This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/L_LOxEdO9VcaXw3f0Ccn1nVpvkk.roa File: L_LOxEdO9VcaXw3f0Ccn1nVpvkk.roa (raw, json) Hash identifier: 3LvkTc0aTEjvUGW6funLi090Sm2oGkh0fmG+oGpdEuE= Subject key identifier: 2F:F2:CE:C4:47:4E:F5:57:1A:5F:0D:DF:D0:27:27:D6:75:69:BE:49 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019BF58AC3645ABB9A2F991E2FA44CB33957 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/L_LOxEdO9VcaXw3f0Ccn1nVpvkk.roa Signing time: Sun 25 Jan 2026 14:24:30 +0000 ROA not before: Sun 25 Jan 2026 14:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202766 IP address blocks: 77.72.104.0/21 maxlen: 24 84.18.0.0/19 maxlen: 24 92.60.160.0/20 maxlen: 24 176.98.220.0/22 maxlen: 24 185.66.60.0/22 maxlen: 24 185.145.224.0/22 maxlen: 24 185.155.64.0/22 maxlen: 24 185.173.44.0/22 maxlen: 24 185.187.180.0/22 maxlen: 24 185.224.76.0/22 maxlen: 24 193.34.240.0/22 maxlen: 24 195.5.64.0/19 maxlen: 24 195.5.64.0/24 maxlen: 24 195.5.65.0/24 maxlen: 24 195.5.66.0/24 maxlen: 24 195.5.67.0/24 maxlen: 24 212.49.128.0/18 maxlen: 24 212.59.192.0/19 maxlen: 19 212.66.161.0/24 maxlen: 24 212.66.162.0/23 maxlen: 24 212.66.164.0/22 maxlen: 24 212.66.168.0/21 maxlen: 24 212.66.176.0/20 maxlen: 24 212.163.0.0/16 maxlen: 24 213.9.128.0/17 maxlen: 24 213.192.192.0/18 maxlen: 24 213.192.203.0/24 maxlen: 24 2001:ac0::/29 maxlen: 48 2001:ac0::/32 maxlen: 48 2a0d:59c1::/32 maxlen: 32 2a0d:59c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:8a:c3:64:5a:bb:9a:2f:99:1e:2f:a4:4c:b3:39:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 25 14:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ff2cec4474ef5571a5f0ddfd02727d67569be49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:cd:e6:0a:84:17:08:a6:d2:fe:69:7d:21: c0:82:03:9e:37:d1:ba:fc:fe:db:a2:8a:33:6e:40: 86:0a:79:bc:54:13:18:70:97:93:bf:e2:5e:c3:6a: 9a:5a:a7:97:1a:b2:73:37:7f:e7:9a:1c:23:01:7f: b9:fe:ff:4c:1c:6c:c5:ce:89:2c:b6:35:01:3b:c4: 2c:16:99:1c:39:9a:84:eb:d5:f4:12:c5:3d:7d:c4: 3f:44:91:04:d7:63:9c:af:8d:93:e3:97:48:d5:74: 61:21:6d:e3:03:64:c8:1d:50:8c:3a:e6:58:ba:31: 0e:4f:6d:ea:0f:00:cc:34:1e:72:4b:b8:aa:87:b0: 0e:b6:d3:4d:a8:38:0e:02:fb:10:2c:d3:44:0e:0c: af:2a:1e:34:88:ef:b0:56:72:4d:b9:f7:63:96:4e: 5d:5b:0a:2d:82:5e:6b:8a:96:ae:10:5f:a2:22:18: 48:d2:82:81:bb:18:63:cb:31:1f:8a:69:8f:be:48: 3b:39:e9:64:f3:17:79:e1:66:32:18:25:e4:3e:a0: 78:3a:d2:d5:00:fd:ad:6e:96:f7:18:de:db:9a:46: db:31:73:d2:18:ca:aa:eb:6b:22:0d:01:d6:be:66: 16:a3:11:0a:a2:2a:6c:f0:71:f6:80:4d:df:ba:7c: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:CE:C4:47:4E:F5:57:1A:5F:0D:DF:D0:27:27:D6:75:69:BE:49 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/L_LOxEdO9VcaXw3f0Ccn1nVpvkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.104.0/21 84.18.0.0/19 92.60.160.0/20 176.98.220.0/22 185.66.60.0/22 185.145.224.0/22 185.155.64.0/22 185.173.44.0/22 185.187.180.0/22 185.224.76.0/22 193.34.240.0/22 195.5.64.0/19 212.49.128.0/18 212.59.192.0/19 212.66.161.0-212.66.191.255 212.163.0.0/16 213.9.128.0/17 213.192.192.0/18 IPv6: 2001:ac0::/29 2a0d:59c1::/32 2a0d:59c7::/32 Signature Algorithm: sha256WithRSAEncryption 8b:82:f2:67:b1:7d:d0:19:4c:e3:49:4a:f4:c6:87:db:2b:8c: b9:68:8b:0b:c7:70:89:d1:71:d7:7a:fc:40:0b:70:e6:01:c8: aa:ee:d1:4e:d2:ff:09:7b:0b:fe:0a:d9:fb:5f:18:8e:49:04: 64:49:ff:ac:39:d9:d7:69:32:ce:ec:da:0b:87:6c:61:bf:80: a3:31:d0:b6:75:fb:82:94:c0:ee:ca:b6:83:6a:87:80:61:5a: af:6e:84:e2:e0:f7:b6:7b:87:68:80:6e:10:6d:60:9c:0c:f2: c7:9f:1c:f3:5a:06:b9:d2:ef:6d:b3:5e:74:27:10:13:62:a7: 58:fb:d2:af:23:41:02:3d:1e:84:4e:23:ec:b7:63:37:0f:87: c1:ea:9b:95:b4:3b:1f:9f:c4:fa:17:cd:65:50:d5:7d:f4:05: 15:c9:ce:bb:6d:45:29:3f:6a:76:57:c9:4f:bb:5a:53:65:f3: d5:4a:55:65:48:9c:ca:a6:a1:aa:77:a4:85:57:a2:fc:a3:03: 4c:e3:a2:e2:c1:a5:21:8a:31:16:33:f0:c3:08:95:8b:aa:75: 61:36:34:d4:c2:70:62:19:26:07:d7:aa:c5:56:5d:0a:1b:06: 23:d5:43:be:1d:0e:3c:6e:75:e3:73:c9:5d:d2:0a:6e:8c:96: 8a:e8:db:b6 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZv1isNkWruaL5keL6RMszlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTI1MTQyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmYyY2VjNDQ3NGVmNTU3MWE1ZjBkZGZkMDI3MjdkNjc1NjliZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZnN5gqEFwim0v5pfSHAggOeN9G6 /P7booozbkCGCnm8VBMYcJeTv+Jew2qaWqeXGrJzN3/nmhwjAX+5/v9MHGzFzoks tjUBO8QsFpkcOZqE69X0EsU9fcQ/RJEE12Ocr42T45dI1XRhIW3jA2TIHVCMOuZY ujEOT23qDwDMNB5yS7iqh7AOttNNqDgOAvsQLNNEDgyvKh40iO+wVnJNufdjlk5d Wwotgl5ripauEF+iIhhI0oKBuxhjyzEfimmPvkg7Oelk8xd54WYyGCXkPqB4OtLV AP2tbpb3GN7bmkbbMXPSGMqq62siDQHWvmYWoxEKoips8HH2gE3funwiEwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFC/yzsRHTvVXGl8N39AnJ9Z1ab5JMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvTF9MT3hFZE85VmNhWHczZjBDY24xblZwdmtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDB5BAIAATBzAwQDTUho AwQFVBIAAwQEXDygAwQCsGLcAwQCuUI8AwQCuZHgAwQCuZtAAwQCua0sAwQCubu0 AwQCueBMAwQCwSLwAwQFwwVAAwQG1DGAAwQF1DvAMAwDBADUQqEDBAbUQoADAwDU owMEB9UJgAMEBtXAwDAbBAIAAjAVAwUDIAEKwAMFACoNWcEDBQAqDVnHMA0GCSqG SIb3DQEBCwUAA4IBAQCLgvJnsX3QGUzjSUr0xofbK4y5aIsLx3CJ0XHXevxAC3Dm Aciq7tFO0v8Jewv+Ctn7XxiOSQRkSf+sOdnXaTLO7NoLh2xhv4CjMdC2dfuClMDu yraDaoeAYVqvboTi4Pe2e4dogG4QbWCcDPLHnxzzWga50u9ts150JxATYqdY+9Kv I0ECPR6ETiPst2M3D4fB6puVtDsfn8T6F81lUNV99AUVyc67bUUpP2p2V8lPu1pT ZfPVSlVlSJzKpqGqd6SFV6L8owNM46LiwaUhijEWM/DDCJWLqnVhNjTUwnBiGSYH 16rFVl0KGwYj1UO+HQ48bnXjc8ld0gpujJaK6Nu2 -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:42 2026 by rpki-client