This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LMBdvLxY2Bf6vSjw3LWU-EZJdHg.roa File: LMBdvLxY2Bf6vSjw3LWU-EZJdHg.roa (raw, json) Hash identifier: 5KPnrHuEDP+QQmFZZeaF99p8cUp5O9SdZJ91jnKFODs= Subject key identifier: 2C:C0:5D:BC:BC:58:D8:17:FA:BD:28:F0:DC:B5:94:F8:46:49:74:78 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019AFF78F9EB4FE3BE6D54C34B8900B74CC8 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LMBdvLxY2Bf6vSjw3LWU-EZJdHg.roa Signing time: Mon 08 Dec 2025 19:38:29 +0000 ROA not before: Mon 08 Dec 2025 19:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23470 IP address blocks: 45.149.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:78:f9:eb:4f:e3:be:6d:54:c3:4b:89:00:b7:4c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Dec 8 19:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2cc05dbcbc58d817fabd28f0dcb594f846497478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:30:82:df:55:7c:29:ed:b4:02:33:60:0f: e7:fe:4c:d2:ef:9d:36:aa:ef:aa:22:f8:2f:c6:8b: 85:20:08:b4:e4:f3:ac:1e:ef:1a:77:35:ca:f3:31: 9f:1d:02:a9:4a:51:0a:a4:59:e9:c5:22:a6:25:d6: 35:0e:da:49:5c:2e:70:e0:ec:e1:63:5b:ec:86:e3: f0:18:63:ca:bb:3f:93:a2:0b:84:39:58:bd:44:a8: 20:83:72:02:8c:57:21:12:18:46:7f:03:5f:25:5a: d8:4f:26:52:76:2a:98:9d:1d:be:bb:5d:36:76:c6: 53:df:38:dd:22:e7:c8:6e:55:c3:3d:d0:69:97:c0: aa:4c:d2:c1:01:f0:47:c7:a4:db:0e:ee:a8:07:c2: e2:52:55:e0:f7:3d:92:a4:fb:54:6e:65:63:72:e4: cf:ac:7d:e5:a4:88:4f:85:03:3f:94:30:6f:df:29: 8f:cb:d1:4b:06:cc:a2:9a:cf:5a:e2:d5:be:09:8c: 47:84:09:5f:e4:83:a6:0b:f9:51:fe:10:21:65:91: 1a:72:d0:96:91:f0:8e:fd:ab:96:27:fb:59:07:34: 33:3f:e5:8a:e6:48:96:46:61:0e:89:21:76:9b:40: cc:95:46:a0:75:f8:b0:1a:50:ef:ec:89:87:2b:cd: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:5D:BC:BC:58:D8:17:FA:BD:28:F0:DC:B5:94:F8:46:49:74:78 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LMBdvLxY2Bf6vSjw3LWU-EZJdHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.27.0/24 Signature Algorithm: sha256WithRSAEncryption 91:20:63:35:13:ff:82:cb:a0:54:18:09:90:5a:46:dc:b3:7c: 56:9b:b5:f1:5b:23:ad:41:f3:fa:63:f1:81:0a:b5:97:7e:6e: 01:da:72:14:1b:8a:6a:f2:8a:c0:f0:a7:1d:d6:a9:0d:92:25: ad:f8:20:8b:f5:be:62:b9:42:36:14:4a:dd:59:55:bf:e1:b8: 7e:4e:22:25:22:63:50:fb:03:05:ea:c0:78:6d:82:f6:5d:93: 64:9e:37:7e:cd:a9:c7:80:ac:d5:68:1c:5e:ff:d7:a3:31:0e: b9:9e:b8:d6:42:f2:e5:ac:74:9d:62:62:fd:db:a1:92:2c:cf: 41:39:6a:1d:a3:2b:e2:ef:b1:57:d0:0d:1a:a3:37:3f:be:09: cc:bc:f0:92:f6:b1:33:af:f6:e0:09:a5:da:30:95:b4:66:cf: d6:20:ba:95:68:35:19:c2:2d:15:8c:48:aa:b2:a0:23:65:97: 03:47:2f:dd:7b:e3:09:31:f3:ea:55:0a:5c:32:85:e0:dc:dd: 5e:04:0c:0c:58:22:80:5e:ed:e5:a0:f8:9c:e4:b6:58:8c:36: 83:f0:ff:2e:e4:49:fa:b4:6c:31:8f:2a:eb:e7:9d:cb:8e:b4: fd:0a:a7:2f:36:a6:86:e5:f8:77:9c:8b:60:e0:59:d8:93:d2: 22:ec:d0:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr/ePnrT+O+bVTDS4kAt0zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjUxMjA4MTkzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MwNWRiY2JjNThkODE3ZmFiZDI4ZjBkY2I1OTRmODQ2NDk3NDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sIwgt9VfCnttAIzYA/n/kzS7502 qu+qIvgvxouFIAi05POsHu8adzXK8zGfHQKpSlEKpFnpxSKmJdY1DtpJXC5w4Ozh Y1vshuPwGGPKuz+ToguEOVi9RKggg3ICjFchEhhGfwNfJVrYTyZSdiqYnR2+u102 dsZT3zjdIufIblXDPdBpl8CqTNLBAfBHx6TbDu6oB8LiUlXg9z2SpPtUbmVjcuTP rH3lpIhPhQM/lDBv3ymPy9FLBsyims9a4tW+CYxHhAlf5IOmC/lR/hAhZZEactCW kfCO/auWJ/tZBzQzP+WK5kiWRmEOiSF2m0DMlUagdfiwGlDv7ImHK814pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzAXby8WNgX+r0o8Ny1lPhGSXR4MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvTE1CZHZMeFkyQmY2dlNqdzNMV1UtRVpKZEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUbMA0G CSqGSIb3DQEBCwUAA4IBAQCRIGM1E/+Cy6BUGAmQWkbcs3xWm7XxWyOtQfP6Y/GB CrWXfm4B2nIUG4pq8orA8Kcd1qkNkiWt+CCL9b5iuUI2FErdWVW/4bh+TiIlImNQ +wMF6sB4bYL2XZNknjd+zanHgKzVaBxe/9ejMQ65nrjWQvLlrHSdYmL926GSLM9B OWodoyvi77FX0A0aozc/vgnMvPCS9rEzr/bgCaXaMJW0Zs/WILqVaDUZwi0VjEiq sqAjZZcDRy/de+MJMfPqVQpcMoXg3N1eBAwMWCKAXu3loPic5LZYjDaD8P8u5En6 tGwxjyrr553LjrT9CqcvNqaG5fh3nItg4FnYk9Ii7NDU -----END CERTIFICATE-----Generated at Fri Dec 19 18:08:48 2025 by rpki-client