This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/15WLZBLgJ9g9rpon7ikwmnOpu2o.roa File: 15WLZBLgJ9g9rpon7ikwmnOpu2o.roa (raw, json) Hash identifier: cDtWR/sWDEjocXdbWFuLldw8hA+RRTGqd9G5Qgigc2g= Subject key identifier: D7:95:8B:64:12:E0:27:D8:3D:AE:9A:27:EE:29:30:9A:73:A9:BB:6A Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B7C12714390729AE577949FB31C06BDCC Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/15WLZBLgJ9g9rpon7ikwmnOpu2o.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62005 IP address blocks: 45.66.248.0/24 maxlen: 24 45.66.249.0/24 maxlen: 24 45.86.228.0/24 maxlen: 24 45.86.229.0/24 maxlen: 24 45.86.231.0/24 maxlen: 24 45.129.199.0/24 maxlen: 24 45.143.166.0/23 maxlen: 23 45.150.108.0/24 maxlen: 24 45.150.109.0/24 maxlen: 24 62.106.66.0/24 maxlen: 24 62.204.35.0/24 maxlen: 24 77.72.85.0/24 maxlen: 24 83.97.79.0/24 maxlen: 24 91.211.27.0/24 maxlen: 24 91.235.234.0/24 maxlen: 24 91.242.241.0/24 maxlen: 24 130.49.155.0/24 maxlen: 24 146.19.143.0/24 maxlen: 24 146.19.254.0/24 maxlen: 24 155.212.242.0/24 maxlen: 24 155.212.243.0/24 maxlen: 24 176.124.32.0/24 maxlen: 24 176.124.33.0/24 maxlen: 24 185.39.18.0/24 maxlen: 24 185.123.53.0/24 maxlen: 24 193.104.75.0/24 maxlen: 24 193.109.120.0/24 maxlen: 24 193.200.16.0/24 maxlen: 24 193.200.17.0/24 maxlen: 24 194.26.141.0/24 maxlen: 24 194.61.120.0/24 maxlen: 24 194.61.121.0/24 maxlen: 24 195.54.160.0/24 maxlen: 24 212.46.38.0/24 maxlen: 24 213.109.147.0/24 maxlen: 24 213.109.192.0/24 maxlen: 24 2a10:1fc0:1::/48 maxlen: 48 2a10:1fc0:2::/48 maxlen: 48 2a10:1fc0:3::/48 maxlen: 48 2a10:1fc0:4::/48 maxlen: 48 2a10:1fc0:5::/48 maxlen: 48 2a10:1fc0:6::/48 maxlen: 48 2a10:1fc0:8::/48 maxlen: 48 2a10:1fc0:9::/48 maxlen: 48 2a10:1fc0:b::/48 maxlen: 48 2a10:1fc0:c::/48 maxlen: 48 2a10:1fc0:d::/48 maxlen: 48 2a10:1fc0:e::/48 maxlen: 48 2a10:1fc0:f::/48 maxlen: 48 2a10:1fc0:10::/48 maxlen: 48 2a10:1fc0:11::/48 maxlen: 48 2a10:1fc0:12::/48 maxlen: 48 2a10:1fc0:13::/48 maxlen: 48 2a10:1fc0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:71:43:90:72:9a:e5:77:94:9f:b3:1c:06:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7958b6412e027d83dae9a27ee29309a73a9bb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:4e:f3:fd:af:95:4c:7f:56:c4:e8:d8:46: c2:f9:6e:03:8b:15:ec:ed:f5:09:35:06:55:13:f3: 60:b6:72:86:a5:b1:4c:66:5d:f6:10:cd:ee:d9:15: 54:dd:3f:25:df:9e:cb:19:7c:3c:d5:21:52:52:7e: 3b:c9:aa:b5:b6:0d:df:44:0a:69:de:83:1e:33:75: c4:a0:e6:a6:06:d3:97:d1:a1:0d:44:c9:e2:5d:00: 6d:f8:60:6b:f4:fb:46:bb:25:96:a1:54:01:14:3d: 92:a5:89:ac:7a:57:f9:be:fb:59:41:af:9e:20:19: 88:55:0f:d4:d8:2f:37:cd:20:c7:be:9a:63:ec:1c: 0c:a6:96:75:bd:53:59:43:89:9a:17:be:b0:5f:f1: da:c0:7d:55:12:aa:85:78:e9:ad:02:3d:92:57:ea: cd:47:0d:25:85:ac:9c:dd:95:2e:d4:ad:25:c6:9e: 0e:fd:e3:9e:9b:c3:86:72:1c:17:01:b5:36:00:11: 13:01:49:6e:22:5c:2d:a0:9d:6c:f6:e7:c9:4e:ef: f3:61:ce:ac:ea:80:b4:04:8e:6f:24:06:8b:1a:4a: 94:24:2d:5e:06:76:d0:1d:33:46:e8:4c:7e:d6:e0: d8:75:1e:29:3e:60:03:f1:b8:e4:b3:73:3e:5a:3e: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:95:8B:64:12:E0:27:D8:3D:AE:9A:27:EE:29:30:9A:73:A9:BB:6A X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/15WLZBLgJ9g9rpon7ikwmnOpu2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.248.0/23 45.86.228.0/23 45.86.231.0/24 45.129.199.0/24 45.143.166.0/23 45.150.108.0/23 62.106.66.0/24 62.204.35.0/24 77.72.85.0/24 83.97.79.0/24 91.211.27.0/24 91.235.234.0/24 91.242.241.0/24 130.49.155.0/24 146.19.143.0/24 146.19.254.0/24 155.212.242.0/23 176.124.32.0/23 185.39.18.0/24 185.123.53.0/24 193.104.75.0/24 193.109.120.0/24 193.200.16.0/23 194.26.141.0/24 194.61.120.0/23 195.54.160.0/24 212.46.38.0/24 213.109.147.0/24 213.109.192.0/24 IPv6: 2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff 2a10:1fc0:8::/47 2a10:1fc0:b::-2a10:1fc0:14:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 31:bf:a0:0d:50:19:db:06:d1:95:ea:a3:f6:fa:69:12:89:1d: bd:b3:d1:7b:47:83:59:31:e6:84:e9:92:70:fd:0e:e1:fe:95: a3:4d:d5:7e:0c:ba:6c:bf:4a:a7:5d:ac:c7:53:7e:74:2b:72: af:68:e1:d4:7b:d8:9e:f6:5d:be:d3:66:57:5e:5e:3c:02:51: 05:a5:25:5b:1d:c4:1a:0e:e2:75:00:86:7d:0f:a8:ce:f5:01: 8c:22:c3:8e:27:6c:bb:c6:c2:f8:f8:de:59:5d:1f:3f:75:6b: 5b:7f:c2:a6:d6:67:83:e0:89:24:bc:6a:13:a3:52:b4:72:af: ec:5d:06:4c:04:a2:07:cb:e9:30:17:b6:c1:47:88:49:21:b9: 65:27:e6:bb:0d:d4:5d:5f:34:53:61:7c:ab:07:20:dc:37:8c: 7a:54:91:98:50:fc:f4:d0:6c:61:7c:c7:eb:01:e2:2d:3a:9f: 5c:5c:33:88:34:8e:13:f0:a0:98:2d:13:81:94:6b:5a:bc:48: a7:89:cb:d1:e2:85:2c:8b:2a:8f:94:6f:ae:b7:42:0a:51:5e: 00:42:75:97:6c:ec:a0:5c:50:c4:e3:e9:ac:7b:8c:3c:a0:b0: 25:23:00:ce:09:4e:0e:32:cc:7a:69:24:90:9f:29:97:53:50: 5c:7c:58:f4 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt8EnFDkHKa5XeUn7McBr3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzk1OGI2NDEyZTAyN2Q4M2RhZTlhMjdlZTI5MzA5YTczYTliYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70xO8/2vlUx/VsTo2EbC+W4DixXs 7fUJNQZVE/NgtnKGpbFMZl32EM3u2RVU3T8l357LGXw81SFSUn47yaq1tg3fRApp 3oMeM3XEoOamBtOX0aENRMniXQBt+GBr9PtGuyWWoVQBFD2SpYmself5vvtZQa+e IBmIVQ/U2C83zSDHvppj7BwMppZ1vVNZQ4maF76wX/HawH1VEqqFeOmtAj2SV+rN Rw0lhayc3ZUu1K0lxp4O/eOem8OGchwXAbU2ABETAUluIlwtoJ1s9ufJTu/zYc6s 6oC0BI5vJAaLGkqUJC1eBnbQHTNG6Ex+1uDYdR4pPmAD8bjks3M+Wj7aOQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFNeVi2QS4CfYPa6aJ+4pMJpzqbtqMB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvMTVXTFpCTGdKOWc5cnBvbjdpa3dtbk9wdTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgbUEAgABMIGuAwQB LUL4AwQBLVbkAwQALVbnAwQALYHHAwQBLY+mAwQBLZZsAwQAPmpCAwQAPswjAwQA TUhVAwQAU2FPAwQAW9MbAwQAW+vqAwQAW/LxAwQAgjGbAwQAkhOPAwQAkhP+AwQB m9TyAwQBsHwgAwQAuScSAwQAuXs1AwQAwWhLAwQAwW14AwQBwcgQAwQAwhqNAwQB wj14AwQAwzagAwQA1C4mAwQA1W2TAwQA1W3AMDcEAgACMDEwEgMHACoQH8AAAQMH ACoQH8AABgMHASoQH8AACDASAwcAKhAfwAALAwcAKhAfwAAUMA0GCSqGSIb3DQEB CwUAA4IBAQAxv6ANUBnbBtGV6qP2+mkSiR29s9F7R4NZMeaE6ZJw/Q7h/pWjTdV+ DLpsv0qnXazHU350K3KvaOHUe9ie9l2+02ZXXl48AlEFpSVbHcQaDuJ1AIZ9D6jO 9QGMIsOOJ2y7xsL4+N5ZXR8/dWtbf8Km1meD4IkkvGoTo1K0cq/sXQZMBKIHy+kw F7bBR4hJIbllJ+a7DdRdXzRTYXyrByDcN4x6VJGYUPz00GxhfMfrAeItOp9cXDOI NI4T8KCYLROBlGtavEinicvR4oUsiyqPlG+ut0IKUV4AQnWXbOygXFDE4+mse4w8 oLAlIwDOCU4OMsx6aSSQnymXU1BcfFj0 -----END CERTIFICATE-----Generated at Wed Jan 21 15:24:33 2026 by rpki-client