This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Lgmx_gl_V7fjhai8PufAymDIMQw.roa File: Lgmx_gl_V7fjhai8PufAymDIMQw.roa (raw, json) Hash identifier: pwHJ85c4Mt7cl4IcXbWn9DGXTqbGhi4b8WVhJ+9lXfY= Subject key identifier: 2E:09:B1:FE:09:7F:57:B7:E3:85:A8:BC:3E:E7:C0:CA:60:C8:31:0C Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B8E54C670CFAFA3713FAF8C37E2F6E6B6 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Lgmx_gl_V7fjhai8PufAymDIMQw.roa Signing time: Mon 05 Jan 2026 13:24:39 +0000 ROA not before: Mon 05 Jan 2026 13:24:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213732 IP address blocks: 37.32.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:54:c6:70:cf:af:a3:71:3f:af:8c:37:e2:f6:e6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 5 13:24:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e09b1fe097f57b7e385a8bc3ee7c0ca60c8310c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:81:d2:80:0d:8a:4d:8b:27:8a:5c:ac:07:24: 12:94:32:eb:24:cd:53:f9:47:81:34:b3:36:78:5f: 67:2a:19:b6:4d:b9:c9:2c:52:7c:46:e9:d7:f6:14: c2:a5:ec:d2:5c:76:d6:a9:2d:b9:4d:e7:fc:b0:3d: e1:2f:6e:5f:31:90:af:bd:05:7e:17:13:30:10:cd: cd:2a:70:55:f6:bf:ee:f6:4b:f3:d3:49:3e:99:a7: bf:de:11:d8:6c:fd:1f:d4:d8:b5:e5:ee:f3:be:62: ad:cc:77:84:30:40:df:1d:b2:c5:e7:40:6d:d9:7c: d6:cd:de:ac:c9:31:e1:7c:da:2c:32:9a:26:bd:26: 75:6b:59:cd:43:b0:b3:55:d2:ff:64:38:06:9d:d0: 55:4d:bd:39:26:3e:17:79:80:76:1b:b1:0b:1f:03: 12:f3:5d:2b:9c:ca:22:22:62:a7:1a:02:23:f5:02: b5:3c:6c:e5:8d:6e:b0:28:d1:a6:58:97:68:5b:37: a1:76:f2:49:e1:83:fa:31:96:ae:35:b8:55:f1:c1: 67:3d:26:79:42:e8:44:53:63:ff:a1:ab:c4:1c:e7: a2:57:28:28:7a:e0:77:6b:b4:73:30:26:a2:ce:88: 03:d5:ca:c3:2f:1c:e3:f5:d1:d7:9b:f2:5f:7d:07: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:09:B1:FE:09:7F:57:B7:E3:85:A8:BC:3E:E7:C0:CA:60:C8:31:0C X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Lgmx_gl_V7fjhai8PufAymDIMQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.42.0/24 Signature Algorithm: sha256WithRSAEncryption 95:93:a1:37:26:ab:e2:fc:21:1d:0b:77:70:0d:01:62:88:4e: a1:2c:ef:5f:78:0e:c8:27:73:7a:a5:65:61:a1:f3:89:4d:26: 07:64:c9:73:33:9e:0f:24:d5:5e:f3:a7:ab:78:6d:f9:f2:87: 46:53:36:cf:86:e0:90:4d:e0:60:b3:f4:c9:92:60:f7:64:43: f2:24:e6:b0:55:b5:53:5f:48:69:04:dc:55:4e:3f:ea:21:2c: 23:93:97:54:ee:81:ea:8e:48:6e:c6:93:82:66:7a:11:00:d9: ab:fe:29:88:1b:12:8e:03:45:21:25:a9:ef:ea:db:00:22:92: b4:b1:b0:c7:aa:a8:83:84:ae:23:8e:20:3f:cc:4c:6e:ef:74: 60:ff:89:25:3c:dd:50:91:69:c9:0c:88:b3:aa:3a:8e:3b:67: 4b:e1:02:49:9e:12:19:0c:3b:7b:ac:64:d0:7d:66:27:55:cf: ac:e8:10:06:37:57:35:a8:e1:bc:d1:39:10:f3:7a:5b:5f:25: ec:93:11:a4:b7:42:73:72:20:ca:37:64:99:0f:07:30:4d:1b: 44:48:2e:9b:8b:2f:df:82:fe:14:af:26:39:07:d8:5c:66:de: 92:51:4d:52:e1:24:ec:b6:cd:b0:c4:c0:d2:ef:a9:13:ba:31: 10:c2:e4:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOVMZwz6+jcT+vjDfi9ua2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTA1MTMyNDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTA5YjFmZTA5N2Y1N2I3ZTM4NWE4YmMzZWU3YzBjYTYwYzgzMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYHSgA2KTYsnilysByQSlDLrJM1T +UeBNLM2eF9nKhm2TbnJLFJ8RunX9hTCpezSXHbWqS25Tef8sD3hL25fMZCvvQV+ FxMwEM3NKnBV9r/u9kvz00k+mae/3hHYbP0f1Ni15e7zvmKtzHeEMEDfHbLF50Bt 2XzWzd6syTHhfNosMpomvSZ1a1nNQ7CzVdL/ZDgGndBVTb05Jj4XeYB2G7ELHwMS 810rnMoiImKnGgIj9QK1PGzljW6wKNGmWJdoWzehdvJJ4YP6MZauNbhV8cFnPSZ5 QuhEU2P/oavEHOeiVygoeuB3a7RzMCaizogD1crDLxzj9dHXm/JffQegfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4Jsf4Jf1e344WovD7nwMpgyDEMMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvTGdteF9nbF9WN2ZqaGFpOFB1ZkF5bURJTVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSAqMA0G CSqGSIb3DQEBCwUAA4IBAQCVk6E3Jqvi/CEdC3dwDQFiiE6hLO9feA7IJ3N6pWVh ofOJTSYHZMlzM54PJNVe86ereG358odGUzbPhuCQTeBgs/TJkmD3ZEPyJOawVbVT X0hpBNxVTj/qISwjk5dU7oHqjkhuxpOCZnoRANmr/imIGxKOA0UhJanv6tsAIpK0 sbDHqqiDhK4jjiA/zExu73Rg/4klPN1QkWnJDIizqjqOO2dL4QJJnhIZDDt7rGTQ fWYnVc+s6BAGN1c1qOG80TkQ83pbXyXskxGkt0JzciDKN2SZDwcwTRtESC6biy/f gv4UryY5B9hcZt6SUU1S4STsts2wxMDS76kTujEQwuQm -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:52 2026 by rpki-client