This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/LegPI0LcRAcrLBTlGUY6DuF5bPU.roa File: LegPI0LcRAcrLBTlGUY6DuF5bPU.roa (raw, json) Hash identifier: NBAPRKnIYd+TgJ5/R1gZLE8ial4CZdJAp6oEz5nJrso= Subject key identifier: 2D:E8:0F:23:42:DC:44:07:2B:2C:14:E5:19:46:3A:0E:E1:79:6C:F5 Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14 Certificate serial: 019B7A5B5A241EA77AD9146EAB9E74CB2559 Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/LegPI0LcRAcrLBTlGUY6DuF5bPU.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212849 IP address blocks: 217.150.215.0/24 maxlen: 24 217.150.216.0/22 maxlen: 24 217.150.217.0/24 maxlen: 24 217.150.218.0/24 maxlen: 24 217.150.219.0/24 maxlen: 24 217.150.220.0/24 maxlen: 24 217.150.222.0/24 maxlen: 24 217.150.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5a:24:1e:a7:7a:d9:14:6e:ab:9e:74:cb:25:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2de80f2342dc44072b2c14e519463a0ee1796cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:51:fb:1f:66:29:80:51:a4:d8:ae:4c:3f: 4f:02:59:17:24:b1:d9:2c:96:f0:95:e7:b8:68:53: cf:83:cb:5b:0d:6a:1a:e2:ce:a5:43:b0:2a:4a:8e: 35:93:38:f4:1a:d6:bc:6a:81:08:20:a0:44:ea:82: c8:19:9d:12:14:f0:26:29:c1:9e:cc:57:8a:40:cd: e0:49:d3:3d:a9:8e:4d:0b:90:00:05:42:3a:91:68: dd:ed:cb:ef:b1:ca:10:50:39:1c:02:a0:69:8f:27: 97:d8:b4:6d:59:73:e9:d0:bb:1d:d9:f2:04:f9:79: b0:6f:16:68:8d:78:ba:1d:1f:71:a3:c1:d5:9a:51: f0:38:b4:47:2d:b2:38:d5:78:46:ff:b9:d3:e3:75: 4c:54:88:7d:78:cc:3a:bb:c3:9d:b4:f7:21:e5:63: 51:d0:68:4e:c4:08:ae:9e:10:11:0b:fe:09:ff:2f: 71:74:0b:ca:88:43:4a:6e:bb:f1:0e:d5:cf:a8:e7: b4:68:08:9d:5d:64:bf:88:77:b9:93:c2:db:d7:fe: cf:b3:1a:4e:24:65:30:13:41:fc:06:94:47:d5:5a: 44:b8:80:c5:8d:c6:51:96:7d:df:99:1c:8f:11:8a: 32:50:b8:cb:fb:77:19:ae:cb:56:20:fc:f2:c6:8a: 26:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:0F:23:42:DC:44:07:2B:2C:14:E5:19:46:3A:0E:E1:79:6C:F5 X509v3 Authority Key Identifier: keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/LegPI0LcRAcrLBTlGUY6DuF5bPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.150.215.0-217.150.220.255 217.150.222.0/23 Signature Algorithm: sha256WithRSAEncryption 08:d8:4e:02:c6:40:d5:e3:38:d7:95:c9:46:7e:6d:56:3f:74: 96:61:d8:4d:a6:f9:fc:d2:08:14:08:da:76:d4:c9:fd:24:48: da:96:6a:18:90:3a:45:83:5b:b0:b8:ae:59:79:37:c7:9c:b5: db:26:8d:42:40:68:5d:05:27:5c:07:b7:27:e0:9f:bc:ee:59: bd:61:75:47:84:cf:29:00:9c:47:e1:8f:a5:b2:d1:7e:73:7d: 49:ca:5b:95:5a:99:94:a8:46:90:dd:75:d8:89:58:2b:3a:b6: c7:fc:88:73:3c:83:0f:58:32:3f:54:d8:e9:58:0f:03:d4:dc: 78:e0:f5:6e:75:2d:1b:72:67:86:46:4f:d1:90:91:82:25:ea: 21:8a:82:c0:4e:0e:68:77:7c:b2:6b:a1:71:06:cf:55:57:25: 3b:b8:67:91:b1:4e:3c:77:3b:da:34:f2:e6:66:c1:42:47:cc: 00:91:33:49:1a:9a:a0:92:91:46:6f:3f:76:7d:dc:18:60:a1: d2:a7:0c:b8:4a:76:f8:39:aa:3b:73:ea:8a:3a:82:be:50:59: 4d:20:88:22:cd:12:bd:41:13:5e:6a:ef:8c:da:4c:72:c3:b9: 10:09:44:95:a9:6b:36:e7:3a:2f:78:4e:08:a1:92:b2:f4:6a: 20:c3:f7:0d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6W1okHqd62RRuq550yyVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw ZTVjMTQwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGU4MGYyMzQyZGM0NDA3MmIyYzE0ZTUxOTQ2M2EwZWUxNzk2Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOhR+x9mKYBRpNiuTD9PAlkXJLHZ LJbwlee4aFPPg8tbDWoa4s6lQ7AqSo41kzj0Gta8aoEIIKBE6oLIGZ0SFPAmKcGe zFeKQM3gSdM9qY5NC5AABUI6kWjd7cvvscoQUDkcAqBpjyeX2LRtWXPp0Lsd2fIE +XmwbxZojXi6HR9xo8HVmlHwOLRHLbI41XhG/7nT43VMVIh9eMw6u8OdtPch5WNR 0GhOxAiunhARC/4J/y9xdAvKiENKbrvxDtXPqOe0aAidXWS/iHe5k8Lb1/7PsxpO JGUwE0H8BpRH1VpEuIDFjcZRln3fmRyPEYoyULjL+3cZrstWIPzyxoomqwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFC3oDyNC3EQHKywU5RlGOg7heWz1MB8GA1UdIwQY MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt MGJmYmFkNDg0OWNkLzEvTGVnUEkwTGNSQWNyTEJUbEdVWTZEdUY1YlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADZltcD BADZltwDBAHZlt4wDQYJKoZIhvcNAQELBQADggEBAAjYTgLGQNXjONeVyUZ+bVY/ dJZh2E2m+fzSCBQI2nbUyf0kSNqWahiQOkWDW7C4rll5N8ectdsmjUJAaF0FJ1wH tyfgn7zuWb1hdUeEzykAnEfhj6Wy0X5zfUnKW5VamZSoRpDdddiJWCs6tsf8iHM8 gw9YMj9U2OlYDwPU3Hjg9W51LRtyZ4ZGT9GQkYIl6iGKgsBODmh3fLJroXEGz1VX JTu4Z5GxTjx3O9o08uZmwUJHzACRM0kamqCSkUZvP3Z93BhgodKnDLhKdvg5qjtz 6oo6gr5QWU0giCLNEr1BE15q74zaTHLDuRAJRJWpazbnOi94TgihkrL0aiDD9w0= -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:50 2026 by rpki-client