This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/Ll0Gj_SjhJJUWHEqEOxVUi_RvoE.roa File: Ll0Gj_SjhJJUWHEqEOxVUi_RvoE.roa (raw, json) Hash identifier: q6CIzrdvKmBT9JVBSFTLQZT7mTH390SBselZNRU06Sc= Subject key identifier: 2E:5D:06:8F:F4:A3:84:92:54:58:71:2A:10:EC:55:52:2F:D1:BE:81 Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019BBB9BF5EA9AC3D4BFDD94EFDC2A9D5D1A Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/Ll0Gj_SjhJJUWHEqEOxVUi_RvoE.roa Signing time: Wed 14 Jan 2026 08:25:18 +0000 ROA not before: Wed 14 Jan 2026 08:25:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202053 IP address blocks: 5.22.208.0/22 maxlen: 22 5.22.212.0/22 maxlen: 22 5.22.216.0/22 maxlen: 22 5.22.220.0/22 maxlen: 22 80.69.172.0/22 maxlen: 22 81.27.96.0/22 maxlen: 22 81.27.100.0/22 maxlen: 22 81.27.104.0/23 maxlen: 23 81.27.106.0/23 maxlen: 23 81.27.108.0/22 maxlen: 22 83.136.248.0/21 maxlen: 21 85.9.200.0/21 maxlen: 21 85.9.208.0/21 maxlen: 21 85.9.216.0/22 maxlen: 22 85.9.220.0/22 maxlen: 22 94.237.0.0/24 maxlen: 24 94.237.1.0/24 maxlen: 24 94.237.2.0/23 maxlen: 23 94.237.4.0/22 maxlen: 22 94.237.8.0/21 maxlen: 21 94.237.16.0/21 maxlen: 21 94.237.24.0/21 maxlen: 21 94.237.32.0/21 maxlen: 21 94.237.40.0/21 maxlen: 21 94.237.48.0/20 maxlen: 20 94.237.64.0/20 maxlen: 20 94.237.80.0/20 maxlen: 20 94.237.96.0/21 maxlen: 21 94.237.104.0/22 maxlen: 22 94.237.108.0/22 maxlen: 22 94.237.112.0/21 maxlen: 21 94.237.120.0/22 maxlen: 22 94.237.124.0/23 maxlen: 23 94.237.126.0/24 maxlen: 24 95.111.192.0/21 maxlen: 21 95.111.200.0/22 maxlen: 22 95.111.204.0/22 maxlen: 22 95.111.208.0/22 maxlen: 22 95.111.216.0/21 maxlen: 21 185.20.136.0/22 maxlen: 22 185.26.48.0/22 maxlen: 22 185.70.196.0/22 maxlen: 22 194.62.96.0/22 maxlen: 22 212.147.224.0/22 maxlen: 22 212.147.228.0/22 maxlen: 22 213.163.192.0/20 maxlen: 20 2a04:3540::/32 maxlen: 32 2a04:3541::/32 maxlen: 32 2a04:3541:8000::/34 maxlen: 34 2a04:3542::/32 maxlen: 32 2a04:3542:8000::/34 maxlen: 34 2a04:3543::/32 maxlen: 32 2a04:3544::/32 maxlen: 32 2a04:3544:8000::/34 maxlen: 34 2a04:3545::/32 maxlen: 32 2a04:3545:4000::/34 maxlen: 34 2a04:3545:8000::/34 maxlen: 34 2a04:3546::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:9b:f5:ea:9a:c3:d4:bf:dd:94:ef:dc:2a:9d:5d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Jan 14 08:25:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e5d068ff4a384925458712a10ec55522fd1be81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:2d:f8:38:a8:51:af:dd:3f:30:f7:1b:ba: 19:1e:bc:1e:6a:c0:6b:44:20:36:1b:2e:80:54:79: 4f:7e:21:a5:5f:b4:48:a6:25:47:10:81:28:1f:49: 60:e5:ab:d4:8e:18:4c:1a:a5:9e:ab:2d:c7:2d:38: a7:03:37:a6:ad:3c:dd:97:a3:e2:2c:3a:83:f9:3b: c1:0c:a4:d7:ca:25:29:4f:ff:06:08:8b:62:5c:7e: 5d:43:f0:63:99:76:3f:ff:78:6b:64:4d:45:6f:71: d1:2c:a1:6f:99:a2:09:87:11:85:df:9f:b8:34:bd: e6:ca:6a:e2:d8:e7:23:be:6c:05:24:a0:83:99:ee: 3d:2f:7a:06:fa:a8:60:13:81:fa:fb:5b:47:48:91: 5c:10:f0:06:c0:ff:ef:1d:32:32:9f:30:65:6b:6c: f6:f2:3b:d5:9e:2f:0f:21:b0:67:bc:c8:26:fb:c9: 9f:2f:a4:c0:f5:f0:30:5f:75:c2:32:dd:a4:7c:3b: 27:d1:b2:29:4e:2d:4b:3c:68:f5:c4:8a:b7:25:e8: d3:64:1b:a3:64:b3:ea:b4:b8:09:ec:9a:9c:15:56: ae:37:18:70:c1:5f:3d:22:02:9b:13:6c:5b:17:1a: dc:5d:4f:ca:5e:d2:6f:92:8d:e9:13:3a:eb:a7:1d: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5D:06:8F:F4:A3:84:92:54:58:71:2A:10:EC:55:52:2F:D1:BE:81 X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/Ll0Gj_SjhJJUWHEqEOxVUi_RvoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.208.0/20 80.69.172.0/22 81.27.96.0/20 83.136.248.0/21 85.9.200.0-85.9.223.255 94.237.0.0-94.237.126.255 95.111.192.0-95.111.211.255 95.111.216.0/21 185.20.136.0/22 185.26.48.0/22 185.70.196.0/22 194.62.96.0/22 212.147.224.0/21 213.163.192.0/20 IPv6: 2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 44:af:86:cf:92:28:f8:fc:7b:1e:50:e5:c5:d5:e2:3a:6e:a7: d8:d2:df:17:5d:cd:30:a6:d2:f4:98:2f:5b:3c:97:fb:2b:f1: bb:41:98:14:f5:2a:17:18:48:10:6d:46:ff:36:3c:09:0d:69: 75:2a:5a:5f:92:f1:f4:6b:d3:8c:5e:b2:6b:57:35:d1:70:d4: b0:d1:b8:d1:04:89:54:11:cc:46:a7:f1:7c:db:6b:91:99:60: f3:42:99:0b:1f:02:e5:ee:62:85:cd:f9:2f:3d:f5:1c:64:d4: 63:88:e9:56:34:ea:cf:91:75:a1:cc:15:e0:16:9b:66:5c:29: 7b:7d:86:94:5b:a3:3f:28:45:e3:55:81:83:1d:30:de:87:e0: 40:30:be:ac:98:2a:c9:7d:b4:91:85:d5:df:5b:c5:fd:5b:45: 9d:b9:e7:b5:6e:8d:9d:21:e9:fb:7a:ae:1d:6d:b5:c2:95:03: bb:15:36:e4:02:3f:f5:cd:fb:4d:e7:e2:80:cf:d1:08:8a:ba: a5:ea:c8:3d:e6:ad:81:9a:70:0d:1f:6b:a3:3b:ac:34:d2:92: c2:83:d6:dd:66:04:e9:98:d5:8c:c1:67:84:bf:85:b7:ff:23: 8e:cf:37:ca:81:34:80:9d:1a:33:cb:73:71:98:92:ec:f2:eb: cc:53:95:e6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZu7m/XqmsPUv92U79wqnV0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjYwMTE0MDgyNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTVkMDY4ZmY0YTM4NDkyNTQ1ODcxMmExMGVjNTU1MjJmZDFiZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jot+DioUa/dPzD3G7oZHrweasBr RCA2Gy6AVHlPfiGlX7RIpiVHEIEoH0lg5avUjhhMGqWeqy3HLTinAzemrTzdl6Pi LDqD+TvBDKTXyiUpT/8GCItiXH5dQ/BjmXY//3hrZE1Fb3HRLKFvmaIJhxGF35+4 NL3mymri2OcjvmwFJKCDme49L3oG+qhgE4H6+1tHSJFcEPAGwP/vHTIynzBla2z2 8jvVni8PIbBnvMgm+8mfL6TA9fAwX3XCMt2kfDsn0bIpTi1LPGj1xIq3JejTZBuj ZLPqtLgJ7JqcFVauNxhwwV89IgKbE2xbFxrcXU/KXtJvko3pEzrrpx0edwIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFC5dBo/0o4SSVFhxKhDsVVIv0b6BMB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvTGwwR2pfU2poSkpVV0hFcUVPeFZVaV9Sdm9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBxBAIAATBrAwQEBRbQ AwQCUEWsAwQEURtgAwQDU4j4MAwDBANVCcgDBAVVCcAwCwMDAF7tAwQAXu1+MAwD BAZfb8ADBAJfb9ADBANfb9gDBAK5FIgDBAK5GjADBAK5RsQDBALCPmADBAPUk+AD BATVo8AwFgQCAAIwEDAOAwUGKgQ1QAMFACoENUYwDQYJKoZIhvcNAQELBQADggEB AESvhs+SKPj8ex5Q5cXV4jpup9jS3xddzTCm0vSYL1s8l/sr8btBmBT1KhcYSBBt Rv82PAkNaXUqWl+S8fRr04xesmtXNdFw1LDRuNEEiVQRzEan8Xzba5GZYPNCmQsf AuXuYoXN+S899Rxk1GOI6VY06s+RdaHMFeAWm2ZcKXt9hpRboz8oReNVgYMdMN6H 4EAwvqyYKsl9tJGF1d9bxf1bRZ2557VujZ0h6ft6rh1ttcKVA7sVNuQCP/XN+03n 4oDP0QiKuqXqyD3mrYGacA0fa6M7rDTSksKD1t1mBOmY1YzBZ4S/hbf/I47PN8qB NICdGjPLc3GYkuzy68xTleY= -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:21 2026 by rpki-client