This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/LZFR8dfM_wDlUjQwJAg6cuPU1k4.roa File: LZFR8dfM_wDlUjQwJAg6cuPU1k4.roa (raw, json) Hash identifier: FKkFVk+cric6ch1JDYK/kDhJuyxULQOZr/RIK/EuZjI= Subject key identifier: 2D:91:51:F1:D7:CC:FF:00:E5:52:34:30:24:08:3A:72:E3:D4:D6:4E Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FBDCDEF8CF785F896D0998D96327 Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/LZFR8dfM_wDlUjQwJAg6cuPU1k4.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21107 IP address blocks: 62.101.144.0/21 maxlen: 21 81.93.92.0/24 maxlen: 24 89.111.225.0/24 maxlen: 24 94.250.37.0/24 maxlen: 24 94.250.38.0/23 maxlen: 23 94.250.38.0/24 maxlen: 24 94.250.40.0/22 maxlen: 22 94.250.44.0/22 maxlen: 22 94.250.48.0/21 maxlen: 24 94.250.56.0/22 maxlen: 24 94.250.64.0/20 maxlen: 20 94.250.64.0/24 maxlen: 24 94.250.65.0/24 maxlen: 24 94.250.66.0/24 maxlen: 24 94.250.67.0/24 maxlen: 24 94.250.68.0/22 maxlen: 22 94.250.72.0/21 maxlen: 21 94.250.80.0/22 maxlen: 22 94.250.80.0/23 maxlen: 23 94.250.82.0/23 maxlen: 23 94.250.88.0/21 maxlen: 24 94.250.96.0/20 maxlen: 20 94.250.112.0/24 maxlen: 24 94.250.113.0/24 maxlen: 24 94.250.114.0/24 maxlen: 24 94.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fb:dc:de:f8:cf:78:5f:89:6d:09:98:d9:63:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d9151f1d7ccff00e552343024083a72e3d4d64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:c7:20:63:cc:33:fb:5b:75:48:67:51:ca: 82:aa:74:66:4d:43:7a:69:ee:70:ae:8a:52:1b:6e: 87:27:7c:fc:71:a2:c8:69:25:4d:71:6a:e1:9e:87: fc:47:87:13:f9:37:1c:e0:a7:8e:32:2b:16:c0:86: 81:7e:a9:ab:10:2f:eb:c0:5e:d3:b3:57:28:8d:bc: fd:f5:b5:38:60:2f:be:44:fa:bd:5f:82:25:e5:51: dd:d1:e7:f7:f1:b9:58:fd:2d:de:e1:73:16:18:ba: 1e:d0:1e:fe:be:dd:fa:11:12:37:80:5d:be:04:12: 3e:6a:43:35:4e:47:c3:ad:67:ab:2f:34:97:b1:e2: 2e:bd:31:db:90:b5:8d:a5:12:b6:67:44:05:d1:b2: 6f:65:16:75:37:fb:a6:5c:1a:03:70:6e:a7:cf:4a: fa:f6:99:51:ba:b7:9b:ba:9e:fd:37:d6:bb:d0:db: fd:cd:cc:bf:cc:43:9e:df:0a:dc:19:42:38:15:e9: 97:6c:de:b8:8a:9f:e9:77:fb:39:39:e1:db:0a:ed: 2a:b1:44:62:74:64:9b:9f:db:7a:fb:92:00:c6:02: 28:73:f3:0a:07:21:52:3e:53:a5:28:1e:50:52:7e: a1:ea:5e:ae:7e:3d:89:6a:0a:77:ac:46:dd:ca:8a: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:91:51:F1:D7:CC:FF:00:E5:52:34:30:24:08:3A:72:E3:D4:D6:4E X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/LZFR8dfM_wDlUjQwJAg6cuPU1k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.101.144.0/21 81.93.92.0/24 89.111.225.0/24 94.250.37.0-94.250.59.255 94.250.64.0-94.250.83.255 94.250.88.0-94.250.115.255 Signature Algorithm: sha256WithRSAEncryption 5a:bf:9a:fd:a0:0a:c7:24:97:b7:6b:bf:fc:0e:de:0b:72:6a: ba:f9:ff:dd:d0:61:60:fb:3c:dd:2d:f1:b7:66:1c:ad:88:50: 6a:0c:f0:2b:96:d1:4a:6f:ec:2b:f6:54:78:ac:f9:d8:18:8d: 48:64:11:59:e3:68:99:96:92:3c:a0:85:45:75:c1:25:8b:2f: e1:a1:7e:e7:9d:0d:7a:81:bd:5f:54:c3:ca:90:51:25:dd:2f: 94:48:5b:a8:f8:91:0c:99:22:98:be:a6:df:15:00:8e:68:c4: 49:f8:9e:15:61:2b:7f:e8:8b:f6:6f:65:a6:ea:55:19:3d:75: 19:3f:8e:2c:5c:a2:dd:c5:2c:36:1c:98:38:ec:5a:ea:0c:71: 79:33:70:e3:f5:a0:ba:7e:8a:89:81:50:75:19:12:1d:86:d5: cc:12:8e:82:ab:b7:41:10:19:c9:ba:37:ba:fe:8e:c0:4f:44: 48:fa:04:10:05:3e:29:e6:86:82:23:0a:e2:fe:07:4b:01:ea: d7:a3:5a:9f:34:47:aa:67:55:0a:83:21:87:f2:69:4b:10:43: 04:3f:d7:2d:f9:c0:1d:fe:dd:71:41:ab:c9:7b:e6:94:f6:7f: 14:85:43:79:a3:6d:bd:06:79:04:3d:19:54:ac:84:a8:ea:82: 9f:50:b5:43 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt/hPvc3vjPeF+JbQmY2WMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkxNTFmMWQ3Y2NmZjAwZTU1MjM0MzAyNDA4M2E3MmUzZDRkNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3THIGPMM/tbdUhnUcqCqnRmTUN6 ae5wropSG26HJ3z8caLIaSVNcWrhnof8R4cT+Tcc4KeOMisWwIaBfqmrEC/rwF7T s1cojbz99bU4YC++RPq9X4Il5VHd0ef38blY/S3e4XMWGLoe0B7+vt36ERI3gF2+ BBI+akM1TkfDrWerLzSXseIuvTHbkLWNpRK2Z0QF0bJvZRZ1N/umXBoDcG6nz0r6 9plRurebup79N9a70Nv9zcy/zEOe3wrcGUI4FemXbN64ip/pd/s5OeHbCu0qsURi dGSbn9t6+5IAxgIoc/MKByFSPlOlKB5QUn6h6l6ufj2Jagp3rEbdyopF8QIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFC2RUfHXzP8A5VI0MCQIOnLj1NZOMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvTFpGUjhkZk1fd0RsVWpRd0pBZzZjdVBVMWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDPmWQAwQA UV1cAwQAWW/hMAwDBABe+iUDBAJe+jgwDAMEBl76QAMEAl76UDAMAwQDXvpYAwQC XvpwMA0GCSqGSIb3DQEBCwUAA4IBAQBav5r9oArHJJe3a7/8Dt4Lcmq6+f/d0GFg +zzdLfG3ZhytiFBqDPArltFKb+wr9lR4rPnYGI1IZBFZ42iZlpI8oIVFdcEliy/h oX7nnQ16gb1fVMPKkFEl3S+USFuo+JEMmSKYvqbfFQCOaMRJ+J4VYSt/6Iv2b2Wm 6lUZPXUZP44sXKLdxSw2HJg47FrqDHF5M3Dj9aC6foqJgVB1GRIdhtXMEo6Cq7dB EBnJuje6/o7AT0RI+gQQBT4p5oaCIwri/gdLAerXo1qfNEeqZ1UKgyGH8mlLEEME P9ct+cAd/t1xQavJe+aU9n8UhUN5o229BnkEPRlUrISo6oKfULVD -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:57 2026 by rpki-client