This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/LWSqwNRamd4T2aXAGNeoHEw16v4.roa File: LWSqwNRamd4T2aXAGNeoHEw16v4.roa (raw, json) Hash identifier: 2VelgWDfA/M8pcmLdqdPQ+X9lXF40JhHxEYFA/QbMhY= Subject key identifier: 2D:64:AA:C0:D4:5A:99:DE:13:D9:A5:C0:18:D7:A8:1C:4C:35:EA:FE Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019ABFEA03F604931878519F27FAE4C02464 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/LWSqwNRamd4T2aXAGNeoHEw16v4.roa Signing time: Wed 26 Nov 2025 11:26:15 +0000 ROA not before: Wed 26 Nov 2025 11:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.171.228.0/22 maxlen: 24 62.171.232.0/21 maxlen: 24 62.171.240.0/22 maxlen: 24 62.171.244.0/22 maxlen: 24 62.171.248.0/24 maxlen: 24 194.154.24.0/22 maxlen: 24 194.154.28.0/22 maxlen: 24 194.238.40.0/23 maxlen: 24 194.238.42.0/23 maxlen: 24 194.238.44.0/22 maxlen: 24 194.238.56.0/22 maxlen: 24 194.238.72.0/22 maxlen: 24 194.238.76.0/22 maxlen: 24 194.238.78.0/24 maxlen: 24 194.238.79.0/24 maxlen: 24 194.238.80.0/22 maxlen: 24 194.238.84.0/22 maxlen: 24 194.238.88.0/22 maxlen: 24 194.238.92.0/22 maxlen: 24 213.18.245.0/24 maxlen: 24 217.177.0.0/21 maxlen: 24 217.177.8.0/22 maxlen: 24 217.177.12.0/22 maxlen: 24 217.177.32.0/24 maxlen: 24 217.177.33.0/24 maxlen: 24 217.177.34.0/24 maxlen: 24 217.177.35.0/24 maxlen: 24 217.177.40.0/22 maxlen: 24 217.177.44.0/22 maxlen: 24 217.177.72.0/24 maxlen: 24 217.177.73.0/24 maxlen: 24 217.177.74.0/24 maxlen: 24 217.177.75.0/24 maxlen: 24 217.177.80.0/22 maxlen: 24 217.177.84.0/22 maxlen: 24 217.179.4.0/23 maxlen: 24 217.179.6.0/24 maxlen: 24 217.179.7.0/24 maxlen: 24 217.179.48.0/24 maxlen: 24 217.179.49.0/24 maxlen: 24 217.179.50.0/23 maxlen: 24 217.179.56.0/22 maxlen: 24 217.179.58.0/23 maxlen: 24 217.179.72.0/22 maxlen: 24 217.179.72.0/23 maxlen: 24 217.179.88.0/24 maxlen: 24 217.179.91.0/24 maxlen: 24 217.179.228.0/22 maxlen: 24 217.180.15.0/24 maxlen: 24 217.180.20.0/24 maxlen: 24 217.180.21.0/24 maxlen: 24 217.180.22.0/23 maxlen: 24 217.180.40.0/22 maxlen: 24 217.180.44.0/24 maxlen: 24 217.180.45.0/24 maxlen: 24 217.180.46.0/24 maxlen: 24 217.180.47.0/24 maxlen: 24 217.180.52.0/24 maxlen: 24 217.180.53.0/24 maxlen: 24 217.180.54.0/24 maxlen: 24 217.180.55.0/24 maxlen: 24 217.180.60.0/24 maxlen: 24 217.181.80.0/21 maxlen: 24 217.181.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:ea:03:f6:04:93:18:78:51:9f:27:fa:e4:c0:24:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Nov 26 11:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d64aac0d45a99de13d9a5c018d7a81c4c35eafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:8b:97:c3:34:4a:9a:51:66:5d:a9:07:13: e5:6a:35:c4:c7:8a:9e:78:4c:43:c7:86:73:01:ef: 3a:30:39:fd:65:48:33:dc:f6:7a:25:67:8b:cb:d2: 95:53:1a:1f:09:81:98:bd:34:bb:f6:da:7b:74:8e: 80:86:0c:56:97:61:b5:0f:c5:f4:01:78:4a:4f:a8: f8:3f:70:94:e2:91:bb:37:c5:aa:4c:53:49:a3:b8: c1:ff:e8:f7:02:f5:a5:b7:be:4e:d6:fc:65:1a:0f: f3:e1:1a:5c:7a:58:7a:2f:85:75:ad:df:2e:7a:f7: d7:1c:97:a9:5b:a0:3e:05:3e:69:29:2b:6d:96:a4: 39:11:8f:15:c4:4c:e5:58:2d:f6:bf:1d:ca:75:4c: 4d:89:f1:24:50:21:fd:9c:14:86:a6:e8:f7:b3:36: b5:13:dc:c6:9a:f9:80:ef:f0:da:a3:85:28:d7:14: 42:ad:76:9b:fc:1d:34:b9:31:30:39:f8:ce:3e:0e: 6d:b2:31:46:94:05:5b:65:0d:b6:8f:ab:88:cc:9c: d1:ab:25:3b:68:32:bc:fa:ac:6d:58:de:b6:f6:81: 6e:34:5c:59:8a:2b:38:c2:1e:8f:8d:80:39:44:1d: 34:7b:c5:ff:c4:66:ad:fb:69:f3:81:68:c3:f7:af: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:AA:C0:D4:5A:99:DE:13:D9:A5:C0:18:D7:A8:1C:4C:35:EA:FE X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/LWSqwNRamd4T2aXAGNeoHEw16v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.171.228.0-62.171.248.255 194.154.24.0/21 194.238.40.0/21 194.238.56.0/22 194.238.72.0-194.238.95.255 213.18.245.0/24 217.177.0.0/20 217.177.32.0/22 217.177.40.0/21 217.177.72.0/22 217.177.80.0/21 217.179.4.0/22 217.179.48.0/22 217.179.56.0/22 217.179.72.0/22 217.179.88.0/24 217.179.91.0/24 217.179.228.0/22 217.180.15.0/24 217.180.20.0/22 217.180.40.0/21 217.180.52.0/22 217.180.60.0/24 217.181.80.0-217.181.91.255 Signature Algorithm: sha256WithRSAEncryption 78:42:ba:a6:9f:3a:a0:9f:41:8a:2d:7d:fc:21:75:db:c6:16: eb:e8:31:35:db:31:36:d8:ca:e8:52:0f:0d:93:14:83:18:bb: d1:aa:75:f2:66:5e:8d:ff:94:ef:c4:62:b2:44:ed:4f:00:4a: e7:48:b6:36:04:89:f2:56:03:7c:34:61:bb:4d:4e:8e:90:3c: d9:b7:72:48:f7:93:8e:d9:b8:06:5c:bc:f6:9f:c4:c1:fd:2f: 0a:1f:e4:47:27:c0:51:78:85:0c:7c:06:95:9e:8e:0f:c8:ee: 80:ef:60:e4:b6:18:0c:c8:73:df:79:1c:30:09:c2:9f:d0:ba: a7:97:27:bb:96:23:1a:6d:73:be:e4:95:71:96:ae:f6:2a:43: 0b:f0:1e:85:54:bd:66:33:19:0b:1f:ee:b8:40:fe:fe:e4:b7: 71:08:1c:22:0e:e5:e6:ff:54:61:8a:e6:a8:d0:e2:3e:82:9c: fc:ad:70:e8:12:b6:89:33:6b:1c:d5:03:39:ac:ff:ad:cf:48: dd:6a:e5:99:c1:4d:d2:d3:5d:c2:a6:c6:5e:f5:4c:9d:d0:68: 02:5c:dc:59:75:a9:10:c6:1c:a4:e5:7a:08:81:ad:32:b8:19: b1:d5:44:ab:df:4c:ae:a8:97:bf:70:0b:63:cd:af:d0:d6:9a: 43:cf:1e:f4 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZq/6gP2BJMYeFGfJ/rkwCRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUxMTI2MTEyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDY0YWFjMGQ0NWE5OWRlMTNkOWE1YzAxOGQ3YTgxYzRjMzVlYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31KLl8M0SppRZl2pBxPlajXEx4qe eExDx4ZzAe86MDn9ZUgz3PZ6JWeLy9KVUxofCYGYvTS79tp7dI6AhgxWl2G1D8X0 AXhKT6j4P3CU4pG7N8WqTFNJo7jB/+j3AvWlt75O1vxlGg/z4Rpcelh6L4V1rd8u evfXHJepW6A+BT5pKSttlqQ5EY8VxEzlWC32vx3KdUxNifEkUCH9nBSGpuj3sza1 E9zGmvmA7/Dao4Uo1xRCrXab/B00uTEwOfjOPg5tsjFGlAVbZQ22j6uIzJzRqyU7 aDK8+qxtWN629oFuNFxZiis4wh6PjYA5RB00e8X/xGat+2nzgWjD96/VowIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFC1kqsDUWpneE9mlwBjXqBxMNer+MB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvTFdTcXdOUmFtZDRUMmFYQUdOZW9IRXcxNnY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagwDAME Aj6r5AMEAD6r+AMEA8KaGAMEA8LuKAMEAsLuODAMAwQDwu5IAwQFwu5AAwQA1RL1 AwQE2bEAAwQC2bEgAwQD2bEoAwQC2bFIAwQD2bFQAwQC2bMEAwQC2bMwAwQC2bM4 AwQC2bNIAwQA2bNYAwQA2bNbAwQC2bPkAwQA2bQPAwQC2bQUAwQD2bQoAwQC2bQ0 AwQA2bQ8MAwDBATZtVADBALZtVgwDQYJKoZIhvcNAQELBQADggEBAHhCuqafOqCf QYotffwhddvGFuvoMTXbMTbYyuhSDw2TFIMYu9GqdfJmXo3/lO/EYrJE7U8ASudI tjYEifJWA3w0YbtNTo6QPNm3ckj3k47ZuAZcvPafxMH9Lwof5EcnwFF4hQx8BpWe jg/I7oDvYOS2GAzIc995HDAJwp/QuqeXJ7uWIxptc77klXGWrvYqQwvwHoVUvWYz GQsf7rhA/v7kt3EIHCIO5eb/VGGK5qjQ4j6CnPytcOgStokzaxzVAzms/63PSN1q 5ZnBTdLTXcKmxl71TJ3QaAJc3Fl1qRDGHKTlegiBrTK4GbHVRKvfTK6ol79wC2PN r9DWmkPPHvQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:45 2025 by rpki-client