This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/LI_BrZ3VZKWECTK4PHtWYY7GAJM.roa File: LI_BrZ3VZKWECTK4PHtWYY7GAJM.roa (raw, json) Hash identifier: lyNsMl43jND1X0aQMPVXU9dtabwJ/cC1LPXFbBVJ4vY= Subject key identifier: 2C:8F:C1:AD:9D:D5:64:A5:84:09:32:B8:3C:7B:56:61:8E:C6:00:93 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019AB96B685C268EE99593E98F15A312C30E Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/LI_BrZ3VZKWECTK4PHtWYY7GAJM.roa Signing time: Tue 25 Nov 2025 05:10:15 +0000 ROA not before: Tue 25 Nov 2025 05:10:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41704 IP address blocks: 46.191.184.0/21 maxlen: 21 46.191.184.0/23 maxlen: 23 46.191.184.0/24 maxlen: 24 46.191.185.0/24 maxlen: 24 46.191.186.0/23 maxlen: 23 46.191.186.0/24 maxlen: 24 46.191.187.0/24 maxlen: 24 46.191.188.0/23 maxlen: 23 46.191.188.0/24 maxlen: 24 46.191.189.0/24 maxlen: 24 46.191.190.0/23 maxlen: 23 46.191.190.0/24 maxlen: 24 46.191.191.0/24 maxlen: 24 46.191.240.0/20 maxlen: 20 46.191.240.0/22 maxlen: 22 46.191.244.0/22 maxlen: 22 46.191.248.0/22 maxlen: 22 46.191.248.0/24 maxlen: 24 46.191.249.0/24 maxlen: 24 46.191.250.0/24 maxlen: 24 46.191.251.0/24 maxlen: 24 46.191.252.0/22 maxlen: 22 79.140.16.0/20 maxlen: 20 79.140.16.0/22 maxlen: 22 79.140.16.0/24 maxlen: 24 79.140.17.0/24 maxlen: 24 79.140.18.0/24 maxlen: 24 79.140.19.0/24 maxlen: 24 79.140.20.0/22 maxlen: 22 79.140.20.0/23 maxlen: 23 79.140.20.0/24 maxlen: 24 79.140.21.0/24 maxlen: 24 79.140.22.0/24 maxlen: 24 79.140.23.0/24 maxlen: 24 79.140.24.0/22 maxlen: 22 79.140.24.0/24 maxlen: 24 79.140.25.0/24 maxlen: 24 79.140.26.0/24 maxlen: 24 79.140.27.0/24 maxlen: 24 79.140.28.0/22 maxlen: 22 79.140.28.0/24 maxlen: 24 79.140.29.0/24 maxlen: 24 79.140.30.0/24 maxlen: 24 79.140.31.0/24 maxlen: 24 84.39.248.0/22 maxlen: 22 84.39.248.0/24 maxlen: 24 84.39.249.0/24 maxlen: 24 84.39.250.0/24 maxlen: 24 84.39.251.0/24 maxlen: 24 84.39.252.0/22 maxlen: 22 84.39.252.0/24 maxlen: 24 84.39.253.0/24 maxlen: 24 84.39.254.0/24 maxlen: 24 84.39.255.0/24 maxlen: 24 94.41.128.0/20 maxlen: 20 94.41.128.0/22 maxlen: 22 94.41.128.0/24 maxlen: 24 94.41.132.0/22 maxlen: 22 94.41.134.0/24 maxlen: 24 94.41.135.0/24 maxlen: 24 94.41.136.0/22 maxlen: 22 94.41.140.0/22 maxlen: 22 94.41.140.0/24 maxlen: 24 94.41.141.0/24 maxlen: 24 94.41.160.0/19 maxlen: 19 94.41.160.0/21 maxlen: 21 94.41.160.0/22 maxlen: 22 94.41.164.0/22 maxlen: 22 94.41.168.0/22 maxlen: 22 94.41.171.0/24 maxlen: 24 94.41.172.0/22 maxlen: 22 94.41.172.0/24 maxlen: 24 94.41.173.0/24 maxlen: 24 94.41.174.0/24 maxlen: 24 94.41.175.0/24 maxlen: 24 94.41.176.0/22 maxlen: 22 94.41.176.0/24 maxlen: 24 94.41.180.0/22 maxlen: 22 94.41.184.0/22 maxlen: 22 94.41.188.0/22 maxlen: 22 95.105.96.0/19 maxlen: 19 95.105.96.0/22 maxlen: 22 95.105.100.0/22 maxlen: 22 95.105.100.0/23 maxlen: 23 95.105.102.0/23 maxlen: 23 95.105.102.0/24 maxlen: 24 95.105.104.0/22 maxlen: 22 95.105.104.0/24 maxlen: 24 95.105.105.0/24 maxlen: 24 95.105.106.0/23 maxlen: 23 95.105.108.0/22 maxlen: 22 95.105.112.0/22 maxlen: 22 95.105.112.0/24 maxlen: 24 95.105.113.0/24 maxlen: 24 95.105.114.0/24 maxlen: 24 95.105.115.0/24 maxlen: 24 95.105.116.0/22 maxlen: 22 95.105.116.0/24 maxlen: 24 95.105.117.0/24 maxlen: 24 95.105.118.0/24 maxlen: 24 95.105.119.0/24 maxlen: 24 95.105.120.0/22 maxlen: 22 95.105.120.0/24 maxlen: 24 95.105.124.0/22 maxlen: 22 95.105.124.0/24 maxlen: 24 95.105.125.0/24 maxlen: 24 95.105.126.0/24 maxlen: 24 95.105.127.0/24 maxlen: 24 136.169.240.0/20 maxlen: 20 136.169.240.0/22 maxlen: 22 136.169.240.0/24 maxlen: 24 136.169.241.0/24 maxlen: 24 136.169.242.0/24 maxlen: 24 136.169.243.0/24 maxlen: 24 136.169.244.0/22 maxlen: 22 136.169.248.0/22 maxlen: 22 136.169.252.0/22 maxlen: 22 136.169.252.0/24 maxlen: 24 136.169.253.0/24 maxlen: 24 136.169.254.0/24 maxlen: 24 136.169.255.0/24 maxlen: 24 145.255.16.0/21 maxlen: 21 145.255.16.0/22 maxlen: 22 145.255.18.0/24 maxlen: 24 145.255.19.0/24 maxlen: 24 145.255.20.0/22 maxlen: 22 145.255.20.0/24 maxlen: 24 145.255.21.0/24 maxlen: 24 145.255.22.0/24 maxlen: 24 145.255.23.0/24 maxlen: 24 2a02:1c8:7::/48 maxlen: 48 2a02:1c8:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:6b:68:5c:26:8e:e9:95:93:e9:8f:15:a3:12:c3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Nov 25 05:10:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c8fc1ad9dd564a5840932b83c7b56618ec60093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:a3:8e:a5:e5:96:04:77:dd:da:df:1a:1e: ca:ad:b5:73:8f:f3:3e:ae:c0:d5:f9:5a:46:e9:82: ab:9e:a7:9a:ae:ee:b6:33:1b:fc:a5:43:c5:2a:23: 2a:de:94:a5:6d:98:73:fb:f0:45:db:b1:09:4f:20: 9f:90:2d:47:46:8c:87:42:2c:08:de:0b:c7:c5:24: 7e:2b:e4:df:a1:4f:2c:3a:7f:c2:60:87:b3:49:fb: ea:4c:80:d3:15:df:28:7b:e8:68:f1:e1:53:59:a5: 7d:69:f6:91:ed:a3:5c:7c:c5:8c:db:ae:11:04:52: 21:c4:0d:87:15:9a:31:7f:12:68:c9:f2:d2:93:1a: 7c:58:b3:3b:05:d1:f2:ff:48:e0:c4:96:75:56:92: 9c:96:e1:20:7d:92:0c:da:1e:1b:5a:08:87:5a:cb: 6a:e7:06:b4:74:11:e9:9d:a9:f3:c7:95:70:4b:94: 7d:4e:b3:3d:b1:85:93:87:cd:05:84:6f:4e:4f:0f: 22:c0:e2:8e:63:ee:88:07:a5:65:7b:e7:7d:ef:4a: 80:95:8e:70:67:42:94:e5:98:18:6e:d2:87:6c:bf: 9b:f9:df:d2:e5:2d:f7:a5:37:27:12:ce:0e:67:25: f9:70:06:cc:89:ea:c3:04:4a:a8:10:3e:6d:10:64: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:C1:AD:9D:D5:64:A5:84:09:32:B8:3C:7B:56:61:8E:C6:00:93 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/LI_BrZ3VZKWECTK4PHtWYY7GAJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.191.184.0/21 46.191.240.0/20 79.140.16.0/20 84.39.248.0/21 94.41.128.0/20 94.41.160.0/19 95.105.96.0/19 136.169.240.0/20 145.255.16.0/21 IPv6: 2a02:1c8:7::/48 2a02:1c8:700::/40 Signature Algorithm: sha256WithRSAEncryption 7a:75:d7:b2:8c:6a:52:9f:ce:19:e9:9d:9a:00:30:82:b7:d4: d3:40:c4:06:94:ac:88:45:a9:6b:61:46:d7:a6:46:0b:3a:22: ab:bb:ad:f2:b6:6b:cc:a6:53:b7:5b:c9:59:f3:26:ab:f9:c5: 7e:21:5c:4a:15:3d:94:86:07:e0:fb:06:f4:53:14:35:9b:06: 40:c4:4a:0b:c6:f4:a0:d1:43:a9:56:74:35:f5:0a:5f:d8:e8: 48:36:4b:33:9e:35:bb:72:1e:bd:83:61:8d:21:d7:b1:d0:0b: 54:e6:f7:3d:82:a3:b5:89:d3:03:fc:d4:6e:35:c8:55:fa:8e: 3d:45:0d:5a:3c:9a:e7:49:a2:c2:79:a8:6e:4d:1a:9f:dc:69: 5c:b7:36:28:b9:d9:4c:ad:0c:97:d4:9a:b7:6d:7e:63:0a:c5: dd:e8:e1:c9:e6:fb:3b:62:08:d6:19:4a:53:8d:45:19:29:39: b1:9a:67:bd:a5:f6:93:9a:21:80:09:98:2c:f6:16:5f:b1:d9: 9d:6c:d2:1b:6c:77:ae:5c:10:68:05:6b:71:f1:d1:58:dc:75: f9:fb:16:eb:2a:66:bc:37:f3:1c:3a:57:ac:fe:5d:47:e4:26: 1d:7c:cd:a1:14:c3:d7:9f:7b:96:6a:28:a7:7e:51:d7:8f:e5: 00:31:5b:d1 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZq5a2hcJo7plZPpjxWjEsMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUxMTI1MDUxMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzhmYzFhZDlkZDU2NGE1ODQwOTMyYjgzYzdiNTY2MThlYzYwMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiijjqXllgR33drfGh7KrbVzj/M+ rsDV+VpG6YKrnqearu62Mxv8pUPFKiMq3pSlbZhz+/BF27EJTyCfkC1HRoyHQiwI 3gvHxSR+K+TfoU8sOn/CYIezSfvqTIDTFd8oe+ho8eFTWaV9afaR7aNcfMWM264R BFIhxA2HFZoxfxJoyfLSkxp8WLM7BdHy/0jgxJZ1VpKcluEgfZIM2h4bWgiHWstq 5wa0dBHpnanzx5VwS5R9TrM9sYWTh80FhG9OTw8iwOKOY+6IB6Vle+d970qAlY5w Z0KU5ZgYbtKHbL+b+d/S5S33pTcnEs4OZyX5cAbMierDBEqoED5tEGTvQQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFCyPwa2d1WSlhAkyuDx7VmGOxgCTMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvTElfQnJaM1ZaS1dFQ1RLNFBIdFdZWTdHQUpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzA8BAIAATA2AwQDLr+4AwQE Lr/wAwQET4wQAwQDVCf4AwQEXimAAwQFXimgAwQFX2lgAwQEiKnwAwQDkf8QMBcE AgACMBEDBwAqAgHIAAcDBgAqAgHIBzANBgkqhkiG9w0BAQsFAAOCAQEAenXXsoxq Up/OGemdmgAwgrfU00DEBpSsiEWpa2FG16ZGCzoiq7ut8rZrzKZTt1vJWfMmq/nF fiFcShU9lIYH4PsG9FMUNZsGQMRKC8b0oNFDqVZ0NfUKX9joSDZLM541u3IevYNh jSHXsdALVOb3PYKjtYnTA/zUbjXIVfqOPUUNWjya50miwnmobk0an9xpXLc2KLnZ TK0Ml9Sat21+YwrF3ejhyeb7O2II1hlKU41FGSk5sZpnvaX2k5ohgAmYLPYWX7HZ nWzSG2x3rlwQaAVrcfHRWNx1+fsW6ypmvDfzHDpXrP5dR+QmHXzNoRTD1597lmoo p35R14/lADFb0Q== -----END CERTIFICATE-----Generated at Tue Dec 16 00:29:57 2025 by rpki-client