This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/LZPxEvf3B7ZL8s3KaSnv9hEbQ-Y.roa File: LZPxEvf3B7ZL8s3KaSnv9hEbQ-Y.roa (raw, json) Hash identifier: uiZ9h9q7jdppXh4u03y4EH+WHn+K+FQFpio48xqokyk= Subject key identifier: 2D:93:F1:12:F7:F7:07:B6:4B:F2:CD:CA:69:29:EF:F6:11:1B:43:E6 Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019B2C2D3ED7831EE87D1098F1D25CC7A6BD Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/LZPxEvf3B7ZL8s3KaSnv9hEbQ-Y.roa Signing time: Wed 17 Dec 2025 11:58:41 +0000 ROA not before: Wed 17 Dec 2025 11:58:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60439 IP address blocks: 45.12.20.0/22 maxlen: 22 45.82.92.0/22 maxlen: 24 45.82.92.0/24 maxlen: 24 45.82.93.0/24 maxlen: 24 45.82.94.0/24 maxlen: 24 45.90.148.0/22 maxlen: 24 45.90.148.0/24 maxlen: 24 45.90.149.0/24 maxlen: 24 45.90.150.0/24 maxlen: 24 45.90.151.0/24 maxlen: 24 45.94.80.0/22 maxlen: 24 45.131.112.0/22 maxlen: 24 45.136.212.0/22 maxlen: 24 45.136.212.0/24 maxlen: 24 45.136.213.0/24 maxlen: 24 45.136.214.0/24 maxlen: 24 45.141.224.0/22 maxlen: 24 45.151.80.0/24 maxlen: 24 45.151.81.0/24 maxlen: 24 45.151.82.0/24 maxlen: 24 45.151.83.0/24 maxlen: 24 85.208.196.0/24 maxlen: 24 85.208.197.0/24 maxlen: 24 85.208.198.0/24 maxlen: 24 85.208.199.0/24 maxlen: 24 139.28.16.0/22 maxlen: 24 193.160.22.0/24 maxlen: 24 193.160.23.0/24 maxlen: 24 193.160.30.0/24 maxlen: 24 193.160.31.0/24 maxlen: 24 2a13:8240::/40 maxlen: 48 2a13:8240:42::/48 maxlen: 48 2a13:8240:100::/40 maxlen: 48 2a13:8240:200::/40 maxlen: 48 2a13:8240:205::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2d:3e:d7:83:1e:e8:7d:10:98:f1:d2:5c:c7:a6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Dec 17 11:58:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d93f112f7f707b64bf2cdca6929eff6111b43e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:f9:be:d5:81:d7:ad:95:c7:84:51:7f:43: a2:d7:05:0a:ee:c9:7b:1d:da:df:93:f9:60:43:e0: e4:76:56:83:fb:14:fc:1b:14:47:aa:3c:61:1a:88: 5f:4d:16:76:ac:1c:2e:65:bb:81:b1:6f:f1:95:3c: dc:b9:19:f3:90:dd:bb:77:3f:03:ee:4d:91:dd:b2: 2d:25:69:44:81:2c:13:68:2e:7c:5d:85:57:0e:06: c9:cf:42:37:6c:cf:80:d2:54:63:f7:72:d9:03:86: 58:64:b5:c8:71:03:32:92:14:27:07:60:95:41:e3: 34:c5:6b:56:10:2d:22:2c:69:7d:48:86:ec:bb:e8: 18:9a:7b:ed:c3:69:0d:66:9e:74:ed:14:5b:17:50: de:11:be:58:c1:3a:8e:c2:ad:de:08:aa:80:9a:27: 49:de:2f:ec:52:76:9f:f3:41:ed:27:ec:e0:07:6a: d4:c4:74:83:21:62:04:6f:b6:2a:85:18:2e:a2:d2: 29:31:59:ef:bf:c7:65:df:88:8d:2f:e6:cf:8b:c4: 22:94:80:ab:21:7d:3e:7f:83:e5:6f:60:29:bd:74: 2f:da:ac:04:29:e0:6f:e8:d9:bd:18:c1:70:20:3d: a9:9e:9d:6d:38:df:1f:ac:00:7c:78:da:2b:c4:fd: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:93:F1:12:F7:F7:07:B6:4B:F2:CD:CA:69:29:EF:F6:11:1B:43:E6 X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/LZPxEvf3B7ZL8s3KaSnv9hEbQ-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.20.0/22 45.82.92.0/22 45.90.148.0/22 45.94.80.0/22 45.131.112.0/22 45.136.212.0/22 45.141.224.0/22 45.151.80.0/22 85.208.196.0/22 139.28.16.0/22 193.160.22.0/23 193.160.30.0/23 IPv6: 2a13:8240::-2a13:8240:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 63:1c:cb:02:83:6e:7b:37:3e:92:c8:b9:04:b1:e4:93:3a:df: a2:12:d6:b2:75:f0:bf:64:79:33:d3:23:8a:21:c0:b7:97:f8: 4c:97:7c:ca:ac:4d:60:35:fc:0c:54:80:9d:ca:e0:40:66:28: fc:a2:80:e7:39:78:a7:5d:ce:81:95:dd:12:38:2d:90:d0:eb: 4f:5c:9b:fd:a1:f1:76:09:76:ff:e4:7a:10:5e:99:d0:9a:44: fa:2c:c3:2b:0e:b0:8f:74:af:e2:19:68:b4:58:ff:35:38:ab: 6e:18:3e:02:67:ec:a4:7b:e8:c2:ee:c3:04:31:fa:85:03:29: 13:f7:a5:25:4f:49:3a:aa:76:3e:ca:a1:c1:0e:77:2e:6f:70: e1:a5:28:2f:31:b1:c0:47:fd:6e:f7:92:2b:91:76:b9:2a:0f: 31:66:8d:3c:fb:4e:18:bf:4b:e6:a0:fa:69:ab:7f:dd:67:81: 51:44:22:c7:ec:88:47:71:82:3e:23:f5:3c:8d:a2:a8:eb:c2: 87:ea:52:3a:b7:d9:75:29:85:4a:8f:9d:27:5c:07:31:ed:76: 60:59:f5:b5:65:b4:74:90:6c:a3:5e:4f:88:bd:c0:55:c1:7b: b1:ab:55:4a:a9:08:23:db:9f:57:05:1f:8e:0e:77:8f:f4:12: 7a:71:3e:dc -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZssLT7Xgx7ofRCY8dJcx6a9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjUxMjE3MTE1ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkzZjExMmY3ZjcwN2I2NGJmMmNkY2E2OTI5ZWZmNjExMWI0M2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEv5vtWB162Vx4RRf0Oi1wUK7sl7 Hdrfk/lgQ+DkdlaD+xT8GxRHqjxhGohfTRZ2rBwuZbuBsW/xlTzcuRnzkN27dz8D 7k2R3bItJWlEgSwTaC58XYVXDgbJz0I3bM+A0lRj93LZA4ZYZLXIcQMykhQnB2CV QeM0xWtWEC0iLGl9SIbsu+gYmnvtw2kNZp507RRbF1DeEb5YwTqOwq3eCKqAmidJ 3i/sUnaf80HtJ+zgB2rUxHSDIWIEb7YqhRguotIpMVnvv8dl34iNL+bPi8QilICr IX0+f4Plb2ApvXQv2qwEKeBv6Nm9GMFwID2pnp1tON8frAB8eNorxP19OwIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFC2T8RL39we2S/LNymkp7/YRG0PmMB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvTFpQeEV2ZjNCN1pMOHMzS2FTbnY5aEViUS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBOBAIAATBIAwQCLQwUAwQC LVJcAwQCLVqUAwQCLV5QAwQCLYNwAwQCLYjUAwQCLY3gAwQCLZdQAwQCVdDEAwQC ixwQAwQBwaAWAwQBwaAeMBcEAgACMBEwDwMFBioTgkADBgAqE4JAAjANBgkqhkiG 9w0BAQsFAAOCAQEAYxzLAoNuezc+ksi5BLHkkzrfohLWsnXwv2R5M9MjiiHAt5f4 TJd8yqxNYDX8DFSAncrgQGYo/KKA5zl4p13OgZXdEjgtkNDrT1yb/aHxdgl2/+R6 EF6Z0JpE+izDKw6wj3Sv4hlotFj/NTirbhg+AmfspHvowu7DBDH6hQMpE/elJU9J Oqp2PsqhwQ53Lm9w4aUoLzGxwEf9bveSK5F2uSoPMWaNPPtOGL9L5qD6aat/3WeB UUQix+yIR3GCPiP1PI2iqOvCh+pSOrfZdSmFSo+dJ1wHMe12YFn1tWW0dJBso15P iL3AVcF7satVSqkII9ufVwUfjg53j/QSenE+3A== -----END CERTIFICATE-----Generated at Thu Dec 18 20:50:43 2025 by rpki-client