This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/LEC1offLjwJrFzx8Dpv7xkLNEyg.roa File: LEC1offLjwJrFzx8Dpv7xkLNEyg.roa (raw, json) Hash identifier: dFznU7yxG8+kgv1O/dEk2D3HMFQlxv6V3RwD+q16duc= Subject key identifier: 2C:40:B5:A1:F7:CB:8F:02:6B:17:3C:7C:0E:9B:FB:C6:42:CD:13:28 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F83852B1CE2040E0796927A556C17B0 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/LEC1offLjwJrFzx8Dpv7xkLNEyg.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 45.11.188.0/24 maxlen: 24 188.209.132.0/24 maxlen: 24 194.15.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:85:2b:1c:e2:04:0e:07:96:92:7a:55:6c:17:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c40b5a1f7cb8f026b173c7c0e9bfbc642cd1328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:4c:7a:5d:b2:42:66:e1:40:a0:9c:41:1c: bf:18:75:2c:78:75:ad:b2:3a:81:18:d7:ad:f2:fa: cd:c2:d0:c4:31:ef:f2:a4:da:3f:38:55:26:6a:5a: fe:bd:d1:4d:36:bd:aa:b5:a3:12:27:19:fe:15:f0: 1e:9d:48:1f:ba:f6:24:d9:da:3e:26:03:fe:b7:c4: 75:d1:d1:ab:e1:22:60:1e:95:a3:44:4e:6a:ba:c7: 44:0a:a6:fc:64:a9:59:3d:37:fe:4f:d1:5f:d6:e8: 5e:5a:b3:31:ce:d8:59:64:04:59:53:d9:5e:a4:e5: 89:c2:7a:70:74:53:db:55:c7:a6:3b:85:53:f8:13: d4:3e:08:81:d0:b8:8f:c5:71:bb:d9:3b:b6:85:95: ab:53:28:e9:6c:17:0a:17:64:61:9a:9d:26:6d:b1: df:1f:18:65:c5:aa:57:b8:59:92:fc:e5:0f:1e:5c: 04:96:cd:e2:21:52:6b:5e:88:09:08:5a:1e:c3:de: 16:1b:66:03:f5:be:1d:b7:f1:08:7c:14:88:e2:4e: d5:03:20:d5:3a:6f:1e:1e:32:03:8d:65:81:d1:83: ad:cc:52:5d:7d:1c:9c:82:16:68:52:d0:b1:fc:fa: 77:d9:86:70:cd:d6:a4:da:ea:03:7f:db:2a:8f:2c: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:40:B5:A1:F7:CB:8F:02:6B:17:3C:7C:0E:9B:FB:C6:42:CD:13:28 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/LEC1offLjwJrFzx8Dpv7xkLNEyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.188.0/24 188.209.132.0/24 194.15.96.0/24 Signature Algorithm: sha256WithRSAEncryption 12:25:13:dc:ca:50:09:39:1c:0a:ef:d9:c6:0c:a6:49:95:db: b9:aa:7d:b8:2b:ec:61:40:01:c1:46:65:af:1f:d3:26:64:f1: 05:ff:74:6c:29:f6:9b:d0:cc:41:3e:b2:72:9a:5e:9e:80:58: 1f:17:a5:fc:c2:57:50:d3:8c:9c:68:ce:0f:ea:9c:58:7f:e4: 30:11:ba:1b:08:cc:8d:8c:97:4c:b7:bd:05:ea:c0:3a:e3:78: 94:76:fd:2b:d0:d7:81:ce:84:6c:59:0b:94:90:3c:e1:f5:8e: eb:1d:fa:4f:05:ad:38:6d:9b:53:5e:77:a0:f6:54:12:b2:7a: 6c:7e:40:d4:78:b5:d3:b6:1f:5d:dd:6f:4c:67:2b:f1:55:ee: 39:84:00:28:4b:0d:be:1a:27:ff:5f:42:d3:c6:cc:2a:6b:da: d1:69:02:eb:b5:61:6d:08:a5:d6:10:a8:63:7d:7f:2c:a3:31: a7:83:29:60:c3:fc:5f:13:53:f7:7e:2c:b7:a3:46:96:54:f7: e0:86:f2:24:41:19:08:d0:27:f1:52:a0:20:3d:84:0e:ed:da: f3:9a:5f:ed:aa:b6:b3:75:5c:c9:81:9c:9a:f3:76:ed:79:24: e3:d3:7e:b7:cc:27:12:3f:68:b1:b4:96:97:b3:30:4d:14:2e: d0:59:da:7b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g4UrHOIEDgeWknpVbBewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzQwYjVhMWY3Y2I4ZjAyNmIxNzNjN2MwZTliZmJjNjQyY2QxMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxdMel2yQmbhQKCcQRy/GHUseHWt sjqBGNet8vrNwtDEMe/ypNo/OFUmalr+vdFNNr2qtaMSJxn+FfAenUgfuvYk2do+ JgP+t8R10dGr4SJgHpWjRE5qusdECqb8ZKlZPTf+T9Ff1uheWrMxzthZZARZU9le pOWJwnpwdFPbVcemO4VT+BPUPgiB0LiPxXG72Tu2hZWrUyjpbBcKF2Rhmp0mbbHf HxhlxapXuFmS/OUPHlwEls3iIVJrXogJCFoew94WG2YD9b4dt/EIfBSI4k7VAyDV Om8eHjIDjWWB0YOtzFJdfRycghZoUtCx/Pp32YZwzdak2uoDf9sqjyw+3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCxAtaH3y48Caxc8fA6b+8ZCzRMoMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvTEVDMW9mZkxqd0pyRnp4OERwdjd4a0xORXlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQu8AwQA vNGEAwQAwg9gMA0GCSqGSIb3DQEBCwUAA4IBAQASJRPcylAJORwK79nGDKZJldu5 qn24K+xhQAHBRmWvH9MmZPEF/3RsKfab0MxBPrJyml6egFgfF6X8wldQ04ycaM4P 6pxYf+QwEbobCMyNjJdMt70F6sA643iUdv0r0NeBzoRsWQuUkDzh9Y7rHfpPBa04 bZtTXneg9lQSsnpsfkDUeLXTth9d3W9MZyvxVe45hAAoSw2+Gif/X0LTxswqa9rR aQLrtWFtCKXWEKhjfX8sozGngylgw/xfE1P3fiy3o0aWVPfghvIkQRkI0CfxUqAg PYQO7drzml/tqrazdVzJgZya83bteSTj0363zCcSP2ixtJaXszBNFC7QWdp7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:12 2026 by rpki-client