This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa
File: Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (raw, json)
Hash identifier: zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=
Subject key identifier: 2E:4D:95:34:9A:99:66:A7:AA:39:5F:A6:45:07:63:23:AA:98:9F:EE
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 019B7FF13983C6EEB448A85A103D8B99C8A7
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa
Signing time: Fri 02 Jan 2026 18:21:13 +0000
ROA not before: Fri 02 Jan 2026 18:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50889
IP address blocks: 77.111.248.0/24 maxlen: 24
77.111.249.0/24 maxlen: 24
77.111.250.0/24 maxlen: 24
77.111.251.0/24 maxlen: 24
80.84.160.0/24 maxlen: 24
80.84.161.0/24 maxlen: 24
80.84.162.0/24 maxlen: 24
80.84.163.0/24 maxlen: 24
80.84.164.0/24 maxlen: 24
80.84.165.0/24 maxlen: 24
80.84.166.0/24 maxlen: 24
80.84.167.0/24 maxlen: 24
80.84.168.0/24 maxlen: 24
80.84.169.0/24 maxlen: 24
80.84.170.0/24 maxlen: 24
80.84.171.0/24 maxlen: 24
80.84.172.0/24 maxlen: 24
80.84.173.0/24 maxlen: 24
80.84.174.0/24 maxlen: 24
80.84.175.0/24 maxlen: 24
80.250.96.0/24 maxlen: 24
80.250.97.0/24 maxlen: 24
80.250.98.0/24 maxlen: 24
80.250.99.0/24 maxlen: 24
80.250.100.0/24 maxlen: 24
80.250.101.0/24 maxlen: 24
80.250.102.0/24 maxlen: 24
185.136.69.0/24 maxlen: 24
185.136.70.0/24 maxlen: 24
185.136.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:39:83:c6:ee:b4:48:a8:5a:10:3d:8b:99:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Jan 2 18:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e4d95349a9966a7aa395fa645076323aa989fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:9d:20:cf:d5:bc:6d:00:7e:73:9b:c2:71:
6b:4b:db:75:2d:d7:a5:4a:e5:87:a8:47:93:43:76:
d7:4a:df:97:07:3b:c6:07:82:36:4b:80:50:e1:35:
38:2c:9e:7d:bc:e8:22:bb:41:e4:7c:75:20:fe:e7:
52:28:1c:89:98:2f:83:bd:9d:d1:25:1a:98:9b:23:
77:42:25:cc:c2:e7:d3:b4:cc:6c:bb:aa:14:59:a0:
30:5f:a0:95:5f:0c:54:d1:6d:f8:25:9f:84:ab:8a:
86:ae:33:c7:dc:0f:42:01:69:e6:1a:1f:ef:62:1c:
93:a7:7b:44:8d:db:2e:1f:fc:7b:13:94:65:47:92:
00:c5:f9:86:3d:d4:c9:49:a4:bc:1b:c8:ce:65:53:
86:a4:c7:72:17:11:0d:a3:9b:01:26:17:b4:8a:ed:
46:e2:56:1c:eb:3b:1f:61:ab:83:fd:ab:1e:4d:ab:
c0:ae:8f:a8:93:d4:1f:51:91:7b:57:63:1c:26:c9:
e1:f6:ac:c6:46:5e:4a:08:5c:2e:e2:49:65:63:b8:
56:b3:e4:07:07:4c:c0:75:6f:0c:f3:6d:2e:30:76:
0c:c6:d9:2c:7c:e6:81:65:b9:ab:bd:ff:13:a8:8e:
df:9c:ee:d7:36:84:21:ad:e2:60:f3:64:3e:2d:8f:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:95:34:9A:99:66:A7:AA:39:5F:A6:45:07:63:23:AA:98:9F:EE
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.248.0/22
80.84.160.0/20
80.250.96.0-80.250.102.255
185.136.69.0-185.136.71.255
Signature Algorithm: sha256WithRSAEncryption
89:db:5b:90:67:68:26:f7:82:a4:88:97:3c:3d:28:cc:6e:d1:
9b:ab:d3:f5:4b:89:3e:dc:1c:e6:75:0e:0f:9c:8d:02:d7:b6:
14:38:3a:07:43:6d:dc:d0:86:e6:71:9d:5c:b7:2f:f8:bb:c6:
c0:d6:0d:5a:95:17:d1:be:24:07:c6:cb:ee:d0:78:70:bc:25:
96:32:85:f7:c6:38:28:d5:a1:a5:e7:ae:4c:92:00:be:96:53:
3d:9e:3b:b9:e9:15:03:1b:48:f4:0b:b3:a2:19:27:b0:92:40:
ed:a5:1e:62:c3:93:ed:c1:09:2d:3f:5a:9a:45:e3:70:0a:86:
1f:b4:e9:31:6e:ec:3d:dd:cb:16:d8:91:a3:5e:49:77:bf:06:
9c:7f:ef:c6:8d:ad:5b:e8:c5:fb:96:99:20:09:1c:ed:bf:9e:
a2:62:55:8b:ec:60:e5:33:db:e1:4b:35:33:2a:74:98:51:9d:
c9:7d:d0:6a:e9:fb:89:f1:bd:9c:7e:82:8e:57:56:2e:3c:dd:
22:f5:1a:44:bc:1f:a0:f1:4e:17:c2:8b:52:a3:d6:aa:2e:2b:
b6:5d:6a:51:bb:2f:2d:89:16:77:ae:df:10:21:3b:59:6c:43:
bb:37:9a:0c:53:51:4c:46:12:b3:a4:f1:c1:3e:c4:fe:44:34:
0e:c6:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:19 2026 by rpki-client