This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa File: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (raw, json) Hash identifier: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE= Subject key identifier: 96:62:DA:3D:3E:90:61:79:DA:17:74:6B:FB:25:01:46:B5:5D:CA:34 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE55BD22203CE7DFD7034CCAD8E0B Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa Signing time: Fri 02 Jan 2026 04:17:38 +0000 ROA not before: Fri 02 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213043 IP address blocks: 194.35.228.0/22 maxlen: 22 194.99.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e5:5b:d2:22:03:ce:7d:fd:70:34:cc:ad:8e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9662da3d3e906179da17746bfb250146b55dca34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:37:43:90:fd:37:bd:34:93:c9:74:09:ca: 22:46:9d:d9:9a:58:f2:bc:d0:44:d8:4d:18:94:1a: 26:5b:d3:3e:d4:bc:fc:2e:79:73:28:b3:2f:4a:80: 55:9c:12:64:db:68:82:4c:bf:11:90:23:ba:a0:34: 54:6e:4a:34:6c:3b:f2:bb:3d:79:64:a5:2c:29:37: dd:33:81:75:40:c9:9d:d5:54:bb:11:0a:4e:24:a9: 30:22:d0:ff:89:6c:c7:41:cb:3c:c0:eb:42:78:ac: a4:8b:81:40:cc:8c:82:d5:23:85:c8:8e:b1:57:b6: c2:a3:8b:58:7f:36:15:e1:55:31:09:8e:da:b9:da: c7:49:2d:cd:a3:7a:b9:87:76:88:3e:c6:e5:5e:63: ae:2d:2b:2b:13:02:84:cf:4a:e2:6f:d6:52:74:c0: 67:0a:6e:d6:ec:0f:ec:25:68:1f:1f:25:f0:24:8d: 8a:37:6d:f0:9f:1c:b5:24:aa:8c:71:38:7f:4b:3a: 0d:3d:f8:9e:38:c5:2f:98:b5:a6:de:e4:1e:1a:e9: d4:16:dc:d2:6f:9f:7e:7e:bd:2a:13:df:2e:47:d0: d0:64:35:9d:8b:42:eb:23:f0:5a:0d:a7:90:b6:70: 5c:c6:1c:b1:6a:6a:51:64:4a:e0:74:c8:16:56:9d: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:62:DA:3D:3E:90:61:79:DA:17:74:6B:FB:25:01:46:B5:5D:CA:34 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.228.0/22 194.99.40.0/22 Signature Algorithm: sha256WithRSAEncryption 93:91:74:a0:07:59:d7:8a:ea:e8:c9:8c:9f:ec:a5:1c:42:4f: 37:e7:86:3a:fb:49:b8:c3:d0:dd:63:a5:6f:33:4e:98:dc:7a: 05:72:34:87:f0:53:c5:0e:97:b1:78:b4:35:8f:7b:44:ca:72: 52:92:4c:3a:e3:19:37:b2:f0:b6:17:7d:89:6e:69:5f:bb:74: ad:33:1d:5b:c0:45:1d:34:a2:69:92:31:ce:8d:61:09:89:06: 36:2d:cb:05:75:cc:ae:0b:57:de:b9:fc:f4:1e:98:26:2b:78: 52:2b:ac:ed:6b:e6:40:01:be:2d:46:fd:1f:29:2e:24:38:51: a4:90:c1:ca:c4:5a:9a:4c:c4:a1:59:c2:0f:36:7a:b0:ab:38: 01:ff:1f:d2:25:8f:77:bd:9a:78:df:e9:e5:47:e1:94:78:73: b8:8d:69:18:9f:04:05:59:dc:b3:2e:90:f4:76:61:8e:0e:85: 68:26:87:10:92:0c:44:a0:ee:be:4b:bd:2c:23:81:3d:ca:fb: 5d:1b:68:c9:6b:01:23:11:23:41:38:d9:38:29:bd:be:80:f0: 9c:ad:de:1e:d5:e1:8a:84:72:f4:f7:74:36:f3:84:89:05:15: 85:b2:05:74:5d:f4:d3:0d:bf:94:d5:65:75:f6:06:b5:d0:4c: ea:e6:d8:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87OVb0iIDzn39cDTMrY4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjYyZGEzZDNlOTA2MTc5ZGExNzc0NmJmYjI1MDE0NmI1NWRjYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkw3Q5D9N700k8l0CcoiRp3Zmljy vNBE2E0YlBomW9M+1Lz8LnlzKLMvSoBVnBJk22iCTL8RkCO6oDRUbko0bDvyuz15 ZKUsKTfdM4F1QMmd1VS7EQpOJKkwItD/iWzHQcs8wOtCeKyki4FAzIyC1SOFyI6x V7bCo4tYfzYV4VUxCY7audrHSS3No3q5h3aIPsblXmOuLSsrEwKEz0rib9ZSdMBn Cm7W7A/sJWgfHyXwJI2KN23wnxy1JKqMcTh/SzoNPfieOMUvmLWm3uQeGunUFtzS b59+fr0qE98uR9DQZDWdi0LrI/BaDaeQtnBcxhyxampRZErgdMgWVp1NGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJZi2j0+kGF52hd0a/slAUa1Xco0MB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvbG1MYVBUNlFZWG5hRjNSci15VUJSclZkeWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwiPkAwQC wmMoMA0GCSqGSIb3DQEBCwUAA4IBAQCTkXSgB1nXiuroyYyf7KUcQk8354Y6+0m4 w9DdY6VvM06Y3HoFcjSH8FPFDpexeLQ1j3tEynJSkkw64xk3svC2F32Jbmlfu3St Mx1bwEUdNKJpkjHOjWEJiQY2LcsFdcyuC1feufz0HpgmK3hSK6zta+ZAAb4tRv0f KS4kOFGkkMHKxFqaTMShWcIPNnqwqzgB/x/SJY93vZp43+nlR+GUeHO4jWkYnwQF WdyzLpD0dmGODoVoJocQkgxEoO6+S70sI4E9yvtdG2jJawEjESNBONk4Kb2+gPCc rd4e1eGKhHL093Q284SJBRWFsgV0XfTTDb+U1WV19ga10Ezq5tja -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:51 2026 by rpki-client