This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/llsqy-7pM-tNdAJNt-bwZRhO6Wg.roa File: llsqy-7pM-tNdAJNt-bwZRhO6Wg.roa (raw, json) Hash identifier: eLssT8xJb29om9Cu43JpK9Q0r8uQslZ3Kt/B498Si6c= Subject key identifier: 96:5B:2A:CB:EE:E9:33:EB:4D:74:02:4D:B7:E6:F0:65:18:4E:E9:68 Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b Certificate serial: 019B791078404DA941D9418AED317B0CA0A0 Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/llsqy-7pM-tNdAJNt-bwZRhO6Wg.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210246 IP address blocks: 109.196.32.0/21 maxlen: 32 109.196.41.0/24 maxlen: 32 109.196.43.0/24 maxlen: 32 109.196.44.0/24 maxlen: 32 109.196.46.0/23 maxlen: 32 193.31.76.0/22 maxlen: 32 2a0d:6040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:78:40:4d:a9:41:d9:41:8a:ed:31:7b:0c:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=965b2acbeee933eb4d74024db7e6f065184ee968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:8d:4c:5d:37:98:3a:68:22:fd:c6:94:da: 03:0f:25:5c:bd:47:78:56:66:02:2f:90:a3:94:00: 03:1a:6e:3c:cb:94:8e:f7:50:dd:cd:d1:46:3a:ff: b9:f8:77:6d:7a:1e:f5:07:93:2f:9b:e8:07:18:5e: 49:df:01:85:a7:9b:27:6b:af:b5:0b:de:95:0a:9d: 51:ed:66:d4:e5:01:1d:02:cd:24:d7:bf:46:32:87: c2:1a:cc:07:9b:7b:5e:cc:02:a4:65:8e:37:2f:c8: b8:91:2a:f2:17:40:0e:28:91:e5:79:0c:87:5d:6c: f8:0b:7e:cd:cb:e3:b9:e2:80:bd:8e:67:23:55:a4: db:d2:dc:31:4f:7b:30:e1:80:5a:f4:6a:14:95:f9: 11:3c:d8:f7:d7:4b:40:76:1e:45:10:1c:2c:d4:9b: 6c:c5:27:52:19:73:e1:7c:a3:88:64:7b:7f:d3:e4: 0a:13:14:8f:e7:a1:90:23:69:3a:b4:82:3a:b3:f7: d2:4c:c3:df:51:47:74:6c:05:94:0a:63:c5:4c:51: bd:5e:10:09:a1:4b:64:49:20:9e:01:c8:2d:fb:dc: c8:92:e1:fe:5b:aa:e2:7e:4d:ae:c7:7c:bf:8f:6e: ce:71:f9:cf:9c:6d:57:27:c1:8b:66:89:04:97:55: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5B:2A:CB:EE:E9:33:EB:4D:74:02:4D:B7:E6:F0:65:18:4E:E9:68 X509v3 Authority Key Identifier: keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/llsqy-7pM-tNdAJNt-bwZRhO6Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.196.32.0/21 109.196.41.0/24 109.196.43.0-109.196.44.255 109.196.46.0/23 193.31.76.0/22 IPv6: 2a0d:6040::/29 Signature Algorithm: sha256WithRSAEncryption 16:05:6b:45:cf:3c:18:5b:f7:21:44:5b:fc:9f:3b:5c:eb:da: fc:51:60:74:3c:65:ba:eb:c2:37:96:3a:9b:ca:91:c0:4d:8e: 15:cd:00:6a:2a:54:fb:2b:e1:5f:c3:d3:ac:ca:eb:22:d4:c1: 6f:48:e5:a3:ea:32:e1:2a:fd:6e:25:17:98:28:59:eb:fb:24: 17:45:6f:93:86:db:6f:81:76:19:89:7a:9f:04:ba:db:3a:4c: 0e:b5:d1:9e:c7:05:e0:3e:ef:68:57:0b:65:91:64:ca:80:82: 6a:68:ee:f6:73:20:ba:c6:f9:20:19:6e:d5:d4:61:35:a0:ca: 75:a0:1d:46:ad:0f:6f:76:28:59:5b:07:88:7c:7d:65:26:f3: f3:13:77:4e:c7:e0:a9:a6:a7:f3:54:e0:c3:dc:d3:2f:c1:1e: 1f:9b:a0:8b:60:8e:b5:b3:3e:0d:6f:0f:ad:4a:e0:f0:f7:b9: 14:64:86:70:e4:dd:3f:52:52:72:ad:b2:f4:cc:a4:c3:23:a8: 14:40:71:f7:d9:2d:03:43:a0:01:80:6f:e3:a2:f9:07:2c:da: 0b:81:ab:22:c4:1f:d3:af:f9:29:65:03:7b:93:a3:92:df:70: 63:98:a6:1f:b4:fe:a2:11:7d:fd:6d:72:91:d6:c2:21:c3:96: e8:96:19:b9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt5EHhATalB2UGK7TF7DKCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YjMzZTllM2M5MzJmN2E1NDJlYjAyMTA1NmNlOTRiMWU4 YjhmMGIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjViMmFjYmVlZTkzM2ViNGQ3NDAyNGRiN2U2ZjA2NTE4NGVlOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcGNTF03mDpoIv3GlNoDDyVcvUd4 VmYCL5CjlAADGm48y5SO91DdzdFGOv+5+Hdteh71B5Mvm+gHGF5J3wGFp5sna6+1 C96VCp1R7WbU5QEdAs0k179GMofCGswHm3tezAKkZY43L8i4kSryF0AOKJHleQyH XWz4C37Ny+O54oC9jmcjVaTb0twxT3sw4YBa9GoUlfkRPNj310tAdh5FEBws1Jts xSdSGXPhfKOIZHt/0+QKExSP56GQI2k6tII6s/fSTMPfUUd0bAWUCmPFTFG9XhAJ oUtkSSCeAcgt+9zIkuH+W6rifk2ux3y/j27OcfnPnG1XJ8GLZokEl1VIRQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFJZbKsvu6TPrTXQCTbfm8GUYTuloMB8GA1UdIwQY MBaAFOezPp48ky96VC6wIQVs6Usei48LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hNWExNzUtODA5Mi00YzYzLWIwMzgt MmM0NDA2YjQ4OTQxLzEvbGxzcXktN3BNLXROZEFKTnQtYndaUmhPNldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hNWExNzUtODA5Mi00YzYzLWIwMzgtMmM0NDA2YjQ4OTQx LzEvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDbcQgAwQA bcQpMAwDBABtxCsDBABtxCwDBAFtxC4DBALBH0wwDQQCAAIwBwMFAyoNYEAwDQYJ KoZIhvcNAQELBQADggEBABYFa0XPPBhb9yFEW/yfO1zr2vxRYHQ8ZbrrwjeWOpvK kcBNjhXNAGoqVPsr4V/D06zK6yLUwW9I5aPqMuEq/W4lF5goWev7JBdFb5OG22+B dhmJep8Euts6TA610Z7HBeA+72hXC2WRZMqAgmpo7vZzILrG+SAZbtXUYTWgynWg HUatD292KFlbB4h8fWUm8/MTd07H4Kmmp/NU4MPc0y/BHh+boItgjrWzPg1vD61K 4PD3uRRkhnDk3T9SUnKtsvTMpMMjqBRAcffZLQNDoAGAb+Oi+Qcs2guBqyLEH9Ov +SllA3uTo5LfcGOYph+0/qIRff1tcpHWwiHDluiWGbk= -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:35 2026 by rpki-client