This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/LuJsH5NBnmMRDeqdADm2onTGbeM.roa File: LuJsH5NBnmMRDeqdADm2onTGbeM.roa (raw, json) Hash identifier: hvZjNutAl74k49QMpkhOMu8qjNkOw4TtZPCoYawyUd4= Subject key identifier: 2E:E2:6C:1F:93:41:9E:63:11:0D:EA:9D:00:39:B6:A2:74:C6:6D:E3 Certificate issuer: /CN=1003cd25315330350d73f2a3579aa95e052b718d Certificate serial: 019B76EB374C7E2D4E94ED3C264C0CE9C489 Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/LuJsH5NBnmMRDeqdADm2onTGbeM.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16116 IP address blocks: 37.25.32.0/24 maxlen: 24 37.25.33.0/24 maxlen: 24 37.25.34.0/24 maxlen: 24 37.25.35.0/24 maxlen: 24 37.25.36.0/24 maxlen: 24 37.25.37.0/24 maxlen: 24 37.25.38.0/24 maxlen: 24 37.25.39.0/24 maxlen: 24 46.19.80.0/21 maxlen: 24 46.19.83.0/24 maxlen: 24 46.19.84.0/24 maxlen: 24 62.112.0.0/22 maxlen: 24 85.159.160.0/21 maxlen: 24 85.159.161.0/24 maxlen: 24 85.159.162.0/24 maxlen: 24 85.159.163.0/24 maxlen: 24 85.159.164.0/24 maxlen: 24 85.159.165.0/24 maxlen: 24 85.159.166.0/24 maxlen: 24 85.159.167.0/24 maxlen: 24 89.37.236.0/22 maxlen: 24 89.40.66.0/24 maxlen: 24 89.41.188.0/24 maxlen: 24 89.43.48.0/24 maxlen: 24 91.135.96.0/20 maxlen: 24 93.113.31.0/24 maxlen: 24 130.185.96.0/21 maxlen: 24 141.226.88.0/21 maxlen: 24 141.226.90.0/24 maxlen: 24 147.189.144.0/22 maxlen: 24 147.189.148.0/23 maxlen: 24 185.80.108.0/22 maxlen: 24 185.196.126.0/23 maxlen: 24 185.246.252.0/23 maxlen: 24 185.246.254.0/24 maxlen: 24 185.246.255.0/24 maxlen: 24 188.64.200.0/21 maxlen: 24 188.64.200.0/24 maxlen: 24 188.64.201.0/24 maxlen: 24 188.64.202.0/24 maxlen: 24 188.64.203.0/24 maxlen: 24 188.64.204.0/24 maxlen: 24 188.64.205.0/24 maxlen: 24 193.41.202.0/24 maxlen: 24 193.41.208.0/23 maxlen: 24 193.41.209.0/24 maxlen: 24 195.133.152.0/21 maxlen: 24 212.90.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:4c:7e:2d:4e:94:ed:3c:26:4c:0c:e9:c4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee26c1f93419e63110dea9d0039b6a274c66de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:72:aa:7d:66:b0:ef:35:40:6e:6b:53:b0: 9b:cb:2f:9d:a5:aa:0a:29:02:1b:52:f9:d2:5b:ea: b5:59:85:af:71:05:09:6a:92:45:dc:29:ec:15:17: 9c:15:03:dc:9d:0e:98:81:88:90:64:7f:83:9f:34: 2a:04:a6:ff:f5:36:46:00:cd:9e:3a:1d:33:24:a8: 48:a3:14:c1:10:5b:66:32:b4:a5:0f:a8:d7:4c:5b: a4:92:3f:e9:2c:f6:cf:bf:ec:35:23:34:7d:68:20: 0f:b4:e9:96:d5:95:46:ec:12:7f:96:74:dd:65:e9: e0:1e:bf:bc:68:f4:93:85:e9:bf:40:8e:4c:11:da: dc:a9:e4:0c:6e:35:ee:e8:e8:c8:02:a7:c0:2e:16: 23:11:97:51:b3:82:47:c3:24:84:a2:65:d0:85:71: c8:4d:53:cb:4c:9d:35:85:11:08:ea:86:cc:48:1a: 25:1c:6c:e1:99:15:cf:e5:db:89:e0:0a:e0:17:fc: f9:04:40:90:b1:0e:0b:c2:a6:e5:d1:0b:3f:11:20: 89:80:a1:49:86:24:a3:a6:a1:02:ae:06:2c:e9:d8: 36:be:4f:3a:34:43:f5:f7:b2:85:3c:f5:8c:56:cd: 74:00:30:ef:69:44:5e:89:5f:9e:8f:c9:5d:63:85: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E2:6C:1F:93:41:9E:63:11:0D:EA:9D:00:39:B6:A2:74:C6:6D:E3 X509v3 Authority Key Identifier: keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/LuJsH5NBnmMRDeqdADm2onTGbeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.32.0/21 46.19.80.0/21 62.112.0.0/22 85.159.160.0/21 89.37.236.0/22 89.40.66.0/24 89.41.188.0/24 89.43.48.0/24 91.135.96.0/20 93.113.31.0/24 130.185.96.0/21 141.226.88.0/21 147.189.144.0-147.189.149.255 185.80.108.0/22 185.196.126.0/23 185.246.252.0/22 188.64.200.0/21 193.41.202.0/24 193.41.208.0/23 195.133.152.0/21 212.90.108.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:c6:51:20:7f:a5:a0:1c:e3:ff:40:46:99:7e:a8:9a:fa:09: ad:63:fc:ad:51:bd:7f:05:22:00:57:22:04:80:8e:7e:f8:95: 95:35:cb:e1:14:38:04:e5:76:f1:56:22:01:0e:e1:50:c3:a0: e5:3d:ae:7e:ef:93:1c:8a:ad:84:18:fc:00:fc:ef:6a:ef:d4: 4a:9d:52:35:cd:23:0f:01:e8:be:e7:ec:0f:fc:cf:c9:f1:ea: a5:f6:fc:61:3c:35:00:15:e3:ee:4c:da:49:d6:42:6a:5e:15: 50:25:1a:2c:e8:4c:cf:39:3d:69:bb:9d:dc:ef:38:1e:27:68: ee:e4:2d:7b:b7:98:86:22:dd:7a:9a:fa:7e:bf:1f:68:36:6a: f1:93:f4:39:09:bd:79:89:99:1e:60:35:48:c2:2b:c5:ae:d2: 19:47:85:0b:ca:db:d6:5a:81:b9:ae:05:0e:51:87:0d:96:29: bb:ff:12:39:56:24:81:4f:fb:11:1b:4a:ae:13:ab:d2:8e:a3: 8f:6c:64:27:5e:dc:0a:ff:53:0d:cc:5c:8e:40:a7:9e:7e:70: 35:65:89:4b:10:01:b2:53:9a:7b:bc:4a:b6:4a:0a:79:5c:10: 08:99:07:e2:ad:dc:9b:4c:0f:19:53:24:33:10:f8:56:0f:ca: 71:15:d8:54 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgISAZt26zdMfi1OlO08JkwM6cSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDNjZDI1MzE1MzMwMzUwZDczZjJhMzU3OWFhOTVlMDUy YjcxOGQwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWUyNmMxZjkzNDE5ZTYzMTEwZGVhOWQwMDM5YjZhMjc0YzY2ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1khyqn1msO81QG5rU7Cbyy+dpaoK KQIbUvnSW+q1WYWvcQUJapJF3CnsFRecFQPcnQ6YgYiQZH+DnzQqBKb/9TZGAM2e Oh0zJKhIoxTBEFtmMrSlD6jXTFukkj/pLPbPv+w1IzR9aCAPtOmW1ZVG7BJ/lnTd ZengHr+8aPSThem/QI5MEdrcqeQMbjXu6OjIAqfALhYjEZdRs4JHwySEomXQhXHI TVPLTJ01hREI6obMSBolHGzhmRXP5duJ4ArgF/z5BECQsQ4Lwqbl0Qs/ESCJgKFJ hiSjpqECrgYs6dg2vk86NEP197KFPPWMVs10ADDvaUReiV+ej8ldY4VR7QIDAQAB o4ICjjCCAoowHQYDVR0OBBYEFC7ibB+TQZ5jEQ3qnQA5tqJ0xm3jMB8GA1UdIwQY MBaAFBADzSUxUzA1DXPyo1eaqV4FK3GNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFQTkpURlRNRFVOY19LalY1cXBYZ1VyY1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81OTcyMzItZjg0Ni00ZmQ3LWJjYzIt NmFmZWY1ZDBkYWE2LzEvTHVKc0g1TkJubU1SRGVxZEFEbTJvblRHYmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81OTcyMzItZjg0Ni00ZmQ3LWJjYzItNmFmZWY1ZDBkYWE2 LzEvRUFQTkpURlRNRFVOY19LalY1cXBYZ1VyY1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAMl GSADBAMuE1ADBAI+cAADBANVn6ADBAJZJewDBABZKEIDBABZKbwDBABZKzADBARb h2ADBABdcR8DBAOCuWADBAON4lgwDAMEBJO9kAMEAZO9lAMEArlQbAMEAbnEfgME Arn2/AMEA7xAyAMEAMEpygMEAcEp0AMEA8OFmAMEAtRabDANBgkqhkiG9w0BAQsF AAOCAQEAT8ZRIH+loBzj/0BGmX6omvoJrWP8rVG9fwUiAFciBICOfviVlTXL4RQ4 BOV28VYiAQ7hUMOg5T2ufu+THIqthBj8APzvau/USp1SNc0jDwHovufsD/zPyfHq pfb8YTw1ABXj7kzaSdZCal4VUCUaLOhMzzk9abud3O84Hido7uQte7eYhiLdepr6 fr8faDZq8ZP0OQm9eYmZHmA1SMIrxa7SGUeFC8rb1lqBua4FDlGHDZYpu/8SOVYk gU/7ERtKrhOr0o6jj2xkJ17cCv9TDcxcjkCnnn5wNWWJSxABslOae7xKtkoKeVwQ CJkH4q3cm0wPGVMkMxD4Vg/KcRXYVA== -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:25 2026 by rpki-client