This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/LR-gOJTdtI8bzPduiQVCYwkMZFA.roa File: LR-gOJTdtI8bzPduiQVCYwkMZFA.roa (raw, json) Hash identifier: bVwiIJwDd0Bu+uS+HlMtLfyphNhcg2aLcVX98Jb8Wj8= Subject key identifier: 2D:1F:A0:38:94:DD:B4:8F:1B:CC:F7:6E:89:05:42:63:09:0C:64:50 Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067 Certificate serial: 019B7C7F683FCAB2F9EA7F25B2557AE20712 Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/LR-gOJTdtI8bzPduiQVCYwkMZFA.roa Signing time: Fri 02 Jan 2026 02:18:03 +0000 ROA not before: Fri 02 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29650 IP address blocks: 45.139.240.0/22 maxlen: 22 79.140.128.0/20 maxlen: 20 82.195.128.0/19 maxlen: 19 84.51.224.0/21 maxlen: 21 84.51.236.0/22 maxlen: 22 84.51.240.0/20 maxlen: 20 212.78.224.0/20 maxlen: 20 212.78.240.0/23 maxlen: 23 212.78.252.0/22 maxlen: 22 212.84.40.0/21 maxlen: 21 2001:1bd8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:68:3f:ca:b2:f9:ea:7f:25:b2:55:7a:e2:07:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067 Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d1fa03894ddb48f1bccf76e89054263090c6450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:fc:15:8b:23:08:c7:00:9a:c8:0c:32:bf: 7c:a5:76:d5:f0:af:a1:96:0c:32:51:94:bd:02:ca: 59:52:7f:b3:34:a6:30:04:21:f4:92:56:e6:5b:10: 26:89:49:2c:fc:af:e3:90:e7:43:53:2e:f4:67:67: e8:f5:23:57:93:c8:63:6b:05:2f:d4:4d:97:1b:55: 77:89:38:27:d9:88:06:73:36:aa:df:09:74:6e:f4: 1c:2d:1d:2d:86:da:12:fc:73:f5:55:94:ab:c0:e9: 87:8c:e3:76:c2:08:42:11:3e:bd:40:66:5d:f4:4c: 43:9b:e4:3a:d3:8b:19:b6:ea:2b:41:5f:d1:15:6a: ba:41:9d:cf:4a:60:63:ef:a5:02:c4:c4:6d:cc:07: 41:fd:f0:10:91:4e:22:63:90:db:0a:1d:a9:a1:a7: 47:93:5a:27:9d:dd:60:cb:21:71:15:48:c1:ad:7c: ee:a4:9d:98:bc:de:32:03:34:b3:c6:ad:97:48:c1: 55:9a:93:be:f7:95:74:66:63:38:79:f0:10:32:ec: 29:c4:23:c3:8a:b8:e3:dc:b3:83:4d:a3:4e:36:d0: 7b:c0:76:1a:89:20:dc:48:80:24:94:3f:f7:60:ec: b9:c9:c8:03:03:76:16:70:fa:b4:1e:85:41:fe:ba: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1F:A0:38:94:DD:B4:8F:1B:CC:F7:6E:89:05:42:63:09:0C:64:50 X509v3 Authority Key Identifier: keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/LR-gOJTdtI8bzPduiQVCYwkMZFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.240.0/22 79.140.128.0/20 82.195.128.0/19 84.51.224.0/21 84.51.236.0-84.51.255.255 212.78.224.0-212.78.241.255 212.78.252.0/22 212.84.40.0/21 IPv6: 2001:1bd8::/32 Signature Algorithm: sha256WithRSAEncryption 53:dd:36:ea:2b:85:c8:6a:82:5d:00:65:f6:17:6a:37:e7:7f: c1:28:d4:5a:1f:d4:2a:19:49:c9:1e:d1:ca:cc:d2:de:c1:f6: 92:7a:bf:93:31:40:07:a6:b1:5c:92:17:73:0e:f8:f7:5f:fc: 83:47:53:09:7a:ee:a9:07:43:c4:a4:b7:0a:c5:e8:35:77:8f: 6c:4a:37:ce:b1:46:6e:6e:ab:6e:2c:7c:5f:a3:21:70:df:f5: bc:bd:b4:de:e4:9b:78:34:60:5b:49:f6:08:66:eb:40:4a:05: 6d:0b:17:7c:0d:ea:f3:22:b3:ce:66:6b:ff:a4:ca:44:a5:d9: 4c:be:57:04:c4:d3:ed:d0:49:a0:24:ad:c3:1e:e9:e2:3e:87: ea:1a:3d:5b:61:9c:0b:7c:c2:1b:45:71:ba:8c:3e:24:95:26: 7a:91:37:d6:74:d8:9f:c2:09:74:1c:93:ba:64:54:f3:47:d1: 1d:35:8e:bf:6a:49:3d:c7:03:e6:81:44:a8:b5:4d:ff:a9:d4: 76:47:36:f0:77:53:6d:10:43:fb:9e:11:46:53:ea:27:05:46: 0d:03:56:30:0c:a3:59:1e:5f:6e:a4:5b:e9:69:8e:0b:47:f5: 97:12:71:2a:98:51:98:d1:29:31:54:c1:6c:bb:4e:f8:91:35: 63:49:41:3c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt8f2g/yrL56n8lslV64gcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk MzcwNjcwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDFmYTAzODk0ZGRiNDhmMWJjY2Y3NmU4OTA1NDI2MzA5MGM2NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1D8FYsjCMcAmsgMMr98pXbV8K+h lgwyUZS9AspZUn+zNKYwBCH0klbmWxAmiUks/K/jkOdDUy70Z2fo9SNXk8hjawUv 1E2XG1V3iTgn2YgGczaq3wl0bvQcLR0thtoS/HP1VZSrwOmHjON2wghCET69QGZd 9ExDm+Q604sZtuorQV/RFWq6QZ3PSmBj76UCxMRtzAdB/fAQkU4iY5DbCh2poadH k1onnd1gyyFxFUjBrXzupJ2YvN4yAzSzxq2XSMFVmpO+95V0ZmM4efAQMuwpxCPD irjj3LODTaNONtB7wHYaiSDcSIAklD/3YOy5ycgDA3YWcPq0HoVB/rqTkwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFC0foDiU3bSPG8z3bokFQmMJDGRQMB8GA1UdIwQY MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt MTgyMjg2N2UxNTk2LzEvTFItZ09KVGR0SThielBkdWlRVkNZd2tNWkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2 LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBFBAIAATA/AwQCLYvwAwQE T4yAAwQFUsOAAwQDVDPgMAsDBAJUM+wDAwJUMDAMAwQF1E7gAwQB1E7wAwQC1E78 AwQD1FQoMA0EAgACMAcDBQAgARvYMA0GCSqGSIb3DQEBCwUAA4IBAQBT3TbqK4XI aoJdAGX2F2o353/BKNRaH9QqGUnJHtHKzNLewfaSer+TMUAHprFckhdzDvj3X/yD R1MJeu6pB0PEpLcKxeg1d49sSjfOsUZubqtuLHxfoyFw3/W8vbTe5Jt4NGBbSfYI ZutASgVtCxd8DerzIrPOZmv/pMpEpdlMvlcExNPt0EmgJK3DHuniPofqGj1bYZwL fMIbRXG6jD4klSZ6kTfWdNifwgl0HJO6ZFTzR9EdNY6/akk9xwPmgUSotU3/qdR2 Rzbwd1NtEEP7nhFGU+onBUYNA1YwDKNZHl9upFvpaY4LR/WXEnEqmFGY0SkxVMFs u074kTVjSUE8 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:14 2026 by rpki-client