This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Le82C6pXnzW7IxXdGJLWL7-aOrU.roa File: Le82C6pXnzW7IxXdGJLWL7-aOrU.roa (raw, json) Hash identifier: QElIq8TT7E1GaFXwqMBgfp+5OsT2hRS1zDV8eeFQVmg= Subject key identifier: 2D:EF:36:0B:AA:57:9F:35:BB:23:15:DD:18:92:D6:2F:BF:9A:3A:B5 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBD6B7A9FDB4E426C84242EEC42CA2 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Le82C6pXnzW7IxXdGJLWL7-aOrU.roa Signing time: Thu 01 Jan 2026 14:17:37 +0000 ROA not before: Thu 01 Jan 2026 14:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8447 IP address blocks: 46.74.0.0/15 maxlen: 23 46.206.0.0/15 maxlen: 15 62.46.0.0/15 maxlen: 15 62.116.32.0/19 maxlen: 19 80.75.32.0/19 maxlen: 22 80.75.34.0/24 maxlen: 24 80.75.56.0/21 maxlen: 21 80.89.96.0/20 maxlen: 20 80.120.0.0/14 maxlen: 24 80.240.224.0/20 maxlen: 24 81.5.192.0/18 maxlen: 18 84.20.160.0/19 maxlen: 19 85.90.128.0/19 maxlen: 19 88.116.0.0/15 maxlen: 15 88.116.217.0/24 maxlen: 24 89.144.192.0/18 maxlen: 18 91.112.0.0/14 maxlen: 14 92.248.0.0/17 maxlen: 17 93.82.0.0/15 maxlen: 15 93.111.0.0/16 maxlen: 23 176.66.0.0/18 maxlen: 18 176.66.128.0/17 maxlen: 17 178.188.0.0/14 maxlen: 14 185.157.248.0/22 maxlen: 22 188.20.0.0/14 maxlen: 24 188.45.0.0/16 maxlen: 16 192.164.0.0/19 maxlen: 19 192.164.32.0/22 maxlen: 22 192.164.39.0/24 maxlen: 24 192.164.40.0/21 maxlen: 21 192.164.48.0/20 maxlen: 20 192.164.64.0/21 maxlen: 21 192.164.80.0/20 maxlen: 20 192.164.96.0/19 maxlen: 19 192.164.128.0/19 maxlen: 19 192.164.208.0/20 maxlen: 20 192.164.224.0/19 maxlen: 19 193.80.0.0/15 maxlen: 15 193.83.0.0/16 maxlen: 16 193.154.0.0/16 maxlen: 16 193.187.212.0/22 maxlen: 22 193.187.216.0/21 maxlen: 21 193.187.224.0/20 maxlen: 20 193.187.240.0/22 maxlen: 22 194.48.124.0/22 maxlen: 22 194.48.128.0/21 maxlen: 21 194.48.136.0/22 maxlen: 22 194.48.136.0/24 maxlen: 24 194.96.0.0/16 maxlen: 16 194.118.0.0/16 maxlen: 16 194.152.96.0/19 maxlen: 19 194.152.160.0/19 maxlen: 19 194.166.0.0/16 maxlen: 16 195.3.64.0/18 maxlen: 18 195.64.0.0/19 maxlen: 19 195.170.64.0/19 maxlen: 19 195.230.32.0/19 maxlen: 19 212.16.32.0/19 maxlen: 19 212.60.160.0/19 maxlen: 19 212.88.0.0/19 maxlen: 19 212.88.160.0/19 maxlen: 24 212.124.128.0/19 maxlen: 19 212.183.0.0/17 maxlen: 24 212.197.128.0/18 maxlen: 18 213.33.0.0/17 maxlen: 17 213.33.63.0/24 maxlen: 24 213.147.160.0/19 maxlen: 19 213.157.128.0/19 maxlen: 19 213.225.0.0/18 maxlen: 18 213.240.64.0/18 maxlen: 18 217.149.160.0/20 maxlen: 20 2001:850::/29 maxlen: 29 2001:870::/29 maxlen: 29 2001:890::/29 maxlen: 29 2001:4bb8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d6:b7:a9:fd:b4:e4:26:c8:42:42:ee:c4:2c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2def360baa579f35bb2315dd1892d62fbf9a3ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:f4:a3:1d:80:44:b9:f0:fd:58:a1:23:a8: 3b:fa:53:93:e3:8e:a2:b8:16:44:13:45:d7:96:8a: 5e:25:33:aa:a5:c0:2a:93:3b:e0:14:a5:52:56:67: e6:f7:d7:f3:32:1a:75:14:9f:e2:3b:d3:26:5c:6b: 40:02:ea:60:45:c3:c0:31:43:9a:67:da:a0:30:06: 20:9b:75:50:9d:e9:5e:b0:d4:61:19:19:47:ca:2b: c5:88:9d:d2:fa:fd:17:94:7b:27:67:57:f6:45:b9: 15:be:8b:9c:b3:87:aa:27:84:7d:df:eb:26:97:d0: 7a:21:fd:d9:fb:20:2d:72:c5:d3:bc:10:99:e4:63: 69:a7:9d:85:ae:97:bd:4f:20:7e:9b:7d:b9:1d:90: e6:95:1e:b4:be:8b:00:69:74:5a:dc:bf:e0:ef:8a: e9:2c:82:7e:d9:ce:1a:ee:49:df:6b:72:74:0b:2c: e9:74:4c:1a:b7:59:2d:e3:8b:e2:17:39:b7:ef:38: 0c:73:1c:62:81:a9:16:49:c0:20:bf:83:d6:88:7f: 12:c3:75:23:9c:27:3e:a4:37:0c:bf:8a:14:d9:8c: 5a:f4:aa:97:96:d7:0e:bc:f2:cb:a4:fa:85:9a:6a: 1f:40:e1:e3:fb:47:96:ca:9d:ae:dc:9e:a0:89:c4: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:36:0B:AA:57:9F:35:BB:23:15:DD:18:92:D6:2F:BF:9A:3A:B5 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Le82C6pXnzW7IxXdGJLWL7-aOrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.74.0.0/15 46.206.0.0/15 62.46.0.0/15 62.116.32.0/19 80.75.32.0/19 80.89.96.0/20 80.120.0.0/14 80.240.224.0/20 81.5.192.0/18 84.20.160.0/19 85.90.128.0/19 88.116.0.0/15 89.144.192.0/18 91.112.0.0/14 92.248.0.0/17 93.82.0.0/15 93.111.0.0/16 176.66.0.0/18 176.66.128.0/17 178.188.0.0/14 185.157.248.0/22 188.20.0.0/14 188.45.0.0/16 192.164.0.0-192.164.35.255 192.164.39.0-192.164.71.255 192.164.80.0-192.164.159.255 192.164.208.0-192.164.255.255 193.80.0.0/15 193.83.0.0/16 193.154.0.0/16 193.187.212.0-193.187.243.255 194.48.124.0-194.48.139.255 194.96.0.0/16 194.118.0.0/16 194.152.96.0/19 194.152.160.0/19 194.166.0.0/16 195.3.64.0/18 195.64.0.0/19 195.170.64.0/19 195.230.32.0/19 212.16.32.0/19 212.60.160.0/19 212.88.0.0/19 212.88.160.0/19 212.124.128.0/19 212.183.0.0/17 212.197.128.0/18 213.33.0.0/17 213.147.160.0/19 213.157.128.0/19 213.225.0.0/18 213.240.64.0/18 217.149.160.0/20 IPv6: 2001:850::/29 2001:870::/29 2001:890::/29 2001:4bb8::/29 Signature Algorithm: sha256WithRSAEncryption 53:73:d1:1c:89:82:5b:38:e1:fb:15:e8:00:06:91:9c:4b:c4: d3:0d:1d:88:38:c7:3d:bb:fa:d0:35:f5:2b:f2:81:ab:44:2f: 14:b5:c6:2b:52:91:69:2f:8b:72:7d:29:32:ac:80:6d:64:2e: ff:cf:e1:39:98:68:c3:bc:f2:0b:7e:fd:49:ef:21:49:e0:7a: a2:f8:ee:10:c4:5a:c8:a9:5b:c9:3a:36:89:6e:ce:fa:ec:14: 01:3e:17:c9:dc:48:a2:fc:5b:d8:c7:23:13:47:b6:4f:25:1e: ae:ac:1e:73:6d:e9:32:93:7a:7b:87:59:8a:cb:9f:77:2b:ae: f7:e5:90:a0:9a:e7:9e:09:3e:2d:82:06:47:79:17:0b:0a:78: aa:53:92:f6:ac:d0:46:a5:08:c6:b3:d2:3f:f3:d6:70:3b:7e: 39:f0:b4:78:84:b2:cb:ea:1e:bc:ae:c8:01:8b:61:8d:0a:3c: 58:b9:99:cc:8d:38:e7:94:49:f2:19:8d:82:2b:bc:4e:90:f0: dd:f5:2c:9e:fb:ba:3b:31:cd:3c:9b:5e:9e:3f:5a:fb:a2:cc: cd:e0:7e:6c:9d:e4:cc:d1:bb:16:55:c4:df:af:3f:17:20:1a: d6:7c:3e:79:e2:bf:6e:53:33:27:c8:f5:93:07:ad:dd:66:d1: 82:4d:0f:92 -----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgISAZt569a3qf205CbIQkLuxCyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGVmMzYwYmFhNTc5ZjM1YmIyMzE1ZGQxODkyZDYyZmJmOWEzYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PH0ox2ARLnw/VihI6g7+lOT446i uBZEE0XXlopeJTOqpcAqkzvgFKVSVmfm99fzMhp1FJ/iO9MmXGtAAupgRcPAMUOa Z9qgMAYgm3VQnelesNRhGRlHyivFiJ3S+v0XlHsnZ1f2RbkVvoucs4eqJ4R93+sm l9B6If3Z+yAtcsXTvBCZ5GNpp52Frpe9TyB+m325HZDmlR60vosAaXRa3L/g74rp LIJ+2c4a7knfa3J0CyzpdEwat1kt44viFzm37zgMcxxigakWScAgv4PWiH8Sw3Uj nCc+pDcMv4oU2Yxa9KqXltcOvPLLpPqFmmofQOHj+0eWyp2u3J6gicR/5wIDAQAB o4IDkjCCA44wHQYDVR0OBBYEFC3vNguqV581uyMV3RiS1i+/mjq1MB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvTGU4MkM2cFhuelc3SXhYZEdKTFdMNy1hT3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBpgYIKwYBBQUHAQcBAf8EggGVMIIBkTCCAWkEAgABMIIB YQMDAS5KAwMBLs4DAwE+LgMEBT50IAMEBVBLIAMEBFBZYAMDAlB4AwQEUPDgAwQG UQXAAwQFVBSgAwQFVVqAAwMBWHQDBAZZkMADAwJbcAMEB1z4AAMDAV1SAwMAXW8D BAawQgADBAewQoADAwKyvAMEArmd+AMDArwUAwMAvC0wCwMDAsCkAwQCwKQgMAwD BADApCcDBAPApEAwDAMEBMCkUAMEBcCkgDALAwQEwKTQAwMAwKQDAwHBUAMDAMFT AwMAwZowDAMEAsG71AMEAsG78DAMAwQCwjB8AwQCwjCIAwMAwmADAwDCdgMEBcKY YAMEBcKYoAMDAMKmAwQGwwNAAwQFw0AAAwQFw6pAAwQFw+YgAwQF1BAgAwQF1Dyg AwQF1FgAAwQF1FigAwQF1HyAAwQH1LcAAwQG1MWAAwQH1SEAAwQF1ZOgAwQF1Z2A AwQG1eEAAwQG1fBAAwQE2ZWgMCIEAgACMBwDBQMgAQhQAwUDIAEIcAMFAyABCJAD BQMgAUu4MA0GCSqGSIb3DQEBCwUAA4IBAQBTc9EciYJbOOH7FegABpGcS8TTDR2I OMc9u/rQNfUr8oGrRC8UtcYrUpFpL4tyfSkyrIBtZC7/z+E5mGjDvPILfv1J7yFJ 4Hqi+O4QxFrIqVvJOjaJbs767BQBPhfJ3Eii/FvYxyMTR7ZPJR6urB5zbekyk3p7 h1mKy593K6735ZCgmueeCT4tggZHeRcLCniqU5L2rNBGpQjGs9I/89ZwO3458LR4 hLLL6h68rsgBi2GNCjxYuZnMjTjnlEnyGY2CK7xOkPDd9Sye+7o7Mc08m16eP1r7 oszN4H5sneTM0bsWVcTfrz8XIBrWfD554r9uUzMnyPWTB63dZtGCTQ+S -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:40 2026 by rpki-client