This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa File: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (raw, json) Hash identifier: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0= Subject key identifier: 2C:C2:41:13:E8:F5:23:27:C2:A0:68:E3:3A:E3:2F:0D:2A:C5:EE:37 Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B68C5151FE376FF5166F00AE94D1B Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12414 IP address blocks: 185.91.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:68:c5:15:1f:e3:76:ff:51:66:f0:0a:e9:4d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc24113e8f52327c2a068e33ae32f0d2ac5ee37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:24:0a:4d:56:9b:77:cc:ce:47:cf:fa:62: 81:96:ee:f7:cf:39:c3:1b:b8:2c:db:ee:d7:13:28: b1:19:ba:0b:81:01:97:0d:ee:f7:74:18:cc:54:c2: 94:5a:33:4b:95:20:8f:2b:34:b6:98:3e:d0:e2:0c: 32:e2:bc:e0:61:8c:e7:0b:ea:8d:31:7b:75:58:b6: e4:34:10:c6:9e:ff:4c:b6:ab:32:17:be:05:fb:47: b7:6f:65:40:6c:b6:e0:92:8f:32:f5:ca:2f:82:6b: 5a:ad:ef:da:16:ed:fa:0b:47:9a:33:f9:3a:38:e7: 59:60:ca:6b:55:44:b6:1e:ae:aa:e9:ed:58:55:02: 5d:c6:8a:14:85:52:fc:81:9a:4b:91:95:f8:24:3b: be:26:9d:31:92:c0:c2:50:e7:a5:54:19:ca:e7:8e: 5a:78:2f:95:27:64:41:c6:c4:d7:08:65:18:5e:93: c1:bb:c4:e2:97:e6:ad:37:6c:90:e4:01:f3:b0:15: b2:0e:3c:e8:2b:12:03:18:e3:fd:a7:44:72:45:ec: 1b:62:98:13:1b:a1:e3:44:2a:77:3b:91:d7:c0:e0: f5:de:53:1f:bf:4d:bb:ae:03:49:d1:24:b6:69:c1: d8:f4:b6:43:dd:5e:5e:6e:53:f2:f2:cc:86:3c:5f: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:41:13:E8:F5:23:27:C2:A0:68:E3:3A:E3:2F:0D:2A:C5:EE:37 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.248.0/22 Signature Algorithm: sha256WithRSAEncryption 07:4a:8e:62:f1:3a:bb:d4:12:08:6d:28:68:76:d6:b9:b2:1b: 61:3f:af:b7:24:e3:88:b7:ce:c7:b3:ce:fe:0e:ea:ef:33:5c: b5:3f:2d:28:92:55:95:36:a1:b0:d6:33:5f:26:48:80:09:e5: c0:5f:19:80:49:be:50:15:69:25:90:06:39:e9:fe:ed:5d:bc: 26:4d:93:dc:4c:38:c2:ab:9c:86:38:7b:5b:28:fc:2a:65:5d: 1f:14:8b:4b:28:1d:d6:ae:bc:2e:6d:9e:02:79:49:bc:6e:90: bc:7c:45:16:ae:19:66:c1:5b:15:4d:da:bb:45:a5:d0:29:b7: d3:69:4c:3c:d4:6f:03:d1:0a:05:fe:50:40:43:81:da:1c:ff: 22:d5:fe:a9:92:71:02:0c:1b:a0:45:82:e3:1d:0d:20:2f:f8: fd:50:c7:e2:48:0d:e0:6a:93:40:f5:ee:54:14:dc:19:95:02: 62:69:42:31:31:62:a4:49:fa:50:70:9d:de:25:12:b4:f6:66: 27:51:28:c5:66:d5:97:f1:fc:0f:f3:55:5f:1a:44:44:9b:06: af:69:5a:f6:3a:f7:a7:07:23:d6:bf:9a:e7:dd:30:19:30:55: b9:82:6c:92:40:a8:1b:38:bf:b0:89:a6:36:b0:1c:87:8e:7c: a2:3b:cc:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2jFFR/jdv9RZvAK6U0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MyNDExM2U4ZjUyMzI3YzJhMDY4ZTMzYWUzMmYwZDJhYzVlZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsEkCk1Wm3fMzkfP+mKBlu73zznD G7gs2+7XEyixGboLgQGXDe73dBjMVMKUWjNLlSCPKzS2mD7Q4gwy4rzgYYznC+qN MXt1WLbkNBDGnv9MtqsyF74F+0e3b2VAbLbgko8y9covgmtare/aFu36C0eaM/k6 OOdZYMprVUS2Hq6q6e1YVQJdxooUhVL8gZpLkZX4JDu+Jp0xksDCUOelVBnK545a eC+VJ2RBxsTXCGUYXpPBu8Til+atN2yQ5AHzsBWyDjzoKxIDGOP9p0RyRewbYpgT G6HjRCp3O5HXwOD13lMfv027rgNJ0SS2acHY9LZD3V5eblPy8syGPF9gJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzCQRPo9SMnwqBo4zrjLw0qxe43MB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvTE1KQkUtajFJeWZDb0dqak91TXZEU3JGN2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVv4MA0G CSqGSIb3DQEBCwUAA4IBAQAHSo5i8Tq71BIIbShodta5shthP6+3JOOIt87Hs87+ DurvM1y1Py0oklWVNqGw1jNfJkiACeXAXxmASb5QFWklkAY56f7tXbwmTZPcTDjC q5yGOHtbKPwqZV0fFItLKB3WrrwubZ4CeUm8bpC8fEUWrhlmwVsVTdq7RaXQKbfT aUw81G8D0QoF/lBAQ4HaHP8i1f6pknECDBugRYLjHQ0gL/j9UMfiSA3gapNA9e5U FNwZlQJiaUIxMWKkSfpQcJ3eJRK09mYnUSjFZtWX8fwP81VfGkREmwavaVr2Oven ByPWv5rn3TAZMFW5gmySQKgbOL+wiaY2sByHjnyiO8zx -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:24 2026 by rpki-client