This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LJkWeTD2zgDn6ry5yOPd39JpxwA.roa File: LJkWeTD2zgDn6ry5yOPd39JpxwA.roa (raw, json) Hash identifier: V2aP0DaoCxX6hhAsiM3U8bi0CBd555sZN+GGUacfcAM= Subject key identifier: 2C:99:16:79:30:F6:CE:00:E7:EA:BC:B9:C8:E3:DD:DF:D2:69:C7:00 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B1210CF8AA38D1D3A3C56568E1620BB77 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LJkWeTD2zgDn6ry5yOPd39JpxwA.roa Signing time: Fri 12 Dec 2025 10:17:30 +0000 ROA not before: Fri 12 Dec 2025 10:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 62.76.226.0/24 maxlen: 24 62.76.231.0/24 maxlen: 24 62.76.235.0/24 maxlen: 24 192.124.183.0/24 maxlen: 24 192.124.188.0/24 maxlen: 24 193.124.3.0/24 maxlen: 24 193.124.6.0/24 maxlen: 24 193.124.8.0/24 maxlen: 24 193.124.91.0/24 maxlen: 24 193.124.94.0/24 maxlen: 24 194.58.43.0/24 maxlen: 24 194.58.60.0/24 maxlen: 24 194.58.67.0/24 maxlen: 24 194.87.3.0/24 maxlen: 24 194.87.6.0/24 maxlen: 24 194.87.7.0/24 maxlen: 24 194.87.16.0/24 maxlen: 24 194.87.34.0/24 maxlen: 24 194.87.36.0/24 maxlen: 24 194.87.42.0/24 maxlen: 24 194.87.63.0/24 maxlen: 24 194.87.116.0/24 maxlen: 24 194.87.117.0/24 maxlen: 24 194.87.120.0/24 maxlen: 24 194.87.121.0/24 maxlen: 24 194.87.160.0/24 maxlen: 24 194.87.163.0/24 maxlen: 24 194.87.165.0/24 maxlen: 24 194.87.166.0/24 maxlen: 24 194.87.176.0/24 maxlen: 24 194.87.177.0/24 maxlen: 24 194.87.180.0/24 maxlen: 24 194.87.181.0/24 maxlen: 24 194.87.182.0/24 maxlen: 24 194.135.23.0/24 maxlen: 24 195.58.55.0/24 maxlen: 24 195.58.56.0/24 maxlen: 24 195.58.59.0/24 maxlen: 24 195.58.62.0/24 maxlen: 24 195.133.12.0/24 maxlen: 24 195.133.56.0/24 maxlen: 24 195.133.60.0/24 maxlen: 24 195.133.61.0/24 maxlen: 24 195.133.80.0/24 maxlen: 24 195.133.82.0/24 maxlen: 24 212.192.210.0/24 maxlen: 24 212.192.211.0/24 maxlen: 24 212.192.251.0/24 maxlen: 24 212.193.10.0/24 maxlen: 24 212.193.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:10:cf:8a:a3:8d:1d:3a:3c:56:56:8e:16:20:bb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 12 10:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c99167930f6ce00e7eabcb9c8e3dddfd269c700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:7b:ed:69:a6:4d:80:ad:fa:42:5b:42:26: a0:e1:a9:8e:b1:15:e5:c0:7a:87:23:f0:7d:a4:1e: 4f:bd:87:5a:37:9f:ea:26:28:dd:fb:c8:c3:10:7b: 8e:81:1e:dc:e9:f6:46:a4:94:74:1b:b6:93:a8:d3: e0:bd:94:b3:44:cd:80:66:af:8b:41:25:e2:6e:27: 46:5d:17:a6:3d:3f:46:ca:0b:28:d5:54:ae:55:8a: 1f:9b:22:73:c6:77:5a:39:63:7d:c3:f3:bb:12:4e: 63:28:0f:f6:ff:45:5a:8e:7e:16:48:63:3a:5a:17: 7e:5e:13:d0:64:c3:96:85:1b:70:52:28:7d:40:04: 7c:d4:62:1a:f7:35:df:b1:97:c3:a5:bc:3d:a8:8e: 11:f5:93:11:18:1f:2c:c4:9f:fa:4b:9c:03:ea:14: 31:8d:8d:7a:17:3c:6d:f0:66:a4:a2:46:02:08:5b: e6:0c:a3:73:15:2d:93:a8:7c:00:62:30:6e:8c:95: 92:d5:d3:10:e2:e5:a4:d5:b6:61:86:3f:a3:8a:c7: 48:f7:7b:50:b5:4f:ca:39:1e:7e:15:d1:ce:8a:c1: 57:c3:7c:c0:1d:88:17:6a:52:48:10:8a:c3:89:c0: 6f:b3:2e:73:2d:6b:74:fd:ba:9e:0e:aa:39:a1:37: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:16:79:30:F6:CE:00:E7:EA:BC:B9:C8:E3:DD:DF:D2:69:C7:00 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LJkWeTD2zgDn6ry5yOPd39JpxwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.226.0/24 62.76.231.0/24 62.76.235.0/24 192.124.183.0/24 192.124.188.0/24 193.124.3.0/24 193.124.6.0/24 193.124.8.0/24 193.124.91.0/24 193.124.94.0/24 194.58.43.0/24 194.58.60.0/24 194.58.67.0/24 194.87.3.0/24 194.87.6.0/23 194.87.16.0/24 194.87.34.0/24 194.87.36.0/24 194.87.42.0/24 194.87.63.0/24 194.87.116.0/23 194.87.120.0/23 194.87.160.0/24 194.87.163.0/24 194.87.165.0-194.87.166.255 194.87.176.0/23 194.87.180.0-194.87.182.255 194.135.23.0/24 195.58.55.0-195.58.56.255 195.58.59.0/24 195.58.62.0/24 195.133.12.0/24 195.133.56.0/24 195.133.60.0/23 195.133.80.0/24 195.133.82.0/24 212.192.210.0/23 212.192.251.0/24 212.193.10.0/24 212.193.15.0/24 Signature Algorithm: sha256WithRSAEncryption 65:ad:a4:ef:51:ca:9e:3b:08:e5:55:be:fd:b9:45:66:91:e6: e2:59:0f:1d:32:97:dc:aa:49:c7:fc:d8:e5:51:2d:5c:93:77: 68:99:6c:fa:2e:80:4e:fd:3a:f4:9d:27:74:0d:c5:45:6e:a3: 1d:48:23:8f:93:b9:7c:d1:05:77:97:c3:d0:84:dc:0e:40:b1: 9f:9c:62:32:94:9a:aa:10:f2:2c:e6:f0:c0:04:e3:92:1d:a0: e3:78:52:d0:1c:8f:db:a3:3d:50:38:04:11:86:cc:b5:b4:c2: 33:66:9d:29:6a:40:ac:39:94:a9:32:96:2d:79:83:39:65:3d: e4:37:ef:ae:9b:6c:25:ff:d5:07:4e:68:4e:7c:93:45:b9:37: 77:4f:99:ec:f8:b0:cb:6b:86:07:ff:fd:5e:c7:f5:ec:4c:3e: e9:fb:35:9d:a1:7a:0e:fe:44:4a:94:b9:42:b7:e8:9b:dd:2e: f0:d4:a2:d3:03:45:bd:b8:47:99:a3:d7:8c:d6:56:fd:d1:72: f9:1c:ab:f8:06:55:6b:79:a9:da:e5:93:66:6b:42:88:32:ad: 94:86:35:97:70:7f:44:f6:c2:f5:ed:6e:58:03:f0:bf:36:3f: 53:3e:01:a5:07:7a:c2:53:e6:08:6b:71:31:93:93:f2:10:b3: 02:3e:d6:e1 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZsSEM+Ko40dOjxWVo4WILt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjEyMTAxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzk5MTY3OTMwZjZjZTAwZTdlYWJjYjljOGUzZGRkZmQyNjljNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bN77WmmTYCt+kJbQiag4amOsRXl wHqHI/B9pB5PvYdaN5/qJijd+8jDEHuOgR7c6fZGpJR0G7aTqNPgvZSzRM2AZq+L QSXibidGXRemPT9Gygso1VSuVYofmyJzxndaOWN9w/O7Ek5jKA/2/0Vajn4WSGM6 Whd+XhPQZMOWhRtwUih9QAR81GIa9zXfsZfDpbw9qI4R9ZMRGB8sxJ/6S5wD6hQx jY16Fzxt8GakokYCCFvmDKNzFS2TqHwAYjBujJWS1dMQ4uWk1bZhhj+jisdI93tQ tU/KOR5+FdHOisFXw3zAHYgXalJIEIrDicBvsy5zLWt0/bqeDqo5oTdA0wIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFCyZFnkw9s4A5+q8ucjj3d/SaccAMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvTEprV2VURDJ6Z0RuNnJ5NXlPUGQzOUpweHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB CAMEAD5M4gMEAD5M5wMEAD5M6wMEAMB8twMEAMB8vAMEAMF8AwMEAMF8BgMEAMF8 CAMEAMF8WwMEAMF8XgMEAMI6KwMEAMI6PAMEAMI6QwMEAMJXAwMEAcJXBgMEAMJX EAMEAMJXIgMEAMJXJAMEAMJXKgMEAMJXPwMEAcJXdAMEAcJXeAMEAMJXoAMEAMJX ozAMAwQAwlelAwQAwlemAwQBwlewMAwDBALCV7QDBADCV7YDBADChxcwDAMEAMM6 NwMEAMM6OAMEAMM6OwMEAMM6PgMEAMOFDAMEAMOFOAMEAcOFPAMEAMOFUAMEAMOF UgMEAdTA0gMEANTA+wMEANTBCgMEANTBDzANBgkqhkiG9w0BAQsFAAOCAQEAZa2k 71HKnjsI5VW+/blFZpHm4lkPHTKX3KpJx/zY5VEtXJN3aJls+i6ATv069J0ndA3F RW6jHUgjj5O5fNEFd5fD0ITcDkCxn5xiMpSaqhDyLObwwATjkh2g43hS0ByP26M9 UDgEEYbMtbTCM2adKWpArDmUqTKWLXmDOWU95DfvrptsJf/VB05oTnyTRbk3d0+Z 7Piwy2uGB//9Xsf17Ew+6fs1naF6Dv5ESpS5Qrfom90u8NSi0wNFvbhHmaPXjNZW /dFy+Ryr+AZVa3mp2uWTZmtCiDKtlIY1l3B/RPbC9e1uWAPwvzY/Uz4BpQd6wlPm CGtxMZOT8hCzAj7W4Q== -----END CERTIFICATE-----Generated at Fri Dec 19 19:48:35 2025 by rpki-client