This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/LU_rRpVG0rNU5sbORgmoor-WG8E.roa File: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (raw, json) Hash identifier: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc= Subject key identifier: 2D:4F:EB:46:95:46:D2:B3:54:E6:C6:CE:46:09:A8:A2:BF:96:1B:C1 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019B7C121987D95273EBAF17A611EF4DCA7B Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/LU_rRpVG0rNU5sbORgmoor-WG8E.roa Signing time: Fri 02 Jan 2026 00:18:39 +0000 ROA not before: Fri 02 Jan 2026 00:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29345 IP address blocks: 85.254.192.0/23 maxlen: 24 85.254.193.0/24 maxlen: 24 85.254.208.0/23 maxlen: 24 91.240.246.0/23 maxlen: 23 2a02:501::/32 maxlen: 32 2a02:501:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:19:87:d9:52:73:eb:af:17:a6:11:ef:4d:ca:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 2 00:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d4feb469546d2b354e6c6ce4609a8a2bf961bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:91:57:c6:6a:3f:b1:89:3d:19:2b:48:63: 7d:af:59:13:57:fb:c5:cf:6a:66:6c:db:4e:06:f8: 37:93:7c:81:7d:a5:59:89:2f:51:fa:df:0f:26:b5: 52:82:db:e8:76:b9:be:87:eb:09:95:8a:7b:a6:9b: 42:e2:ce:4b:df:f7:71:e7:d5:9f:0f:e0:3e:e3:aa: f8:44:96:11:43:ec:8c:ce:46:1e:c7:d9:b0:c3:1a: ea:eb:ae:2e:e7:a1:ea:8b:3b:68:eb:f1:b3:8d:86: 97:1f:3b:96:74:0a:54:62:a0:38:7f:84:54:4e:4d: 87:93:63:6a:9d:59:bb:d9:9c:27:9b:38:a0:53:6d: a2:fd:2e:31:d6:eb:65:29:6a:eb:3b:8c:8f:a0:fd: 7a:a9:af:ca:d2:7e:6a:af:14:7e:9d:f8:65:78:76: cf:92:98:46:b2:3e:18:d6:2e:d3:a5:a7:2e:9b:71: f0:4a:e8:6b:ff:1f:4f:ba:62:eb:8e:66:0e:f5:4f: c9:14:08:a3:01:6f:d3:6e:89:7c:5c:ee:95:d0:8f: b7:ba:d2:eb:e5:43:36:ec:00:57:aa:26:de:c2:12: 85:f2:8f:73:aa:8f:6f:d5:2e:ad:7d:4f:8f:5f:8f: 8f:1b:ca:98:2f:7c:b9:cd:57:f3:68:8a:72:c7:fb: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4F:EB:46:95:46:D2:B3:54:E6:C6:CE:46:09:A8:A2:BF:96:1B:C1 X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/LU_rRpVG0rNU5sbORgmoor-WG8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.192.0/23 85.254.208.0/23 91.240.246.0/23 IPv6: 2a02:501::/32 Signature Algorithm: sha256WithRSAEncryption 57:4e:a4:94:50:96:ea:17:f8:e2:7f:f6:9c:81:44:dd:2c:3a: af:d5:6a:0f:cb:4f:47:4b:a2:21:30:f6:bb:a4:c9:7b:65:99: 4c:4c:5f:8a:d4:5c:c9:8d:ed:de:bf:97:80:e1:2d:ab:8b:8e: 3f:21:c2:44:9d:25:77:bf:18:7c:1f:55:63:a4:49:02:2b:26: df:b0:c8:e5:1b:1a:9d:7b:b8:3f:d8:80:e5:c4:19:f4:72:f7: 6b:78:ee:5e:02:1e:32:b1:08:e1:a2:29:bb:98:59:02:6a:0a: 3e:b0:04:16:a8:e3:d9:9a:f1:2e:d6:c8:ef:32:fd:d7:c1:b7: e0:ad:22:ae:72:a1:7f:0b:3b:6a:82:97:9c:fc:7f:8d:67:30: 62:8e:f5:f4:41:6d:34:9e:92:c1:64:d8:98:5b:fe:84:9f:95: 25:b7:c1:6e:c7:ba:13:e8:02:c8:5a:69:e5:80:55:09:ac:62: bf:f6:70:de:41:d5:b1:2b:5f:d1:bd:2e:7e:c3:e2:55:9d:78: f6:af:01:5c:47:47:b3:69:82:29:1a:b4:eb:9c:bc:9a:6f:2f: 17:c5:fc:97:46:f0:2f:27:72:ae:63:a6:83:fa:57:cd:e3:63: e9:42:51:d5:d3:5b:86:28:36:06:d0:7c:cc:84:28:c5:2c:a3: 75:0f:b9:2a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8EhmH2VJz668XphHvTcp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTAyMDAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDRmZWI0Njk1NDZkMmIzNTRlNmM2Y2U0NjA5YThhMmJmOTYxYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AWRV8ZqP7GJPRkrSGN9r1kTV/vF z2pmbNtOBvg3k3yBfaVZiS9R+t8PJrVSgtvodrm+h+sJlYp7pptC4s5L3/dx59Wf D+A+46r4RJYRQ+yMzkYex9mwwxrq664u56Hqizto6/GzjYaXHzuWdApUYqA4f4RU Tk2Hk2NqnVm72ZwnmzigU22i/S4x1utlKWrrO4yPoP16qa/K0n5qrxR+nfhleHbP kphGsj4Y1i7Tpacum3HwSuhr/x9PumLrjmYO9U/JFAijAW/Tbol8XO6V0I+3utLr 5UM27ABXqibewhKF8o9zqo9v1S6tfU+PX4+PG8qYL3y5zVfzaIpyx/vX+QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFC1P60aVRtKzVObGzkYJqKK/lhvBMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvTFVfclJwVkcwck5VNXNiT1JnbW9vci1XRzhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBVf7AAwQB Vf7QAwQBW/D2MA0EAgACMAcDBQAqAgUBMA0GCSqGSIb3DQEBCwUAA4IBAQBXTqSU UJbqF/jif/acgUTdLDqv1WoPy09HS6IhMPa7pMl7ZZlMTF+K1FzJje3ev5eA4S2r i44/IcJEnSV3vxh8H1VjpEkCKybfsMjlGxqde7g/2IDlxBn0cvdreO5eAh4ysQjh oim7mFkCago+sAQWqOPZmvEu1sjvMv3XwbfgrSKucqF/Cztqgpec/H+NZzBijvX0 QW00npLBZNiYW/6En5Ult8Fux7oT6ALIWmnlgFUJrGK/9nDeQdWxK1/RvS5+w+JV nXj2rwFcR0ezaYIpGrTrnLyaby8XxfyXRvAvJ3KuY6aD+lfN42PpQlHV01uGKDYG 0HzMhCjFLKN1D7kq -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:04 2026 by rpki-client