This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/LEEO04PoylroqFY8moJTc81n18Y.roa File: LEEO04PoylroqFY8moJTc81n18Y.roa (raw, json) Hash identifier: VL5m4Xl6YVLRVrUOG2POhFSxcgEK6w8mouyfVI3KzkQ= Subject key identifier: 2C:41:0E:D3:83:E8:CA:5A:E8:A8:56:3C:9A:82:53:73:CD:67:D7:C6 Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Certificate serial: 019B7C13515A790070D07D7E698EC0770E09 Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/LEEO04PoylroqFY8moJTc81n18Y.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205813 IP address blocks: 185.204.192.0/22 maxlen: 22 185.204.192.0/24 maxlen: 24 185.204.193.0/24 maxlen: 24 185.204.194.0/24 maxlen: 24 185.204.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:51:5a:79:00:70:d0:7d:7e:69:8e:c0:77:0e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c410ed383e8ca5ae8a8563c9a825373cd67d7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:91:80:c7:35:be:cf:e6:da:d9:2f:12:43:1a: 10:01:a2:63:0e:b0:dc:4a:8a:30:b7:c2:5f:5a:06: 88:2d:50:17:fe:52:af:26:59:4e:08:e5:8c:c9:c5: 13:0f:50:16:1e:43:ae:d8:7a:44:2f:58:bc:d2:d3: cc:8b:62:28:46:93:7c:64:ec:7d:60:92:cd:ab:3c: 3e:fd:c0:3f:30:84:7f:95:4b:39:06:36:1e:f0:bd: d3:53:7e:23:d3:1f:e6:08:0b:e5:73:7c:bc:55:f9: 3f:d5:76:e5:ab:26:d8:d8:3c:ed:30:60:73:a5:03: fc:f8:78:3c:f2:67:52:10:a4:41:9b:58:5b:17:8d: b4:37:11:a3:67:bb:af:2c:d8:72:02:9a:29:70:a6: 89:2b:0b:4c:bc:e2:db:2f:d0:55:a6:be:bc:98:6d: 75:91:74:fc:a8:84:83:72:b8:48:95:a9:92:63:e0: c4:5c:bd:3b:dc:e4:32:fe:4b:53:d4:dc:3c:3d:5c: a0:10:ab:58:46:a8:77:02:44:3f:36:2a:6a:1a:39: 3e:d9:2c:54:d9:f3:28:55:d3:ff:4e:10:22:0c:a9: e5:2b:b4:47:d1:8a:a2:cd:9d:8f:ab:50:14:3c:77: 46:a2:82:f8:d3:4c:a8:10:ca:92:4f:4b:98:ae:90: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:0E:D3:83:E8:CA:5A:E8:A8:56:3C:9A:82:53:73:CD:67:D7:C6 X509v3 Authority Key Identifier: keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/LEEO04PoylroqFY8moJTc81n18Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:17:98:78:e6:43:73:40:a7:51:cc:86:fb:ef:85:96:ca:a7: a9:70:44:05:df:82:dd:9b:99:0e:4a:0b:ab:52:c5:ae:92:42: 85:2d:3f:02:e5:3b:86:06:69:29:45:65:05:c3:1c:16:9b:d7: 76:f9:d9:00:39:67:8f:bd:ed:8e:2f:01:4f:ee:9a:9b:08:f9: db:c1:55:8e:4c:48:03:8f:8c:86:aa:de:78:48:c4:3e:76:e4: 53:f0:ae:60:00:f9:89:50:92:6a:c7:b5:56:bb:a3:d9:fa:11: 9c:9e:09:a0:7f:cc:ca:e1:b5:8f:6f:d8:ea:0c:91:17:f4:09: d7:c6:dd:d3:bc:66:f3:b6:22:04:5f:f3:3c:c1:14:2c:9f:d2: 0a:8f:23:83:bf:91:c5:06:42:6f:92:d2:f6:90:d9:09:5c:38: 77:2c:57:52:6b:34:31:bc:c3:4a:1f:78:38:7b:ab:72:10:8e: ad:be:45:50:10:63:1d:df:69:88:da:11:44:bb:0e:65:4b:ca: 91:a5:70:d4:ba:8e:0b:fe:b3:1b:26:65:df:67:36:75:8f:de: 5b:5a:d1:12:21:9a:a5:f9:71:0a:5a:fd:08:14:3c:55:80:fa: 5a:3d:46:ec:d9:23:b2:fd:da:c5:8e:95:d3:d9:8c:4c:4c:e6: 74:cb:c0:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1FaeQBw0H1+aY7Adw4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGVjN2IyZTlmODY2ZWFjMzZiYzMxY2E0YzRmZjYyZDUz ZGQxNjYwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzQxMGVkMzgzZThjYTVhZThhODU2M2M5YTgyNTM3M2NkNjdkN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZGAxzW+z+ba2S8SQxoQAaJjDrDc Soowt8JfWgaILVAX/lKvJllOCOWMycUTD1AWHkOu2HpEL1i80tPMi2IoRpN8ZOx9 YJLNqzw+/cA/MIR/lUs5BjYe8L3TU34j0x/mCAvlc3y8Vfk/1XblqybY2DztMGBz pQP8+Hg88mdSEKRBm1hbF420NxGjZ7uvLNhyApopcKaJKwtMvOLbL9BVpr68mG11 kXT8qISDcrhIlamSY+DEXL073OQy/ktT1Nw8PVygEKtYRqh3AkQ/NipqGjk+2SxU 2fMoVdP/ThAiDKnlK7RH0YqizZ2Pq1AUPHdGooL400yoEMqST0uYrpA+FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCxBDtOD6Mpa6KhWPJqCU3PNZ9fGMB8GA1UdIwQY MBaAFGzex7Lp+Gbqw2vDHKTE/2LVPdFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDIt NGU2N2JlNGU0MzJlLzEvTEVFTzA0UG95bHJvcUZZOG1vSlRjODFuMThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDItNGU2N2JlNGU0MzJl LzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuczAMA0G CSqGSIb3DQEBCwUAA4IBAQB8F5h45kNzQKdRzIb774WWyqepcEQF34Ldm5kOSgur UsWukkKFLT8C5TuGBmkpRWUFwxwWm9d2+dkAOWePve2OLwFP7pqbCPnbwVWOTEgD j4yGqt54SMQ+duRT8K5gAPmJUJJqx7VWu6PZ+hGcngmgf8zK4bWPb9jqDJEX9AnX xt3TvGbztiIEX/M8wRQsn9IKjyODv5HFBkJvktL2kNkJXDh3LFdSazQxvMNKH3g4 e6tyEI6tvkVQEGMd32mI2hFEuw5lS8qRpXDUuo4L/rMbJmXfZzZ1j95bWtESIZql +XEKWv0IFDxVgPpaPUbs2SOy/drFjpXT2YxMTOZ0y8Bs -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:47 2026 by rpki-client