This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LPdKgO54x_DnMhmL4MuPH8HOAV0.roa File: LPdKgO54x_DnMhmL4MuPH8HOAV0.roa (raw, json) Hash identifier: aWEMhMy6Aw9ZrXBwR+ZNP/XY9Er/qSrf5ms5y4WtUFc= Subject key identifier: 2C:F7:4A:80:EE:78:C7:F0:E7:32:19:8B:E0:CB:8F:1F:C1:CE:01:5D Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80224EBB1BAF2771A5B484D38A84AD Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LPdKgO54x_DnMhmL4MuPH8HOAV0.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199140 IP address blocks: 80.12.212.0/24 maxlen: 24 80.12.213.0/24 maxlen: 24 80.12.240.0/23 maxlen: 24 80.12.243.0/24 maxlen: 24 80.12.249.0/24 maxlen: 24 80.12.250.0/24 maxlen: 24 80.12.253.0/24 maxlen: 25 80.12.254.0/24 maxlen: 24 81.252.94.184/29 maxlen: 29 83.206.119.208/28 maxlen: 28 195.101.150.152/29 maxlen: 29 195.101.150.160/28 maxlen: 28 2a01:cb22:4000::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:22:4e:bb:1b:af:27:71:a5:b4:84:d3:8a:84:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cf74a80ee78c7f0e732198be0cb8f1fc1ce015d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:ef:f8:61:7c:cd:88:50:62:9d:16:af:18: 78:d5:d8:b4:77:e8:a3:3d:29:d8:2a:f6:70:ff:9d: e6:59:6a:89:62:74:23:0f:a4:15:2b:f2:74:98:37: 38:0e:7b:97:7c:5c:5c:8d:5f:4f:b8:39:27:af:23: 4e:0a:9f:6c:87:0e:7c:90:8d:56:fc:06:37:40:57: 4e:78:5e:5f:fd:71:64:52:49:d7:5b:94:ae:eb:0b: cd:ad:8f:c9:f2:ee:36:e5:c0:b1:23:97:06:c9:25: 49:e0:84:6a:d1:2d:b1:ef:6b:b3:87:8f:96:25:0e: 0d:4a:3f:d2:03:78:3c:e0:ca:96:10:f6:e1:f0:13: 0c:26:b3:7b:30:2c:b8:84:c9:a8:d9:55:e7:d5:62: 63:7c:e9:4a:21:20:b6:89:b2:92:f4:0c:74:29:a8: d3:6a:11:8f:3d:1d:a7:7c:b3:55:09:f9:4b:b7:bf: af:cd:3d:f2:d0:8d:eb:a7:1a:2f:49:43:31:8b:0a: 03:f3:17:db:2c:3c:a5:d3:8f:c4:c9:aa:02:69:a4: 6e:1b:67:9f:86:61:30:9d:fa:8e:e4:5e:81:bd:8b: c8:90:ed:cd:48:a5:4f:5d:3a:af:be:ca:e8:6b:95: a3:b6:9a:b1:c5:76:20:70:e4:e3:d3:05:d6:99:9d: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:4A:80:EE:78:C7:F0:E7:32:19:8B:E0:CB:8F:1F:C1:CE:01:5D X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LPdKgO54x_DnMhmL4MuPH8HOAV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.12.212.0/23 80.12.240.0/23 80.12.243.0/24 80.12.249.0-80.12.250.255 80.12.253.0-80.12.254.255 81.252.94.184/29 83.206.119.208/28 195.101.150.152-195.101.150.175 IPv6: 2a01:cb22:4000::/36 Signature Algorithm: sha256WithRSAEncryption 19:7e:5b:34:b3:62:2f:15:08:cd:aa:83:6a:96:69:f2:9c:05: 1b:fd:ae:50:fa:c2:c8:4c:8e:80:fa:ed:89:e7:87:c0:2b:96: 05:6f:3c:a0:eb:d2:c8:7b:95:4b:41:82:60:67:65:dc:f5:1d: 0c:ad:6c:20:35:0a:f4:70:12:6c:5a:19:93:3a:fd:a4:6c:3e: 33:f5:e2:42:5e:d6:05:59:70:d4:f9:d1:93:b2:79:30:2a:1e: 5c:85:07:bc:43:1c:75:f8:ff:ec:d0:a9:fc:d3:b8:9c:1a:e6: 5a:a9:1d:f7:de:f7:14:74:b7:f8:0e:30:4f:28:36:23:ce:89: c4:f5:21:a3:8a:06:76:c2:23:31:d6:51:80:17:d7:92:22:a3: a6:ac:d3:97:8d:7d:48:80:4e:0e:fe:a8:75:cf:cc:cf:75:cf: 15:a8:db:b3:b0:83:3a:46:27:ba:84:a8:05:19:30:07:31:40: f2:f1:54:a0:44:f8:57:2c:f0:3a:87:65:52:fd:96:f4:a8:3a: d4:ea:70:ae:e8:79:d0:f2:34:0c:9b:be:ce:5c:ae:30:d5:67: 56:32:d2:78:02:fe:fd:6c:73:bc:22:0e:4b:26:72:14:59:89: ea:a2:8d:20:e5:90:1f:c2:14:84:50:0c:d5:a7:17:0c:94:4e: 97:4a:5d:a7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt8gCJOuxuvJ3GltITTioStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Y3NGE4MGVlNzhjN2YwZTczMjE5OGJlMGNiOGYxZmMxY2UwMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsnv+GF8zYhQYp0Wrxh41di0d+ij PSnYKvZw/53mWWqJYnQjD6QVK/J0mDc4DnuXfFxcjV9PuDknryNOCp9shw58kI1W /AY3QFdOeF5f/XFkUknXW5Su6wvNrY/J8u425cCxI5cGySVJ4IRq0S2x72uzh4+W JQ4NSj/SA3g84MqWEPbh8BMMJrN7MCy4hMmo2VXn1WJjfOlKISC2ibKS9Ax0KajT ahGPPR2nfLNVCflLt7+vzT3y0I3rpxovSUMxiwoD8xfbLDyl04/EyaoCaaRuG2ef hmEwnfqO5F6BvYvIkO3NSKVPXTqvvsroa5WjtpqxxXYgcOTj0wXWmZ101QIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFCz3SoDueMfw5zIZi+DLjx/BzgFdMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvTFBkS2dPNTR4X0RuTWhtTDRNdVBIOEhPQVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBSBAIAATBMAwQBUAzUAwQB UAzwAwQAUAzzMAwDBABQDPkDBABQDPowDAMEAFAM/QMEAFAM/gMFA1H8XrgDBQRT znfQMA4DBQPDZZaYAwUEw2WWoDAOBAIAAjAIAwYEKgHLIkAwDQYJKoZIhvcNAQEL BQADggEBABl+WzSzYi8VCM2qg2qWafKcBRv9rlD6wshMjoD67Ynnh8ArlgVvPKDr 0sh7lUtBgmBnZdz1HQytbCA1CvRwEmxaGZM6/aRsPjP14kJe1gVZcNT50ZOyeTAq HlyFB7xDHHX4/+zQqfzTuJwa5lqpHffe9xR0t/gOME8oNiPOicT1IaOKBnbCIzHW UYAX15Iio6as05eNfUiATg7+qHXPzM91zxWo27OwgzpGJ7qEqAUZMAcxQPLxVKBE +Fcs8DqHZVL9lvSoOtTqcK7oedDyNAybvs5crjDVZ1Yy0ngC/v1sc7wiDksmchRZ ieqijSDlkB/CFIRQDNWnFwyUTpdKXac= -----END CERTIFICATE-----Generated at Thu Jan 22 23:32:55 2026 by rpki-client