This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/LXvuXQ4yMGcXtOjADcxVweQB4nM.roa File: LXvuXQ4yMGcXtOjADcxVweQB4nM.roa (raw, json) Hash identifier: o9QKodPZuQiUAKy8mnVpttxyyoCbk6D5e4LiR/nhdvQ= Subject key identifier: 2D:7B:EE:5D:0E:32:30:67:17:B4:E8:C0:0D:CC:55:C1:E4:01:E2:73 Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019BC6996116569BB73C7F94C8EEFA4EEB7E Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/LXvuXQ4yMGcXtOjADcxVweQB4nM.roa Signing time: Fri 16 Jan 2026 11:38:19 +0000 ROA not before: Fri 16 Jan 2026 11:38:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 5.39.176.0/21 maxlen: 24 5.159.208.0/21 maxlen: 24 5.181.72.0/22 maxlen: 24 31.192.96.0/21 maxlen: 24 45.8.100.0/22 maxlen: 24 45.132.108.0/22 maxlen: 24 45.137.44.0/22 maxlen: 24 80.74.240.0/21 maxlen: 24 80.74.248.0/21 maxlen: 24 80.87.16.0/20 maxlen: 24 83.150.252.0/22 maxlen: 24 85.95.96.0/19 maxlen: 24 87.236.128.0/21 maxlen: 24 88.151.152.0/21 maxlen: 24 89.38.120.0/21 maxlen: 24 91.143.64.0/20 maxlen: 24 92.42.120.0/21 maxlen: 24 93.115.176.0/20 maxlen: 24 94.142.168.0/21 maxlen: 24 95.129.64.0/21 maxlen: 24 176.58.0.0/21 maxlen: 24 185.52.144.0/22 maxlen: 24 185.79.184.0/22 maxlen: 24 185.90.0.0/22 maxlen: 24 185.94.204.0/22 maxlen: 24 185.99.76.0/22 maxlen: 24 185.145.88.0/22 maxlen: 24 185.178.216.0/22 maxlen: 24 185.182.0.0/21 maxlen: 24 185.182.200.0/23 maxlen: 24 185.204.212.0/22 maxlen: 24 185.229.4.0/22 maxlen: 24 185.246.132.0/22 maxlen: 24 185.247.200.0/22 maxlen: 24 185.248.252.0/22 maxlen: 24 185.248.252.0/24 maxlen: 24 185.248.253.0/24 maxlen: 24 185.248.254.0/24 maxlen: 24 185.248.255.0/24 maxlen: 24 188.94.16.0/21 maxlen: 24 193.24.3.0/24 maxlen: 24 193.24.6.0/24 maxlen: 24 193.24.13.0/24 maxlen: 24 193.24.31.0/24 maxlen: 24 195.26.32.0/19 maxlen: 24 195.88.8.0/23 maxlen: 24 212.11.68.0/22 maxlen: 24 212.11.72.0/22 maxlen: 24 217.145.128.0/20 maxlen: 24 2a00:f1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:99:61:16:56:9b:b7:3c:7f:94:c8:ee:fa:4e:eb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Jan 16 11:38:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d7bee5d0e32306717b4e8c00dcc55c1e401e273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:43:7f:a2:91:24:7e:ab:78:61:40:b6:e7: 76:a2:34:32:5e:ae:2c:d2:eb:30:54:66:d3:3a:5b: cd:a5:80:b8:4f:48:d1:c4:04:03:10:16:84:2e:19: dd:89:97:aa:ea:f1:c0:55:ce:7b:f1:57:ad:b4:e4: a3:e2:92:bc:a7:15:7d:df:d7:69:cb:24:72:6f:2f: e0:6a:67:46:50:cb:61:98:a0:7c:3f:97:5d:73:5f: 84:c4:28:83:b5:3b:bb:11:41:6e:94:f3:f3:1a:be: f0:fb:f0:9d:7a:e3:86:43:6e:c4:8e:9a:dc:f1:43: 44:08:82:08:40:ba:d3:ee:fc:62:86:17:62:e9:c4: 84:25:de:f7:36:00:16:37:09:b1:5c:70:3d:f8:b8: 0f:8a:f5:70:b3:f2:8b:e9:b8:e9:4d:ce:42:f4:49: 53:3d:da:d1:cf:b7:ff:be:65:6e:c2:44:0b:c2:81: d1:53:49:2e:97:1b:66:0d:0b:c1:15:38:eb:18:cb: ff:4a:e2:2e:05:47:74:46:60:4d:50:65:3e:35:c2: 47:f9:ff:9f:14:93:55:41:a4:34:86:0d:f7:d0:c9: a5:9d:38:d8:55:83:8a:5c:33:e0:43:97:6d:91:45: af:05:0f:0c:c1:b3:cf:52:70:2a:4c:76:a2:ee:66: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7B:EE:5D:0E:32:30:67:17:B4:E8:C0:0D:CC:55:C1:E4:01:E2:73 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/LXvuXQ4yMGcXtOjADcxVweQB4nM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.176.0/21 5.159.208.0/21 5.181.72.0/22 31.192.96.0/21 45.8.100.0/22 45.132.108.0/22 45.137.44.0/22 80.74.240.0/20 80.87.16.0/20 83.150.252.0/22 85.95.96.0/19 87.236.128.0/21 88.151.152.0/21 89.38.120.0/21 91.143.64.0/20 92.42.120.0/21 93.115.176.0/20 94.142.168.0/21 95.129.64.0/21 176.58.0.0/21 185.52.144.0/22 185.79.184.0/22 185.90.0.0/22 185.94.204.0/22 185.99.76.0/22 185.145.88.0/22 185.178.216.0/22 185.182.0.0/21 185.182.200.0/23 185.204.212.0/22 185.229.4.0/22 185.246.132.0/22 185.247.200.0/22 185.248.252.0/22 188.94.16.0/21 193.24.3.0/24 193.24.6.0/24 193.24.13.0/24 193.24.31.0/24 195.26.32.0/19 195.88.8.0/23 212.11.68.0-212.11.75.255 217.145.128.0/20 IPv6: 2a00:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:dd:86:7b:0a:70:09:0a:57:b7:10:01:46:d3:09:9d:e6:e0: 03:ce:e8:b3:71:02:fe:a2:b6:42:64:bd:a5:b8:e3:80:ba:db: 41:43:70:46:56:6d:21:c9:62:b9:bf:39:be:6b:57:5a:70:79: 95:53:94:34:9a:7b:06:c7:88:72:77:45:5f:78:66:6c:c5:45: 21:e0:93:9f:2b:62:5e:c0:71:de:42:66:23:05:0d:a1:a6:a5: 0f:dc:7e:75:dc:20:46:9d:bd:d4:61:9c:a3:bd:96:92:70:a6: 09:db:3a:7d:50:1c:d1:41:c9:d8:aa:ce:2f:42:a1:3f:fb:68: 48:54:eb:0d:a1:f5:e1:2e:20:25:6f:46:4a:25:c3:c8:4a:03: 6d:e5:c6:54:e5:98:07:b0:1e:bf:3d:2d:26:1a:83:37:96:c1: ac:53:84:00:67:28:9e:49:aa:e5:b3:46:62:b6:66:9c:bb:1a: 25:bb:cf:27:9a:1d:11:e8:c3:c4:d8:42:8d:52:90:79:0f:3b: 9f:63:02:d9:8d:f4:85:86:11:bd:9d:e4:52:05:4e:b7:3f:b5: 24:f4:6a:90:9b:2a:7c:87:0d:e1:f1:d3:33:05:fc:32:72:d5: ce:d2:10:7c:01:04:dc:f9:2b:c1:dd:c5:e0:5f:68:c8:88:c0: 7f:a4:95:50 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISAZvGmWEWVpu3PH+UyO76Tut+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjYwMTE2MTEzODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDdiZWU1ZDBlMzIzMDY3MTdiNGU4YzAwZGNjNTVjMWU0MDFlMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnylDf6KRJH6reGFAtud2ojQyXq4s 0uswVGbTOlvNpYC4T0jRxAQDEBaELhndiZeq6vHAVc578VettOSj4pK8pxV939dp yyRyby/gamdGUMthmKB8P5ddc1+ExCiDtTu7EUFulPPzGr7w+/CdeuOGQ27Ejprc 8UNECIIIQLrT7vxihhdi6cSEJd73NgAWNwmxXHA9+LgPivVws/KL6bjpTc5C9ElT PdrRz7f/vmVuwkQLwoHRU0kulxtmDQvBFTjrGMv/SuIuBUd0RmBNUGU+NcJH+f+f FJNVQaQ0hg330MmlnTjYVYOKXDPgQ5dtkUWvBQ8MwbPPUnAqTHai7mZvxwIDAQAB o4IDJjCCAyIwHQYDVR0OBBYEFC177l0OMjBnF7TowA3MVcHkAeJzMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvTFh2dVhRNHlNR2NYdE9qQURjeFZ3ZVFCNG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOgYIKwYBBQUHAQcBAf8EggEpMIIBJTCCARIEAgABMIIB CgMEAwUnsAMEAwWf0AMEAgW1SAMEAx/AYAMEAi0IZAMEAi2EbAMEAi2JLAMEBFBK 8AMEBFBXEAMEAlOW/AMEBVVfYAMEA1fsgAMEA1iXmAMEA1kmeAMEBFuPQAMEA1wq eAMEBF1zsAMEA16OqAMEA1+BQAMEA7A6AAMEArk0kAMEArlPuAMEArlaAAMEArle zAMEArljTAMEArmRWAMEArmy2AMEA7m2AAMEAbm2yAMEArnM1AMEArnlBAMEArn2 hAMEArn3yAMEArn4/AMEA7xeEAMEAMEYAwMEAMEYBgMEAMEYDQMEAMEYHwMEBcMa IAMEAcNYCDAMAwQC1AtEAwQC1AtIAwQE2ZGAMA0EAgACMAcDBQAqAPHAMA0GCSqG SIb3DQEBCwUAA4IBAQAX3YZ7CnAJCle3EAFG0wmd5uADzuizcQL+orZCZL2luOOA uttBQ3BGVm0hyWK5vzm+a1dacHmVU5Q0mnsGx4hyd0VfeGZsxUUh4JOfK2JewHHe QmYjBQ2hpqUP3H513CBGnb3UYZyjvZaScKYJ2zp9UBzRQcnYqs4vQqE/+2hIVOsN ofXhLiAlb0ZKJcPISgNt5cZU5ZgHsB6/PS0mGoM3lsGsU4QAZyieSarls0Zitmac uxolu88nmh0R6MPE2EKNUpB5DzufYwLZjfSFhhG9neRSBU63P7Uk9GqQmyp8hw3h 8dMzBfwyctXO0hB8AQTc+SvB3cXgX2jIiMB/pJVQ -----END CERTIFICATE-----Generated at Fri Jan 23 16:04:50 2026 by rpki-client