This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LnnhUmrTLA_MmnyHW92QYn2V8wc.roa File: LnnhUmrTLA_MmnyHW92QYn2V8wc.roa (raw, json) Hash identifier: GJukDnJMjcETn3Kcj5kY+2D3TSVCdRViljWyxBU8qNE= Subject key identifier: 2E:79:E1:52:6A:D3:2C:0F:CC:9A:7C:87:5B:DD:90:62:7D:95:F3:07 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019AE9FC7DA25B8C3C42502AFC96E9990333 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LnnhUmrTLA_MmnyHW92QYn2V8wc.roa Signing time: Thu 04 Dec 2025 15:30:29 +0000 ROA not before: Thu 04 Dec 2025 15:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2.56.123.0/24 maxlen: 24 5.180.22.0/24 maxlen: 24 5.180.31.0/24 maxlen: 24 45.9.18.0/24 maxlen: 24 45.9.19.0/24 maxlen: 24 45.15.145.0/24 maxlen: 24 45.15.146.0/24 maxlen: 24 45.15.154.0/24 maxlen: 24 45.15.155.0/24 maxlen: 24 45.15.164.0/24 maxlen: 24 45.15.179.0/24 maxlen: 24 45.15.186.0/24 maxlen: 24 45.82.248.0/24 maxlen: 24 45.83.23.0/24 maxlen: 24 45.83.24.0/24 maxlen: 24 45.83.25.0/24 maxlen: 24 45.83.128.0/24 maxlen: 24 45.83.149.0/24 maxlen: 24 45.86.60.0/22 maxlen: 24 45.86.64.0/24 maxlen: 24 45.86.65.0/24 maxlen: 24 45.86.67.0/24 maxlen: 24 45.86.68.0/24 maxlen: 24 45.86.69.0/24 maxlen: 24 45.86.75.0/24 maxlen: 24 45.88.176.0/24 maxlen: 24 45.88.177.0/24 maxlen: 24 45.92.140.0/22 maxlen: 24 45.92.160.0/24 maxlen: 24 45.92.161.0/24 maxlen: 24 45.92.163.0/24 maxlen: 24 45.92.164.0/22 maxlen: 24 45.92.192.0/24 maxlen: 24 45.92.193.0/24 maxlen: 24 45.92.194.0/24 maxlen: 24 45.128.51.0/24 maxlen: 24 45.128.57.0/24 maxlen: 24 45.128.58.0/24 maxlen: 24 92.118.236.0/22 maxlen: 24 171.22.115.0/24 maxlen: 24 171.22.130.0/24 maxlen: 24 171.22.132.0/24 maxlen: 24 185.166.153.0/24 maxlen: 24 213.59.119.0/24 maxlen: 24 213.59.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:fc:7d:a2:5b:8c:3c:42:50:2a:fc:96:e9:99:03:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 4 15:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e79e1526ad32c0fcc9a7c875bdd90627d95f307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1f:1a:6b:20:d7:3c:9b:7e:87:1c:94:01:81: de:d3:97:a7:68:76:04:9a:8b:d0:0b:7f:58:d6:c4: cf:b1:dc:b6:3a:09:b8:dc:69:3b:d3:97:0f:be:f5: c6:a1:05:ab:8a:c0:2a:7b:72:66:ca:a8:6b:a9:ca: 02:64:c1:e2:25:2a:f3:26:d5:68:30:3b:81:e9:f3: e0:f2:7c:8c:10:da:00:c7:1f:00:d3:90:76:e4:53: e8:b1:65:e0:04:2a:12:29:87:4e:c8:b0:56:d6:2b: f3:39:a2:49:fc:bd:31:a3:b9:c5:25:18:c6:5b:f6: 4a:00:f7:29:22:83:8f:f0:64:1a:fa:73:9c:16:f5: cf:23:64:ca:64:11:19:fd:57:07:0b:f3:f3:bc:5d: 03:ff:d2:55:37:16:f8:02:d0:a2:0b:0d:7e:1d:61: 90:b6:c8:53:a1:29:1f:24:ca:bf:06:a1:a8:0d:c1: 55:e9:f9:e6:f5:e7:e0:d0:e2:93:71:89:68:49:1f: 82:48:50:0a:76:ea:de:b2:47:83:cb:4e:10:78:8b: 86:e3:0f:d8:a6:c6:ac:60:8f:63:97:86:a1:c4:64: 16:4e:54:ed:9f:0a:09:94:ef:de:fc:c1:ab:4c:21: 00:2e:14:80:b7:71:1b:0e:dc:f3:c2:fe:bd:b2:03: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:79:E1:52:6A:D3:2C:0F:CC:9A:7C:87:5B:DD:90:62:7D:95:F3:07 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LnnhUmrTLA_MmnyHW92QYn2V8wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.123.0/24 5.180.22.0/24 5.180.31.0/24 45.9.18.0/23 45.15.145.0-45.15.146.255 45.15.154.0/23 45.15.164.0/24 45.15.179.0/24 45.15.186.0/24 45.82.248.0/24 45.83.23.0-45.83.25.255 45.83.128.0/24 45.83.149.0/24 45.86.60.0-45.86.65.255 45.86.67.0-45.86.69.255 45.86.75.0/24 45.88.176.0/23 45.92.140.0/22 45.92.160.0/23 45.92.163.0-45.92.167.255 45.92.192.0-45.92.194.255 45.128.51.0/24 45.128.57.0-45.128.58.255 92.118.236.0/22 171.22.115.0/24 171.22.130.0/24 171.22.132.0/24 185.166.153.0/24 213.59.119.0-213.59.120.255 Signature Algorithm: sha256WithRSAEncryption 22:42:cb:03:35:b9:15:41:9e:3a:b6:87:8f:1f:06:df:fc:3a: 70:52:41:f4:99:93:09:31:b8:0f:b7:06:fd:98:09:fc:92:43: fd:7b:1e:fd:ca:3f:9f:f3:a8:4a:ca:03:21:5a:7b:f1:86:1e: 75:1c:b0:a5:49:f9:15:96:80:b5:f0:63:d5:e4:f7:3a:89:97: fc:16:3d:ef:f8:fd:e2:bc:f4:aa:30:3d:ff:29:49:c8:35:ba: 9f:2d:9d:38:fd:fa:ba:5a:bc:fb:04:24:8e:06:a4:02:80:95: f5:f1:81:3c:d7:ab:7c:1f:92:3f:51:94:ec:64:77:37:5a:16: bf:08:cc:5b:f0:2d:08:6b:66:85:7a:02:44:f2:25:8d:98:48: 8f:5c:49:3a:0c:60:ee:03:e7:f8:f1:22:e2:5a:c9:82:55:0c: d8:5c:4d:7b:6f:20:0f:96:1b:0d:ae:f0:f2:f7:48:57:a2:e3: 76:aa:c0:82:56:3d:a4:4e:e8:92:f9:9e:3a:9e:7c:48:74:61: 70:28:ba:22:fa:eb:53:da:00:04:78:af:25:a0:15:dc:4f:64: f9:67:c9:5b:d7:3b:d1:0e:a7:48:e4:8a:5e:18:81:b6:f4:1f: af:8b:32:49:cc:39:78:97:ab:8d:b9:c9:9e:f7:1b:bd:85:45: fb:13:d2:a0 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZrp/H2iW4w8QlAq/JbpmQMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjA0MTUzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc5ZTE1MjZhZDMyYzBmY2M5YTdjODc1YmRkOTA2MjdkOTVmMzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR8aayDXPJt+hxyUAYHe05enaHYE movQC39Y1sTPsdy2Ogm43Gk705cPvvXGoQWrisAqe3JmyqhrqcoCZMHiJSrzJtVo MDuB6fPg8nyMENoAxx8A05B25FPosWXgBCoSKYdOyLBW1ivzOaJJ/L0xo7nFJRjG W/ZKAPcpIoOP8GQa+nOcFvXPI2TKZBEZ/VcHC/PzvF0D/9JVNxb4AtCiCw1+HWGQ tshToSkfJMq/BqGoDcFV6fnm9efg0OKTcYloSR+CSFAKdureskeDy04QeIuG4w/Y psasYI9jl4ahxGQWTlTtnwoJlO/e/MGrTCEALhSAt3EbDtzzwv69sgPWWwIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFC554VJq0ywPzJp8h1vdkGJ9lfMHMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTG5uaFVtclRMQV9NbW55SFc5MlFZbjJWOHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA Ajh7AwQABbQWAwQABbQfAwQBLQkSMAwDBAAtD5EDBAAtD5IDBAEtD5oDBAAtD6QD BAAtD7MDBAAtD7oDBAAtUvgwDAMEAC1TFwMEAS1TGAMEAC1TgAMEAC1TlTAMAwQC LVY8AwQBLVZAMAwDBAAtVkMDBAEtVkQDBAAtVksDBAEtWLADBAItXIwDBAEtXKAw DAMEAC1cowMEAy1coDAMAwQGLVzAAwQALVzCAwQALYAzMAwDBAAtgDkDBAAtgDoD BAJcduwDBACrFnMDBACrFoIDBACrFoQDBAC5ppkwDAMEANU7dwMEANU7eDANBgkq hkiG9w0BAQsFAAOCAQEAIkLLAzW5FUGeOraHjx8G3/w6cFJB9JmTCTG4D7cG/ZgJ /JJD/Xse/co/n/OoSsoDIVp78YYedRywpUn5FZaAtfBj1eT3OomX/BY97/j94rz0 qjA9/ylJyDW6ny2dOP36ulq8+wQkjgakAoCV9fGBPNerfB+SP1GU7GR3N1oWvwjM W/AtCGtmhXoCRPIljZhIj1xJOgxg7gPn+PEi4lrJglUM2FxNe28gD5YbDa7w8vdI V6LjdqrAglY9pE7okvmeOp58SHRhcCi6IvrrU9oABHivJaAV3E9k+WfJW9c70Q6n SOSKXhiBtvQfr4syScw5eJerjbnJnvcbvYVF+xPSoA== -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:13 2025 by rpki-client