This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/LeESlSzWIvuQdTBNS-mk1tTyv7E.roa File: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (raw, json) Hash identifier: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE= Subject key identifier: 2D:E1:12:95:2C:D6:22:FB:90:75:30:4D:4B:E9:A4:D6:D4:F2:BF:B1 Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494 Certificate serial: 019B7A5A83E20C77910D990D4D9C391648AC Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/LeESlSzWIvuQdTBNS-mk1tTyv7E.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55293 IP address blocks: 85.187.128.0/19 maxlen: 24 114.129.128.0/19 maxlen: 24 185.52.148.0/22 maxlen: 24 185.62.136.0/22 maxlen: 24 185.132.4.0/22 maxlen: 24 185.133.20.0/22 maxlen: 24 185.141.188.0/22 maxlen: 24 185.143.44.0/22 maxlen: 24 185.146.20.0/22 maxlen: 24 185.146.28.0/22 maxlen: 24 185.148.44.0/22 maxlen: 24 185.148.128.0/22 maxlen: 24 185.149.112.0/22 maxlen: 24 185.151.48.0/22 maxlen: 24 185.160.65.0/24 maxlen: 24 185.160.66.0/23 maxlen: 24 185.166.145.0/24 maxlen: 24 185.166.146.0/23 maxlen: 24 185.168.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:83:e2:0c:77:91:0d:99:0d:4d:9c:39:16:48:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494 Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2de112952cd622fb9075304d4be9a4d6d4f2bfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:36:f5:16:ab:20:20:b7:2e:b5:9f:02:da: c1:ee:0e:dc:b3:e9:d3:5f:aa:4b:fb:cf:e8:f5:4c: 78:e2:e9:79:3c:2c:b9:dc:cd:dc:e9:f4:ab:54:ba: 5a:66:9f:b5:80:97:94:d5:4b:35:f5:14:54:c8:b1: 4c:ad:0d:f6:20:2f:80:e5:0c:73:43:e6:e9:53:69: 00:cc:d0:62:f8:78:e3:29:d3:11:c1:c9:0f:e6:a7: 94:6e:a8:d7:65:b0:19:09:41:95:cb:08:1f:4d:22: 27:0c:35:04:eb:5a:6f:9b:24:c6:10:e2:63:1e:a7: 6e:50:67:3a:df:d5:8b:7f:c1:93:ed:2a:a2:a0:2e: a1:21:c3:a9:9c:34:58:b6:33:64:1d:84:a0:72:86: af:12:a2:70:da:ae:17:81:6e:8d:9b:17:df:23:e6: de:87:0b:82:80:10:e5:7d:4c:8d:f2:f9:26:b7:23: 47:a2:c7:76:6e:d3:96:62:bf:6f:68:3c:46:f7:8a: bf:a9:84:b0:40:b2:f9:41:c7:59:27:1b:4e:96:f8: 54:b9:80:f6:af:65:61:19:04:a2:19:ad:db:ab:a3: f8:58:27:f2:d8:ac:11:07:3f:cf:36:eb:46:fc:1e: c0:bc:ae:91:fa:8a:ab:ae:d3:31:9e:49:6b:a5:db: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E1:12:95:2C:D6:22:FB:90:75:30:4D:4B:E9:A4:D6:D4:F2:BF:B1 X509v3 Authority Key Identifier: keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/LeESlSzWIvuQdTBNS-mk1tTyv7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.128.0/19 114.129.128.0/19 185.52.148.0/22 185.62.136.0/22 185.132.4.0/22 185.133.20.0/22 185.141.188.0/22 185.143.44.0/22 185.146.20.0/22 185.146.28.0/22 185.148.44.0/22 185.148.128.0/22 185.149.112.0/22 185.151.48.0/22 185.160.65.0-185.160.67.255 185.166.145.0-185.166.147.255 185.168.108.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:9d:2d:8b:a0:af:80:e8:33:44:38:7c:8c:6e:0c:0c:69:9e: cd:80:80:ae:d7:0c:cc:24:41:b5:f3:cd:96:70:3a:1a:a9:d7: 37:35:52:58:52:8f:05:23:a0:26:f2:19:01:d4:04:75:cf:75: fc:42:5f:81:be:cb:1a:50:96:73:eb:bf:57:4d:7d:09:c3:5b: a2:1b:7b:23:2b:b4:4f:8f:9f:a1:4b:97:36:2a:4c:3d:b3:85: c8:01:81:04:b6:a0:54:4a:19:4f:06:33:eb:92:bd:49:37:88: 13:f2:d1:ca:e5:c6:2f:7c:ee:42:ac:a4:39:e9:d1:1a:ee:d5: e6:83:0a:a1:db:9f:6e:c8:17:c1:ac:61:07:23:8b:ab:70:46: 73:cf:3f:b9:7b:86:f5:ec:8c:88:a0:09:df:d4:1a:39:ee:85: f3:d8:26:bc:2d:95:53:32:bc:53:5d:7c:41:76:85:52:3c:e3: 13:e3:22:09:f5:fb:22:17:e8:c7:95:43:f4:2b:88:bb:43:23: 74:f3:dd:05:6e:98:7d:0e:ca:26:db:4c:c0:c4:c6:9c:1b:d2: 51:0d:0c:4a:d0:bf:b7:eb:1a:68:1e:da:7e:1c:c9:e6:83:3f: c1:d8:d7:13:c5:44:32:cd:79:2b:80:b3:73:0d:60:60:ed:42: 1a:ee:9a:53 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt6WoPiDHeRDZkNTZw5FkisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz NTg0OTQwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGUxMTI5NTJjZDYyMmZiOTA3NTMwNGQ0YmU5YTRkNmQ0ZjJiZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBw29RarICC3LrWfAtrB7g7cs+nT X6pL+8/o9Ux44ul5PCy53M3c6fSrVLpaZp+1gJeU1Us19RRUyLFMrQ32IC+A5Qxz Q+bpU2kAzNBi+HjjKdMRwckP5qeUbqjXZbAZCUGVywgfTSInDDUE61pvmyTGEOJj HqduUGc639WLf8GT7SqioC6hIcOpnDRYtjNkHYSgcoavEqJw2q4XgW6NmxffI+be hwuCgBDlfUyN8vkmtyNHosd2btOWYr9vaDxG94q/qYSwQLL5QcdZJxtOlvhUuYD2 r2VhGQSiGa3bq6P4WCfy2KwRBz/PNutG/B7AvK6R+oqrrtMxnklrpduYsQIDAQAB o4ICezCCAncwHQYDVR0OBBYEFC3hEpUs1iL7kHUwTUvppNbU8r+xMB8GA1UdIwQY MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt YWYzZjc5NGFlNjA3LzEvTGVFU2xTeldJdnVRZFRCTlMtbWsxdFR5djdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3 LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAVVu4AD BAVygYADBAK5NJQDBAK5PogDBAK5hAQDBAK5hRQDBAK5jbwDBAK5jywDBAK5khQD BAK5khwDBAK5lCwDBAK5lIADBAK5lXADBAK5lzAwDAMEALmgQQMEArmgQDAMAwQA uaaRAwQCuaaQAwQCuahsMA0GCSqGSIb3DQEBCwUAA4IBAQAKnS2LoK+A6DNEOHyM bgwMaZ7NgICu1wzMJEG1882WcDoaqdc3NVJYUo8FI6Am8hkB1AR1z3X8Ql+Bvssa UJZz679XTX0Jw1uiG3sjK7RPj5+hS5c2Kkw9s4XIAYEEtqBUShlPBjPrkr1JN4gT 8tHK5cYvfO5CrKQ56dEa7tXmgwqh259uyBfBrGEHI4urcEZzzz+5e4b17IyIoAnf 1Bo57oXz2Ca8LZVTMrxTXXxBdoVSPOMT4yIJ9fsiF+jHlUP0K4i7QyN0890Fbph9 Dsom20zAxMacG9JRDQxK0L+36xpoHtp+HMnmgz/B2NcTxUQyzXkrgLNzDWBg7UIa 7ppT -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:08 2026 by rpki-client