This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LLzH5_jOPdharQRjbYjQvQGcRUU.roa File: LLzH5_jOPdharQRjbYjQvQGcRUU.roa (raw, json) Hash identifier: 0DUGrTrjbZSxOX1Ff51Du6sVrMxkKASEQiRU9AdweMs= Subject key identifier: 2C:BC:C7:E7:F8:CE:3D:D8:5A:AD:04:63:6D:88:D0:BD:01:9C:45:45 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80154144B1DD742AECEBC61EF15089 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LLzH5_jOPdharQRjbYjQvQGcRUU.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29571 IP address blocks: 80.15.244.0/24 maxlen: 32 2a01:c9c0:c014::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:41:44:b1:dd:74:2a:ec:eb:c6:1e:f1:50:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cbcc7e7f8ce3dd85aad04636d88d0bd019c4545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:ce:15:69:8b:da:23:4d:1c:1b:b9:ba:34: 71:33:97:e8:43:6c:8a:1b:3a:5c:95:36:c7:6d:07: c9:53:60:6b:bb:39:52:6a:bc:1d:2d:38:6e:81:46: 1c:3f:48:69:e4:89:3c:ef:f4:0b:b1:af:81:ea:94: 96:7e:78:1f:21:2e:80:25:6d:d9:a6:56:7c:73:f2: af:9a:22:6a:69:a4:a5:a1:3f:ed:68:39:ce:05:61: 93:7e:4d:ad:e7:1c:1f:c8:88:de:9f:57:b6:bd:db: 09:76:b0:b9:d9:f7:d1:05:fa:69:27:ad:90:86:83: 8f:11:8b:3c:b3:4a:9b:16:f6:ca:50:10:4f:25:0f: c5:a5:b7:87:e6:e6:0c:49:b0:bd:d4:2e:0d:58:01: ac:11:5f:70:ad:08:46:4c:05:31:4f:be:7f:ee:6d: 49:59:be:af:f6:99:0f:4c:d0:87:87:f4:16:3e:0c: ee:07:e7:c5:a2:40:1d:41:82:aa:fd:27:57:2f:b2: a6:23:d7:20:ab:3d:64:f7:ff:20:38:ab:88:6f:99: b5:28:b9:ad:4f:60:3b:22:0b:24:02:a8:db:f1:41: 85:c1:af:96:3e:1d:f9:30:78:df:9e:42:1b:0e:f4: cb:80:7b:ad:a6:f8:fc:f3:3b:ac:2c:5e:d4:cc:65: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:C7:E7:F8:CE:3D:D8:5A:AD:04:63:6D:88:D0:BD:01:9C:45:45 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LLzH5_jOPdharQRjbYjQvQGcRUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.15.244.0/24 IPv6: 2a01:c9c0:c014::/48 Signature Algorithm: sha256WithRSAEncryption 29:da:8f:3f:ec:e7:6c:c0:b9:6d:8d:d3:d6:3c:3c:0e:07:d9: d8:54:e3:93:d1:26:ee:62:c6:42:56:1b:f6:39:ff:58:03:23: 9e:73:52:e2:b4:bc:82:b5:3b:79:34:b1:80:e1:d0:90:ef:b5: aa:c6:c9:79:12:69:26:df:f3:a3:f1:97:b5:f3:fb:f2:26:de: 91:f7:66:a1:22:84:38:ea:28:ac:2b:00:80:bf:4e:a1:5e:7a: ab:94:09:99:9e:0d:a0:68:3d:fa:fa:06:a5:a8:bf:4f:04:8e: c9:21:c8:23:83:64:df:ed:90:ce:bc:dc:af:50:8e:b5:96:de: cf:a0:b9:5c:9e:c6:13:52:20:c9:c6:7d:31:f4:89:48:89:5a: 33:96:4d:0e:fa:fd:6b:5d:71:c9:1f:25:64:5b:97:c6:fc:b3: 01:4b:76:92:0a:b5:ad:19:52:c3:5b:e1:63:ba:80:28:bc:5e: 03:48:58:ff:af:4d:ce:97:02:04:1c:1a:6d:e4:e4:fb:60:43: 04:04:f3:01:2a:65:f6:d6:bd:1e:c4:c3:b5:0f:fe:96:ae:a1: 67:82:56:ac:39:b3:9c:ac:8f:6f:f6:2d:47:cd:e1:e6:cc:18: cf:1c:61:9a:0d:8a:9a:13:e3:55:3a:6f:8c:cd:f9:81:53:be: dd:94:41:3b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gBVBRLHddCrs68Ye8VCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2JjYzdlN2Y4Y2UzZGQ4NWFhZDA0NjM2ZDg4ZDBiZDAxOWM0NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDOFWmL2iNNHBu5ujRxM5foQ2yK GzpclTbHbQfJU2BruzlSarwdLThugUYcP0hp5Ik87/QLsa+B6pSWfngfIS6AJW3Z plZ8c/KvmiJqaaSloT/taDnOBWGTfk2t5xwfyIjen1e2vdsJdrC52ffRBfppJ62Q hoOPEYs8s0qbFvbKUBBPJQ/FpbeH5uYMSbC91C4NWAGsEV9wrQhGTAUxT75/7m1J Wb6v9pkPTNCHh/QWPgzuB+fFokAdQYKq/SdXL7KmI9cgqz1k9/8gOKuIb5m1KLmt T2A7IgskAqjb8UGFwa+WPh35MHjfnkIbDvTLgHutpvj88zusLF7UzGXcbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCy8x+f4zj3YWq0EY22I0L0BnEVFMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvTEx6SDVfak9QZGhhclFSamJZalF2UUdjUlVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUA/0MA8E AgACMAkDBwAqAcnAwBQwDQYJKoZIhvcNAQELBQADggEBACnajz/s52zAuW2N09Y8 PA4H2dhU45PRJu5ixkJWG/Y5/1gDI55zUuK0vIK1O3k0sYDh0JDvtarGyXkSaSbf 86Pxl7Xz+/Im3pH3ZqEihDjqKKwrAIC/TqFeequUCZmeDaBoPfr6BqWov08Ejskh yCODZN/tkM683K9QjrWW3s+guVyexhNSIMnGfTH0iUiJWjOWTQ76/WtdcckfJWRb l8b8swFLdpIKta0ZUsNb4WO6gCi8XgNIWP+vTc6XAgQcGm3k5PtgQwQE8wEqZfbW vR7Ew7UP/pauoWeCVqw5s5ysj2/2LUfN4ebMGM8cYZoNipoT41U6b4zN+YFTvt2U QTs= -----END CERTIFICATE-----Generated at Wed Jan 21 21:01:29 2026 by rpki-client