This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Lu7Ey2aHUr5aB7nLQoXp-45i06c.roa File: Lu7Ey2aHUr5aB7nLQoXp-45i06c.roa (raw, json) Hash identifier: 5060qK9p0yZfFgGB70cCxgO8fkLxehI3H3Y2WmVNns4= Subject key identifier: 2E:EE:C4:CB:66:87:52:BE:5A:07:B9:CB:42:85:E9:FB:8E:62:D3:A7 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019BDB8CC96D8D41E6A3983D50D445EA09D3 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Lu7Ey2aHUr5aB7nLQoXp-45i06c.roa Signing time: Tue 20 Jan 2026 13:16:35 +0000 ROA not before: Tue 20 Jan 2026 13:16:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 45.151.233.0/24 maxlen: 24 92.118.169.0/24 maxlen: 24 92.118.170.0/24 maxlen: 24 185.58.115.0/24 maxlen: 24 185.68.184.0/24 maxlen: 24 185.68.246.0/24 maxlen: 24 185.68.247.0/24 maxlen: 24 185.79.138.0/24 maxlen: 24 185.88.36.0/24 maxlen: 24 185.88.37.0/24 maxlen: 24 185.113.139.0/24 maxlen: 24 193.221.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:8c:c9:6d:8d:41:e6:a3:98:3d:50:d4:45:ea:09:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 20 13:16:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eeec4cb668752be5a07b9cb4285e9fb8e62d3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:cd:e0:b2:75:b8:5c:04:21:4a:26:f3:aa: 09:db:e0:72:38:1b:f3:be:45:19:40:4b:e5:1b:74: 2a:4e:a9:91:2a:1c:c2:27:a9:9f:2d:6a:44:fe:10: 99:19:58:f8:5d:c9:97:88:77:72:bd:6f:a4:66:e2: dd:d1:e7:be:03:06:6b:80:19:19:8c:53:11:d3:3c: b5:2b:36:4d:b3:ad:aa:bf:ac:82:22:6d:18:4b:64: 4e:60:7a:62:a5:9e:e3:51:67:3f:3b:1e:07:ae:a6: 5b:b0:54:32:17:82:13:99:0b:a7:de:ab:9f:77:16: de:06:05:a3:19:0b:ed:22:31:18:12:71:4a:ef:b6: 70:a9:40:ef:3f:77:4b:92:0c:52:77:74:ac:0e:86: 5f:2c:d5:e1:71:bb:a6:b6:b7:c3:03:3a:19:31:02: b5:3d:6c:b1:f3:20:48:ca:54:0f:81:3c:b3:c3:e4: ff:44:0e:89:ec:3d:35:d1:b9:ba:34:5e:c7:e9:c3: ed:0d:c3:d0:a9:09:a0:92:4e:e8:2c:9f:52:c6:72: 2d:4f:e2:bd:c1:13:3e:a3:c5:63:77:32:99:21:21: 56:00:3e:41:aa:89:0a:2d:a8:66:d3:15:93:c4:5f: 3e:b6:a1:93:af:46:78:0d:42:57:d0:2e:2a:6f:7b: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:C4:CB:66:87:52:BE:5A:07:B9:CB:42:85:E9:FB:8E:62:D3:A7 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Lu7Ey2aHUr5aB7nLQoXp-45i06c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.233.0/24 92.118.169.0-92.118.170.255 185.58.115.0/24 185.68.184.0/24 185.68.246.0/23 185.79.138.0/24 185.88.36.0/23 185.113.139.0/24 193.221.203.0/24 Signature Algorithm: sha256WithRSAEncryption 11:fc:d7:0d:5f:59:61:23:53:21:4d:36:f5:e9:49:20:25:0d: a6:5f:31:aa:42:b2:58:60:b1:99:32:a1:3e:67:89:e7:29:5f: 06:1b:e6:b2:82:28:39:26:de:66:dc:b2:80:3a:4e:0e:ca:89: f9:53:36:ba:64:01:a5:40:6e:a0:5a:d4:ca:b6:80:1f:1d:a4: cc:0c:0b:e9:b2:b6:95:0c:ec:4c:5c:12:cd:32:90:d1:7e:6a: 38:d8:48:a3:a5:05:ab:8e:4f:c1:05:44:e9:a4:95:6d:6e:58: b9:4b:12:1b:43:70:ba:ab:25:61:d4:50:34:94:2f:cc:88:ec: 37:37:f2:57:fb:fa:b7:ad:fa:32:c7:61:3b:93:8f:a2:7c:4e: b2:87:29:45:87:54:26:1c:e2:f9:b6:3c:ca:e7:7e:bd:62:4e: 08:38:86:c2:50:df:eb:0a:4d:07:ad:a3:d2:8a:e2:c8:62:64: 24:04:9d:f1:f5:77:09:de:0b:47:fc:19:2e:60:f2:20:68:fa: de:4d:44:2c:fb:a2:30:f9:f9:dd:9e:57:bf:9e:69:57:28:12: 61:04:ad:01:26:56:57:17:b6:e6:b5:c4:33:ed:6a:e7:7b:45: 6d:e5:e3:c2:4d:6a:90:9c:0a:62:12:8e:4d:fa:ae:f9:9c:da: 78:18:94:58 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZvbjMltjUHmo5g9UNRF6gnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTIwMTMxNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWVlYzRjYjY2ODc1MmJlNWEwN2I5Y2I0Mjg1ZTlmYjhlNjJkM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEbN4LJ1uFwEIUom86oJ2+ByOBvz vkUZQEvlG3QqTqmRKhzCJ6mfLWpE/hCZGVj4XcmXiHdyvW+kZuLd0ee+AwZrgBkZ jFMR0zy1KzZNs62qv6yCIm0YS2ROYHpipZ7jUWc/Ox4HrqZbsFQyF4ITmQun3quf dxbeBgWjGQvtIjEYEnFK77ZwqUDvP3dLkgxSd3SsDoZfLNXhcbumtrfDAzoZMQK1 PWyx8yBIylQPgTyzw+T/RA6J7D010bm6NF7H6cPtDcPQqQmgkk7oLJ9SxnItT+K9 wRM+o8VjdzKZISFWAD5BqokKLahm0xWTxF8+tqGTr0Z4DUJX0C4qb3vvSQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFC7uxMtmh1K+Wge5y0KF6fuOYtOnMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvTHU3RXkyYUhVcjVhQjduTFFvWHAtNDVpMDZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALZfpMAwD BABcdqkDBABcdqoDBAC5OnMDBAC5RLgDBAG5RPYDBAC5T4oDBAG5WCQDBAC5cYsD BADB3cswDQYJKoZIhvcNAQELBQADggEBABH81w1fWWEjUyFNNvXpSSAlDaZfMapC slhgsZkyoT5niecpXwYb5rKCKDkm3mbcsoA6Tg7KiflTNrpkAaVAbqBa1Mq2gB8d pMwMC+mytpUM7ExcEs0ykNF+ajjYSKOlBauOT8EFROmklW1uWLlLEhtDcLqrJWHU UDSUL8yI7Dc38lf7+ret+jLHYTuTj6J8TrKHKUWHVCYc4vm2PMrnfr1iTgg4hsJQ 3+sKTQeto9KK4shiZCQEnfH1dwneC0f8GS5g8iBo+t5NRCz7ojD5+d2eV7+eaVco EmEErQEmVlcXtua1xDPtaud7RW3l48JNapCcCmISjk36rvmc2ngYlFg= -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:21 2026 by rpki-client