This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/LiSuEZmo37KNrprlXWzfzY5S02k.roa File: LiSuEZmo37KNrprlXWzfzY5S02k.roa (raw, json) Hash identifier: e8rmMPPNFWDzhYmLB6a/wGnc8mLE8LxBTmrpswyhCBs= Subject key identifier: 2E:24:AE:11:99:A8:DF:B2:8D:AE:9A:E5:5D:6C:DF:CD:8E:52:D3:69 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019ADE97E6C00FE9242FAE3E51220C1068F8 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/LiSuEZmo37KNrprlXWzfzY5S02k.roa Signing time: Tue 02 Dec 2025 10:24:48 +0000 ROA not before: Tue 02 Dec 2025 10:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57324 IP address blocks: 79.132.196.0/24 maxlen: 24 79.132.197.0/24 maxlen: 24 79.132.198.0/24 maxlen: 24 79.132.199.0/24 maxlen: 24 86.111.144.0/24 maxlen: 24 86.111.145.0/24 maxlen: 24 86.111.146.0/24 maxlen: 24 86.111.147.0/24 maxlen: 24 109.230.112.0/24 maxlen: 24 109.230.114.0/24 maxlen: 24 109.230.115.0/24 maxlen: 24 109.230.120.0/24 maxlen: 24 109.230.123.0/24 maxlen: 24 109.230.126.0/24 maxlen: 24 122.102.117.0/24 maxlen: 24 122.102.118.0/24 maxlen: 24 185.113.105.0/24 maxlen: 24 202.164.192.0/24 maxlen: 24 202.164.193.0/24 maxlen: 24 202.164.194.0/24 maxlen: 24 202.164.195.0/24 maxlen: 24 202.164.197.0/24 maxlen: 24 202.164.198.0/24 maxlen: 24 202.164.199.0/24 maxlen: 24 202.164.200.0/24 maxlen: 24 202.164.201.0/24 maxlen: 24 202.164.202.0/24 maxlen: 24 202.164.203.0/24 maxlen: 24 202.164.204.0/24 maxlen: 24 202.164.205.0/24 maxlen: 24 2a03:c340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:97:e6:c0:0f:e9:24:2f:ae:3e:51:22:0c:10:68:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Dec 2 10:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e24ae1199a8dfb28dae9ae55d6cdfcd8e52d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:88:83:77:dd:3c:1c:e0:5f:2f:2b:1c:d4: 9d:5d:f0:5f:37:9a:9f:dc:fd:5b:21:02:e9:33:3d: a5:ab:67:7f:9d:aa:67:a4:ed:61:9b:2f:73:4d:f1: cc:c5:58:6e:7b:03:07:4d:83:74:81:e9:05:12:19: dc:99:b1:aa:e3:89:f6:df:ac:07:c7:88:d3:36:f0: 4c:5c:c0:8e:a2:07:7b:66:dc:90:03:87:40:90:7a: ef:8f:4c:9c:46:b9:e6:42:1e:95:26:d0:c3:41:5a: 6f:03:9c:07:5f:b0:dd:8c:d9:d4:17:c4:d0:32:c0: 7b:87:fa:45:3d:e7:d5:44:13:10:cf:ec:fc:da:11: 0d:3f:cc:4d:75:41:25:32:86:f0:03:d0:f2:eb:87: 12:bf:0e:d2:5d:60:f1:04:75:e7:d6:e1:a8:a6:65: 56:24:3a:55:19:06:81:c7:a0:9b:22:9f:62:3c:17: 44:ee:3f:34:b5:da:1b:1b:5f:9f:0f:0f:93:32:4b: 95:c6:8d:3d:d0:43:bf:11:62:3e:0d:ef:04:a2:86: 94:9c:53:ad:c6:fa:e8:e2:7d:d5:04:f2:c5:53:0c: 94:98:b5:af:25:f4:77:e5:69:10:b1:8b:ef:2c:b1: ea:44:f5:a7:0f:70:97:5d:59:42:4c:79:e5:5f:dc: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:24:AE:11:99:A8:DF:B2:8D:AE:9A:E5:5D:6C:DF:CD:8E:52:D3:69 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/LiSuEZmo37KNrprlXWzfzY5S02k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.196.0/22 86.111.144.0/22 109.230.112.0/24 109.230.114.0/23 109.230.120.0/24 109.230.123.0/24 109.230.126.0/24 122.102.117.0-122.102.118.255 185.113.105.0/24 202.164.192.0/22 202.164.197.0-202.164.205.255 IPv6: 2a03:c340::/32 Signature Algorithm: sha256WithRSAEncryption 9d:96:50:8c:d6:17:e7:f6:e1:dd:13:44:f7:bc:a1:da:50:7e: 12:11:9c:00:81:9a:3a:25:33:e8:d1:da:23:a3:c0:27:a8:d9: 32:15:5a:2d:64:01:0b:07:15:98:84:dc:c6:42:85:35:c8:54: 34:dc:04:b9:9f:8a:97:da:34:00:1c:b2:eb:bb:4b:5a:f1:1e: f2:99:ff:34:4f:66:d4:d8:ae:db:e0:27:d9:68:21:a5:a0:35: d6:dd:82:3a:01:33:fd:61:66:be:a9:a7:6b:cc:7a:f5:98:30: 31:83:fc:ae:25:ab:08:b5:d3:df:8e:e6:27:bf:4b:12:32:c6: e0:8f:06:51:a8:12:64:cf:74:1e:c5:95:a4:eb:be:af:96:75: d1:3e:49:b0:4b:f5:c2:3e:10:86:ce:5b:dc:39:d5:35:c1:a9: e7:cf:1e:17:17:cb:de:53:ce:ae:65:c3:5a:50:17:01:c2:23: f9:52:cc:de:55:9d:ec:11:53:bd:4a:d9:23:6a:e0:36:11:85: b9:e8:b8:9a:1a:ca:fe:5f:97:1c:34:32:fc:d4:3e:49:23:02: 8b:41:44:70:53:f2:78:fe:26:20:0f:45:3c:e3:89:e6:d3:a4: 18:1d:1a:b4:75:7a:b8:53:02:05:a8:63:a1:0c:6f:28:12:d2: bd:e2:09:0b -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZrel+bAD+kkL64+USIMEGj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjUxMjAyMTAyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTI0YWUxMTk5YThkZmIyOGRhZTlhZTU1ZDZjZGZjZDhlNTJkMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQSIg3fdPBzgXy8rHNSdXfBfN5qf 3P1bIQLpMz2lq2d/napnpO1hmy9zTfHMxVhuewMHTYN0gekFEhncmbGq44n236wH x4jTNvBMXMCOogd7ZtyQA4dAkHrvj0ycRrnmQh6VJtDDQVpvA5wHX7DdjNnUF8TQ MsB7h/pFPefVRBMQz+z82hENP8xNdUElMobwA9Dy64cSvw7SXWDxBHXn1uGopmVW JDpVGQaBx6CbIp9iPBdE7j80tdobG1+fDw+TMkuVxo090EO/EWI+De8EooaUnFOt xvro4n3VBPLFUwyUmLWvJfR35WkQsYvvLLHqRPWnD3CXXVlCTHnlX9zwyQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFC4krhGZqN+yja6a5V1s382OUtNpMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvTGlTdUVabW8zN0tOcnBybFhXemZ6WTVTMDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQCT4TEAwQC Vm+QAwQAbeZwAwQBbeZyAwQAbeZ4AwQAbeZ7AwQAbeZ+MAwDBAB6ZnUDBAB6ZnYD BAC5cWkDBALKpMAwDAMEAMqkxQMEAcqkzDANBAIAAjAHAwUAKgPDQDANBgkqhkiG 9w0BAQsFAAOCAQEAnZZQjNYX5/bh3RNE97yh2lB+EhGcAIGaOiUz6NHaI6PAJ6jZ MhVaLWQBCwcVmITcxkKFNchUNNwEuZ+Kl9o0AByy67tLWvEe8pn/NE9m1Niu2+An 2WghpaA11t2COgEz/WFmvqmna8x69ZgwMYP8riWrCLXT347mJ79LEjLG4I8GUagS ZM90HsWVpOu+r5Z10T5JsEv1wj4Qhs5b3DnVNcGp588eFxfL3lPOrmXDWlAXAcIj +VLM3lWd7BFTvUrZI2rgNhGFuei4mhrK/l+XHDQy/NQ+SSMCi0FEcFPyeP4mIA9F POOJ5tOkGB0atHV6uFMCBahjoQxvKBLSveIJCw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:24:13 2025 by rpki-client