This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/LnMBUYRb2MAMHOeFTnomV7j2CZs.roa File: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (raw, json) Hash identifier: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY= Subject key identifier: 2E:73:01:51:84:5B:D8:C0:0C:1C:E7:85:4E:7A:26:57:B8:F6:09:9B Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019B7D5D1904AD652C45384C714BC7E98609 Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/LnMBUYRb2MAMHOeFTnomV7j2CZs.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62255 IP address blocks: 37.114.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:19:04:ad:65:2c:45:38:4c:71:4b:c7:e9:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e730151845bd8c00c1ce7854e7a2657b8f6099b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:23:b7:de:be:43:6b:09:31:e9:5e:2f:29: b1:b0:5f:5d:e1:06:d0:38:6f:62:de:6e:35:3d:ff: 92:57:79:05:94:b8:e3:4f:52:d7:a5:e1:c2:ea:f7: 85:4f:28:3a:0a:e8:b3:36:62:8e:f6:3d:5d:7a:4b: 0d:9a:be:10:d1:b5:5b:d7:0e:36:7d:b1:28:ed:f0: 69:10:89:ff:24:9a:49:8a:71:c6:eb:d7:91:06:c0: 17:10:63:36:a1:33:e3:e6:a5:09:1d:39:81:07:37: b3:54:6c:d5:93:29:ad:23:1e:81:04:51:2c:ea:a3: 4b:11:3f:80:9f:a0:0e:9d:21:8a:28:6f:38:6e:33: f8:e5:2a:00:44:f1:26:51:77:9e:12:97:db:ed:cf: fc:3f:d5:98:a0:b3:91:ba:c7:d0:30:80:2d:26:2e: 1b:e3:8a:e2:6d:46:80:64:49:8a:60:bb:d6:e6:c5: f5:94:c7:7e:10:f5:a4:d1:69:a7:ee:4f:09:e2:8d: c1:2e:33:87:ec:c2:8e:73:d1:c6:53:ab:b2:54:90: fe:06:7a:d3:f8:79:40:5c:a0:4f:5a:77:b5:80:27: 17:b6:3e:05:95:e0:8f:80:03:04:4d:16:6c:be:f0: 70:39:20:98:14:46:bb:c0:ea:a6:cd:c2:0c:e0:1f: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:73:01:51:84:5B:D8:C0:0C:1C:E7:85:4E:7A:26:57:B8:F6:09:9B X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/LnMBUYRb2MAMHOeFTnomV7j2CZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.96.0/19 Signature Algorithm: sha256WithRSAEncryption 37:f1:7c:3b:93:b9:d3:a6:de:62:29:ec:36:bc:6c:58:22:20: 2d:3d:0a:51:4d:15:57:f7:75:be:ca:aa:7c:bd:b8:8c:75:ef: 8e:4f:d6:8f:7f:d6:50:dd:7a:9b:ae:dc:8a:08:ed:cf:c6:8d: 4d:9c:8b:62:db:2f:cc:79:ce:92:18:12:ba:89:d4:bb:03:0d: 79:31:b1:0d:fb:17:76:fc:bc:14:0a:86:07:d5:7e:b2:0f:72: b6:75:1a:ef:bf:c4:b8:a4:30:18:1e:63:3f:e8:2d:a6:a2:6e: 34:a7:d5:bd:34:08:fb:1e:32:08:8c:6f:f0:74:41:a0:5b:a4: 21:a9:c3:54:6f:08:70:62:80:95:d8:11:f0:72:4b:c5:28:21: 34:c3:6f:e7:e9:f0:b7:d8:ce:59:35:4b:cb:62:50:6c:4d:a8: d5:41:42:23:b1:6a:fc:da:b1:5b:82:38:8b:04:f0:f6:5f:fc: b6:86:cd:f4:91:bb:1e:6b:30:c5:2c:7d:b3:48:4a:b2:0c:b9: 7d:4e:0a:aa:3c:25:23:2e:ee:76:07:db:4c:1a:07:8d:f4:96: 57:62:fc:e4:50:b1:f2:25:d0:b7:82:06:5d:dc:d1:72:94:0f: 77:b9:f9:55:db:33:be:36:f0:8b:6b:a4:69:a1:0b:32:c3:11: bc:6a:a3:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRkErWUsRThMcUvH6YYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTczMDE1MTg0NWJkOGMwMGMxY2U3ODU0ZTdhMjY1N2I4ZjYwOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxAjt96+Q2sJMeleLymxsF9d4QbQ OG9i3m41Pf+SV3kFlLjjT1LXpeHC6veFTyg6CuizNmKO9j1deksNmr4Q0bVb1w42 fbEo7fBpEIn/JJpJinHG69eRBsAXEGM2oTPj5qUJHTmBBzezVGzVkymtIx6BBFEs 6qNLET+An6AOnSGKKG84bjP45SoARPEmUXeeEpfb7c/8P9WYoLORusfQMIAtJi4b 44ribUaAZEmKYLvW5sX1lMd+EPWk0Wmn7k8J4o3BLjOH7MKOc9HGU6uyVJD+BnrT +HlAXKBPWne1gCcXtj4FleCPgAMETRZsvvBwOSCYFEa7wOqmzcIM4B9cFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5zAVGEW9jADBznhU56Jle49gmbMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvTG5NQlVZUmIyTUFNSE9lRlRub21WN2oyQ1pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJXJgMA0G CSqGSIb3DQEBCwUAA4IBAQA38Xw7k7nTpt5iKew2vGxYIiAtPQpRTRVX93W+yqp8 vbiMde+OT9aPf9ZQ3XqbrtyKCO3Pxo1NnIti2y/Mec6SGBK6idS7Aw15MbEN+xd2 /LwUCoYH1X6yD3K2dRrvv8S4pDAYHmM/6C2mom40p9W9NAj7HjIIjG/wdEGgW6Qh qcNUbwhwYoCV2BHwckvFKCE0w2/n6fC32M5ZNUvLYlBsTajVQUIjsWr82rFbgjiL BPD2X/y2hs30kbseazDFLH2zSEqyDLl9TgqqPCUjLu52B9tMGgeN9JZXYvzkULHy JdC3ggZd3NFylA93uflV2zO+NvCLa6RpoQsywxG8aqPI -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:37 2026 by rpki-client