This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LouJCRkUtnL0ULH3qSOPEnh-gP8.roa File: LouJCRkUtnL0ULH3qSOPEnh-gP8.roa (raw, json) Hash identifier: tE2fN3CifQhULGfMaUgzbVezZjEkc2RIfhCnoUqWNFc= Subject key identifier: 2E:8B:89:09:19:14:B6:72:F4:50:B1:F7:A9:23:8F:12:78:7E:80:FF Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C680499C711466788378969C3D530B Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LouJCRkUtnL0ULH3qSOPEnh-gP8.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 84.232.29.0/24 maxlen: 24 84.236.247.0/24 maxlen: 24 86.104.25.0/24 maxlen: 24 88.148.121.0/24 maxlen: 24 89.32.161.0/24 maxlen: 24 89.35.149.0/24 maxlen: 24 89.44.64.0/24 maxlen: 24 89.45.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:80:49:9c:71:14:66:78:83:78:96:9c:3d:53:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e8b89091914b672f450b1f7a9238f12787e80ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:0c:7d:79:d9:d1:52:6e:10:10:66:eb:a8: 56:8f:95:e4:46:68:7e:6d:c3:04:0a:88:6f:67:11: a7:91:68:00:2f:fb:92:55:a6:08:cd:1d:ff:6d:e0: fc:3d:a0:14:19:db:f1:5a:f3:b2:a7:6d:9a:37:dc: c9:d4:2c:15:65:11:82:60:f0:ca:67:87:c3:0d:72: 76:cc:c9:c2:8c:58:0a:1a:c2:8f:bf:79:f4:79:42: e2:5d:96:b5:c6:51:f8:d9:5a:87:fe:26:08:ca:cd: 50:7a:cf:4f:bf:00:0a:25:6f:27:67:98:14:a0:26: e7:3a:90:65:e5:a2:da:d7:4e:69:cf:aa:89:21:4e: cc:eb:af:b7:4f:73:bc:3a:46:25:a4:0f:59:a6:a7: 59:12:c5:31:29:dc:1d:30:28:fe:f3:b1:40:95:b6: 07:76:91:80:48:9b:ef:0f:6f:60:18:7b:d9:b2:ec: 8a:40:22:0a:0d:28:e6:d6:11:2f:df:cb:90:37:7b: 6f:4a:d1:53:36:cd:72:18:74:0d:71:03:5d:a4:49: 6a:2d:41:db:20:cd:d1:5c:67:96:d6:82:b9:c2:29: 83:76:27:1a:d1:85:68:a0:92:ae:20:4e:52:00:b9: 25:20:10:a2:62:2d:8e:67:61:81:90:f1:c9:f6:8b: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:89:09:19:14:B6:72:F4:50:B1:F7:A9:23:8F:12:78:7E:80:FF X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LouJCRkUtnL0ULH3qSOPEnh-gP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.29.0/24 84.236.247.0/24 86.104.25.0/24 88.148.121.0/24 89.32.161.0/24 89.35.149.0/24 89.44.64.0/24 89.45.244.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:6c:56:20:97:5f:a3:b4:f5:b8:74:8c:bc:d5:af:b1:75:d7: 74:cc:2a:d7:3a:ef:0a:94:34:26:e7:cd:7d:55:d3:e5:8a:8c: 35:3e:45:4d:95:fa:01:f2:44:f5:f6:50:5f:1a:e7:f8:1c:0d: bd:cf:28:68:63:4a:ba:71:b9:6e:2e:ad:65:9d:91:2a:3d:47: f3:cc:ec:ba:aa:1e:ce:80:05:2f:e1:09:86:15:de:34:36:d6: 92:53:56:da:ff:10:bc:e0:8b:1b:b5:83:98:37:8d:a7:69:3b: 1e:ae:be:58:17:6c:5c:58:f2:2c:7c:b9:aa:8f:56:2f:d2:25: d7:24:2b:24:d5:17:94:c8:1e:a9:55:bb:5b:8d:15:33:99:3e: 54:08:00:50:98:e5:f1:97:28:46:5f:3d:6e:92:06:a4:cf:14: 0f:ec:30:76:87:39:22:99:19:31:b9:95:da:6c:86:44:f8:b5: 80:81:b8:94:3c:c1:49:db:36:ab:b2:2a:64:4a:cf:55:60:fb: c0:00:38:78:38:11:ed:c5:e9:0b:b1:00:93:0f:23:29:77:3b: a1:f9:42:54:91:89:a3:84:ef:59:7f:89:c5:87:77:cd:f2:99: ee:ee:45:b0:93:b9:19:fa:e6:0d:5b:1b:1c:a7:64:f6:52:ea: 0d:37:9e:5f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3xoBJnHEUZniDeJacPVMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZThiODkwOTE5MTRiNjcyZjQ1MGIxZjdhOTIzOGYxMjc4N2U4MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq0MfXnZ0VJuEBBm66hWj5XkRmh+ bcMECohvZxGnkWgAL/uSVaYIzR3/beD8PaAUGdvxWvOyp22aN9zJ1CwVZRGCYPDK Z4fDDXJ2zMnCjFgKGsKPv3n0eULiXZa1xlH42VqH/iYIys1Qes9PvwAKJW8nZ5gU oCbnOpBl5aLa105pz6qJIU7M66+3T3O8OkYlpA9ZpqdZEsUxKdwdMCj+87FAlbYH dpGASJvvD29gGHvZsuyKQCIKDSjm1hEv38uQN3tvStFTNs1yGHQNcQNdpElqLUHb IM3RXGeW1oK5wimDdica0YVooJKuIE5SALklIBCiYi2OZ2GBkPHJ9ou1mwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFC6LiQkZFLZy9FCx96kjjxJ4foD/MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvTG91SkNSa1V0bkwwVUxIM3FTT1BFbmgtZ1A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVOgdAwQA VOz3AwQAVmgZAwQAWJR5AwQAWSChAwQAWSOVAwQAWSxAAwQAWS30MA0GCSqGSIb3 DQEBCwUAA4IBAQA+bFYgl1+jtPW4dIy81a+xddd0zCrXOu8KlDQm5819VdPliow1 PkVNlfoB8kT19lBfGuf4HA29zyhoY0q6cbluLq1lnZEqPUfzzOy6qh7OgAUv4QmG Fd40NtaSU1ba/xC84IsbtYOYN42naTserr5YF2xcWPIsfLmqj1Yv0iXXJCsk1ReU yB6pVbtbjRUzmT5UCABQmOXxlyhGXz1ukgakzxQP7DB2hzkimRkxuZXabIZE+LWA gbiUPMFJ2zarsipkSs9VYPvAADh4OBHtxekLsQCTDyMpdzuh+UJUkYmjhO9Zf4nF h3fN8pnu7kWwk7kZ+uYNWxscp2T2UuoNN55f -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:28 2026 by rpki-client