This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/lezVJNlI6-kd3L3t1xh0hHJs2bU.roa File: lezVJNlI6-kd3L3t1xh0hHJs2bU.roa (raw, json) Hash identifier: H0LxNuhxi2Mge+NMYs5i05JrSjImnlWFdy7LpDVv2XE= Subject key identifier: 95:EC:D5:24:D9:48:EB:E9:1D:DC:BD:ED:D7:18:74:84:72:6C:D9:B5 Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d Certificate serial: 019B79ED2F5E6DBB5D17B906804222C57206 Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/lezVJNlI6-kd3L3t1xh0hHJs2bU.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51815 IP address blocks: 62.102.148.0/23 maxlen: 23 62.102.151.0/24 maxlen: 24 78.108.48.0/21 maxlen: 21 91.190.136.0/21 maxlen: 21 176.56.240.0/20 maxlen: 20 185.170.180.0/22 maxlen: 22 185.204.144.0/22 maxlen: 22 2a00:1520::/32 maxlen: 32 2a02:2490::/32 maxlen: 32 2a0b:b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2f:5e:6d:bb:5d:17:b9:06:80:42:22:c5:72:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ecd524d948ebe91ddcbdedd7187484726cd9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:89:78:5e:a0:13:95:a9:ca:a9:67:fd:97: f5:0d:50:07:db:d9:25:45:de:4a:46:2f:34:8c:2f: bb:4d:98:74:f8:8f:09:5a:85:91:7a:fd:95:ae:ba: a5:0c:f5:32:44:18:3e:6b:0c:a0:79:75:31:35:eb: 38:b6:70:cd:65:23:e3:dd:29:24:4e:e6:09:d2:72: d0:f8:c8:98:fe:40:57:c5:ca:3a:21:af:ec:5b:f8: 6d:1d:38:01:fe:cc:7f:2b:8a:5e:66:01:49:b3:02: 89:59:0a:98:fa:d9:a1:2a:1c:68:25:c5:68:07:4e: 8d:a6:2f:bf:79:37:fd:f6:32:19:4f:c0:37:1c:9b: 48:a5:ee:ad:d8:16:2c:c4:69:48:36:88:84:65:56: 16:83:53:a1:35:25:ee:43:9a:33:4e:31:e7:4f:d7: a2:6a:89:89:6d:9f:6d:76:83:6d:8d:5b:a4:0f:12: dc:ff:4a:04:00:1e:a0:e4:70:5d:80:11:d5:d6:88: ae:e4:09:83:a8:b9:93:b7:87:3f:49:2c:c8:5e:41: 3b:1d:42:a3:98:d4:bb:62:07:f2:93:76:f7:d1:fe: 9a:58:6d:af:10:6f:ab:24:46:d2:55:72:10:89:d5: bf:58:e0:1f:00:7d:d0:9a:13:ad:83:f5:7b:a6:0c: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EC:D5:24:D9:48:EB:E9:1D:DC:BD:ED:D7:18:74:84:72:6C:D9:B5 X509v3 Authority Key Identifier: keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/lezVJNlI6-kd3L3t1xh0hHJs2bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.102.148.0/23 62.102.151.0/24 78.108.48.0/21 91.190.136.0/21 176.56.240.0/20 185.170.180.0/22 185.204.144.0/22 IPv6: 2a00:1520::/32 2a02:2490::/32 2a0b:b40::/29 Signature Algorithm: sha256WithRSAEncryption 7b:90:af:73:9f:46:34:a0:35:6d:0f:d9:9e:1e:62:a3:6e:b4: bc:cf:3f:88:99:a0:1b:ef:7a:45:0a:38:c4:64:f6:b4:53:29: 8c:60:9f:9e:ef:b7:bb:19:bc:0f:63:18:5b:a4:b1:16:48:90: c1:4b:93:65:2a:7d:de:cd:98:9c:c5:5a:01:40:15:dd:62:51: b9:40:96:e7:be:59:57:19:e7:22:bf:1e:e4:50:a0:2b:4f:bf: 0a:a4:31:e9:df:1f:33:24:93:7a:33:33:b5:e4:c2:5d:de:85: d6:81:49:fe:0f:62:8d:99:d8:a9:6e:f3:e2:c3:c1:d3:f3:be: 39:e0:35:26:2b:1f:d0:bf:fc:44:2e:cf:27:71:9a:5e:ec:93: ca:51:a5:52:a8:a7:83:82:10:6c:f6:98:42:90:12:c3:0b:eb: dd:48:5e:45:2c:bc:3b:37:ac:73:4e:d0:82:0d:5f:50:23:52: c5:47:aa:53:25:6f:15:ee:3e:8d:ce:36:3d:b1:02:8b:4d:ca: 70:2d:8b:ba:61:7f:d7:c8:86:58:b7:3d:a2:04:05:a1:d7:16: 60:17:6f:d5:4f:ad:af:5b:3b:19:fa:a4:57:c6:63:a1:ea:14: 50:0f:fb:28:a9:58:e0:aa:0b:c5:78:27:77:27:06:b9:1a:e5: d0:0d:c5:86 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt57S9ebbtdF7kGgEIixXIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw MTQxMmQwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWVjZDUyNGQ5NDhlYmU5MWRkY2JkZWRkNzE4NzQ4NDcyNmNkOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpeJeF6gE5Wpyqln/Zf1DVAH29kl Rd5KRi80jC+7TZh0+I8JWoWRev2VrrqlDPUyRBg+awygeXUxNes4tnDNZSPj3Skk TuYJ0nLQ+MiY/kBXxco6Ia/sW/htHTgB/sx/K4peZgFJswKJWQqY+tmhKhxoJcVo B06Npi+/eTf99jIZT8A3HJtIpe6t2BYsxGlINoiEZVYWg1OhNSXuQ5ozTjHnT9ei aomJbZ9tdoNtjVukDxLc/0oEAB6g5HBdgBHV1oiu5AmDqLmTt4c/SSzIXkE7HUKj mNS7Ygfyk3b30f6aWG2vEG+rJEbSVXIQidW/WOAfAH3QmhOtg/V7pgw7mQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJXs1STZSOvpHdy97dcYdIRybNm1MB8GA1UdIwQY MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt MDYxNjM5ODEyYzc0LzEvbGV6VkpObEk2LWtkM0wzdDF4aDBoSEpzMmJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0 LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAwBAIAATAqAwQBPmaUAwQA PmaXAwQDTmwwAwQDW76IAwQEsDjwAwQCuaq0AwQCucyQMBsEAgACMBUDBQAqABUg AwUAKgIkkAMFAyoLC0AwDQYJKoZIhvcNAQELBQADggEBAHuQr3OfRjSgNW0P2Z4e YqNutLzPP4iZoBvvekUKOMRk9rRTKYxgn57vt7sZvA9jGFuksRZIkMFLk2Uqfd7N mJzFWgFAFd1iUblAlue+WVcZ5yK/HuRQoCtPvwqkMenfHzMkk3ozM7Xkwl3ehdaB Sf4PYo2Z2Klu8+LDwdPzvjngNSYrH9C//EQuzydxml7sk8pRpVKop4OCEGz2mEKQ EsML691IXkUsvDs3rHNO0IINX1AjUsVHqlMlbxXuPo3ONj2xAotNynAti7phf9fI hli3PaIEBaHXFmAXb9VPra9bOxn6pFfGY6HqFFAP+yipWOCqC8V4J3cnBrka5dAN xYY= -----END CERTIFICATE-----Generated at Mon Jan 26 20:25:59 2026 by rpki-client