This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LM2AbLevwiE39LnUn6Ua-ua_m1g.roa File: LM2AbLevwiE39LnUn6Ua-ua_m1g.roa (raw, json) Hash identifier: aIq23Y6GvCxjX7yzAOcX2fozTD46rJch3BTbtCtTolQ= Subject key identifier: 2C:CD:80:6C:B7:AF:C2:21:37:F4:B9:D4:9F:A5:1A:FA:E6:BF:9B:58 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB13771CD7FB17EA05561289035D32 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LM2AbLevwiE39LnUn6Ua-ua_m1g.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203534 IP address blocks: 185.131.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:13:77:1c:d7:fb:17:ea:05:56:12:89:03:5d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ccd806cb7afc22137f4b9d49fa51afae6bf9b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:24:06:83:08:fa:05:e5:93:ff:58:5c:83: 95:df:b7:8f:5e:18:b2:61:f3:b5:db:e6:42:a3:81: 75:f8:be:1a:db:8f:ba:c1:3b:ca:e6:9c:c9:f5:bd: 9a:51:02:7c:fc:23:8a:7b:23:4f:11:ae:f9:66:cf: 2d:40:58:e6:ac:bb:7b:eb:5b:78:91:d5:b0:f0:90: e2:b0:0e:3c:d5:63:de:8b:20:8d:5e:90:2e:e7:65: 00:cb:cc:09:a6:e8:ce:87:65:ec:6f:6e:0b:f2:38: 16:36:38:e8:4f:66:1b:65:ed:63:90:35:9b:61:09: e7:bc:4c:6d:b4:00:b0:cc:e8:f6:d0:d2:8c:51:1c: de:52:f5:02:df:74:2f:9d:e8:7e:65:46:0a:5b:5c: b6:d1:95:20:51:7b:96:37:e1:bd:35:9d:20:9e:f8: 1c:87:46:95:2b:da:c8:d7:fc:74:63:bc:a1:09:fa: 74:6d:32:ae:5b:7e:42:21:05:5c:e7:90:4f:9f:fa: 19:f6:50:63:d9:d2:4f:2b:72:23:9f:c0:40:dc:4d: a9:e1:5d:66:37:3c:25:1b:48:db:5f:6d:53:39:1e: 57:c7:f8:a8:02:f3:3a:5d:e2:64:43:fd:ed:9e:75: fd:e3:21:11:b9:7a:08:97:a0:b1:62:31:21:b0:e7: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:80:6C:B7:AF:C2:21:37:F4:B9:D4:9F:A5:1A:FA:E6:BF:9B:58 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LM2AbLevwiE39LnUn6Ua-ua_m1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.184.0/22 Signature Algorithm: sha256WithRSAEncryption 35:ac:f2:19:9a:89:05:3c:70:8f:86:f6:4b:f0:f2:28:5e:eb: a3:d4:af:ca:65:a5:e0:63:0a:ea:ac:3f:71:1e:39:ef:7d:71: 6a:44:97:45:23:07:00:88:eb:1b:c2:14:b8:76:69:34:5e:c2: b3:8a:18:eb:8a:4c:4e:57:d0:df:2a:69:c4:21:f3:6e:13:7d: 67:32:8b:3a:6e:e8:58:c7:17:f3:93:20:6e:32:23:4a:22:b1: 1f:64:dc:96:b7:a1:f5:8d:a8:2b:75:91:fd:13:e1:73:8d:d7: 7c:25:0a:e7:73:1d:0e:fb:da:19:89:b1:c9:70:1e:58:de:07: 15:2d:56:f9:1f:0d:4a:2e:1f:91:b9:d5:a5:00:29:2a:7e:a4: 09:f6:d6:9c:69:41:a6:d7:30:1f:f9:88:5f:83:88:5c:66:e9: 51:bc:67:b5:3e:ba:ff:41:83:d0:79:49:d0:10:9f:45:06:f9: 55:4b:e0:48:a1:98:9b:3b:10:28:26:59:c5:08:c0:ac:c3:7c: 4e:eb:0a:e0:98:cb:52:b6:6a:db:57:2c:cc:9e:06:a5:2e:6c: 68:f9:46:4d:1e:f2:df:b8:2f:ee:44:75:2d:a8:7e:c0:5e:5f: d3:61:26:e9:bb:a8:e3:2f:08:c0:07:56:4d:d6:ca:f9:0e:25: 3c:a3:d4:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xN3HNf7F+oFVhKJA10yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2NkODA2Y2I3YWZjMjIxMzdmNGI5ZDQ5ZmE1MWFmYWU2YmY5YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoookBoMI+gXlk/9YXIOV37ePXhiy YfO12+ZCo4F1+L4a24+6wTvK5pzJ9b2aUQJ8/COKeyNPEa75Zs8tQFjmrLt761t4 kdWw8JDisA481WPeiyCNXpAu52UAy8wJpujOh2Xsb24L8jgWNjjoT2YbZe1jkDWb YQnnvExttACwzOj20NKMURzeUvUC33Qvneh+ZUYKW1y20ZUgUXuWN+G9NZ0gnvgc h0aVK9rI1/x0Y7yhCfp0bTKuW35CIQVc55BPn/oZ9lBj2dJPK3Ijn8BA3E2p4V1m NzwlG0jbX21TOR5Xx/ioAvM6XeJkQ/3tnnX94yERuXoIl6CxYjEhsOeTLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzNgGy3r8IhN/S51J+lGvrmv5tYMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvTE0yQWJMZXZ3aUUzOUxuVW42VWEtdWFfbTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYO4MA0G CSqGSIb3DQEBCwUAA4IBAQA1rPIZmokFPHCPhvZL8PIoXuuj1K/KZaXgYwrqrD9x HjnvfXFqRJdFIwcAiOsbwhS4dmk0XsKzihjrikxOV9DfKmnEIfNuE31nMos6buhY xxfzkyBuMiNKIrEfZNyWt6H1jagrdZH9E+Fzjdd8JQrncx0O+9oZibHJcB5Y3gcV LVb5Hw1KLh+RudWlACkqfqQJ9tacaUGm1zAf+Yhfg4hcZulRvGe1Prr/QYPQeUnQ EJ9FBvlVS+BIoZibOxAoJlnFCMCsw3xO6wrgmMtStmrbVyzMngalLmxo+UZNHvLf uC/uRHUtqH7AXl/TYSbpu6jjLwjAB1ZN1sr5DiU8o9RZ -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:29 2026 by rpki-client