This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/LBRMtk276o1fDtnMdAqhTW7DXC4.roa File: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (raw, json) Hash identifier: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM= Subject key identifier: 2C:14:4C:B6:4D:BB:EA:8D:5F:0E:D9:CC:74:0A:A1:4D:6E:C3:5C:2E Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019B7BA35E69CDE88B1D1E325B8256F8E70E Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/LBRMtk276o1fDtnMdAqhTW7DXC4.roa Signing time: Thu 01 Jan 2026 22:17:42 +0000 ROA not before: Thu 01 Jan 2026 22:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204680 IP address blocks: 192.67.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5e:69:cd:e8:8b:1d:1e:32:5b:82:56:f8:e7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c144cb64dbbea8d5f0ed9cc740aa14d6ec35c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:f2:c4:94:68:2f:08:27:8a:b6:62:be:3c: ee:f6:f7:d3:21:a2:1c:1a:0d:0d:3a:00:ab:28:e7: ec:57:7a:a3:ee:98:40:68:8f:a1:8e:71:db:35:5c: df:30:09:81:92:ae:8d:99:4f:4a:dd:63:2f:10:be: 6e:0c:cd:ef:91:a7:73:6f:ca:fb:50:1b:84:e4:7b: 81:dc:c2:6d:93:14:c8:81:bb:2b:88:c8:9c:22:37: a0:2c:1c:e1:d3:c0:dc:12:5a:68:a3:f0:5e:b6:fb: 90:5f:d3:70:2a:47:f2:42:72:c2:4f:b9:9f:a5:1e: d8:04:69:72:c8:4d:da:00:fd:75:28:94:c5:89:ed: c5:0d:3c:40:07:a0:df:66:a9:d3:60:bc:fd:93:59: ae:63:63:ad:ec:ac:0b:cc:5b:82:0a:cd:41:e6:3e: 1d:7e:9e:40:30:1f:e5:58:59:8e:69:23:c2:35:6f: 43:5b:08:05:be:ff:07:0a:cd:bc:74:ac:fb:79:ce: 67:f6:67:22:d0:d8:6b:42:c6:ee:12:41:f7:cf:58: 0d:da:b2:af:7a:37:fd:46:24:58:16:3b:19:6c:64: 9d:c3:c5:4f:bc:ae:5c:20:34:49:75:25:93:01:95: bf:4c:71:b1:0c:7e:9f:40:25:81:34:5c:af:35:78: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:14:4C:B6:4D:BB:EA:8D:5F:0E:D9:CC:74:0A:A1:4D:6E:C3:5C:2E X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/LBRMtk276o1fDtnMdAqhTW7DXC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.67.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:3e:9a:b6:2a:b6:c6:cd:70:67:fe:d1:9f:ea:2b:16:0e:a1: 80:73:43:a1:bc:1d:14:98:dc:34:05:ac:08:df:e9:be:6b:ab: 8b:6f:36:65:ca:3f:70:1d:9a:fb:54:ad:43:05:02:c7:55:bf: 48:d4:05:1e:4b:09:3d:e0:31:8e:ac:47:9d:22:80:f6:18:4d: 38:28:00:bf:32:51:ea:51:dd:3a:75:0e:2b:40:9d:2c:16:4d: fc:b8:44:6e:36:aa:99:59:9c:f0:e2:c1:8b:22:93:6b:66:a7: 77:6f:65:1d:ca:6a:b0:99:ba:15:6b:c3:4e:f3:52:34:a0:da: fb:04:67:76:1b:32:7e:ba:2b:79:39:49:7a:eb:50:53:8d:30: 10:86:9d:35:05:ed:0f:90:00:04:2c:03:6d:8b:8b:15:56:11: b8:84:8c:68:2a:d1:ad:a1:a5:99:1a:9a:ec:41:f4:7d:94:aa: 31:5e:3b:8d:b7:2c:78:61:41:6f:c2:31:8a:f6:58:77:ce:d7: 63:81:da:83:09:67:a7:b1:96:b5:0e:23:a2:1a:f7:da:aa:80: fc:56:e7:aa:cb:39:76:ad:70:a1:53:5f:33:9b:76:7f:c9:62: 40:eb:7d:aa:c0:3e:f5:86:b9:c9:52:1e:f4:5e:43:77:f7:de: 06:92:c5:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o15pzeiLHR4yW4JW+OcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzE0NGNiNjRkYmJlYThkNWYwZWQ5Y2M3NDBhYTE0ZDZlYzM1YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8TyxJRoLwgnirZivjzu9vfTIaIc Gg0NOgCrKOfsV3qj7phAaI+hjnHbNVzfMAmBkq6NmU9K3WMvEL5uDM3vkadzb8r7 UBuE5HuB3MJtkxTIgbsriMicIjegLBzh08DcElpoo/BetvuQX9NwKkfyQnLCT7mf pR7YBGlyyE3aAP11KJTFie3FDTxAB6DfZqnTYLz9k1muY2Ot7KwLzFuCCs1B5j4d fp5AMB/lWFmOaSPCNW9DWwgFvv8HCs28dKz7ec5n9mci0NhrQsbuEkH3z1gN2rKv ejf9RiRYFjsZbGSdw8VPvK5cIDRJdSWTAZW/THGxDH6fQCWBNFyvNXgzEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwUTLZNu+qNXw7ZzHQKoU1uw1wuMB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvTEJSTXRrMjc2bzFmRHRuTWRBcWhUVzdEWEM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEO9MA0G CSqGSIb3DQEBCwUAA4IBAQB/Ppq2KrbGzXBn/tGf6isWDqGAc0OhvB0UmNw0BawI 3+m+a6uLbzZlyj9wHZr7VK1DBQLHVb9I1AUeSwk94DGOrEedIoD2GE04KAC/MlHq Ud06dQ4rQJ0sFk38uERuNqqZWZzw4sGLIpNrZqd3b2UdymqwmboVa8NO81I0oNr7 BGd2GzJ+uit5OUl661BTjTAQhp01Be0PkAAELANti4sVVhG4hIxoKtGtoaWZGprs QfR9lKoxXjuNtyx4YUFvwjGK9lh3ztdjgdqDCWensZa1DiOiGvfaqoD8Vueqyzl2 rXChU18zm3Z/yWJA632qwD71hrnJUh70XkN3994GksUM -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:00 2026 by rpki-client