: 019B79108F39D1B2F5ADDA43E7A49F22DFE2 Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/1n7UaGQqcjlKc-RwheHn58VAL2g.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34210 IP address blocks: 109.237.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8f:39:d1:b2:f5:ad:da:43:e7:a4:9f:22:df:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67ed468642a72394a73e47085e1e7e7c5402f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:a6:2c:06:89:a3:ce:ad:2b:23:aa:18:e9: 72:31:65:a2:cd:a3:c4:32:d5:b5:d9:80:4f:d0:b1: 1c:6b:1e:2f:51:e7:17:37:e4:d0:37:16:d6:d7:2f: 1f:96:cb:27:32:c8:35:7b:e0:30:15:39:ae:f6:4b: a4:39:c6:6b:44:4f:8c:bf:eb:60:05:3b:82:9d:2a: 1a:f8:a4:5d:00:ce:01:c0:15:cf:fc:0d:16:b3:90: 3e:16:57:72:15:8a:76:9c:46:d2:ab:b7:3c:5f:8f: 3c:48:b6:74:8d:d0:93:6c:1f:64:a7:7a:ba:de:d5: 40:97:72:62:e5:3a:cf:9d:4e:40:f3:8f:75:3f:98: ff:0e:a1:c6:92:50:aa:d7:d0:c1:b7:7d:cb:ec:87: c4:b8:88:d4:90:85:a8:3d:02:d8:0d:fb:fc:81:f8: b5:b5:08:54:f7:f2:87:88:18:c2:d7:a0:ca:8a:db: dd:dc:ce:77:d7:de:0c:8d:68:7f:6a:a3:3b:0c:b5: 42:20:4a:bf:48:a3:48:a2:65:aa:cc:4e:3a:e3:16: 98:79:71:6e:9d:ba:ac:c0:62:cc:37:f3:ef:99:e8: a6:3c:57:33:58:8f:bb:db:ea:80:4b:20:44:1d:8c: ca:a2:d4:9c:5a:3f:6d:13:61:0d:dc:c3:93:81:18: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:D4:68:64:2A:72:39:4A:73:E4:70:85:E1:E7:E7:C5:40:2F:68 X509v3 Authority Key Identifier: keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/1n7UaGQqcjlKc-RwheHn58VAL2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.78.0/23 Signature Algorithm: sha256WithRSAEncryption 25:31:7f:a3:d4:44:e3:61:59:e3:07:d8:9d:f0:fc:7c:fa:82: f4:a4:73:3d:23:eb:d8:a0:9e:0c:46:5f:e0:c0:59:54:28:18: 09:b9:f9:e4:4d:2e:61:7f:3b:b6:0e:27:82:06:d9:57:35:91: 60:30:e0:41:68:84:c7:7c:bf:45:9b:bd:67:da:0f:56:bd:d9: 17:79:fe:1e:83:28:0f:ee:5c:b4:05:96:ab:86:70:4e:d4:ef: a9:3d:4c:c4:8b:fe:bb:6d:fd:f9:dc:64:64:de:63:6f:ff:11: 64:66:ee:93:6f:79:81:d8:c8:7d:15:5f:72:4f:df:39:93:3b: 92:2a:92:5d:0c:3b:16:ad:88:da:b1:93:4b:6e:8e:f2:35:18: a5:37:28:aa:84:4a:95:f6:1c:8c:c6:98:ca:2d:36:24:40:2f: 00:78:c4:aa:ca:28:97:29:f1:04:fd:45:d6:be:01:18:4c:74: 02:13:f0:c1:11:8f:58:a7:f1:99:1f:f8:a7:3f:bd:7b:43:d6: 9f:52:3d:3f:2a:61:59:59:93:72:d0:6d:d7:ce:80:85:05:62: 08:ca:e3:7c:aa:f1:1b:47:00:e9:3a:8f:2c:1c:26:57:24:e7: 5c:44:01:70:b8:58:f6:d0:10:72:74:be:eb:13:93:b7:86:7f: dd:87:eb:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EI850bL1rdpD56SfIt/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmY4ZTM3ZTRhNmM4NGIzZjNiNWJhNzdlMjEwOWQzZWY1 OWFhZTAwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdlZDQ2ODY0MmE3MjM5NGE3M2U0NzA4NWUxZTdlN2M1NDAyZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslemLAaJo86tKyOqGOlyMWWizaPE MtW12YBP0LEcax4vUecXN+TQNxbW1y8flssnMsg1e+AwFTmu9kukOcZrRE+Mv+tg BTuCnSoa+KRdAM4BwBXP/A0Ws5A+FldyFYp2nEbSq7c8X488SLZ0jdCTbB9kp3q6 3tVAl3Ji5TrPnU5A8491P5j/DqHGklCq19DBt33L7IfEuIjUkIWoPQLYDfv8gfi1 tQhU9/KHiBjC16DKitvd3M53194MjWh/aqM7DLVCIEq/SKNIomWqzE464xaYeXFu nbqswGLMN/PvmeimPFczWI+72+qASyBEHYzKotScWj9tE2EN3MOTgRjmDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZ+1GhkKnI5SnPkcIXh5+fFQC9oMB8GA1UdIwQY MBaAFJZvjjfkpshLPztbp34hCdPvWargMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYt OThhYzY2NWIxOTA4LzEvMW43VWFHUXFjamxLYy1Sd2hlSG41OFZBTDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYtOThhYzY2NWIxOTA4 LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbe1OMA0G CSqGSIb3DQEBCwUAA4IBAQAlMX+j1ETjYVnjB9id8Px8+oL0pHM9I+vYoJ4MRl/g wFlUKBgJufnkTS5hfzu2DieCBtlXNZFgMOBBaITHfL9Fm71n2g9WvdkXef4egygP 7ly0BZarhnBO1O+pPUzEi/67bf353GRk3mNv/xFkZu6Tb3mB2Mh9FV9yT985kzuS KpJdDDsWrYjasZNLbo7yNRilNyiqhEqV9hyMxpjKLTYkQC8AeMSqyiiXKfEE/UXW vgEYTHQCE/DBEY9Yp/GZH/inP717Q9afUj0/KmFZWZNy0G3XzoCFBWIIyuN8qvEb RwDpOo8sHCZXJOdcRAFwuFj20BBydL7rE5O3hn/dh+vS -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:32 2026 by rpki-client