This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LU2azMpMASbnsZfWHEwi152TQWY.roa File: LU2azMpMASbnsZfWHEwi152TQWY.roa (raw, json) Hash identifier: 9Tuig76pmAOURU76UqOvLNw/EPo3fYxFECppm8cuFqg= Subject key identifier: 2D:4D:9A:CC:CA:4C:01:26:E7:B1:97:D6:1C:4C:22:D7:9D:93:41:66 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA49D9184135B571C7620A23EB9FE6B Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LU2azMpMASbnsZfWHEwi152TQWY.roa Signing time: Thu 01 Jan 2026 22:19:04 +0000 ROA not before: Thu 01 Jan 2026 22:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.80.221.0/24 maxlen: 24 45.80.222.0/24 maxlen: 24 45.80.223.0/24 maxlen: 24 178.23.185.0/24 maxlen: 24 194.62.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:9d:91:84:13:5b:57:1c:76:20:a2:3e:b9:fe:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d4d9accca4c0126e7b197d61c4c22d79d934166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:7b:a6:f2:ab:75:bd:a4:98:f9:6b:06:c7: 4e:26:b8:5a:f4:f3:dc:87:f5:d0:ff:4a:11:a4:f5: 6e:8c:b0:4a:e2:67:61:9f:08:62:5f:a2:94:4d:6c: a7:cc:c7:74:78:ac:06:de:f0:74:d2:a3:86:d2:ff: 67:2a:90:1c:79:99:62:ab:55:18:ae:e8:e5:0b:f2: ef:78:dc:09:8e:2d:e4:a0:24:ea:07:a3:b7:c5:b4: a8:fc:bd:73:8e:ba:17:c6:ec:57:65:55:be:3a:57: ed:ed:30:27:ea:22:b5:c7:83:63:02:e4:62:21:ba: 80:10:cb:34:10:19:7d:0d:97:92:8d:8a:cd:ca:6a: 43:01:8a:9e:b7:9f:23:da:ae:1a:fe:de:bf:69:31: ab:75:fa:45:2b:fa:d5:93:90:2c:63:c3:0f:d0:71: 72:c3:1f:1f:fe:21:c1:c8:05:39:76:b9:23:6e:f3: d5:aa:be:7a:88:fd:b5:a6:ee:ae:e9:0e:e2:b6:26: db:52:51:f2:3f:71:58:c9:fc:7a:b5:d3:b6:5a:62: 09:52:e3:d4:bd:50:7b:a7:54:8b:a2:3c:d6:c3:18: 7a:1e:71:ee:59:69:1c:85:cf:9d:90:f2:c7:1b:6c: 71:7a:cf:07:8b:63:93:4c:77:a1:72:b8:6f:42:f4: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4D:9A:CC:CA:4C:01:26:E7:B1:97:D6:1C:4C:22:D7:9D:93:41:66 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LU2azMpMASbnsZfWHEwi152TQWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.221.0-45.80.223.255 178.23.185.0/24 194.62.18.0/24 Signature Algorithm: sha256WithRSAEncryption 83:03:24:5e:5e:a6:a8:9c:a5:f9:19:e3:ef:d2:e7:ff:54:59: a7:e8:ec:67:cf:fd:c1:de:dc:9e:f4:71:3d:48:34:ef:03:c5: e6:ce:f1:19:8c:30:ae:79:28:aa:16:3d:33:ba:09:a2:84:47: 03:b3:5a:96:4f:5e:b6:6e:b7:11:36:f0:e4:05:4e:08:d9:75: 6a:27:c7:64:cf:92:97:96:e1:e0:7f:5b:60:a8:12:c7:56:90: 65:f2:65:78:c8:c3:1d:4a:b7:35:64:43:6f:28:a3:f0:03:5b: 11:de:f5:c6:4a:c2:ab:27:b7:9c:27:5a:24:75:84:d4:77:a3: 86:b1:fd:e1:31:2e:62:9d:68:41:c9:bc:4c:5f:04:81:ec:09: d4:f7:e8:41:38:92:ca:ed:8c:9d:1b:45:a5:35:11:cf:36:a0: b8:3a:84:61:69:a8:dc:4d:38:1a:7d:69:9d:ab:58:b7:79:f8: 16:9c:98:89:fc:fd:35:14:41:1d:bf:c7:cd:2a:01:67:9d:37: e4:2f:c3:f0:c3:58:4f:c0:fc:19:b6:03:e1:7c:b7:34:79:8e: 22:4f:b2:cb:52:27:41:b9:54:bb:34:f7:ed:75:24:08:bf:6e: 7a:8f:b1:61:e6:af:de:a0:45:ab:94:b0:fb:99:d4:22:86:41: be:bc:42:b1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pJ2RhBNbVxx2IKI+uf5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDRkOWFjY2NhNGMwMTI2ZTdiMTk3ZDYxYzRjMjJkNzlkOTM0MTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv97pvKrdb2kmPlrBsdOJrha9PPc h/XQ/0oRpPVujLBK4mdhnwhiX6KUTWynzMd0eKwG3vB00qOG0v9nKpAceZliq1UY rujlC/LveNwJji3koCTqB6O3xbSo/L1zjroXxuxXZVW+Olft7TAn6iK1x4NjAuRi IbqAEMs0EBl9DZeSjYrNympDAYqet58j2q4a/t6/aTGrdfpFK/rVk5AsY8MP0HFy wx8f/iHByAU5drkjbvPVqr56iP21pu6u6Q7itibbUlHyP3FYyfx6tdO2WmIJUuPU vVB7p1SLojzWwxh6HnHuWWkchc+dkPLHG2xxes8Hi2OTTHehcrhvQvS+FwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFC1NmszKTAEm57GX1hxMItedk0FmMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvTFUyYXpNcE1BU2Juc1pmV0hFd2kxNTJUUVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtUN0D BAUtUMADBACyF7kDBADCPhIwDQYJKoZIhvcNAQELBQADggEBAIMDJF5epqicpfkZ 4+/S5/9UWafo7GfP/cHe3J70cT1INO8DxebO8RmMMK55KKoWPTO6CaKERwOzWpZP XrZutxE28OQFTgjZdWonx2TPkpeW4eB/W2CoEsdWkGXyZXjIwx1KtzVkQ28oo/AD WxHe9cZKwqsnt5wnWiR1hNR3o4ax/eExLmKdaEHJvExfBIHsCdT36EE4ksrtjJ0b RaU1Ec82oLg6hGFpqNxNOBp9aZ2rWLd5+BacmIn8/TUUQR2/x80qAWedN+Qvw/DD WE/A/Bm2A+F8tzR5jiJPsstSJ0G5VLs09+11JAi/bnqPsWHmr96gRauUsPuZ1CKG Qb68QrE= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:05 2026 by rpki-client