This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/ls_pfB1emeC5kDQJS5D4fS0UUD8.roa File: ls_pfB1emeC5kDQJS5D4fS0UUD8.roa (raw, json) Hash identifier: dFDXE/Mf/Q4poZnZDloik8VsZTOJBNgsvSZmu1fNmfs= Subject key identifier: 96:CF:E9:7C:1D:5E:99:E0:B9:90:34:09:4B:90:F8:7D:2D:14:50:3F Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019B945506D99022E5793FEAFA42A0957AA0 Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/ls_pfB1emeC5kDQJS5D4fS0UUD8.roa Signing time: Tue 06 Jan 2026 17:22:38 +0000 ROA not before: Tue 06 Jan 2026 17:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 79.72.0.0/20 maxlen: 20 79.72.16.0/22 maxlen: 22 79.72.20.0/23 maxlen: 23 79.72.24.0/21 maxlen: 21 79.72.32.0/22 maxlen: 24 79.72.40.0/21 maxlen: 21 79.72.48.0/20 maxlen: 20 79.72.64.0/19 maxlen: 19 79.76.0.0/20 maxlen: 20 79.76.16.0/23 maxlen: 23 79.76.18.0/23 maxlen: 23 79.76.20.0/24 maxlen: 24 79.76.24.0/21 maxlen: 21 79.76.32.0/19 maxlen: 19 79.76.96.0/19 maxlen: 19 80.225.64.0/20 maxlen: 20 80.225.80.0/20 maxlen: 20 80.225.160.0/21 maxlen: 21 80.225.168.0/23 maxlen: 23 80.225.170.0/23 maxlen: 23 80.225.172.0/23 maxlen: 23 80.225.174.0/23 maxlen: 23 80.225.176.0/23 maxlen: 23 80.225.178.0/23 maxlen: 23 80.225.184.0/21 maxlen: 21 80.225.192.0/18 maxlen: 18 81.208.160.0/20 maxlen: 20 81.208.188.0/22 maxlen: 22 82.70.224.0/20 maxlen: 20 82.70.248.0/22 maxlen: 22 84.8.64.0/21 maxlen: 21 84.8.72.0/23 maxlen: 23 84.8.74.0/23 maxlen: 23 84.8.76.0/23 maxlen: 23 84.8.78.0/23 maxlen: 23 84.8.80.0/23 maxlen: 23 84.8.88.0/23 maxlen: 23 84.8.96.0/19 maxlen: 19 84.8.128.0/20 maxlen: 20 84.8.144.0/20 maxlen: 20 84.8.224.0/21 maxlen: 21 84.8.232.0/23 maxlen: 23 84.8.234.0/23 maxlen: 23 84.8.238.0/23 maxlen: 23 84.8.240.0/23 maxlen: 23 84.8.242.0/23 maxlen: 23 84.8.248.0/21 maxlen: 21 84.235.160.0/19 maxlen: 19 84.235.192.0/23 maxlen: 23 84.235.198.0/23 maxlen: 23 84.235.200.0/21 maxlen: 21 84.235.208.0/20 maxlen: 20 84.235.224.0/20 maxlen: 20 84.235.240.0/20 maxlen: 20 89.168.0.0/21 maxlen: 21 89.168.16.0/20 maxlen: 20 89.168.32.0/19 maxlen: 19 89.168.64.0/18 maxlen: 18 92.4.64.0/19 maxlen: 19 92.4.128.0/19 maxlen: 19 92.4.160.0/20 maxlen: 20 92.4.176.0/20 maxlen: 20 92.4.192.0/21 maxlen: 21 92.4.232.0/23 maxlen: 23 92.4.235.0/24 maxlen: 24 92.4.236.0/24 maxlen: 24 92.4.237.0/24 maxlen: 24 92.4.238.0/24 maxlen: 24 92.4.239.0/24 maxlen: 24 92.4.240.0/20 maxlen: 20 92.5.0.0/17 maxlen: 17 92.5.128.0/18 maxlen: 18 92.5.192.0/19 maxlen: 19 92.5.224.0/20 maxlen: 20 92.5.240.0/21 maxlen: 21 92.5.248.0/22 maxlen: 22 92.5.254.0/24 maxlen: 24 92.5.255.0/24 maxlen: 24 130.110.0.0/20 maxlen: 20 130.110.16.0/21 maxlen: 21 130.110.24.0/22 maxlen: 22 130.110.28.0/23 maxlen: 23 130.110.32.0/19 maxlen: 19 130.110.64.0/19 maxlen: 19 130.110.96.0/19 maxlen: 19 130.110.192.0/24 maxlen: 24 130.110.206.0/24 maxlen: 24 130.110.207.0/24 maxlen: 24 130.110.208.0/24 maxlen: 24 130.110.209.0/24 maxlen: 24 130.110.210.0/24 maxlen: 24 130.110.211.0/24 maxlen: 24 130.110.212.0/24 maxlen: 24 130.110.213.0/24 maxlen: 24 130.110.214.0/24 maxlen: 24 130.110.215.0/24 maxlen: 24 130.110.216.0/24 maxlen: 24 130.110.218.0/24 maxlen: 24 130.110.219.0/24 maxlen: 24 130.110.220.0/24 maxlen: 24 130.110.221.0/24 maxlen: 24 130.110.222.0/24 maxlen: 24 130.110.223.0/24 maxlen: 24 130.110.224.0/21 maxlen: 21 130.110.232.0/22 maxlen: 22 130.110.236.0/23 maxlen: 23 130.110.238.0/24 maxlen: 24 130.110.239.0/24 maxlen: 24 130.110.240.0/20 maxlen: 20 134.98.64.0/23 maxlen: 23 134.98.128.0/19 maxlen: 24 134.98.192.0/19 maxlen: 19 134.98.224.0/23 maxlen: 23 134.98.248.0/21 maxlen: 21 141.253.96.0/19 maxlen: 19 141.253.192.0/20 maxlen: 20 141.253.208.0/22 maxlen: 22 141.253.212.0/23 maxlen: 23 141.253.214.0/24 maxlen: 24 141.253.215.0/24 maxlen: 24 141.253.216.0/21 maxlen: 21 145.241.96.0/21 maxlen: 21 145.241.104.0/21 maxlen: 24 145.241.112.0/20 maxlen: 20 145.241.144.0/21 maxlen: 21 145.241.152.0/21 maxlen: 21 145.241.160.0/20 maxlen: 20 145.241.176.0/24 maxlen: 24 145.241.177.0/24 maxlen: 24 145.241.178.0/23 maxlen: 23 145.241.180.0/23 maxlen: 23 145.241.182.0/24 maxlen: 24 145.241.183.0/24 maxlen: 24 145.241.184.0/21 maxlen: 21 145.241.192.0/18 maxlen: 18 213.35.96.0/19 maxlen: 19 217.142.128.0/19 maxlen: 19 217.142.160.0/21 maxlen: 21 217.142.168.0/23 maxlen: 23 217.142.170.0/23 maxlen: 23 217.142.172.0/23 maxlen: 23 217.142.174.0/23 maxlen: 23 217.142.176.0/23 maxlen: 23 217.142.178.0/23 maxlen: 23 217.142.184.0/21 maxlen: 21 217.142.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:55:06:d9:90:22:e5:79:3f:ea:fa:42:a0:95:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Jan 6 17:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96cfe97c1d5e99e0b99034094b90f87d2d14503f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:96:e1:3d:a4:ad:b5:ef:f9:e6:8b:fd:20: 3d:f2:97:e0:ea:da:8f:31:a7:c6:92:e7:fe:8b:26: 85:9d:84:bb:28:1a:6a:8e:92:66:99:41:c9:d0:72: d9:10:76:8a:29:95:d2:6b:64:42:26:96:45:27:f4: c4:05:d2:40:8a:fc:55:60:a5:61:5b:6b:81:f0:21: 62:0c:0a:aa:21:34:0b:7f:d1:2a:39:80:ec:0f:9d: bf:d7:96:95:fd:d6:9e:c3:94:47:2f:a2:b5:39:27: b3:8c:b8:76:7b:69:6e:ea:51:1a:43:f7:b4:26:93: 0d:22:20:17:e6:fc:46:b4:cd:c9:1a:b5:8d:2c:8c: 98:09:d0:d7:bf:b3:20:e0:73:de:d5:72:f4:b4:b8: 5a:34:7c:50:c2:93:18:08:fc:c0:3b:02:1f:b5:42: c4:e0:98:2d:49:d6:bb:57:c5:66:24:3d:ad:eb:26: f4:9d:31:66:3e:53:33:21:03:2d:c1:8e:2b:17:1a: 55:5a:07:91:38:bb:d8:bd:72:4e:b0:77:66:54:bd: 43:69:4a:ef:16:b3:c8:88:9d:9c:00:b5:a4:be:b7: f2:62:ce:52:af:ee:76:4e:22:87:79:e2:ae:2e:91: eb:97:fb:37:75:ce:78:42:df:a7:d7:94:c5:ea:f8: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CF:E9:7C:1D:5E:99:E0:B9:90:34:09:4B:90:F8:7D:2D:14:50:3F X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/ls_pfB1emeC5kDQJS5D4fS0UUD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.72.0.0-79.72.21.255 79.72.24.0-79.72.35.255 79.72.40.0-79.72.95.255 79.76.0.0-79.76.20.255 79.76.24.0-79.76.63.255 79.76.96.0/19 80.225.64.0/19 80.225.160.0-80.225.179.255 80.225.184.0-80.225.255.255 81.208.160.0/20 81.208.188.0/22 82.70.224.0/20 82.70.248.0/22 84.8.64.0-84.8.81.255 84.8.88.0/23 84.8.96.0-84.8.159.255 84.8.224.0-84.8.235.255 84.8.238.0-84.8.243.255 84.8.248.0/21 84.235.160.0-84.235.193.255 84.235.198.0-84.235.255.255 89.168.0.0/21 89.168.16.0-89.168.127.255 92.4.64.0/19 92.4.128.0-92.4.199.255 92.4.232.0/23 92.4.235.0-92.5.251.255 92.5.254.0/23 130.110.0.0-130.110.29.255 130.110.32.0-130.110.127.255 130.110.192.0/24 130.110.206.0-130.110.216.255 130.110.218.0-130.110.255.255 134.98.64.0/23 134.98.128.0/19 134.98.192.0-134.98.225.255 134.98.248.0/21 141.253.96.0/19 141.253.192.0/19 145.241.96.0/19 145.241.144.0-145.241.255.255 213.35.96.0/19 217.142.128.0-217.142.179.255 217.142.184.0/21 217.142.224.0/19 Signature Algorithm: sha256WithRSAEncryption 7e:41:5e:83:52:22:d3:ab:59:db:f2:98:8d:d2:8d:92:a4:15: 5d:e4:37:99:7b:a1:e1:9b:e6:ee:bb:65:36:fc:a5:23:49:80: 65:9f:46:f3:79:ad:85:7f:80:94:24:f4:4e:50:5c:60:ea:11: cb:74:40:16:96:33:39:06:a7:9c:a1:b1:e1:81:1f:e0:5f:37: 3c:f2:d2:fa:51:fb:93:00:f7:95:5f:a3:65:5d:1d:63:f1:7c: 17:2b:e3:d9:2b:b2:66:a6:07:b0:89:97:06:bf:8f:b0:cf:d8: c9:4e:23:05:ae:ff:2f:e2:95:e8:5d:99:ac:e6:84:73:19:6f: 19:9d:6d:85:78:7f:5e:ec:ab:67:9b:ec:e1:f3:78:55:2e:3e: b4:14:be:9e:69:ba:f4:82:cf:d3:0a:ee:30:e3:09:f0:ad:3e: c3:5d:01:8b:ee:e4:88:67:c0:49:2d:7a:f4:53:4c:89:30:76: 0c:88:e5:8a:72:38:b8:97:56:15:2b:50:81:6e:ac:c4:7a:d1: bd:c1:60:ce:a2:0d:b4:fe:28:f1:59:54:2c:2b:41:ed:c2:b2: f6:90:72:13:4c:db:b8:2f:20:6b:1e:7f:18:aa:e2:8c:4b:dd: 04:ba:42:91:80:35:7c:45:88:3c:1c:ad:92:66:a6:e2:19:59: 1a:bd:ca:09 -----BEGIN CERTIFICATE----- MIIGwDCCBaigAwIBAgISAZuUVQbZkCLleT/q+kKglXqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjYwMTA2MTcyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmNmZTk3YzFkNWU5OWUwYjk5MDM0MDk0YjkwZjg3ZDJkMTQ1MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLaW4T2krbXv+eaL/SA98pfg6tqP MafGkuf+iyaFnYS7KBpqjpJmmUHJ0HLZEHaKKZXSa2RCJpZFJ/TEBdJAivxVYKVh W2uB8CFiDAqqITQLf9EqOYDsD52/15aV/daew5RHL6K1OSezjLh2e2lu6lEaQ/e0 JpMNIiAX5vxGtM3JGrWNLIyYCdDXv7Mg4HPe1XL0tLhaNHxQwpMYCPzAOwIftULE 4JgtSda7V8VmJD2t6yb0nTFmPlMzIQMtwY4rFxpVWgeROLvYvXJOsHdmVL1DaUrv FrPIiJ2cALWkvrfyYs5Sr+52TiKHeeKuLpHrl/s3dc54Qt+n15TF6vixBQIDAQAB o4IDzDCCA8gwHQYDVR0OBBYEFJbP6XwdXpnguZA0CUuQ+H0tFFA/MB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvbHNfcGZCMWVtZUM1a0RRSlM1RDRmUzBVVUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB4AYIKwYBBQUHAQcBAf8EggHPMIIByzCCAccEAgABMIIB vzALAwMDT0gDBAFPSBQwDAMEA09IGAMEAk9IIDAMAwQDT0goAwQFT0hAMAsDAwJP TAMEAE9MFDAMAwQDT0wYAwQGT0wAAwQFT0xgAwQFUOFAMAwDBAVQ4aADBAJQ4bAw CwMEA1DhuAMDAVDgAwQEUdCgAwQCUdC8AwQEUkbgAwQCUkb4MAwDBAZUCEADBAFU CFADBAFUCFgwDAMEBVQIYAMEBVQIgDAMAwQFVAjgAwQCVAjoMAwDBAFUCO4DBAJU CPADBANUCPgwDAMEBVTroAMEAVTrwDALAwQBVOvGAwMCVOgDBANZqAAwDAMEBFmo EAMEB1moAAMEBVwEQDAMAwQHXASAAwQDXATAAwQBXAToMAwDBABcBOsDBAJcBfgD BAFcBf4wCwMDAYJuAwQBgm4cMAwDBAWCbiADBAeCbgADBACCbsAwDAMEAYJuzgME AIJu2DALAwQBgm7aAwMAgm4DBAGGYkADBAWGYoAwDAMEBoZiwAMEAYZi4AMEA4Zi +AMEBY39YAMEBY39wAMEBZHxYDALAwQEkfGQAwMBkfADBAXVI2AwDAMEB9mOgAME AtmOsAMEA9mOuAMEBdmO4DANBgkqhkiG9w0BAQsFAAOCAQEAfkFeg1Ii06tZ2/KY jdKNkqQVXeQ3mXuh4Zvm7rtlNvylI0mAZZ9G83mthX+AlCT0TlBcYOoRy3RAFpYz OQannKGx4YEf4F83PPLS+lH7kwD3lV+jZV0dY/F8Fyvj2SuyZqYHsImXBr+PsM/Y yU4jBa7/L+KV6F2ZrOaEcxlvGZ1thXh/XuyrZ5vs4fN4VS4+tBS+nmm69ILP0wru MOMJ8K0+w10Bi+7kiGfASS169FNMiTB2DIjlinI4uJdWFStQgW6sxHrRvcFgzqIN tP4o8VlULCtB7cKy9pByE0zbuC8gax5/GKrijEvdBLpCkYA1fEWIPBytkmam4hlZ Gr3KCQ== -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:55 2026 by rpki-client