This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/LlCo-cr1TvaGSEsvi_aeztFDrsY.roa File: LlCo-cr1TvaGSEsvi_aeztFDrsY.roa (raw, json) Hash identifier: ONGlxNxuG7wwvZScxkyZsCMFDhxVuAnR+LQnLfg7tcI= Subject key identifier: 2E:50:A8:F9:CA:F5:4E:F6:86:48:4B:2F:8B:F6:9E:CE:D1:43:AE:C6 Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135 Certificate serial: 019B7C12F00ED4F82FEFB524018DE7447911 Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/LlCo-cr1TvaGSEsvi_aeztFDrsY.roa Signing time: Fri 02 Jan 2026 00:19:34 +0000 ROA not before: Fri 02 Jan 2026 00:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34741 IP address blocks: 185.174.240.0/24 maxlen: 24 185.174.241.0/24 maxlen: 24 185.174.242.0/24 maxlen: 24 2a07:f100::/36 maxlen: 36 2a07:f100:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f0:0e:d4:f8:2f:ef:b5:24:01:8d:e7:44:79:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135 Validity Not Before: Jan 2 00:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e50a8f9caf54ef686484b2f8bf69eced143aec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:d7:45:20:01:d5:7c:b5:61:a7:0f:f3:d3: 11:8c:56:48:87:c9:09:8f:4d:89:52:2f:63:52:3e: d2:59:ce:ee:8c:3c:bc:1a:2f:c7:2e:40:bd:ff:e1: c1:73:e2:76:71:a8:60:df:49:43:92:a0:c3:66:c2: 70:d7:ce:c5:2c:5c:c9:b8:2b:d5:72:30:41:86:74: eb:5a:2c:b8:da:18:61:a5:cb:af:1e:77:a7:3f:48: 43:3a:02:8d:39:a6:2c:31:80:9f:97:83:eb:31:48: e6:b4:21:af:d3:97:58:32:37:af:4c:3b:bd:9d:07: 6f:80:a2:48:eb:c2:62:8e:2e:0c:1d:4c:1e:81:8b: 08:03:15:ad:62:d1:6c:c9:a0:08:1f:bd:9b:63:d0: a9:38:1a:62:e5:fe:77:a7:b8:74:6f:12:ec:bc:5e: 20:4d:68:3f:7d:29:43:6a:48:9f:52:48:60:00:3a: 53:d0:fe:d1:21:da:c6:92:06:78:f2:9b:ba:d7:6f: c4:27:59:21:99:35:4e:4c:92:fd:0e:b8:d7:00:d1: 1b:af:f0:6d:ad:3c:01:3e:1b:92:b0:69:74:d6:6b: ab:75:75:83:a0:aa:25:8d:d0:17:30:68:6b:cd:11: 59:d7:8c:e7:d6:23:68:37:25:d7:0a:33:66:dc:36: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:50:A8:F9:CA:F5:4E:F6:86:48:4B:2F:8B:F6:9E:CE:D1:43:AE:C6 X509v3 Authority Key Identifier: keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/LlCo-cr1TvaGSEsvi_aeztFDrsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.240.0-185.174.242.255 IPv6: 2a07:f100::/35 Signature Algorithm: sha256WithRSAEncryption bb:7f:87:47:9c:02:27:8c:78:32:5e:c3:01:7d:e4:a8:c3:f0: a0:55:57:0d:d2:80:a5:46:c3:87:53:c4:5e:3d:b0:32:ca:be: 8a:75:86:96:f9:96:53:d8:fd:2a:d8:9e:89:f1:07:f7:41:1c: 33:6c:9d:d5:25:2a:56:fb:e1:9d:ab:53:7a:26:77:c0:69:9c: 12:6f:92:43:31:97:0e:23:96:f8:fd:9c:b8:67:8e:e1:08:68: 5e:15:6b:97:db:ee:93:73:09:21:2f:ef:ee:e0:6a:a2:11:23: 0e:03:7f:b8:75:c6:37:84:70:a3:eb:25:23:33:f6:87:56:35: ca:08:c5:d1:af:ff:ad:fc:8e:62:6e:cd:b5:2b:c1:98:21:1d: cb:86:e5:bd:21:f9:51:ce:02:38:be:32:f8:e2:1f:52:2f:f2: 28:f9:8d:fe:35:f1:e4:50:c9:10:f9:9f:c3:19:be:af:d4:3f: 5d:0e:e2:09:00:9f:7b:9b:df:81:0f:6c:d6:41:5d:da:24:ca: 34:8f:00:47:10:e7:4b:21:45:ff:1f:39:92:da:6c:7d:24:c6: a6:eb:99:81:4a:2e:11:ee:08:f0:74:77:10:04:f6:13:fc:0b: 00:b5:97:18:39:c3:32:6e:5e:fa:c1:e2:5b:0d:ce:b0:c4:da: e3:64:a7:ca -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8EvAO1Pgv77UkAY3nRHkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDMyMjY5MzAyZTFjYmNjYmFhYzBlMGU1YWY4YTg2NDQ5 OGExMzUwHhcNMjYwMTAyMDAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTUwYThmOWNhZjU0ZWY2ODY0ODRiMmY4YmY2OWVjZWQxNDNhZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D7XRSAB1Xy1YacP89MRjFZIh8kJ j02JUi9jUj7SWc7ujDy8Gi/HLkC9/+HBc+J2cahg30lDkqDDZsJw187FLFzJuCvV cjBBhnTrWiy42hhhpcuvHnenP0hDOgKNOaYsMYCfl4PrMUjmtCGv05dYMjevTDu9 nQdvgKJI68Jiji4MHUwegYsIAxWtYtFsyaAIH72bY9CpOBpi5f53p7h0bxLsvF4g TWg/fSlDakifUkhgADpT0P7RIdrGkgZ48pu612/EJ1khmTVOTJL9DrjXANEbr/Bt rTwBPhuSsGl01murdXWDoKoljdAXMGhrzRFZ14zn1iNoNyXXCjNm3DYPvwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFC5QqPnK9U72hkhLL4v2ns7RQ67GMB8GA1UdIwQY MBaAFKTTImkwLhy8y6rA4OWvioZEmKE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NjE2ZWUtMzgxZC00YWZlLTg5MGMt NmVlNTE0YjI5MTE1LzEvTGxDby1jcjFUdmFHU0VzdmlfYWV6dEZEcnNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NjE2ZWUtMzgxZC00YWZlLTg5MGMtNmVlNTE0YjI5MTE1 LzEvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAS5rvAD BAC5rvIwDgQCAAIwCAMGBSoH8QAAMA0GCSqGSIb3DQEBCwUAA4IBAQC7f4dHnAIn jHgyXsMBfeSow/CgVVcN0oClRsOHU8RePbAyyr6KdYaW+ZZT2P0q2J6J8Qf3QRwz bJ3VJSpW++Gdq1N6JnfAaZwSb5JDMZcOI5b4/Zy4Z47hCGheFWuX2+6TcwkhL+/u 4GqiESMOA3+4dcY3hHCj6yUjM/aHVjXKCMXRr/+t/I5ibs21K8GYIR3LhuW9IflR zgI4vjL44h9SL/Io+Y3+NfHkUMkQ+Z/DGb6v1D9dDuIJAJ97m9+BD2zWQV3aJMo0 jwBHEOdLIUX/HzmS2mx9JMam65mBSi4R7gjwdHcQBPYT/AsAtZcYOcMybl76weJb Dc6wxNrjZKfK -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:17 2026 by rpki-client