This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/lilRXnQbhAs_T-urB33KZ2t0KZQ.roa File: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (raw, json) Hash identifier: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE= Subject key identifier: 96:29:51:5E:74:1B:84:0B:3F:4F:EB:AB:07:7D:CA:67:6B:74:29:94 Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2 Certificate serial: 019B7B3652D68F148B6141418A20930FAA6F Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/lilRXnQbhAs_T-urB33KZ2t0KZQ.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42525 IP address blocks: 37.205.120.0/21 maxlen: 21 77.243.32.0/20 maxlen: 20 81.27.208.0/20 maxlen: 20 94.101.208.0/20 maxlen: 20 185.17.192.0/22 maxlen: 22 194.182.0.0/18 maxlen: 18 212.98.64.0/18 maxlen: 18 217.63.96.0/19 maxlen: 19 2a01:7e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:52:d6:8f:14:8b:61:41:41:8a:20:93:0f:aa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9629515e741b840b3f4febab077dca676b742994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:96:8e:7b:02:16:4c:80:8d:ad:3e:d9:66: b6:86:05:3d:a5:d5:a6:d5:ca:f3:c0:e4:3e:fe:6b: e3:39:27:3b:0a:7e:29:e7:ba:b7:86:21:70:0f:30: f2:95:30:3d:c5:09:53:a9:4f:dd:45:e6:3a:fe:29: 64:60:a2:95:1b:48:53:29:11:76:45:56:bf:71:6e: 25:e9:7a:bc:78:12:92:48:f1:6b:7b:e9:b0:48:e9: 57:00:ee:6b:29:28:ee:d1:ef:80:48:c2:1b:0c:c8: fe:ab:29:25:5d:d6:6b:4b:5d:f0:53:c4:25:ce:06: 43:90:c7:8d:fe:4d:88:d0:2a:80:13:eb:f9:51:c2: 61:0b:b5:85:64:66:71:97:c2:49:f2:23:ce:9d:ea: 28:b0:6f:f9:56:42:dc:85:68:31:88:66:38:65:32: 89:a5:3f:40:0b:18:ab:ff:76:a1:de:eb:e2:66:3b: 3f:af:52:74:2c:9d:4f:27:d4:91:20:85:ac:5a:b7: 21:f6:17:d5:92:fd:0a:1d:02:8e:14:da:fd:2c:61: e6:71:d2:bb:1d:af:ed:b8:52:bc:d7:f2:2a:9a:42: 8f:43:09:16:8a:ed:19:a8:5d:50:97:81:41:11:b7: e7:70:92:47:71:5e:72:4a:c7:4e:b5:a2:7d:4d:97: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:29:51:5E:74:1B:84:0B:3F:4F:EB:AB:07:7D:CA:67:6B:74:29:94 X509v3 Authority Key Identifier: keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/lilRXnQbhAs_T-urB33KZ2t0KZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.120.0/21 77.243.32.0/20 81.27.208.0/20 94.101.208.0/20 185.17.192.0/22 194.182.0.0/18 212.98.64.0/18 217.63.96.0/19 IPv6: 2a01:7e8::/32 Signature Algorithm: sha256WithRSAEncryption 61:46:a6:ed:95:50:2d:40:8b:31:b4:36:fd:fd:64:7b:eb:44: 46:5e:05:78:3e:da:79:1a:2f:9a:25:8c:b6:cd:9a:7c:c5:1b: 02:85:2c:9f:43:7a:ef:f8:ca:8c:99:b1:ad:d1:df:1e:f6:39: a0:c5:af:ea:14:fe:b0:ab:10:20:f8:42:0b:0b:83:f2:e4:9f: 18:0a:03:ca:63:ed:97:e3:cf:01:17:e8:79:55:29:fc:66:9b: 25:80:44:2a:55:2d:75:6e:25:3a:d1:5d:d0:63:9b:9c:29:12: ea:03:3d:14:0c:49:7a:e9:5a:1f:47:ef:90:f4:41:74:fd:da: 54:7c:b0:bb:07:9b:e1:22:70:19:cf:ea:a9:75:07:45:ce:e8: 59:8c:d1:7d:ca:d4:5b:af:de:c7:4b:a6:bd:30:da:fc:9d:73: bd:37:ba:e3:33:92:20:12:cb:d5:c1:05:54:d7:8d:8b:82:fb: a7:99:f4:60:99:f9:9b:cf:83:73:e5:b0:7a:1b:35:e6:0b:ed: 6e:94:1f:bb:a9:4d:0f:d9:6a:22:19:71:12:e5:41:c3:cf:13: 72:55:ab:98:d0:d4:8e:4b:44:9e:4a:5c:cb:62:84:60:f0:4e: 20:22:ea:6d:f0:dd:1c:67:50:ba:5b:eb:79:ab:0a:bb:ea:6d: 42:e5:0a:1e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7NlLWjxSLYUFBiiCTD6pvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz MWJlZDIwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjI5NTE1ZTc0MWI4NDBiM2Y0ZmViYWIwNzdkY2E2NzZiNzQyOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmWWjnsCFkyAja0+2Wa2hgU9pdWm 1crzwOQ+/mvjOSc7Cn4p57q3hiFwDzDylTA9xQlTqU/dReY6/ilkYKKVG0hTKRF2 RVa/cW4l6Xq8eBKSSPFre+mwSOlXAO5rKSju0e+ASMIbDMj+qyklXdZrS13wU8Ql zgZDkMeN/k2I0CqAE+v5UcJhC7WFZGZxl8JJ8iPOneoosG/5VkLchWgxiGY4ZTKJ pT9ACxir/3ah3uviZjs/r1J0LJ1PJ9SRIIWsWrch9hfVkv0KHQKOFNr9LGHmcdK7 Ha/tuFK81/IqmkKPQwkWiu0ZqF1Ql4FBEbfncJJHcV5ySsdOtaJ9TZeeewIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJYpUV50G4QLP0/rqwd9ymdrdCmUMB8GA1UdIwQY MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt MjdiZjgzY2RlZDZiLzEvbGlsUlhuUWJoQXNfVC11ckIzM0taMnQwS1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDJc14AwQE TfMgAwQEURvQAwQEXmXQAwQCuRHAAwQGwrYAAwQG1GJAAwQF2T9gMA0EAgACMAcD BQAqAQfoMA0GCSqGSIb3DQEBCwUAA4IBAQBhRqbtlVAtQIsxtDb9/WR760RGXgV4 Ptp5Gi+aJYy2zZp8xRsChSyfQ3rv+MqMmbGt0d8e9jmgxa/qFP6wqxAg+EILC4Py 5J8YCgPKY+2X488BF+h5VSn8ZpslgEQqVS11biU60V3QY5ucKRLqAz0UDEl66Vof R++Q9EF0/dpUfLC7B5vhInAZz+qpdQdFzuhZjNF9ytRbr97HS6a9MNr8nXO9N7rj M5IgEsvVwQVU142LgvunmfRgmfmbz4Nz5bB6GzXmC+1ulB+7qU0P2WoiGXES5UHD zxNyVauY0NSOS0SeSlzLYoRg8E4gIupt8N0cZ1C6W+t5qwq76m1C5Qoe -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:21 2026 by rpki-client