This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/LMnW7BQw6VTniWIkmWbGGaakoOg.roa File: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (raw, json) Hash identifier: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A= Subject key identifier: 2C:C9:D6:EC:14:30:E9:54:E7:89:62:24:99:66:C6:19:A6:A4:A0:E8 Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Certificate serial: 019B797F1C9DE81FE94D2454F9159467F74E Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/LMnW7BQw6VTniWIkmWbGGaakoOg.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215568 IP address blocks: 2a01:f540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1c:9d:e8:1f:e9:4d:24:54:f9:15:94:67:f7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc9d6ec1430e954e78962249966c619a6a4a0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:07:83:dd:1f:f7:8b:ca:39:65:6b:d4:73: a1:55:e1:eb:97:15:90:bd:d1:33:b5:7a:3c:2c:c7: 56:f5:24:b4:11:3d:8a:e3:f2:30:1d:99:0c:47:84: b6:ce:c8:75:dc:36:f4:f5:57:7c:d6:c0:3b:a3:34: 0c:c1:fd:93:7d:0a:ab:35:3a:f7:3d:e9:c6:09:aa: 46:a0:04:5c:7c:07:5c:4a:03:0d:57:55:bf:92:5a: c6:6d:48:79:00:21:a5:63:d8:34:ff:b3:6e:f2:af: 39:3c:2f:a3:06:e8:ee:44:72:0d:43:a7:ec:cb:e3: b9:94:12:55:94:fa:e8:81:ec:f6:1d:a9:5e:d2:c0: d0:97:ee:09:bc:f8:ae:f7:4a:44:7a:6d:7e:ff:33: 14:73:5a:6b:00:70:d1:60:37:33:62:ef:7f:f1:3f: c2:a5:29:e7:97:c5:b3:09:34:c2:06:18:ac:8d:99: bd:07:0c:01:0f:b4:7f:f0:b5:7a:1f:af:ce:b3:a6: 23:5b:0f:5a:79:28:f6:2a:b2:0e:ff:24:a0:24:13: c9:e1:19:4d:df:97:1a:67:60:6e:59:a3:df:5d:97: 05:cc:8d:68:9d:45:cc:f1:b2:25:4a:a9:c5:79:bb: 50:58:42:ab:b0:aa:0d:41:e8:83:4c:29:0f:3f:25: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C9:D6:EC:14:30:E9:54:E7:89:62:24:99:66:C6:19:A6:A4:A0:E8 X509v3 Authority Key Identifier: keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/LMnW7BQw6VTniWIkmWbGGaakoOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f540::/29 Signature Algorithm: sha256WithRSAEncryption 95:c8:35:f2:b9:b2:25:9a:08:ab:40:93:dc:a8:9c:d5:ef:af: b1:e9:39:d8:aa:ba:d6:6d:c8:7b:8b:b1:28:16:81:ae:fb:eb: f9:96:81:61:24:c5:b3:c4:76:49:c7:44:f6:09:84:9f:e9:39: c3:17:36:e5:23:5c:62:e5:e3:cf:4a:c4:48:8e:a2:a7:e6:c5: 99:a9:6a:49:bf:9b:a3:8f:65:73:7c:17:b5:37:00:f3:92:31: 5b:70:9c:29:64:c7:27:ef:d4:a6:0a:bb:33:93:ef:b2:62:9b: c7:99:3d:c2:0a:12:82:29:30:5d:45:64:63:e6:05:c3:cb:00: 83:2f:8c:cd:71:11:34:7e:f6:bd:94:9f:52:e8:2d:8c:90:78: 9e:f4:b7:9c:dd:6c:28:f0:4d:a7:d3:4d:ae:6d:02:5d:90:de: 28:7e:42:26:0c:8a:a9:f7:78:6c:9b:97:19:77:6b:ff:31:85: b8:a3:fd:5d:01:26:74:d8:5b:96:0d:b5:da:90:70:28:56:0d: 97:9b:77:7f:a9:15:50:92:1a:ba:95:07:5b:3e:4b:ca:0d:29: 27:6c:c2:2d:ea:de:3e:a6:cb:1c:b5:4e:65:0c:eb:5f:55:3f: 69:c8:46:96:0a:c5:28:27:42:16:17:3d:9e:40:3b:02:9c:41: 1e:a3:2e:37 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fxyd6B/pTSRU+RWUZ/dOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3 MjRlODIwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2M5ZDZlYzE0MzBlOTU0ZTc4OTYyMjQ5OTY2YzYxOWE2YTRhMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJMHg90f94vKOWVr1HOhVeHrlxWQ vdEztXo8LMdW9SS0ET2K4/IwHZkMR4S2zsh13Db09Vd81sA7ozQMwf2TfQqrNTr3 PenGCapGoARcfAdcSgMNV1W/klrGbUh5ACGlY9g0/7Nu8q85PC+jBujuRHINQ6fs y+O5lBJVlProgez2Hale0sDQl+4JvPiu90pEem1+/zMUc1prAHDRYDczYu9/8T/C pSnnl8WzCTTCBhisjZm9BwwBD7R/8LV6H6/Os6YjWw9aeSj2KrIO/ySgJBPJ4RlN 35caZ2BuWaPfXZcFzI1onUXM8bIlSqnFebtQWEKrsKoNQeiDTCkPPyV/7wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCzJ1uwUMOlU54liJJlmxhmmpKDoMB8GA1UdIwQY MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt Yjc3NmEyMjA0NTZiLzEvTE1uVzdCUXc2VlRuaVdJa21XYkdHYWFrb09nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgH1QDAN BgkqhkiG9w0BAQsFAAOCAQEAlcg18rmyJZoIq0CT3Kic1e+vsek52Kq61m3Ie4ux KBaBrvvr+ZaBYSTFs8R2ScdE9gmEn+k5wxc25SNcYuXjz0rESI6ip+bFmalqSb+b o49lc3wXtTcA85IxW3CcKWTHJ+/Upgq7M5PvsmKbx5k9wgoSgikwXUVkY+YFw8sA gy+MzXERNH72vZSfUugtjJB4nvS3nN1sKPBNp9NNrm0CXZDeKH5CJgyKqfd4bJuX GXdr/zGFuKP9XQEmdNhblg212pBwKFYNl5t3f6kVUJIaupUHWz5Lyg0pJ2zCLere PqbLHLVOZQzrX1U/achGlgrFKCdCFhc9nkA7ApxBHqMuNw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:04 2026 by rpki-client