This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/LEPIREdkNINi3YsArD5Iqz6JZKw.roa File: LEPIREdkNINi3YsArD5Iqz6JZKw.roa (raw, json) Hash identifier: u5xGsEDr0cKb/8SFVnNCp/maWigXZl2skRgwHSiizuc= Subject key identifier: 2C:43:C8:44:47:64:34:83:62:DD:8B:00:AC:3E:48:AB:3E:89:64:AC Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1313A48AE44087C6F4816B510B3EEE Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/LEPIREdkNINi3YsArD5Iqz6JZKw.roa Signing time: Fri 02 Jan 2026 00:19:43 +0000 ROA not before: Fri 02 Jan 2026 00:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 89.185.78.0/24 maxlen: 24 92.240.201.0/24 maxlen: 24 92.240.205.0/24 maxlen: 24 92.240.214.0/24 maxlen: 24 92.240.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:13:a4:8a:e4:40:87:c6:f4:81:6b:51:0b:3e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c43c8444764348362dd8b00ac3e48ab3e8964ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:92:03:59:de:d3:30:08:0c:30:c9:a0:9f: d1:09:04:33:b7:7f:e5:9b:bc:2e:97:59:25:c5:b2: a6:7f:4c:fb:89:e2:fd:5e:a6:6f:89:1f:26:23:b3: ef:a7:ed:21:50:06:29:13:d3:41:d5:10:61:24:ad: f5:61:2e:7e:8d:db:cd:f1:c4:89:67:82:e0:4e:18: 88:27:50:b3:91:60:10:45:ff:a3:46:65:a5:0d:7f: cb:a9:1f:e4:c1:e6:84:c1:53:57:34:22:36:60:b6: df:fc:ef:26:8a:b7:28:68:4b:1d:ed:bb:e8:95:d4: 90:34:44:d7:c2:d4:6c:8b:07:9d:8b:07:d0:e9:63: a7:c9:9c:f8:9c:01:8e:30:b8:e4:ed:c6:b4:d0:42: d9:28:ab:aa:d6:c7:2e:f3:f7:fc:85:8f:a1:70:57: f4:56:aa:a9:00:6f:ef:ec:d2:df:6d:4e:ef:17:84: 0a:db:09:de:93:3d:4f:28:4e:0d:dc:05:94:e9:67: 60:df:f2:18:e1:85:89:cc:94:e1:63:06:ea:96:ca: a7:74:ef:b7:46:6a:83:9a:0d:ff:cb:a3:7c:37:30: 7e:d5:db:ed:15:e8:31:a3:7c:70:35:50:bd:58:70: 2f:95:95:a8:82:bf:21:33:83:49:94:1d:b3:a5:55: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:43:C8:44:47:64:34:83:62:DD:8B:00:AC:3E:48:AB:3E:89:64:AC X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/LEPIREdkNINi3YsArD5Iqz6JZKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.78.0/24 92.240.201.0/24 92.240.205.0/24 92.240.214.0/24 92.240.216.0/24 Signature Algorithm: sha256WithRSAEncryption 82:4f:18:5a:a1:a2:1b:f8:fc:50:1c:b9:55:d1:43:ac:01:21: 43:26:5b:0e:e4:23:ae:62:9a:5c:67:76:b7:42:83:88:d5:9d: cd:2f:8b:10:53:43:71:ec:1f:ec:0f:81:91:15:39:6b:d5:6c: 1b:47:28:4b:d7:a0:b0:c3:0f:38:ba:29:7e:5e:e7:39:28:7b: 11:b3:58:71:26:9a:b8:aa:3c:3e:f4:1d:e7:a9:d9:70:b9:6b: 18:81:65:ac:9e:df:1b:ff:7f:e5:94:23:fa:d1:9e:28:4d:0e: 24:50:a4:cf:a6:04:14:ba:04:b2:d9:ea:ec:8a:eb:7c:77:ce: 74:04:7d:4d:9b:83:d8:3f:6e:d3:f6:ee:12:a1:58:fc:74:76: 29:95:98:4d:f4:7a:3a:9c:16:58:18:5a:78:84:44:d5:cc:fe: 02:0e:90:ad:da:0b:a0:46:d8:0e:e2:90:f9:c7:92:d6:c5:e1: c7:42:53:b4:e6:e6:e5:a8:5a:7a:6a:b3:15:f9:53:77:04:42: 56:4e:3d:50:0a:f8:93:a7:a8:cd:8c:4e:44:68:aa:89:47:80: da:a6:09:f2:5a:6c:58:68:81:63:c8:a7:cd:45:7d:e3:00:60: d8:bb:a7:49:89:4b:c6:45:ad:ea:0c:73:0f:2d:4c:ec:11:c0: 11:36:62:1c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8ExOkiuRAh8b0gWtRCz7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzQzYzg0NDQ3NjQzNDgzNjJkZDhiMDBhYzNlNDhhYjNlODk2NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs2SA1ne0zAIDDDJoJ/RCQQzt3/l m7wul1klxbKmf0z7ieL9XqZviR8mI7Pvp+0hUAYpE9NB1RBhJK31YS5+jdvN8cSJ Z4LgThiIJ1CzkWAQRf+jRmWlDX/LqR/kweaEwVNXNCI2YLbf/O8mircoaEsd7bvo ldSQNETXwtRsiwediwfQ6WOnyZz4nAGOMLjk7ca00ELZKKuq1scu8/f8hY+hcFf0 VqqpAG/v7NLfbU7vF4QK2wnekz1PKE4N3AWU6Wdg3/IY4YWJzJThYwbqlsqndO+3 RmqDmg3/y6N8NzB+1dvtFegxo3xwNVC9WHAvlZWogr8hM4NJlB2zpVW3gQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCxDyERHZDSDYt2LAKw+SKs+iWSsMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvTEVQSVJFZGtOSU5pM1lzQXJENUlxejZKWkt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWblOAwQA XPDJAwQAXPDNAwQAXPDWAwQAXPDYMA0GCSqGSIb3DQEBCwUAA4IBAQCCTxhaoaIb +PxQHLlV0UOsASFDJlsO5COuYppcZ3a3QoOI1Z3NL4sQU0Nx7B/sD4GRFTlr1Wwb RyhL16Cwww84uil+Xuc5KHsRs1hxJpq4qjw+9B3nqdlwuWsYgWWsnt8b/3/llCP6 0Z4oTQ4kUKTPpgQUugSy2ersiut8d850BH1Nm4PYP27T9u4SoVj8dHYplZhN9Ho6 nBZYGFp4hETVzP4CDpCt2gugRtgO4pD5x5LWxeHHQlO05ublqFp6arMV+VN3BEJW Tj1QCviTp6jNjE5EaKqJR4DapgnyWmxYaIFjyKfNRX3jAGDYu6dJiUvGRa3qDHMP LUzsEcARNmIc -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:13 2026 by rpki-client