This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/LeeGxV3aui0l0n7ETElrzjtkaBM.roa File: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (raw, json) Hash identifier: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8= Subject key identifier: 2D:E7:86:C5:5D:DA:BA:2D:25:D2:7E:C4:4C:49:6B:CE:3B:64:68:13 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019C0A9C21F16FB5D55E5503C002E4AFA091 Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/LeeGxV3aui0l0n7ETElrzjtkaBM.roa Signing time: Thu 29 Jan 2026 16:35:30 +0000 ROA not before: Thu 29 Jan 2026 16:35:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34696 IP address blocks: 185.128.60.0/24 maxlen: 24 185.128.61.0/24 maxlen: 24 185.128.62.0/24 maxlen: 24 185.237.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:9c:21:f1:6f:b5:d5:5e:55:03:c0:02:e4:af:a0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Jan 29 16:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2de786c55ddaba2d25d27ec44c496bce3b646813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:90:34:b4:af:d8:22:fa:b3:22:d7:ca:9a: a8:b4:c6:6e:04:95:d7:f8:4d:40:29:98:47:1c:25: 28:48:e3:f6:17:ab:f9:b2:a4:2d:75:b1:3b:bb:64: 7d:82:16:5b:89:4f:ef:66:f4:b6:9f:71:83:3f:d3: 29:4b:77:88:c7:30:4a:0b:63:f4:8f:eb:a5:8c:b7: 42:7a:1b:71:63:77:20:0d:a3:be:c2:6e:23:15:51: f7:d3:79:88:df:15:d7:2d:0f:1e:f8:44:f7:50:41: 61:32:3c:86:5a:12:a5:d7:59:78:8d:42:18:75:74: 24:32:43:d7:e9:e9:b2:91:24:a8:28:cb:42:d2:12: cb:98:35:3f:58:7c:73:bb:27:55:bf:36:da:64:38: a2:59:bd:00:17:1f:8a:15:0f:26:c3:f2:35:c4:38: 11:96:f5:b5:fd:7c:81:7e:4e:e5:01:01:1a:9f:a9: 8a:60:4c:3b:69:ae:94:98:20:b5:7a:29:6d:13:93: b0:a3:92:6a:4b:3d:0d:7d:87:6d:02:c9:24:4a:7b: 41:79:1a:74:ff:b2:4c:cb:cf:ac:21:f4:8f:94:de: 30:08:c7:1b:50:10:10:01:74:54:11:6a:08:9d:8d: 1a:07:a6:ed:e0:98:f3:7d:a2:28:a0:18:94:e8:e5: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E7:86:C5:5D:DA:BA:2D:25:D2:7E:C4:4C:49:6B:CE:3B:64:68:13 X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/LeeGxV3aui0l0n7ETElrzjtkaBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.60.0-185.128.62.255 185.237.136.0/22 Signature Algorithm: sha256WithRSAEncryption 14:4b:6c:e8:49:3a:3e:18:39:b3:4d:e0:0c:7e:79:52:67:3e: 2f:6a:2d:c4:1d:88:28:15:60:4e:cb:b4:59:00:d9:b5:e1:a0: 01:4c:34:33:07:37:1e:d7:19:3c:9e:c8:ad:54:94:f5:2e:25: 11:cc:79:60:a8:6d:ae:37:b5:8f:eb:23:28:e2:1f:6c:5a:8d: b6:97:12:a9:32:e2:6c:c0:21:97:76:95:59:11:7e:19:24:54: f4:3d:03:81:10:6c:f2:a8:e8:ab:97:51:cd:d9:ab:98:08:8a: b6:42:9b:97:12:fe:e5:e6:fb:3e:26:ff:4a:d5:6a:b7:2d:b5: bb:d7:42:41:14:2b:d9:a3:81:5b:32:93:f6:6d:1a:38:5a:10: 97:8a:6f:b9:ca:4b:c2:c8:9f:fe:5a:4e:a1:47:8d:16:fb:7d: fe:43:70:fc:f4:2a:d1:3d:89:c9:f8:8b:ff:12:06:4a:39:2d: d8:76:a1:41:e6:18:fd:a8:2d:18:fa:84:1c:d3:01:80:2a:f3: f9:56:b6:56:2c:07:5d:3e:ce:74:15:86:61:42:10:cd:28:b7: bd:0a:7e:d1:16:62:54:7a:90:c4:51:f5:12:36:bd:dc:84:e9: 9a:4d:2b:06:99:a7:64:0e:c8:72:d6:30:af:2c:c6:a3:c5:89: 99:43:2a:f3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZwKnCHxb7XVXlUDwALkr6CRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjYwMTI5MTYzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGU3ODZjNTVkZGFiYTJkMjVkMjdlYzQ0YzQ5NmJjZTNiNjQ2ODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbmQNLSv2CL6syLXypqotMZuBJXX +E1AKZhHHCUoSOP2F6v5sqQtdbE7u2R9ghZbiU/vZvS2n3GDP9MpS3eIxzBKC2P0 j+uljLdCehtxY3cgDaO+wm4jFVH303mI3xXXLQ8e+ET3UEFhMjyGWhKl11l4jUIY dXQkMkPX6emykSSoKMtC0hLLmDU/WHxzuydVvzbaZDiiWb0AFx+KFQ8mw/I1xDgR lvW1/XyBfk7lAQEan6mKYEw7aa6UmCC1eiltE5Owo5JqSz0NfYdtAskkSntBeRp0 /7JMy8+sIfSPlN4wCMcbUBAQAXRUEWoInY0aB6bt4JjzfaIooBiU6OX00wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFC3nhsVd2rotJdJ+xExJa847ZGgTMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvTGVlR3hWM2F1aTBsMG43RVRFbHJ6anRrYUJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5gDwD BAC5gD4DBAK57YgwDQYJKoZIhvcNAQELBQADggEBABRLbOhJOj4YObNN4Ax+eVJn Pi9qLcQdiCgVYE7LtFkA2bXhoAFMNDMHNx7XGTyeyK1UlPUuJRHMeWCoba43tY/r IyjiH2xajbaXEqky4mzAIZd2lVkRfhkkVPQ9A4EQbPKo6KuXUc3Zq5gIirZCm5cS /uXm+z4m/0rVarcttbvXQkEUK9mjgVsyk/ZtGjhaEJeKb7nKS8LIn/5aTqFHjRb7 ff5DcPz0KtE9icn4i/8SBko5Ldh2oUHmGP2oLRj6hBzTAYAq8/lWtlYsB10+znQV hmFCEM0ot70KftEWYlR6kMRR9RI2vdyE6ZpNKwaZp2QOyHLWMK8sxqPFiZlDKvM= -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:40 2026 by rpki-client