This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/LMl6QCFGZ6NTfYGlowyafW63Beg.roa File: LMl6QCFGZ6NTfYGlowyafW63Beg.roa (raw, json) Hash identifier: BhySL2ahxdsB2rFdsSzbUlZCzHf0m4FchHvGZ6v2dx8= Subject key identifier: 2C:C9:7A:40:21:46:67:A3:53:7D:81:A5:A3:0C:9A:7D:6E:B7:05:E8 Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de Certificate serial: 019B797E3E5EC0E9D636A917D63AA412599E Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/LMl6QCFGZ6NTfYGlowyafW63Beg.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58075 IP address blocks: 37.235.80.0/21 maxlen: 24 45.95.68.0/22 maxlen: 24 45.154.44.0/22 maxlen: 24 185.21.52.0/22 maxlen: 24 185.43.20.0/22 maxlen: 24 185.74.184.0/22 maxlen: 24 185.96.148.0/22 maxlen: 24 185.186.172.0/22 maxlen: 24 194.110.22.0/24 maxlen: 24 194.110.27.0/24 maxlen: 24 194.110.30.0/24 maxlen: 24 194.110.72.0/24 maxlen: 24 2a04:9380::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3e:5e:c0:e9:d6:36:a9:17:d6:3a:a4:12:59:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc97a40214667a3537d81a5a30c9a7d6eb705e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7e:0e:17:5e:4e:04:c3:a5:de:8a:ea:8b:79: e3:b6:a5:e3:05:60:c5:74:88:81:b2:49:b6:f7:58: 86:88:3f:be:3d:0a:bd:a4:b9:1c:a2:3e:35:12:c0: 27:fd:19:af:b1:9d:da:9f:91:fa:64:46:38:9d:78: 80:c7:e5:62:a0:b5:9c:98:fe:28:5a:1e:98:b3:ef: 42:79:7c:40:39:fc:f5:96:e0:d5:89:0d:2f:0b:00: 05:84:aa:a6:19:ce:48:48:e7:3c:2f:15:d0:50:b9: e3:ee:a4:32:37:fc:0c:b1:9c:dc:16:2e:d0:1b:c1: ac:df:b8:98:08:34:87:f6:d2:4c:f4:f0:55:0d:09: 90:b6:49:d6:f8:5c:62:a2:ab:f5:9e:58:a5:84:3e: 95:e5:41:5e:5c:47:8d:c4:d3:b4:5c:e4:c9:ab:2c: ce:c2:4a:f3:02:44:1b:63:b2:8d:00:6e:cc:a5:6e: 7c:b3:d6:90:50:a1:6c:ef:c3:9e:81:b5:0e:94:32: f5:22:1c:f1:ee:da:0d:62:65:6c:b7:60:3e:cb:e2: c9:a6:b7:e8:64:41:f1:4e:41:bb:41:05:81:b4:67: 18:1b:c5:e7:28:d6:40:0d:10:ec:68:3e:a8:38:7d: b1:c3:b5:5b:11:ea:6f:8d:a1:8d:15:2f:29:e1:86: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C9:7A:40:21:46:67:A3:53:7D:81:A5:A3:0C:9A:7D:6E:B7:05:E8 X509v3 Authority Key Identifier: keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/LMl6QCFGZ6NTfYGlowyafW63Beg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.80.0/21 45.95.68.0/22 45.154.44.0/22 185.21.52.0/22 185.43.20.0/22 185.74.184.0/22 185.96.148.0/22 185.186.172.0/22 194.110.22.0/24 194.110.27.0/24 194.110.30.0/24 194.110.72.0/24 IPv6: 2a04:9380::/29 Signature Algorithm: sha256WithRSAEncryption 8a:79:48:84:a7:9b:7f:86:e6:ca:49:46:39:2e:a9:ac:ea:88: a4:8c:12:26:73:ae:aa:54:cd:e5:d1:c4:ee:6e:de:5b:b0:30: 67:e0:66:f2:a5:65:cf:39:2a:50:ff:46:32:89:29:d8:85:f9: 7d:a8:1a:d7:52:f4:ec:67:07:54:60:70:a6:f5:75:6d:20:3d: 11:33:4e:f1:5b:e9:ed:68:88:d4:21:48:47:f8:87:73:6c:fe: d6:0b:ff:b5:a9:cf:ba:08:57:a7:62:af:28:35:b7:f6:af:41: f5:3f:a9:e4:7a:6c:ba:05:8e:aa:ed:8d:32:70:f5:fc:b6:fe: 3f:fe:a7:f5:e9:03:7c:3d:88:00:6f:b7:54:2f:d1:25:2c:df: b2:47:ec:22:1d:16:e9:be:bf:09:15:02:8a:5e:9c:0b:5f:26: 6c:de:1f:43:00:3e:ff:e2:aa:74:87:e7:c0:9b:6e:e1:bb:22: 4a:60:2d:8d:88:11:5d:84:ce:5f:87:48:08:fc:6a:98:a3:a6: 32:91:f2:cb:dc:df:ec:03:e8:68:e2:e2:8d:26:8e:85:f2:ed: 7e:65:40:39:fb:a0:7b:85:8f:a9:91:96:09:c2:64:49:4b:19: f6:5a:57:b9:0c:52:37:c6:28:ca:29:d3:c8:36:a5:c7:b8:ed: 82:e4:8e:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt5fj5ewOnWNqkX1jqkElmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZWE4OTRlZTA1Nzc1ZTBlZjA2MWQwODZjYTI1MjE0N2Y1 YzkxZGUwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2M5N2E0MDIxNDY2N2EzNTM3ZDgxYTVhMzBjOWE3ZDZlYjcwNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA534OF15OBMOl3orqi3njtqXjBWDF dIiBskm291iGiD++PQq9pLkcoj41EsAn/RmvsZ3an5H6ZEY4nXiAx+VioLWcmP4o Wh6Ys+9CeXxAOfz1luDViQ0vCwAFhKqmGc5ISOc8LxXQULnj7qQyN/wMsZzcFi7Q G8Gs37iYCDSH9tJM9PBVDQmQtknW+Fxioqv1nlilhD6V5UFeXEeNxNO0XOTJqyzO wkrzAkQbY7KNAG7MpW58s9aQUKFs78OegbUOlDL1Ihzx7toNYmVst2A+y+LJprfo ZEHxTkG7QQWBtGcYG8XnKNZADRDsaD6oOH2xw7VbEepvjaGNFS8p4YbVSQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFCzJekAhRmejU32BpaMMmn1utwXoMB8GA1UdIwQY MBaAFHXqiU7gV3Xg7wYdCGyiUhR/XJHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEt YjdmMjk4NGViNjUzLzEvTE1sNlFDRkdaNk5UZllHbG93eWFmVzYzQmVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEtYjdmMjk4NGViNjUz LzEvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDJetQAwQC LV9EAwQCLZosAwQCuRU0AwQCuSsUAwQCuUq4AwQCuWCUAwQCubqsAwQAwm4WAwQA wm4bAwQAwm4eAwQAwm5IMA0EAgACMAcDBQMqBJOAMA0GCSqGSIb3DQEBCwUAA4IB AQCKeUiEp5t/hubKSUY5Lqms6oikjBImc66qVM3l0cTubt5bsDBn4GbypWXPOSpQ /0YyiSnYhfl9qBrXUvTsZwdUYHCm9XVtID0RM07xW+ntaIjUIUhH+IdzbP7WC/+1 qc+6CFenYq8oNbf2r0H1P6nkemy6BY6q7Y0ycPX8tv4//qf16QN8PYgAb7dUL9El LN+yR+wiHRbpvr8JFQKKXpwLXyZs3h9DAD7/4qp0h+fAm27huyJKYC2NiBFdhM5f h0gI/GqYo6YykfLL3N/sA+ho4uKNJo6F8u1+ZUA5+6B7hY+pkZYJwmRJSxn2Wle5 DFI3xijKKdPINqXHuO2C5I7U -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client