This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa File: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (raw, json) Hash identifier: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU= Subject key identifier: 95:D9:B1:24:09:0A:BE:69:47:81:4A:64:42:78:45:2D:23:E3:94:A8 Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Certificate serial: 019B7DCAAB822ED110207897C95A8D11481F Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa Signing time: Fri 02 Jan 2026 08:19:52 +0000 ROA not before: Fri 02 Jan 2026 08:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34592 IP address blocks: 37.137.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ab:82:2e:d1:10:20:78:97:c9:5a:8d:11:48:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Validity Not Before: Jan 2 08:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d9b124090abe6947814a644278452d23e394a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:f8:be:7e:7a:3a:0f:fc:bd:ec:60:59:2a: 5c:ea:99:43:c6:8d:ac:81:3e:b1:e8:39:8a:a4:b2: fb:46:41:65:d6:2f:fd:d6:2d:49:e0:4b:b7:99:00: 89:d3:44:25:94:e3:85:64:cf:42:1f:6e:36:0d:0f: 66:cb:ff:3d:92:62:b2:a5:70:9c:c7:00:78:13:0b: 06:35:3e:67:2f:e6:1c:d4:82:2e:8e:ad:35:9d:d3: 2f:e3:08:b1:fc:02:19:5d:8d:45:81:b8:a3:a0:7b: 8c:ea:de:ec:10:05:39:55:3d:d5:f7:86:ed:57:a3: 37:62:01:4d:4a:9a:86:25:ee:f0:29:4d:23:1c:da: 60:91:42:7c:ac:1a:ae:e1:ab:75:33:3e:ba:1b:0d: 58:54:82:93:a1:58:32:99:91:78:b7:e6:0f:74:fd: 6f:21:c0:92:f7:d1:7b:53:94:94:a0:c3:e6:06:a5: ba:a5:f2:e5:4d:eb:7b:f4:6e:db:99:e9:4b:61:bc: 04:79:e8:ab:23:95:a0:55:74:56:ce:0e:71:e8:5c: 0f:67:88:53:73:bf:b7:7c:eb:a7:e2:d5:66:59:5e: b9:6d:34:06:0c:c8:4f:16:5c:4d:62:f5:00:3b:bd: 35:68:d1:ae:88:ae:7f:b7:ce:ef:1e:4d:07:93:c0: eb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:B1:24:09:0A:BE:69:47:81:4A:64:42:78:45:2D:23:E3:94:A8 X509v3 Authority Key Identifier: keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.137.37.0/24 Signature Algorithm: sha256WithRSAEncryption 98:0e:b2:0c:d6:fb:80:13:dc:12:60:50:95:b3:22:5e:d6:64: f0:a0:78:05:46:a3:e1:67:2d:eb:5d:15:f1:fe:67:b5:c1:a2: 5d:a6:36:c1:b9:60:b3:2f:ab:6a:19:b3:95:f6:d9:d6:99:ac: 2f:48:e5:65:ac:4b:25:af:fd:de:2c:90:d1:47:e6:c6:db:bc: 34:6c:62:88:71:d5:79:d7:c5:81:d5:18:99:06:a8:d9:0d:01: d8:9e:13:66:1b:2b:4b:eb:72:af:dd:fc:52:39:03:71:36:aa: ae:e1:26:8b:89:de:8f:13:54:ee:9a:c2:57:c9:59:7f:3c:68: 92:0b:49:c3:34:e9:93:eb:a6:9b:2d:9d:87:86:11:20:29:6a: 29:b6:9e:61:18:8a:d9:b6:ae:be:3b:9d:ee:1a:cd:7d:56:e1: 40:18:89:3c:f5:56:36:e8:c9:ca:69:9b:f8:8c:97:92:f3:88: 9e:db:d1:97:50:d5:b1:87:20:b5:da:11:52:21:6a:70:dc:2a: 2f:65:35:1d:7e:66:0e:11:2b:6a:2c:04:07:46:f2:b7:5e:10: 89:18:c4:fd:d9:2a:5e:c5:db:82:91:23:ed:b7:ec:70:34:4a: 26:73:2a:63:13:f0:d5:1a:01:51:ad:54:e2:cd:be:3c:ce:14: 53:43:3c:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yquCLtEQIHiXyVqNEUgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz NThlMjMwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQ5YjEyNDA5MGFiZTY5NDc4MTRhNjQ0Mjc4NDUyZDIzZTM5NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMr4vn56Og/8vexgWSpc6plDxo2s gT6x6DmKpLL7RkFl1i/91i1J4Eu3mQCJ00QllOOFZM9CH242DQ9my/89kmKypXCc xwB4EwsGNT5nL+Yc1IIujq01ndMv4wix/AIZXY1FgbijoHuM6t7sEAU5VT3V94bt V6M3YgFNSpqGJe7wKU0jHNpgkUJ8rBqu4at1Mz66Gw1YVIKToVgymZF4t+YPdP1v IcCS99F7U5SUoMPmBqW6pfLlTet79G7bmelLYbwEeeirI5WgVXRWzg5x6FwPZ4hT c7+3fOun4tVmWV65bTQGDMhPFlxNYvUAO701aNGuiK5/t87vHk0Hk8DrvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXZsSQJCr5pR4FKZEJ4RS0j45SoMB8GA1UdIwQY MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt NzdjMTA0ODQyMmQ4LzEvbGRteEpBa0t2bWxIZ1Vwa1FuaEZMU1BqbEtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4 LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYklMA0G CSqGSIb3DQEBCwUAA4IBAQCYDrIM1vuAE9wSYFCVsyJe1mTwoHgFRqPhZy3rXRXx /me1waJdpjbBuWCzL6tqGbOV9tnWmawvSOVlrEslr/3eLJDRR+bG27w0bGKIcdV5 18WB1RiZBqjZDQHYnhNmGytL63Kv3fxSOQNxNqqu4SaLid6PE1TumsJXyVl/PGiS C0nDNOmT66abLZ2HhhEgKWoptp5hGIrZtq6+O53uGs19VuFAGIk89VY26MnKaZv4 jJeS84ie29GXUNWxhyC12hFSIWpw3CovZTUdfmYOEStqLAQHRvK3XhCJGMT92Spe xduCkSPtt+xwNEomcypjE/DVGgFRrVTizb48zhRTQzzg -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:47 2026 by rpki-client