This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa File: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (raw, json) Hash identifier: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M= Subject key identifier: F8:B4:8E:FC:9C:8B:1B:42:48:AF:3B:87:6E:A0:3A:E1:17:BF:80:04 Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B78356303C664AD230E41863EA8B9C0DA Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa Signing time: Thu 01 Jan 2026 06:18:43 +0000 ROA not before: Thu 01 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 2.57.76.0/22 maxlen: 32 14.102.20.0/24 maxlen: 32 14.102.21.0/24 maxlen: 32 14.102.28.0/22 maxlen: 32 14.102.39.0/24 maxlen: 32 14.102.49.0/24 maxlen: 32 14.102.51.0/24 maxlen: 32 14.102.58.0/24 maxlen: 32 14.102.124.0/24 maxlen: 32 31.14.26.0/24 maxlen: 32 45.78.84.0/22 maxlen: 32 45.78.88.0/23 maxlen: 32 45.120.188.0/24 maxlen: 32 45.120.189.0/24 maxlen: 32 45.120.190.0/24 maxlen: 32 45.120.191.0/24 maxlen: 32 62.101.168.0/21 maxlen: 32 62.101.176.0/21 maxlen: 32 62.101.184.0/21 maxlen: 32 77.81.92.0/22 maxlen: 32 85.217.190.0/23 maxlen: 32 85.217.220.0/23 maxlen: 32 86.104.76.0/22 maxlen: 32 86.104.192.0/24 maxlen: 32 86.104.195.0/24 maxlen: 32 86.106.176.0/23 maxlen: 32 89.32.132.0/22 maxlen: 32 89.38.155.0/24 maxlen: 32 89.40.81.0/24 maxlen: 32 89.46.242.0/24 maxlen: 32 89.104.122.0/23 maxlen: 32 89.223.22.0/23 maxlen: 32 91.92.17.0/24 maxlen: 32 91.92.20.0/24 maxlen: 32 91.92.22.0/23 maxlen: 32 91.92.64.0/24 maxlen: 32 91.92.138.0/24 maxlen: 32 91.92.178.0/23 maxlen: 32 91.92.216.0/23 maxlen: 32 91.92.218.0/24 maxlen: 32 91.192.212.0/22 maxlen: 32 91.203.128.0/22 maxlen: 32 91.233.108.0/22 maxlen: 32 91.235.208.0/22 maxlen: 32 92.114.60.0/22 maxlen: 32 92.114.81.0/24 maxlen: 32 92.255.0.0/24 maxlen: 32 92.255.52.0/24 maxlen: 32 92.255.64.0/24 maxlen: 32 92.255.80.0/22 maxlen: 32 93.113.52.0/23 maxlen: 24 93.114.136.0/23 maxlen: 32 93.114.236.0/22 maxlen: 32 93.115.4.0/23 maxlen: 32 94.139.48.0/21 maxlen: 32 94.139.56.0/22 maxlen: 32 94.139.60.0/23 maxlen: 32 94.139.224.0/20 maxlen: 24 94.176.0.0/23 maxlen: 32 94.176.172.0/22 maxlen: 32 94.177.14.0/23 maxlen: 32 103.61.13.0/24 maxlen: 32 103.61.14.0/24 maxlen: 32 103.82.151.0/24 maxlen: 32 103.82.223.0/24 maxlen: 32 103.206.14.0/23 maxlen: 32 103.211.84.0/22 maxlen: 32 103.211.88.0/22 maxlen: 32 110.172.128.0/23 maxlen: 32 110.172.137.0/24 maxlen: 32 110.172.141.0/24 maxlen: 32 110.172.144.0/24 maxlen: 32 110.172.165.0/24 maxlen: 32 110.172.169.0/24 maxlen: 32 110.172.172.0/24 maxlen: 32 110.172.173.0/24 maxlen: 32 110.172.176.0/24 maxlen: 32 110.238.192.0/19 maxlen: 32 114.69.250.0/23 maxlen: 32 119.12.192.0/20 maxlen: 32 160.202.52.0/22 maxlen: 32 176.223.68.0/22 maxlen: 32 176.223.104.0/22 maxlen: 32 176.223.182.0/23 maxlen: 32 180.235.160.0/20 maxlen: 32 180.235.176.0/20 maxlen: 32 185.66.136.0/22 maxlen: 32 188.94.84.0/22 maxlen: 32 188.211.24.0/23 maxlen: 32 188.212.136.0/21 maxlen: 32 188.240.48.0/23 maxlen: 32 188.240.214.0/23 maxlen: 32 188.241.0.0/23 maxlen: 32 188.241.15.0/24 maxlen: 32 188.241.200.0/21 maxlen: 32 188.241.249.0/24 maxlen: 32 193.56.24.0/22 maxlen: 32 193.142.103.0/24 maxlen: 32 193.163.74.0/24 maxlen: 32 193.200.104.0/23 maxlen: 32 202.89.75.0/24 maxlen: 32 212.70.3.0/24 maxlen: 32 212.70.8.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:63:03:c6:64:ad:23:0e:41:86:3e:a8:b9:c0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 1 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b48efc9c8b1b4248af3b876ea03ae117bf8004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:8a:df:40:a1:13:a3:4e:6d:61:38:a7:cf: 61:95:3a:0d:ff:c4:a3:6f:29:39:b4:d7:06:c9:89: 29:64:c2:96:3e:84:dc:95:2f:ce:38:64:d5:45:0c: c5:1e:43:64:bb:cb:ac:1a:35:25:d3:a3:a7:7b:ae: db:bf:2c:7a:84:84:68:2c:d3:84:dd:99:64:a5:78: 9c:d1:a8:1e:a8:fd:5b:30:c0:92:dc:d5:bb:3c:91: de:46:ce:ab:60:63:3e:84:f2:f1:b5:b9:32:23:52: 9c:9d:00:e6:ab:1d:48:8f:f8:91:34:66:47:6a:a6: 8e:15:5f:84:c2:2a:b3:01:e0:3f:a3:00:bf:0b:8b: 34:95:44:5c:b4:fd:65:0a:d7:6b:c4:ef:45:82:f7: b4:4c:27:d1:28:3f:dc:40:87:fa:06:90:3a:d9:ee: 45:a6:10:e4:14:4a:04:c0:be:11:04:62:39:36:78: e1:1b:17:b8:9c:3a:53:ba:57:e3:bf:df:29:9e:33: 1a:7c:00:d2:89:23:11:27:99:a9:99:0d:16:83:69: 65:95:2a:0e:45:70:33:fe:e2:b2:75:bc:b0:2f:f4: 59:ad:a2:da:7c:df:df:57:0c:c3:1f:8c:19:b8:53: c1:00:f8:98:79:97:a1:79:1e:17:46:56:c7:41:4e: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:8E:FC:9C:8B:1B:42:48:AF:3B:87:6E:A0:3A:E1:17:BF:80:04 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.76.0/22 14.102.20.0/23 14.102.28.0/22 14.102.39.0/24 14.102.49.0/24 14.102.51.0/24 14.102.58.0/24 14.102.124.0/24 31.14.26.0/24 45.78.84.0-45.78.89.255 45.120.188.0/22 62.101.168.0-62.101.191.255 77.81.92.0/22 85.217.190.0/23 85.217.220.0/23 86.104.76.0/22 86.104.192.0/24 86.104.195.0/24 86.106.176.0/23 89.32.132.0/22 89.38.155.0/24 89.40.81.0/24 89.46.242.0/24 89.104.122.0/23 89.223.22.0/23 91.92.17.0/24 91.92.20.0/24 91.92.22.0/23 91.92.64.0/24 91.92.138.0/24 91.92.178.0/23 91.92.216.0-91.92.218.255 91.192.212.0/22 91.203.128.0/22 91.233.108.0/22 91.235.208.0/22 92.114.60.0/22 92.114.81.0/24 92.255.0.0/24 92.255.52.0/24 92.255.64.0/24 92.255.80.0/22 93.113.52.0/23 93.114.136.0/23 93.114.236.0/22 93.115.4.0/23 94.139.48.0-94.139.61.255 94.139.224.0/20 94.176.0.0/23 94.176.172.0/22 94.177.14.0/23 103.61.13.0-103.61.14.255 103.82.151.0/24 103.82.223.0/24 103.206.14.0/23 103.211.84.0-103.211.91.255 110.172.128.0/23 110.172.137.0/24 110.172.141.0/24 110.172.144.0/24 110.172.165.0/24 110.172.169.0/24 110.172.172.0/23 110.172.176.0/24 110.238.192.0/19 114.69.250.0/23 119.12.192.0/20 160.202.52.0/22 176.223.68.0/22 176.223.104.0/22 176.223.182.0/23 180.235.160.0/19 185.66.136.0/22 188.94.84.0/22 188.211.24.0/23 188.212.136.0/21 188.240.48.0/23 188.240.214.0/23 188.241.0.0/23 188.241.15.0/24 188.241.200.0/21 188.241.249.0/24 193.56.24.0/22 193.142.103.0/24 193.163.74.0/24 193.200.104.0/23 202.89.75.0/24 212.70.3.0/24 212.70.8.0/21 Signature Algorithm: sha256WithRSAEncryption 08:12:48:30:a9:ac:4c:95:f7:a0:9f:2d:3b:9e:7c:ab:59:21: 63:6f:23:04:47:9e:96:6c:8c:af:a0:4c:d4:fe:51:e2:5f:bb: 16:2e:36:fb:91:15:80:a6:b8:f3:53:32:8a:b1:68:24:25:6c: 2f:8f:b0:e0:67:db:18:6d:51:a9:3e:e9:70:07:f9:bc:1b:74: 5f:c7:d5:05:6d:fb:a5:30:c0:5b:e7:11:58:ca:3c:86:ee:96: b4:6f:f9:bb:39:58:f4:54:be:87:20:03:25:e5:69:28:a4:94: b2:35:97:86:49:9c:f7:7a:8c:c5:00:d9:69:72:1d:4e:8e:54: 3f:61:32:ff:af:85:a4:cc:e3:e8:ee:8d:93:12:17:1c:59:a8: ff:f5:0d:60:e0:56:f4:11:bd:b3:5e:03:41:a3:78:39:86:92: f5:49:e7:12:df:28:85:fe:59:52:f6:a7:6f:54:e9:ce:03:05: 1c:ee:25:b1:92:36:c0:0b:01:0b:c6:b5:65:c0:b6:10:84:18: fd:3e:21:a2:47:3a:10:1a:84:07:c2:5d:5a:b4:1c:02:58:56: 3a:c9:94:ca:c9:4f:a9:18:e6:b9:21:36:c7:d5:f5:2e:52:3f: 74:ce:5b:71:f0:e8:3d:3a:d5:2f:8e:70:74:2b:84:9f:fd:93: 7d:7b:6c:91 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgISAZt4NWMDxmStIw5Bhj6oucDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTAxMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI0OGVmYzljOGIxYjQyNDhhZjNiODc2ZWEwM2FlMTE3YmY4MDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZiK30ChE6NObWE4p89hlToN/8Sj byk5tNcGyYkpZMKWPoTclS/OOGTVRQzFHkNku8usGjUl06One67bvyx6hIRoLNOE 3ZlkpXic0ageqP1bMMCS3NW7PJHeRs6rYGM+hPLxtbkyI1KcnQDmqx1Ij/iRNGZH aqaOFV+EwiqzAeA/owC/C4s0lURctP1lCtdrxO9Fgve0TCfRKD/cQIf6BpA62e5F phDkFEoEwL4RBGI5NnjhGxe4nDpTulfjv98pnjMafADSiSMRJ5mpmQ0Wg2lllSoO RXAz/uKydbywL/RZraLafN/fVwzDH4wZuFPBAPiYeZeheR4XRlbHQU6IuQIDAQAB o4IEVDCCBFAwHQYDVR0OBBYEFPi0jvycixtCSK87h26gOuEXv4AEMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEvMS1MU09fSnlMRzBKSXJ6dUhicUE2NFJlX2dBUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvNDM3ODk3LWFmNTgtNDk1OS04ZTc2LWVlZGQ5NGVjMTI4 Yy8xL3hFMjRzSmc2ejVlakpWRlN3dXBaS3RybmMxcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAmcGCCsGAQUFBwEHAQH/BIICVjCCAlIwggJOBAIAATCC AkYDBAICOUwDBAEOZhQDBAIOZhwDBAAOZicDBAAOZjEDBAAOZjMDBAAOZjoDBAAO ZnwDBAAfDhowDAMEAi1OVAMEAS1OWAMEAi14vDAMAwQDPmWoAwQGPmWAAwQCTVFc AwQBVdm+AwQBVdncAwQCVmhMAwQAVmjAAwQAVmjDAwQBVmqwAwQCWSCEAwQAWSab AwQAWShRAwQAWS7yAwQBWWh6AwQBWd8WAwQAW1wRAwQAW1wUAwQBW1wWAwQAW1xA AwQAW1yKAwQBW1yyMAwDBANbXNgDBABbXNoDBAJbwNQDBAJby4ADBAJb6WwDBAJb 69ADBAJccjwDBABcclEDBABc/wADBABc/zQDBABc/0ADBAJc/1ADBAFdcTQDBAFd cogDBAJdcuwDBAFdcwQwDAMEBF6LMAMEAV6LPAMEBF6L4AMEAV6wAAMEAl6wrAME AV6xDjAMAwQAZz0NAwQAZz0OAwQAZ1KXAwQAZ1LfAwQBZ84OMAwDBAJn01QDBAJn 01gDBAFurIADBABurIkDBABurI0DBABurJADBABurKUDBABurKkDBAFurKwDBABu rLADBAVu7sADBAFyRfoDBAR3DMADBAKgyjQDBAKw30QDBAKw32gDBAGw37YDBAW0 66ADBAK5QogDBAK8XlQDBAG80xgDBAO81IgDBAG88DADBAG88NYDBAG88QADBAC8 8Q8DBAO88cgDBAC88fkDBALBOBgDBADBjmcDBADBo0oDBAHByGgDBADKWUsDBADU RgMDBAPURggwDQYJKoZIhvcNAQELBQADggEBAAgSSDCprEyV96CfLTuefKtZIWNv IwRHnpZsjK+gTNT+UeJfuxYuNvuRFYCmuPNTMoqxaCQlbC+PsOBn2xhtUak+6XAH +bwbdF/H1QVt+6UwwFvnEVjKPIbulrRv+bs5WPRUvocgAyXlaSiklLI1l4ZJnPd6 jMUA2WlyHU6OVD9hMv+vhaTM4+jujZMSFxxZqP/1DWDgVvQRvbNeA0GjeDmGkvVJ 5xLfKIX+WVL2p29U6c4DBRzuJbGSNsALAQvGtWXAthCEGP0+IaJHOhAahAfCXVq0 HAJYVjrJlMrJT6kY5rkhNsfV9S5SP3TOW3Hw6D061S+OcHQrhJ/9k317bJE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:06 2026 by rpki-client