This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/LL_AxmtYZZoPVDJOgngQ3xheZAg.roa File: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (raw, json) Hash identifier: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE= Subject key identifier: 2C:BF:C0:C6:6B:58:65:9A:0F:54:32:4E:82:78:10:DF:18:5E:64:08 Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Certificate serial: 019B77591EDDEFF903AE3187536144BCA7B1 Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/LL_AxmtYZZoPVDJOgngQ3xheZAg.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30742 IP address blocks: 2.59.32.0/22 maxlen: 24 2.59.33.0/24 maxlen: 24 2.59.34.0/24 maxlen: 24 2.59.35.0/24 maxlen: 24 80.245.132.0/22 maxlen: 24 80.245.136.0/21 maxlen: 24 82.198.192.0/19 maxlen: 24 176.118.180.0/22 maxlen: 24 176.118.180.0/24 maxlen: 24 176.118.181.0/24 maxlen: 24 176.118.182.0/24 maxlen: 24 176.118.183.0/24 maxlen: 24 185.43.24.0/22 maxlen: 24 185.48.224.0/22 maxlen: 24 185.106.184.0/22 maxlen: 24 185.115.80.0/22 maxlen: 24 185.139.112.0/22 maxlen: 24 192.145.112.0/22 maxlen: 24 193.176.72.0/22 maxlen: 24 194.146.0.0/22 maxlen: 24 2a01:9b60::/32 maxlen: 32 2a03:9980::/29 maxlen: 32 2a03:9980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:dd:ef:f9:03:ae:31:87:53:61:44:bc:a7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cbfc0c66b58659a0f54324e827810df185e6408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:a2:26:26:f4:ba:e4:c8:60:5a:fc:c8:d2: a3:20:aa:da:e2:96:ac:75:af:be:bc:42:09:23:dc: b9:76:e3:9a:bf:af:a4:d3:dc:2b:5a:2f:ad:9c:89: 8e:f0:04:0d:b0:44:3f:1f:b3:2a:24:0c:1f:2b:10: 14:49:3e:d9:8a:29:83:ba:d4:3a:27:ea:9c:7f:a3: a6:3e:1a:ac:eb:16:f1:85:30:32:e1:64:41:36:5e: ca:a5:a6:55:16:84:73:57:c2:5a:ea:39:da:c3:14: d1:cb:a3:ff:5f:11:56:dc:7d:cb:d7:52:04:1e:22: b8:a5:eb:87:1a:f1:5e:10:ea:05:47:2a:81:b9:d4: 2d:3e:bc:c9:2a:2b:6a:e5:ec:f0:61:29:41:24:04: 45:2f:39:23:af:bb:2e:f5:fd:83:e0:ad:4a:71:3d: 81:a2:d4:18:de:f4:29:88:1f:73:74:67:37:08:ff: fa:98:5e:0a:65:61:44:63:94:fb:6a:ab:f0:6a:a5: ee:51:b1:18:22:bb:3e:6b:31:08:9d:2f:e0:d6:ca: 33:35:9b:0b:d2:d8:af:d2:b2:6d:8a:2b:8c:6c:9c: 91:1f:f3:99:0b:a8:0c:f4:3d:7a:3d:44:bd:2c:63: 66:bf:03:7c:07:ab:c1:a4:17:2e:68:d9:6f:dd:ef: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BF:C0:C6:6B:58:65:9A:0F:54:32:4E:82:78:10:DF:18:5E:64:08 X509v3 Authority Key Identifier: keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/LL_AxmtYZZoPVDJOgngQ3xheZAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.32.0/22 80.245.132.0-80.245.143.255 82.198.192.0/19 176.118.180.0/22 185.43.24.0/22 185.48.224.0/22 185.106.184.0/22 185.115.80.0/22 185.139.112.0/22 192.145.112.0/22 193.176.72.0/22 194.146.0.0/22 IPv6: 2a01:9b60::/32 2a03:9980::/29 Signature Algorithm: sha256WithRSAEncryption 41:2f:53:97:4d:0c:4a:18:f7:c0:e0:e4:78:c4:ef:77:d3:40: 0d:a7:31:a5:74:60:b1:eb:f9:85:e7:81:ac:36:76:a5:e1:31: 64:9a:1d:6e:db:2c:e6:12:ff:2e:0c:14:3e:92:20:21:f3:42: 3b:b9:cf:a3:6f:60:77:f4:eb:0f:15:2d:02:69:59:55:4d:26: 43:c8:2c:6e:6b:90:90:98:3e:7f:ce:57:21:3d:d5:b8:b6:ee: d7:8b:95:ba:f1:cc:56:5f:bf:23:74:12:09:b9:51:cf:2d:00: 8a:7c:9c:a9:2a:73:c6:e0:e0:32:a3:50:8d:12:3d:42:9a:47: b8:61:52:e6:57:fd:bc:dd:8b:7d:cb:86:67:67:8b:e6:db:a8: 0f:b8:ac:0c:9f:07:ba:1c:f8:81:26:af:33:49:91:15:1b:6f: 59:d0:61:97:02:74:2a:ca:c6:ba:4e:98:26:1d:36:e0:1d:74: d5:16:7b:75:35:c7:a4:14:78:73:45:3d:04:05:b9:ed:ae:a8: 1e:5e:c5:26:72:13:b2:b3:34:78:d2:bf:33:0f:45:ac:00:88: 64:2c:3b:a3:8f:f5:9d:a1:d2:35:14:aa:ee:ac:c1:4d:50:9c: f2:31:21:de:9d:3d:98:14:4b:50:aa:80:92:e1:98:a2:72:6c: 5b:67:be:02 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt3WR7d7/kDrjGHU2FEvKexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzRhNjdkYmVkNzQ0NGRkZDI3ZTgwMGZiNmMyMTAxM2E1 YjExYzYwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2JmYzBjNjZiNTg2NTlhMGY1NDMyNGU4Mjc4MTBkZjE4NWU2NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDGiJib0uuTIYFr8yNKjIKra4pas da++vEIJI9y5duOav6+k09wrWi+tnImO8AQNsEQ/H7MqJAwfKxAUST7ZiimDutQ6 J+qcf6OmPhqs6xbxhTAy4WRBNl7KpaZVFoRzV8Ja6jnawxTRy6P/XxFW3H3L11IE HiK4peuHGvFeEOoFRyqBudQtPrzJKitq5ezwYSlBJARFLzkjr7su9f2D4K1KcT2B otQY3vQpiB9zdGc3CP/6mF4KZWFEY5T7aqvwaqXuUbEYIrs+azEInS/g1sozNZsL 0tiv0rJtiiuMbJyRH/OZC6gM9D16PUS9LGNmvwN8B6vBpBcuaNlv3e9zXwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFCy/wMZrWGWaD1QyToJ4EN8YXmQIMB8GA1UdIwQY MBaAFI7Epn2+10RN3SfoAPtsIQE6WxHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMt MGNlZjUxMmY1MDA5LzEvTExfQXhtdFlaWm9QVkRKT2duZ1EzeGhlWkFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMtMGNlZjUxMmY1MDA5 LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBWBAIAATBQAwQCAjsgMAwD BAJQ9YQDBARQ9YADBAVSxsADBAKwdrQDBAK5KxgDBAK5MOADBAK5argDBAK5c1AD BAK5i3ADBALAkXADBALBsEgDBALCkgAwFAQCAAIwDgMFACoBm2ADBQMqA5mAMA0G CSqGSIb3DQEBCwUAA4IBAQBBL1OXTQxKGPfA4OR4xO9300ANpzGldGCx6/mF54Gs Nnal4TFkmh1u2yzmEv8uDBQ+kiAh80I7uc+jb2B39OsPFS0CaVlVTSZDyCxua5CQ mD5/zlchPdW4tu7Xi5W68cxWX78jdBIJuVHPLQCKfJypKnPG4OAyo1CNEj1Cmke4 YVLmV/283Yt9y4ZnZ4vm26gPuKwMnwe6HPiBJq8zSZEVG29Z0GGXAnQqysa6Tpgm HTbgHXTVFnt1NcekFHhzRT0EBbntrqgeXsUmchOyszR40r8zD0WsAIhkLDujj/Wd odI1FKrurMFNUJzyMSHenT2YFEtQqoCS4ZiicmxbZ74C -----END CERTIFICATE-----Generated at Mon Jan 26 18:42:25 2026 by rpki-client