This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/LPOrucUAfTv-uB6zdBnZJWVV2KI.roa File: LPOrucUAfTv-uB6zdBnZJWVV2KI.roa (raw, json) Hash identifier: sEOC3U3MsAqGwClIonvHctilEkwrYKUlTJZDZzxjup0= Subject key identifier: 2C:F3:AB:B9:C5:00:7D:3B:FE:B8:1E:B3:74:19:D9:25:65:55:D8:A2 Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c Certificate serial: 019C4229AB40B7485C753B8AE7CCEF8B8842 Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/LPOrucUAfTv-uB6zdBnZJWVV2KI.roa Signing time: Mon 09 Feb 2026 11:29:12 +0000 ROA not before: Mon 09 Feb 2026 11:29:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34170 IP address blocks: 80.69.48.0/24 maxlen: 24 80.69.49.0/24 maxlen: 24 80.69.50.0/24 maxlen: 24 80.69.51.0/24 maxlen: 24 80.69.53.0/24 maxlen: 24 80.69.56.0/24 maxlen: 24 80.69.57.0/24 maxlen: 24 80.69.60.0/24 maxlen: 24 91.135.240.0/24 maxlen: 24 91.135.241.0/24 maxlen: 24 91.135.242.0/24 maxlen: 24 91.135.243.0/24 maxlen: 24 91.135.244.0/24 maxlen: 24 91.135.252.0/24 maxlen: 24 91.135.253.0/24 maxlen: 24 92.39.90.0/24 maxlen: 24 92.39.91.0/24 maxlen: 24 92.39.92.0/24 maxlen: 24 92.39.93.0/24 maxlen: 24 92.39.94.0/24 maxlen: 24 158.181.34.0/24 maxlen: 24 158.181.37.0/24 maxlen: 24 158.181.38.0/24 maxlen: 24 158.181.39.0/24 maxlen: 24 158.181.44.0/23 maxlen: 23 158.181.46.0/23 maxlen: 23 185.92.224.0/24 maxlen: 24 185.92.225.0/24 maxlen: 24 185.92.226.0/24 maxlen: 24 185.105.196.0/24 maxlen: 24 185.105.197.0/24 maxlen: 24 185.105.198.0/24 maxlen: 24 185.105.199.0/24 maxlen: 24 212.47.152.0/24 maxlen: 24 212.47.153.0/24 maxlen: 24 212.47.154.0/24 maxlen: 24 212.47.155.0/24 maxlen: 24 212.47.156.0/24 maxlen: 24 212.47.157.0/24 maxlen: 24 212.47.158.0/24 maxlen: 24 2a05:8200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:29:ab:40:b7:48:5c:75:3b:8a:e7:cc:ef:8b:88:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c Validity Not Before: Feb 9 11:29:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cf3abb9c5007d3bfeb81eb37419d9256555d8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:4c:15:61:80:92:d4:51:4b:f6:ac:2a:76: db:93:fa:a5:74:a2:61:4c:6e:0f:b6:57:f7:36:79: 17:da:b3:ec:b3:38:fc:08:27:3e:13:19:58:63:0b: ce:a9:97:85:b6:78:00:a2:ee:aa:b4:3c:b1:ce:62: fa:87:f5:98:61:3f:dc:23:fa:f2:8f:e4:67:4c:9b: a5:e6:4a:03:79:7f:8a:2d:4b:14:72:b5:5b:09:d6: 32:b7:65:42:2f:6c:14:5f:45:8b:61:73:fc:2f:1d: de:d9:00:1d:9c:ea:33:66:f4:94:21:75:92:c0:ca: 00:a5:3e:32:cd:2d:9c:b8:59:29:a7:8c:24:3a:c4: c7:05:2c:ff:bf:7e:82:ea:c0:30:4e:f5:72:bb:b7: cf:b7:a1:fb:95:72:d8:9b:8b:ad:51:d9:b4:5e:d9: ab:6e:bf:3a:f3:cd:05:fb:63:b7:96:78:14:1a:01: 4d:6c:83:43:04:53:a7:2d:73:77:76:cb:9c:cf:aa: 5e:ee:f2:a5:dc:c2:10:f5:af:9c:1e:ea:13:4d:2d: 36:bc:61:97:cd:15:d4:5f:a0:fa:d6:d2:7e:21:6c: d7:7c:58:f2:96:ec:90:75:44:f9:73:39:92:39:96: 57:45:d5:f3:2b:d9:dc:67:e1:ce:6e:04:2d:73:71: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:AB:B9:C5:00:7D:3B:FE:B8:1E:B3:74:19:D9:25:65:55:D8:A2 X509v3 Authority Key Identifier: keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/LPOrucUAfTv-uB6zdBnZJWVV2KI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.69.48.0/22 80.69.53.0/24 80.69.56.0/23 80.69.60.0/24 91.135.240.0-91.135.244.255 91.135.252.0/23 92.39.90.0-92.39.94.255 158.181.34.0/24 158.181.37.0-158.181.39.255 158.181.44.0/22 185.92.224.0-185.92.226.255 185.105.196.0/22 212.47.152.0-212.47.158.255 IPv6: 2a05:8200::/29 Signature Algorithm: sha256WithRSAEncryption 08:5c:92:ab:0e:a4:70:7b:3e:46:b3:6e:ad:d4:8f:b4:86:11: d8:79:49:71:73:0c:c7:2e:01:12:19:83:f3:fe:3c:e6:0d:53: c5:75:d0:b6:eb:0e:41:68:ce:09:3d:d7:c0:3a:f5:39:7a:ed: e5:18:6f:70:22:04:d7:32:64:44:ae:16:b2:25:1f:e4:a2:cb: 80:9a:12:d1:41:4a:81:d8:42:b3:92:f1:b9:be:c0:1b:fa:27: 0b:0a:5d:0e:59:10:6c:b2:8f:c6:9c:18:cb:f3:bc:ef:02:3b: 75:bb:cc:16:50:08:8a:c5:83:9c:db:20:a7:55:aa:4e:e1:7d: e0:fb:84:c1:53:84:8a:39:93:c7:9f:84:41:2a:ac:64:00:2f: d5:0e:2b:6a:8c:5f:72:88:26:7f:3c:cf:3a:ea:dd:15:d7:9a: ca:07:3d:86:20:18:e8:a0:66:d7:e0:a4:fb:7a:96:b1:91:fa: 72:d5:86:b9:ec:98:12:88:9c:63:d7:3e:6a:91:5f:87:10:16: db:f3:3f:86:c9:4d:db:57:18:cc:e6:74:cf:82:f6:0c:c0:d3: 71:c2:4d:34:a4:41:90:38:be:f7:b9:ab:78:0f:66:11:85:f7: e2:76:d8:f6:04:ef:61:52:d8:91:b2:8a:33:08:77:3f:df:c4: 6e:6d:54:d5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZxCKatAt0hcdTuK58zvi4hCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi MTU4OWMwHhcNMjYwMjA5MTEyOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2YzYWJiOWM1MDA3ZDNiZmViODFlYjM3NDE5ZDkyNTY1NTVkOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR9MFWGAktRRS/asKnbbk/qldKJh TG4Ptlf3NnkX2rPsszj8CCc+ExlYYwvOqZeFtngAou6qtDyxzmL6h/WYYT/cI/ry j+RnTJul5koDeX+KLUsUcrVbCdYyt2VCL2wUX0WLYXP8Lx3e2QAdnOozZvSUIXWS wMoApT4yzS2cuFkpp4wkOsTHBSz/v36C6sAwTvVyu7fPt6H7lXLYm4utUdm0Xtmr br86880F+2O3lngUGgFNbINDBFOnLXN3dsucz6pe7vKl3MIQ9a+cHuoTTS02vGGX zRXUX6D61tJ+IWzXfFjyluyQdUT5czmSOZZXRdXzK9ncZ+HObgQtc3G4RwIDAQAB o4ICizCCAocwHQYDVR0OBBYEFCzzq7nFAH07/rges3QZ2SVlVdiiMB8GA1UdIwQY MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt NWQ0OGJjZDdjMWRjLzEvTFBPcnVjVUFmVHYtdUI2emRCblpKV1ZWMktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB8BAIAATB2AwQCUEUw AwQAUEU1AwQBUEU4AwQAUEU8MAwDBARbh/ADBABbh/QDBAFbh/wwDAMEAVwnWgME AFwnXgMEAJ61IjAMAwQAnrUlAwQDnrUgAwQCnrUsMAwDBAW5XOADBAC5XOIDBAK5 acQwDAMEA9QvmAMEANQvnjANBAIAAjAHAwUDKgWCADANBgkqhkiG9w0BAQsFAAOC AQEACFySqw6kcHs+RrNurdSPtIYR2HlJcXMMxy4BEhmD8/485g1TxXXQtusOQWjO CT3XwDr1OXrt5RhvcCIE1zJkRK4WsiUf5KLLgJoS0UFKgdhCs5Lxub7AG/onCwpd DlkQbLKPxpwYy/O87wI7dbvMFlAIisWDnNsgp1WqTuF94PuEwVOEijmTx5+EQSqs ZAAv1Q4raoxfcogmfzzPOurdFdeaygc9hiAY6KBm1+Ck+3qWsZH6ctWGueyYEoic Y9c+apFfhxAW2/M/hslN21cYzOZ0z4L2DMDTccJNNKRBkDi+97mreA9mEYX34nbY 9gTvYVLYkbKKMwh3P9/Ebm1U1Q== -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:26 2026 by rpki-client