This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/luDoAnv_4CXwVbPTjgicT_NDBNY.roa File: luDoAnv_4CXwVbPTjgicT_NDBNY.roa (raw, json) Hash identifier: ywVrOJWUkBy8UWblrL/w6CJGLJjV5uY9pOZQ4I0Nv2Q= Subject key identifier: 96:E0:E8:02:7B:FF:E0:25:F0:55:B3:D3:8E:08:9C:4F:F3:43:04:D6 Certificate issuer: /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7 Certificate serial: 019B7DCA9B0B51B873008F43F91BBCC4668C Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/luDoAnv_4CXwVbPTjgicT_NDBNY.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42925 IP address blocks: 31.44.128.0/20 maxlen: 24 31.44.128.0/21 maxlen: 24 31.44.136.0/21 maxlen: 24 37.60.40.0/21 maxlen: 24 37.60.40.0/22 maxlen: 24 37.60.44.0/22 maxlen: 24 95.86.64.0/18 maxlen: 24 95.86.64.0/19 maxlen: 24 95.86.96.0/19 maxlen: 24 147.236.102.0/23 maxlen: 24 147.236.212.0/22 maxlen: 24 147.236.224.0/22 maxlen: 24 164.138.112.0/20 maxlen: 24 164.138.112.0/21 maxlen: 24 164.138.120.0/21 maxlen: 24 185.10.64.0/22 maxlen: 24 185.139.229.0/24 maxlen: 24 212.76.96.0/19 maxlen: 24 212.76.96.0/20 maxlen: 24 212.76.112.0/20 maxlen: 24 213.151.32.0/19 maxlen: 24 213.151.32.0/24 maxlen: 24 213.151.48.0/20 maxlen: 24 217.194.196.0/22 maxlen: 24 217.194.200.0/21 maxlen: 24 2a01:6500::/29 maxlen: 29 2a01:6500::/32 maxlen: 32 2a01:6500:3::/48 maxlen: 48 2a01:6500:a034::/46 maxlen: 46 2a01:6500:a040::/46 maxlen: 46 2a01:6500:a044::/46 maxlen: 46 2a01:6500:a048::/46 maxlen: 46 2a01:6500:a050::/46 maxlen: 46 2a01:6500:a054::/46 maxlen: 46 2a01:6500:a058::/46 maxlen: 46 2a01:6501::/32 maxlen: 32 2a01:6502::/32 maxlen: 32 2a01:6502:a54::/46 maxlen: 46 2a01:6502:a58::/46 maxlen: 46 2a01:6503::/32 maxlen: 32 2a01:6504::/32 maxlen: 32 2a01:6505::/32 maxlen: 32 2a01:6506::/32 maxlen: 32 2a01:6507::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9b:0b:51:b8:73:00:8f:43:f9:1b:bc:c4:66:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96e0e8027bffe025f055b3d38e089c4ff34304d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:74:6c:ff:db:7c:c5:35:64:61:3b:dc:43: 1f:04:d9:b2:a0:a0:b2:3b:b8:9e:19:dd:63:ae:0f: ef:35:a4:91:17:8a:b1:f1:3c:3e:54:2a:17:92:65: 8e:1e:e5:c4:ae:90:7b:83:b6:ee:28:e0:47:76:f6: ae:3a:2f:6b:06:a2:2d:28:c0:fb:e9:8f:62:88:7a: b4:35:d1:21:95:50:6a:b5:9e:7a:68:8d:ed:74:71: c5:ad:03:2b:2a:d1:cc:ba:7a:e0:c6:ed:80:f7:65: cf:44:89:dd:93:4f:04:68:87:5c:95:11:2e:e2:fa: 4b:85:c6:59:95:87:b5:de:92:0b:06:3e:67:90:d9: 87:22:f1:b5:8b:d3:66:05:a1:c2:3d:09:59:12:f2: c2:7c:b3:7c:bc:f8:54:b5:ac:f5:4b:66:4d:88:fc: 99:33:68:02:05:a1:93:d7:bd:8e:ae:25:67:9c:0a: 84:a4:b8:18:87:d1:63:59:d7:50:1c:94:cc:2e:9c: 68:c5:4c:63:f2:b9:a1:77:c0:c7:c4:bb:46:38:23: d3:eb:66:9a:4d:f6:f0:e5:94:57:59:1f:fb:24:2f: ba:0e:c4:12:be:6b:02:e3:a4:35:aa:93:cc:73:d7: e6:55:0f:81:cf:68:63:b5:d5:c6:0c:02:af:52:92: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:E8:02:7B:FF:E0:25:F0:55:B3:D3:8E:08:9C:4F:F3:43:04:D6 X509v3 Authority Key Identifier: keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/luDoAnv_4CXwVbPTjgicT_NDBNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.128.0/20 37.60.40.0/21 95.86.64.0/18 147.236.102.0/23 147.236.212.0/22 147.236.224.0/22 164.138.112.0/20 185.10.64.0/22 185.139.229.0/24 212.76.96.0/19 213.151.32.0/19 217.194.196.0-217.194.207.255 IPv6: 2a01:6500::/29 Signature Algorithm: sha256WithRSAEncryption 45:5d:77:08:8e:c4:b9:29:21:92:43:10:4a:76:87:56:aa:9c: 1b:de:c7:02:0b:e0:2c:30:1b:22:3e:c0:b1:db:7d:93:23:94: 17:5c:a8:a0:7c:4e:34:4b:08:87:d2:bb:b1:11:54:e6:97:87: 2f:9d:b2:51:ff:35:da:d3:5e:9e:30:12:8a:9b:fd:7b:e4:a1: 90:4f:0c:ec:b9:e0:0d:01:bd:42:52:12:c2:c8:3e:84:5c:22: d1:11:4e:28:1a:8b:23:08:ef:d8:17:47:de:16:ca:6f:8b:27: 1b:9a:ee:f6:dc:fb:bd:c9:06:f1:09:f3:5b:24:4e:48:ff:8d: c3:6e:1b:7f:59:d6:cb:35:4a:cd:12:ef:6d:37:c7:88:54:a9: b4:9e:8f:f1:ff:8a:20:ab:e1:9d:44:93:ae:b1:7f:06:b8:77: eb:51:30:2b:d9:e6:f4:81:5e:80:9a:ce:f1:fb:bb:85:9f:fa: 43:25:93:4d:35:0c:6e:b3:aa:9b:e7:26:41:87:7a:3f:d7:0e: a8:16:b8:1e:5f:c5:0e:9a:f4:19:b8:64:46:8d:06:dc:f5:97: a1:38:c2:1f:44:a3:cf:25:bb:39:d9:2e:83:29:18:b8:c9:b1: 95:a8:d2:47:57:69:2a:01:28:9d:5f:06:b1:00:c2:b5:33:b8: dc:18:97:f6 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt9ypsLUbhzAI9D+Ru8xGaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2QwY2FjZmFmYTJlMGQzMTQ5NWRkOTUwZjc2YWY1Zjk4 YmE1ZDcwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmUwZTgwMjdiZmZlMDI1ZjA1NWIzZDM4ZTA4OWM0ZmYzNDMwNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQd0bP/bfMU1ZGE73EMfBNmyoKCy O7ieGd1jrg/vNaSRF4qx8Tw+VCoXkmWOHuXErpB7g7buKOBHdvauOi9rBqItKMD7 6Y9iiHq0NdEhlVBqtZ56aI3tdHHFrQMrKtHMunrgxu2A92XPRIndk08EaIdclREu 4vpLhcZZlYe13pILBj5nkNmHIvG1i9NmBaHCPQlZEvLCfLN8vPhUtaz1S2ZNiPyZ M2gCBaGT172OriVnnAqEpLgYh9FjWddQHJTMLpxoxUxj8rmhd8DHxLtGOCPT62aa Tfbw5ZRXWR/7JC+6DsQSvmsC46Q1qpPMc9fmVQ+Bz2hjtdXGDAKvUpJ0KQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFJbg6AJ7/+Al8FWz044InE/zQwTWMB8GA1UdIwQY MBaAFHzNDKz6+i4NMUld2VD3avX5i6XXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUt NDM5ZmM4ZjliMzg2LzEvbHVEb0Fudl80Q1h3VmJQVGpnaWNUX05EQk5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUtNDM5ZmM4ZjliMzg2 LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQEHyyAAwQD JTwoAwQGX1ZAAwQBk+xmAwQCk+zUAwQCk+zgAwQEpIpwAwQCuQpAAwQAuYvlAwQF 1ExgAwQF1ZcgMAwDBALZwsQDBATZwsAwDQQCAAIwBwMFAyoBZQAwDQYJKoZIhvcN AQELBQADggEBAEVddwiOxLkpIZJDEEp2h1aqnBvexwIL4CwwGyI+wLHbfZMjlBdc qKB8TjRLCIfSu7ERVOaXhy+dslH/NdrTXp4wEoqb/XvkoZBPDOy54A0BvUJSEsLI PoRcItERTigaiyMI79gXR94Wym+LJxua7vbc+73JBvEJ81skTkj/jcNuG39Z1ss1 Ss0S7203x4hUqbSej/H/iiCr4Z1Ek66xfwa4d+tRMCvZ5vSBXoCazvH7u4Wf+kMl k001DG6zqpvnJkGHej/XDqgWuB5fxQ6a9Bm4ZEaNBtz1l6E4wh9Eo88luznZLoMp GLjJsZWo0kdXaSoBKJ1fBrEAwrUzuNwYl/Y= -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:51 2026 by rpki-client