This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/lWNGZyoYxMMDcNyLWjAJGitLlFk.roa File: lWNGZyoYxMMDcNyLWjAJGitLlFk.roa (raw, json) Hash identifier: 6BoUCdn7LLlUMhRVmjkftBgzwA47YP9UtF03OcYu1VA= Subject key identifier: 95:63:46:67:2A:18:C4:C3:03:70:DC:8B:5A:30:09:1A:2B:4B:94:59 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019AA59D379CCE95D2273F5F70B81A69BB3A Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/lWNGZyoYxMMDcNyLWjAJGitLlFk.roa Signing time: Fri 21 Nov 2025 08:52:15 +0000 ROA not before: Fri 21 Nov 2025 08:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58065 IP address blocks: 5.157.6.0/24 maxlen: 24 5.157.11.0/24 maxlen: 24 5.157.19.0/24 maxlen: 24 5.157.21.0/24 maxlen: 24 5.157.23.0/24 maxlen: 24 5.157.24.0/24 maxlen: 24 5.157.26.0/24 maxlen: 24 5.157.29.0/24 maxlen: 24 5.157.32.0/24 maxlen: 24 5.157.33.0/24 maxlen: 24 5.157.34.0/24 maxlen: 24 5.157.37.0/24 maxlen: 24 5.157.43.0/24 maxlen: 24 5.157.51.0/24 maxlen: 24 5.157.53.0/24 maxlen: 24 5.157.55.0/24 maxlen: 24 5.157.57.0/24 maxlen: 24 23.92.115.0/24 maxlen: 24 23.92.116.0/24 maxlen: 24 23.92.126.0/24 maxlen: 24 37.72.186.0/24 maxlen: 24 104.160.3.0/24 maxlen: 24 104.160.11.0/24 maxlen: 24 104.160.16.0/24 maxlen: 24 104.160.17.0/24 maxlen: 24 107.150.64.0/24 maxlen: 24 107.150.65.0/24 maxlen: 24 107.150.67.0/24 maxlen: 24 107.150.69.0/24 maxlen: 24 107.150.70.0/24 maxlen: 24 107.150.71.0/24 maxlen: 24 107.150.88.0/24 maxlen: 24 107.150.89.0/24 maxlen: 24 107.150.90.0/24 maxlen: 24 107.150.91.0/24 maxlen: 24 130.185.153.0/24 maxlen: 24 151.237.188.0/24 maxlen: 24 162.212.168.0/24 maxlen: 24 162.212.169.0/24 maxlen: 24 162.212.170.0/24 maxlen: 24 162.212.171.0/24 maxlen: 24 162.212.172.0/24 maxlen: 24 162.212.173.0/24 maxlen: 24 162.212.174.0/24 maxlen: 24 162.212.175.0/24 maxlen: 24 2a02:5740:4::/48 maxlen: 48 2a02:5740:9::/48 maxlen: 48 2a02:5740:14::/48 maxlen: 48 2a02:5740:24::/48 maxlen: 48 2a02:5740:26::/48 maxlen: 48 2a02:5740:153::/48 maxlen: 48 2a02:5740:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9d:37:9c:ce:95:d2:27:3f:5f:70:b8:1a:69:bb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Nov 21 08:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=956346672a18c4c30370dc8b5a30091a2b4b9459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:5b:6b:61:99:de:1e:69:1f:36:80:fa:c1: 4a:42:4d:ae:0a:68:58:27:a7:4b:c6:93:71:73:95: aa:49:50:fd:14:1a:5f:b8:ee:50:89:4a:59:dd:14: 6a:da:39:da:7f:d7:dc:40:12:46:53:a7:71:2d:9f: a0:e7:5f:7f:10:a7:d6:67:5f:a5:14:b7:42:32:c0: 49:c1:37:fc:f5:2b:e6:84:dc:d0:36:c3:4f:48:53: 16:fa:14:90:5c:58:78:30:6e:1b:05:c6:ca:bb:07: 58:e3:e0:6c:86:74:17:07:71:d9:d0:31:2a:35:cb: 6f:e4:f5:c7:50:c0:50:6d:08:33:18:6c:b0:e2:43: d9:7e:1d:c3:e4:65:24:b1:b0:f4:b2:a8:ac:bb:5d: d0:5f:a9:2a:f2:4e:75:bb:67:a5:20:ea:85:22:4f: 09:8a:83:0b:a8:95:97:72:b7:4f:8e:d4:c7:67:83: f6:fa:79:8f:52:75:1e:f0:07:7f:e3:0c:39:5a:7e: 18:74:b1:7e:19:95:6d:8b:88:84:75:5d:94:d5:2c: 89:d4:03:cd:81:6d:02:7f:74:7e:69:a5:d1:6e:24: 2b:ae:e2:f0:90:75:88:64:d4:59:e0:25:46:8c:84: 31:76:44:42:cc:46:41:3b:18:6d:bc:29:d9:2b:7c: 48:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:63:46:67:2A:18:C4:C3:03:70:DC:8B:5A:30:09:1A:2B:4B:94:59 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/lWNGZyoYxMMDcNyLWjAJGitLlFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.6.0/24 5.157.11.0/24 5.157.19.0/24 5.157.21.0/24 5.157.23.0-5.157.24.255 5.157.26.0/24 5.157.29.0/24 5.157.32.0-5.157.34.255 5.157.37.0/24 5.157.43.0/24 5.157.51.0/24 5.157.53.0/24 5.157.55.0/24 5.157.57.0/24 23.92.115.0-23.92.116.255 23.92.126.0/24 37.72.186.0/24 104.160.3.0/24 104.160.11.0/24 104.160.16.0/23 107.150.64.0/23 107.150.67.0/24 107.150.69.0-107.150.71.255 107.150.88.0/22 130.185.153.0/24 151.237.188.0/24 162.212.168.0/21 IPv6: 2a02:5740:4::/48 2a02:5740:9::/48 2a02:5740:14::/48 2a02:5740:24::/48 2a02:5740:26::/48 2a02:5740:153::/48 2a02:5740:200::/48 Signature Algorithm: sha256WithRSAEncryption 43:82:76:1b:fe:ee:e5:4e:7e:e0:74:56:54:5a:88:52:63:b5: 32:b6:28:ba:e0:60:c6:48:b5:20:12:ec:8c:57:26:11:a4:95: 23:70:5e:86:3c:55:bb:41:83:19:d4:b7:53:eb:f4:9d:64:fe: 20:15:21:5a:39:9e:9c:6f:99:ae:9e:47:56:32:b1:1e:9b:9a: 29:29:83:7f:0c:31:37:67:b7:ab:4b:e6:68:7d:f1:32:83:1e: 8f:5f:e0:e4:a4:d4:56:fc:6d:f6:3a:de:56:2e:d0:70:4d:5f: 7c:a0:41:32:32:59:d4:7c:c7:06:ec:d2:52:31:c3:98:8a:d6: 4a:6e:c5:51:bd:8c:c3:b6:87:74:78:96:e8:1c:f1:d7:68:ac: 6d:1c:08:66:4c:17:27:b2:37:47:37:77:70:9e:03:55:25:cd: 0b:0d:28:7a:77:64:e9:26:d5:d4:0c:ff:62:e0:73:58:fe:82: ff:82:98:b4:88:2e:83:09:1a:69:a0:d8:40:dc:94:7d:b9:d8: ec:c8:35:27:ce:fe:d6:4c:79:70:e5:70:51:87:c4:70:01:c8: 62:07:57:9a:dc:b0:83:98:b8:51:9f:46:e8:27:35:75:94:f0: 1d:07:60:45:8f:94:63:aa:32:eb:89:c6:4c:ac:45:63:fd:9a: f6:86:c6:6a -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISAZqlnTeczpXSJz9fcLgaabs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMTIxMDg1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTYzNDY2NzJhMThjNGMzMDM3MGRjOGI1YTMwMDkxYTJiNGI5NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9ba2GZ3h5pHzaA+sFKQk2uCmhY J6dLxpNxc5WqSVD9FBpfuO5QiUpZ3RRq2jnaf9fcQBJGU6dxLZ+g519/EKfWZ1+l FLdCMsBJwTf89SvmhNzQNsNPSFMW+hSQXFh4MG4bBcbKuwdY4+BshnQXB3HZ0DEq Nctv5PXHUMBQbQgzGGyw4kPZfh3D5GUksbD0sqisu13QX6kq8k51u2elIOqFIk8J ioMLqJWXcrdPjtTHZ4P2+nmPUnUe8Ad/4ww5Wn4YdLF+GZVti4iEdV2U1SyJ1APN gW0Cf3R+aaXRbiQrruLwkHWIZNRZ4CVGjIQxdkRCzEZBOxhtvCnZK3xIfQIDAQAB o4IDFDCCAxAwHQYDVR0OBBYEFJVjRmcqGMTDA3Dci1owCRorS5RZMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvbFdOR1p5b1l4TU1EY055TFdqQUpHaXRMbEZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKAYIKwYBBQUHAQcBAf8EggEXMIIBEzCByQQCAAEwgcID BAAFnQYDBAAFnQsDBAAFnRMDBAAFnRUwDAMEAAWdFwMEAAWdGAMEAAWdGgMEAAWd HTAMAwQFBZ0gAwQABZ0iAwQABZ0lAwQABZ0rAwQABZ0zAwQABZ01AwQABZ03AwQA BZ05MAwDBAAXXHMDBAAXXHQDBAAXXH4DBAAlSLoDBABooAMDBABooAsDBAFooBAD BAFrlkADBABrlkMwDAMEAGuWRQMEA2uWQAMEAmuWWAMEAIK5mQMEAJftvAMEA6LU qDBFBAIAAjA/AwcAKgJXQAAEAwcAKgJXQAAJAwcAKgJXQAAUAwcAKgJXQAAkAwcA KgJXQAAmAwcAKgJXQAFTAwcAKgJXQAIAMA0GCSqGSIb3DQEBCwUAA4IBAQBDgnYb /u7lTn7gdFZUWohSY7Uytii64GDGSLUgEuyMVyYRpJUjcF6GPFW7QYMZ1LdT6/Sd ZP4gFSFaOZ6cb5munkdWMrEem5opKYN/DDE3Z7erS+ZoffEygx6PX+DkpNRW/G32 Ot5WLtBwTV98oEEyMlnUfMcG7NJSMcOYitZKbsVRvYzDtod0eJboHPHXaKxtHAhm TBcnsjdHN3dwngNVJc0LDSh6d2TpJtXUDP9i4HNY/oL/gpi0iC6DCRppoNhA3JR9 udjsyDUnzv7WTHlw5XBRh8RwAchiB1ea3LCDmLhRn0boJzV1lPAdB2BFj5RjqjLr icZMrEVj/Zr2hsZq -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:12 2025 by rpki-client