This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lLEblpGCJ2241r4W9Ji2hFVdc64.roa File: lLEblpGCJ2241r4W9Ji2hFVdc64.roa (raw, json) Hash identifier: qNO4IJaXH6rwQAiMPs/rZElF0NQU3Bru/i89iBxAD+Y= Subject key identifier: 94:B1:1B:96:91:82:27:6D:B8:D6:BE:16:F4:98:B6:84:55:5D:73:AE Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019AE4D6BA1F067BBD5006E0C0BCB7956503 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lLEblpGCJ2241r4W9Ji2hFVdc64.roa Signing time: Wed 03 Dec 2025 15:31:08 +0000 ROA not before: Wed 03 Dec 2025 15:31:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.116.228.0/22 maxlen: 24 212.116.228.0/23 maxlen: 23 212.116.229.0/24 maxlen: 24 212.116.236.0/24 maxlen: 24 212.116.237.0/24 maxlen: 24 212.116.238.0/23 maxlen: 24 212.116.240.0/24 maxlen: 24 212.116.243.0/24 maxlen: 24 212.116.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:d6:ba:1f:06:7b:bd:50:06:e0:c0:bc:b7:95:65:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Dec 3 15:31:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94b11b969182276db8d6be16f498b684555d73ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:99:6c:79:6d:78:84:18:09:19:70:70:42: a7:ad:29:b2:e4:47:c2:53:e6:3d:18:d7:f4:65:3f: 1b:84:ba:70:4f:34:55:ca:fb:a0:a2:f1:b9:f5:ee: 37:3f:ad:a7:56:c7:a4:79:38:d3:9d:d0:61:ef:bf: 37:1d:69:d2:1d:fb:4d:ea:d5:cd:87:03:e6:2c:9d: dd:33:31:58:6d:73:ec:a9:8f:47:de:0e:4a:c5:fd: 43:1c:e0:3d:bf:a7:44:ef:80:c8:94:27:54:44:ef: 1a:0c:3a:51:43:49:a6:ef:d8:c6:f9:f7:90:e9:5a: 57:a2:0b:38:d0:be:dc:cf:dd:f1:b2:c6:84:df:07: 80:06:9e:bd:a8:15:cc:0a:19:93:e8:c8:d8:2f:be: f8:97:04:34:36:e8:67:81:cd:3e:c3:4d:ce:78:9a: dd:ab:e1:09:a8:b3:da:1d:e9:4b:1a:c8:9b:e0:1d: b2:2d:56:91:21:0b:31:4a:b0:53:41:26:8e:8d:1f: 24:c8:55:2f:e3:13:e7:b6:59:6c:6b:ea:6e:02:ae: 8e:d4:70:d1:9b:f3:92:b4:f9:59:e9:09:b7:93:7a: cb:22:8c:11:d9:34:a7:40:0f:ec:54:b4:99:d3:73: b6:2d:36:35:d6:80:6d:ea:8d:45:78:83:fe:82:6c: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:1B:96:91:82:27:6D:B8:D6:BE:16:F4:98:B6:84:55:5D:73:AE X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lLEblpGCJ2241r4W9Ji2hFVdc64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.228.0/22 212.116.236.0-212.116.240.255 212.116.243.0-212.116.244.255 Signature Algorithm: sha256WithRSAEncryption 7d:96:d8:7b:05:63:4f:2a:54:e9:38:ae:35:e6:bd:6a:2b:bd: eb:4f:09:36:7b:57:81:a9:ac:94:3d:33:8f:8f:bd:f4:e3:67: e5:fd:ff:ae:30:e5:fa:c0:2c:9b:3e:93:48:7d:c8:81:eb:c7: 84:df:38:62:22:c7:f3:7b:40:05:5d:58:b9:9a:17:61:47:4d: 30:d8:31:7e:dc:18:80:3d:64:6c:51:a3:b7:85:0f:92:33:54: e2:0a:b6:76:e5:da:ab:bf:7f:e4:57:37:55:84:94:2b:7a:21: 52:42:77:5f:dd:9f:ad:0e:c3:08:94:8c:f8:d2:de:98:31:1a: a7:4e:3e:d5:a6:03:db:35:f3:a3:e4:f3:fe:e1:cf:02:18:c8: 93:6f:70:ad:31:c5:7f:1c:79:5a:58:72:41:46:c4:58:25:30: 90:92:64:ea:2a:f0:1d:4c:36:c6:91:fb:d3:2c:85:5f:37:5c: 0a:68:eb:ef:b8:13:33:21:0f:c8:ad:bb:b0:29:10:a8:c3:75: fa:ce:1c:51:84:44:e9:5c:b5:ab:58:fc:67:d0:a9:7f:cf:48: b0:0f:ec:74:6b:c5:4a:47:57:93:e1:3c:c4:03:26:9c:8a:8d: 72:fe:57:9e:d4:7c:85:4f:7e:20:39:b5:14:98:80:a1:ac:7e: 4a:b0:53:e1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrk1rofBnu9UAbgwLy3lWUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMjAzMTUzMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGIxMWI5NjkxODIyNzZkYjhkNmJlMTZmNDk4YjY4NDU1NWQ3M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jGZbHlteIQYCRlwcEKnrSmy5EfC U+Y9GNf0ZT8bhLpwTzRVyvugovG59e43P62nVsekeTjTndBh7783HWnSHftN6tXN hwPmLJ3dMzFYbXPsqY9H3g5Kxf1DHOA9v6dE74DIlCdURO8aDDpRQ0mm79jG+feQ 6VpXogs40L7cz93xssaE3weABp69qBXMChmT6MjYL774lwQ0Nuhngc0+w03OeJrd q+EJqLPaHelLGsib4B2yLVaRIQsxSrBTQSaOjR8kyFUv4xPntllsa+puAq6O1HDR m/OStPlZ6Qm3k3rLIowR2TSnQA/sVLSZ03O2LTY11oBt6o1FeIP+gmw50wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJSxG5aRgidtuNa+FvSYtoRVXXOuMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvbExFYmxwR0NKMjI0MXI0VzlKaTJoRlZkYzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQC1HTkMAwD BALUdOwDBADUdPAwDAMEANR08wMEANR09DANBgkqhkiG9w0BAQsFAAOCAQEAfZbY ewVjTypU6TiuNea9aiu9608JNntXgamslD0zj4+99ONn5f3/rjDl+sAsmz6TSH3I gevHhN84YiLH83tABV1YuZoXYUdNMNgxftwYgD1kbFGjt4UPkjNU4gq2duXaq79/ 5Fc3VYSUK3ohUkJ3X92frQ7DCJSM+NLemDEap04+1aYD2zXzo+Tz/uHPAhjIk29w rTHFfxx5WlhyQUbEWCUwkJJk6irwHUw2xpH70yyFXzdcCmjr77gTMyEPyK27sCkQ qMN1+s4cUYRE6Vy1q1j8Z9Cpf89IsA/sdGvFSkdXk+E8xAMmnIqNcv5XntR8hU9+ IDm1FJiAoax+SrBT4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:37 2025 by rpki-client