This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa File: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (raw, json) Hash identifier: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek= Subject key identifier: 2D:9F:E6:DB:06:99:22:CE:FF:17:D0:C5:A5:07:83:67:02:92:A9:A2 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B7834417B5A4704B42F8E3CED2E2CC1AD Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60246 IP address blocks: 80.72.20.0/23 maxlen: 32 80.72.24.0/23 maxlen: 32 85.198.120.0/21 maxlen: 32 92.118.72.0/23 maxlen: 32 95.174.96.0/20 maxlen: 32 95.174.112.0/21 maxlen: 32 95.174.120.0/24 maxlen: 32 95.174.123.0/24 maxlen: 32 95.174.124.0/22 maxlen: 32 178.212.139.0/24 maxlen: 32 178.248.0.0/22 maxlen: 32 178.248.4.0/23 maxlen: 32 178.248.6.0/23 maxlen: 32 185.9.184.0/24 maxlen: 32 185.9.186.0/23 maxlen: 32 185.230.240.0/23 maxlen: 32 185.230.242.0/24 maxlen: 32 2a00:8740::/46 maxlen: 128 2a00:8740:10::/44 maxlen: 128 2a00:8740:20::/44 maxlen: 128 2a00:8740:30::/44 maxlen: 128 2a00:8740:100::/48 maxlen: 128 2a00:8740:110::/47 maxlen: 128 2a00:8740:112::/48 maxlen: 128 2a00:8740:201::/48 maxlen: 128 2a00:8740:ff00::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:41:7b:5a:47:04:b4:2f:8e:3c:ed:2e:2c:c1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d9fe6db069922ceff17d0c5a50783670292a9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:83:d0:c1:5c:b7:36:39:45:99:23:d3:3c: 0f:26:e0:8c:7f:ff:1c:06:a2:7c:c9:13:d9:a0:e7: 39:1f:30:f2:df:85:a9:9b:90:21:af:89:19:c0:b7: d8:2b:6f:d1:9c:e9:ca:98:9c:1d:ea:03:c6:68:8b: 6d:8d:06:72:38:df:02:fd:e1:f0:cf:73:86:73:77: 5c:99:a4:af:12:10:76:bf:37:34:1d:f6:43:97:70: bf:aa:62:c7:ae:0a:d5:aa:4f:44:75:44:b0:9e:bd: 3b:de:23:6c:96:32:a1:0d:a8:a3:8f:97:46:a8:16: 45:fd:e8:55:48:0b:8a:d0:5a:72:33:ab:b3:64:f7: 14:0d:56:a7:d4:94:54:71:d2:3f:52:13:6a:d4:7b: b4:f0:89:4f:50:45:90:19:a5:1c:b6:7d:6f:97:77: 46:0d:ea:fc:30:f9:4a:46:31:89:d0:ec:9c:50:47: d1:87:80:aa:54:af:f3:11:df:db:c5:e5:13:22:45: 43:c7:bc:d9:6d:c6:1a:d1:77:23:65:60:63:da:cf: c7:57:92:9b:3e:be:86:48:45:fa:3b:6f:e6:49:ee: 04:52:ed:e4:71:82:01:ea:f8:7c:6e:d3:dc:9c:22: 69:a0:6d:d8:99:94:02:36:db:f7:39:a7:aa:35:07: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:E6:DB:06:99:22:CE:FF:17:D0:C5:A5:07:83:67:02:92:A9:A2 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.20.0/23 80.72.24.0/23 85.198.120.0/21 92.118.72.0/23 95.174.96.0-95.174.120.255 95.174.123.0-95.174.127.255 178.212.139.0/24 178.248.0.0/21 185.9.184.0/24 185.9.186.0/23 185.230.240.0-185.230.242.255 IPv6: 2a00:8740::/46 2a00:8740:10::-2a00:8740:3f:ffff:ffff:ffff:ffff:ffff 2a00:8740:100::/48 2a00:8740:110::-2a00:8740:112:ffff:ffff:ffff:ffff:ffff 2a00:8740:201::/48 2a00:8740:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 26:08:97:c2:51:69:1e:8a:ab:eb:b4:d7:35:6c:03:c5:e1:ac: d2:05:65:b1:87:91:c0:46:21:af:64:9a:36:93:a8:e9:38:53: 21:df:61:5b:ca:1d:43:e7:4f:a6:3a:93:cf:b4:15:f8:ba:a7: ef:f2:5a:a8:8e:e9:46:cd:e7:ab:d0:e5:2c:51:bd:64:94:62: df:50:d7:1f:0b:6f:15:a7:b9:e6:41:41:08:6d:43:27:61:77: 26:71:f7:ed:94:4d:60:41:c9:d9:6b:89:8c:3a:82:6e:b7:7e: 3e:ee:f5:27:f4:ce:a6:c4:77:63:63:e6:4f:88:b1:be:ef:b4: 13:1e:79:8d:48:c0:c5:cc:05:ef:c3:37:77:b8:2c:fa:8f:c3: 75:d5:34:bb:bc:99:8d:18:27:d2:ba:72:88:32:51:ee:43:1d: 38:d2:23:e7:e5:8a:ed:66:0b:a5:58:f4:7c:9c:5b:bf:2f:d9: 89:06:95:90:9c:66:64:49:97:35:de:48:f4:1f:44:c5:9a:d0: 35:f4:90:c7:2f:f1:0e:2e:65:c7:3f:ec:be:4b:bc:81:25:2b: 1c:ac:79:13:72:40:0a:1a:6a:b7:30:63:c6:fe:7a:86:df:1a: 24:e2:47:89:ba:bd:7d:b0:ed:99:65:df:36:01:6d:38:b7:dc: d1:22:81:31 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4NEF7WkcEtC+OPO0uLMGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDlmZTZkYjA2OTkyMmNlZmYxN2QwYzVhNTA3ODM2NzAyOTJhOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmKD0MFctzY5RZkj0zwPJuCMf/8c BqJ8yRPZoOc5HzDy34Wpm5Ahr4kZwLfYK2/RnOnKmJwd6gPGaIttjQZyON8C/eHw z3OGc3dcmaSvEhB2vzc0HfZDl3C/qmLHrgrVqk9EdUSwnr073iNsljKhDaijj5dG qBZF/ehVSAuK0FpyM6uzZPcUDVan1JRUcdI/UhNq1Hu08IlPUEWQGaUctn1vl3dG Der8MPlKRjGJ0OycUEfRh4CqVK/zEd/bxeUTIkVDx7zZbcYa0XcjZWBj2s/HV5Kb Pr6GSEX6O2/mSe4EUu3kcYIB6vh8btPcnCJpoG3YmZQCNtv3OaeqNQeTLwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFC2f5tsGmSLO/xfQxaUHg2cCkqmiMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvTFpfbTJ3YVpJczdfRjlERnBRZURad0tTcWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjBgBAIAATBaAwQBUEgU AwQBUEgYAwQDVcZ4AwQBXHZIMAwDBAVfrmADBABfrngwDAMEAF+uewMEB1+uAAME ALLUiwMEA7L4AAMEALkJuAMEAbkJujAMAwQEuebwAwQAuebyMFIEAgACMEwDBwIq AIdAAAAwEgMHBCoAh0AAEAMHBioAh0AAAAMHACoAh0ABADASAwcEKgCHQAEQAwcA KgCHQAESAwcAKgCHQAIBAwcAKgCHQP8AMA0GCSqGSIb3DQEBCwUAA4IBAQAmCJfC UWkeiqvrtNc1bAPF4azSBWWxh5HARiGvZJo2k6jpOFMh32Fbyh1D50+mOpPPtBX4 uqfv8lqojulGzeer0OUsUb1klGLfUNcfC28Vp7nmQUEIbUMnYXcmcfftlE1gQcnZ a4mMOoJut34+7vUn9M6mxHdjY+ZPiLG+77QTHnmNSMDFzAXvwzd3uCz6j8N11TS7 vJmNGCfSunKIMlHuQx040iPn5YrtZgulWPR8nFu/L9mJBpWQnGZkSZc13kj0H0TF mtA19JDHL/EOLmXHP+y+S7yBJSscrHkTckAKGmq3MGPG/nqG3xok4keJur19sO2Z Zd82AW04t9zRIoEx -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:24 2026 by rpki-client