This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/LSTIoQcJlDTvCliFCiM6PJxkMWs.roa File: LSTIoQcJlDTvCliFCiM6PJxkMWs.roa (raw, json) Hash identifier: fYJWr25Nu8b/RoBER2t30bOJo8A5/7qE/kfjddkYHEU= Subject key identifier: 2D:24:C8:A1:07:09:94:34:EF:0A:58:85:0A:23:3A:3C:9C:64:31:6B Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B41153D9664EBA717B4D95ED1FA38164C Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/LSTIoQcJlDTvCliFCiM6PJxkMWs.roa Signing time: Sun 21 Dec 2025 13:24:29 +0000 ROA not before: Sun 21 Dec 2025 13:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215597 IP address blocks: 5.181.196.0/24 maxlen: 24 5.181.197.0/24 maxlen: 24 82.199.222.0/23 maxlen: 23 82.199.222.0/24 maxlen: 24 82.199.223.0/24 maxlen: 24 91.213.191.0/24 maxlen: 24 91.217.185.0/24 maxlen: 24 185.90.252.0/24 maxlen: 24 185.95.206.0/23 maxlen: 23 185.95.206.0/24 maxlen: 24 185.95.207.0/24 maxlen: 24 212.95.142.0/24 maxlen: 24 212.95.148.0/24 maxlen: 24 212.95.156.0/24 maxlen: 24 212.95.158.0/24 maxlen: 24 2a12:f680:200::/48 maxlen: 48 2a12:f680:201::/48 maxlen: 48 2a12:f680:204::/48 maxlen: 48 2a12:f680:205::/48 maxlen: 48 2a12:f680:206::/48 maxlen: 48 2a12:f680:207::/48 maxlen: 48 2a12:f680:208::/48 maxlen: 48 2a12:f680:220::/43 maxlen: 43 2a12:f680:220::/45 maxlen: 45 2a12:f680:228::/45 maxlen: 45 2a12:f680:230::/45 maxlen: 45 2a12:f680:238::/45 maxlen: 45 2a12:f680:240::/43 maxlen: 43 2a12:f680:240::/45 maxlen: 45 2a12:f680:248::/45 maxlen: 45 2a12:f680:250::/45 maxlen: 45 2a12:f680:258::/45 maxlen: 45 2a12:f680:260::/43 maxlen: 43 2a12:f680:260::/45 maxlen: 45 2a12:f680:268::/45 maxlen: 45 2a12:f680:270::/45 maxlen: 45 2a12:f680:278::/45 maxlen: 45 2a12:f680:600::/48 maxlen: 48 2a12:f680:601::/48 maxlen: 48 2a12:f680:602::/48 maxlen: 48 2a12:f680:604::/48 maxlen: 48 2a12:f680:620::/43 maxlen: 43 2a12:f680:620::/45 maxlen: 45 2a12:f680:628::/45 maxlen: 45 2a12:f680:630::/45 maxlen: 45 2a12:f680:638::/45 maxlen: 45 2a12:f680:640::/43 maxlen: 43 2a12:f680:640::/45 maxlen: 45 2a12:f680:648::/45 maxlen: 45 2a12:f680:650::/45 maxlen: 45 2a12:f680:658::/45 maxlen: 45 2a12:f680:660::/43 maxlen: 43 2a12:f680:660::/45 maxlen: 45 2a12:f680:668::/45 maxlen: 45 2a12:f680:670::/45 maxlen: 45 2a12:f680:678::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:15:3d:96:64:eb:a7:17:b4:d9:5e:d1:fa:38:16:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Dec 21 13:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d24c8a107099434ef0a58850a233a3c9c64316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:5b:a3:ad:57:0f:5e:ff:7c:86:9f:db:05: aa:f3:87:7a:ec:9e:2a:bc:aa:9c:a2:39:36:ea:2d: 8d:4d:63:2f:6c:e8:39:5f:f4:a9:18:cc:37:32:39: e3:1f:1c:08:3d:5a:e9:83:44:65:cc:5c:8f:fb:62: 5b:aa:08:ae:82:fb:ef:a8:14:cb:77:57:5b:c0:0a: cd:87:6f:d6:c8:63:4f:03:13:b3:d8:67:97:ac:fe: 52:1f:4f:7b:19:b4:fe:e3:fb:21:dd:8c:a0:a0:3b: f7:08:8d:80:7e:c8:4c:e0:8f:31:1c:ca:a6:c4:7f: 8e:75:7a:e3:f2:6f:48:66:8a:fe:62:31:19:e8:24: 1f:93:bc:70:52:c0:64:80:59:9e:3c:61:50:f2:8a: 79:1d:c0:10:2d:98:8b:94:0f:a5:8d:8c:bb:59:db: 65:5b:32:9e:9b:2e:07:de:54:cf:84:4d:f7:70:b0: c2:96:a5:87:53:36:e8:df:56:4a:37:58:ee:27:1a: 8f:94:54:f0:9d:66:dd:a9:c4:26:0b:6f:ba:3d:cf: 8f:48:30:ce:bc:46:4c:5f:43:7f:d2:76:a3:38:59: 1d:fa:62:2f:71:01:27:09:ac:1a:90:7f:b8:c3:85: 83:f3:60:52:15:cd:93:44:62:35:22:37:fd:2e:03: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:24:C8:A1:07:09:94:34:EF:0A:58:85:0A:23:3A:3C:9C:64:31:6B X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/LSTIoQcJlDTvCliFCiM6PJxkMWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.196.0/23 82.199.222.0/23 91.213.191.0/24 91.217.185.0/24 185.90.252.0/24 185.95.206.0/23 212.95.142.0/24 212.95.148.0/24 212.95.156.0/24 212.95.158.0/24 IPv6: 2a12:f680:200::/47 2a12:f680:204::-2a12:f680:208:ffff:ffff:ffff:ffff:ffff 2a12:f680:220::-2a12:f680:27f:ffff:ffff:ffff:ffff:ffff 2a12:f680:600::-2a12:f680:602:ffff:ffff:ffff:ffff:ffff 2a12:f680:604::/48 2a12:f680:620::-2a12:f680:67f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0e:91:b3:62:3e:c1:5a:35:10:29:8a:2a:6a:de:00:70:b0:73: 24:87:ac:1d:7b:5a:6d:83:e3:d1:ad:7b:c3:ad:9a:b7:1d:9a: 14:50:cd:cb:00:72:55:bf:d6:5c:47:94:ef:97:83:97:10:4b: 4e:43:19:52:73:cf:27:df:bf:d5:31:7c:8a:ed:21:b5:b0:a7: 99:89:23:01:56:0d:fd:0f:7c:e1:b5:df:e8:1e:23:eb:8d:39: 2d:d2:f3:c7:b0:93:08:ed:cc:95:61:f4:d4:fd:55:a4:3d:66: f9:cf:bf:fc:c5:57:7c:1b:28:92:28:21:b2:07:2b:a5:07:bd: 17:a1:d1:b5:13:6f:7f:d5:9a:54:bb:ea:08:08:83:b5:01:44: 6b:9c:af:b8:de:43:e1:65:c5:dd:70:2e:5f:ac:0f:f3:d2:c2: 2e:2c:4a:9a:8a:31:48:df:12:45:c7:41:41:a7:dc:25:63:4c: 64:ca:0e:43:ed:10:d9:de:b0:21:79:ca:7d:5c:86:b3:d4:17: ec:0d:93:f2:57:b3:34:3a:07:cc:3f:c7:b3:5e:88:87:aa:c9: aa:9c:d0:99:c4:79:56:54:43:4b:d3:ef:a8:69:46:a3:6f:84: f3:e9:8b:ee:85:e7:26:d7:c8:52:41:c5:09:6c:52:0b:d8:91: 6c:7b:cd:95 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZtBFT2WZOunF7TZXtH6OBZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMjIxMTMyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDI0YzhhMTA3MDk5NDM0ZWYwYTU4ODUwYTIzM2EzYzljNjQzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Fbo61XD17/fIaf2wWq84d67J4q vKqcojk26i2NTWMvbOg5X/SpGMw3MjnjHxwIPVrpg0RlzFyP+2JbqgiugvvvqBTL d1dbwArNh2/WyGNPAxOz2GeXrP5SH097GbT+4/sh3YygoDv3CI2AfshM4I8xHMqm xH+OdXrj8m9IZor+YjEZ6CQfk7xwUsBkgFmePGFQ8op5HcAQLZiLlA+ljYy7Wdtl WzKemy4H3lTPhE33cLDClqWHUzbo31ZKN1juJxqPlFTwnWbdqcQmC2+6Pc+PSDDO vEZMX0N/0najOFkd+mIvcQEnCawakH+4w4WD82BSFc2TRGI1Ijf9LgMW9wIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFC0kyKEHCZQ07wpYhQojOjycZDFrMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvTFNUSW9RY0psRFR2Q2xpRkNpTTZQSnhrTVdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTBCBAIAATA8AwQBBbXE AwQBUsfeAwQAW9W/AwQAW9m5AwQAuVr8AwQBuV/OAwQA1F+OAwQA1F+UAwQA1F+c AwQA1F+eMGcEAgACMGEDBwEqEvaAAgAwEgMHAioS9oACBAMHACoS9oACCDASAwcF KhL2gAIgAwcHKhL2gAIAMBEDBgEqEvaABgMHACoS9oAGAgMHACoS9oAGBDASAwcF KhL2gAYgAwcHKhL2gAYAMA0GCSqGSIb3DQEBCwUAA4IBAQAOkbNiPsFaNRApiipq 3gBwsHMkh6wde1ptg+PRrXvDrZq3HZoUUM3LAHJVv9ZcR5Tvl4OXEEtOQxlSc88n 37/VMXyK7SG1sKeZiSMBVg39D3zhtd/oHiPrjTkt0vPHsJMI7cyVYfTU/VWkPWb5 z7/8xVd8GyiSKCGyByulB70XodG1E29/1ZpUu+oICIO1AURrnK+43kPhZcXdcC5f rA/z0sIuLEqaijFI3xJFx0FBp9wlY0xkyg5D7RDZ3rAhecp9XIaz1BfsDZPyV7M0 OgfMP8ezXoiHqsmqnNCZxHlWVENL0++oaUajb4Tz6Yvuhecm18hSQcUJbFIL2JFs e82V -----END CERTIFICATE-----Generated at Tue Dec 23 22:31:17 2025 by rpki-client