This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/LfVminLL1XTSWFhWFnt35YabzGc.roa File: LfVminLL1XTSWFhWFnt35YabzGc.roa (raw, json) Hash identifier: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg= Subject key identifier: 2D:F5:66:8A:72:CB:D5:74:D2:58:58:56:16:7B:77:E5:86:9B:CC:67 Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5 Certificate serial: 019B7EA6DAB72A4E22956F30F11E4E723A7E Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/LfVminLL1XTSWFhWFnt35YabzGc.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2103 IP address blocks: 134.246.0.0/16 maxlen: 16 134.246.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:da:b7:2a:4e:22:95:6f:30:f1:1e:4e:72:3a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2df5668a72cbd574d2585856167b77e5869bcc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:f1:89:94:fc:32:2b:12:bb:bf:df:4f:1c: 59:9e:19:ca:99:dc:91:46:84:ef:16:33:61:21:c1: 7a:e1:d6:b6:07:df:0c:46:f2:07:60:00:24:aa:64: b8:a2:28:b1:6e:70:e9:8e:1e:54:0f:72:f1:cc:40: 9a:5d:57:bf:2c:48:e0:af:db:58:e8:cd:c3:cf:33: 6c:ae:4a:56:8d:86:b5:ad:be:ae:35:65:d4:3c:5e: 71:44:ec:2a:8d:44:04:70:89:75:6a:93:70:61:67: 32:9a:43:36:29:6a:eb:50:3f:85:73:ce:a6:7c:47: f0:95:75:c7:62:53:7d:e8:c3:f2:f1:e1:b4:7a:31: ba:85:88:a8:5a:2e:81:92:b2:a7:f4:48:12:33:77: 71:16:fd:d5:a2:2d:69:a9:b4:1e:08:40:19:9f:e2: f0:c9:f5:d2:f7:9a:95:ea:8d:6c:3b:2e:4b:37:a0: e1:82:c6:45:4c:19:dd:0d:96:06:1e:c0:6d:49:cc: 15:f3:61:d6:2f:18:88:39:1e:a4:65:d2:f5:41:81: f2:4a:9c:37:1c:f3:e6:5b:f4:77:ae:cc:6d:75:ba: a3:7b:74:f6:3f:fe:ea:e1:eb:c5:51:86:88:33:e9: 3e:27:b3:a0:a0:72:9c:ea:b2:3e:f9:84:28:e8:53: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F5:66:8A:72:CB:D5:74:D2:58:58:56:16:7B:77:E5:86:9B:CC:67 X509v3 Authority Key Identifier: keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/LfVminLL1XTSWFhWFnt35YabzGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:f1:d5:8e:1f:e9:4e:61:2d:8b:2c:81:78:f0:95:08:f2:b6: 7f:14:64:ae:d2:30:e7:78:a2:15:46:ce:16:42:42:ae:77:86: 2e:e4:12:94:9c:06:70:cf:9a:36:bc:ff:b0:93:ba:88:d3:23: f5:c5:b4:b9:a0:5b:e6:06:9f:96:f5:ec:18:08:71:44:16:ef: a9:d4:c5:e5:77:e5:2f:c9:16:1b:04:4a:c4:1b:72:a2:ea:6a: 94:b0:dc:b7:a5:eb:cf:44:f4:fc:57:9f:b0:cc:ad:8c:34:d8: ff:c2:18:e2:a9:35:68:f6:20:f9:4a:42:3e:c8:87:af:83:5e: 07:d2:24:de:71:67:90:c4:66:4b:09:82:e8:4b:f1:c0:f7:f9: 9a:d5:fa:75:06:e5:bc:f4:9a:9e:58:db:d7:06:20:02:43:74: 13:de:1c:68:ad:7f:bc:1d:2b:81:ac:a5:f5:09:b8:35:28:f3: d2:ca:9b:40:b5:ad:6f:93:27:79:27:fd:a8:9a:47:20:e8:f7: e8:c3:2e:a5:c7:23:80:9f:3e:c1:36:02:0e:d5:fe:44:8e:3b: 04:cb:35:b0:15:8f:50:34:5f:1a:e1:fb:f1:04:9f:08:59:45: 6e:40:95:c2:ac:9a:a4:dd:c6:05:fa:be:8a:e6:8b:28:c7:ed: 98:ed:84:5e -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+ptq3Kk4ilW8w8R5Ocjp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1 OWQ1ZTUwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGY1NjY4YTcyY2JkNTc0ZDI1ODU4NTYxNjdiNzdlNTg2OWJjYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwprxiZT8MisSu7/fTxxZnhnKmdyR RoTvFjNhIcF64da2B98MRvIHYAAkqmS4oiixbnDpjh5UD3LxzECaXVe/LEjgr9tY 6M3DzzNsrkpWjYa1rb6uNWXUPF5xROwqjUQEcIl1apNwYWcymkM2KWrrUD+Fc86m fEfwlXXHYlN96MPy8eG0ejG6hYioWi6BkrKn9EgSM3dxFv3Voi1pqbQeCEAZn+Lw yfXS95qV6o1sOy5LN6DhgsZFTBndDZYGHsBtScwV82HWLxiIOR6kZdL1QYHySpw3 HPPmW/R3rsxtdbqje3T2P/7q4evFUYaIM+k+J7OgoHKc6rI++YQo6FMpLQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFC31Zopyy9V00lhYVhZ7d+WGm8xnMB8GA1UdIwQY MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt N2ZiMDU5MjBlMjI4LzEvTGZWbWluTEwxWFRTV0ZoV0ZudDM1WWFiekdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4 LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhvYwDQYJ KoZIhvcNAQELBQADggEBAInx1Y4f6U5hLYssgXjwlQjytn8UZK7SMOd4ohVGzhZC Qq53hi7kEpScBnDPmja8/7CTuojTI/XFtLmgW+YGn5b17BgIcUQW76nUxeV35S/J FhsESsQbcqLqapSw3Lel689E9PxXn7DMrYw02P/CGOKpNWj2IPlKQj7Ih6+DXgfS JN5xZ5DEZksJguhL8cD3+ZrV+nUG5bz0mp5Y29cGIAJDdBPeHGitf7wdK4GspfUJ uDUo89LKm0C1rW+TJ3kn/aiaRyDo9+jDLqXHI4CfPsE2Ag7V/kSOOwTLNbAVj1A0 Xxrh+/EEnwhZRW5AlcKsmqTdxgX6vormiyjH7ZjthF4= -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:34 2026 by rpki-client