This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/l6MLB0LgtASn9W23NuichcY0SDQ.roa
File: l6MLB0LgtASn9W23NuichcY0SDQ.roa (raw, json)
Hash identifier: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=
Subject key identifier: 97:A3:0B:07:42:E0:B4:04:A7:F5:6D:B7:36:E8:9C:85:C6:34:48:34
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 019B79108ABF2E6A7107943AEA7284F83B79
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/l6MLB0LgtASn9W23NuichcY0SDQ.roa
Signing time: Thu 01 Jan 2026 10:18:05 +0000
ROA not before: Thu 01 Jan 2026 10:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399734
IP address blocks: 83.231.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 14:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:8a:bf:2e:6a:71:07:94:3a:ea:72:84:f8:3b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 1 10:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97a30b0742e0b404a7f56db736e89c85c6344834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:33:f8:30:08:6d:d6:94:87:df:36:e3:d8:
46:5e:8a:9f:8f:04:84:71:b6:44:3a:20:20:06:12:
43:06:25:19:81:6d:ff:f5:e7:fb:9c:62:92:4d:6f:
6b:00:96:1c:28:d5:33:34:11:1b:7f:20:6d:25:2e:
b7:ad:27:9c:78:55:4f:33:ea:b9:2d:b4:cb:7b:3f:
90:7f:b8:7e:76:e0:17:32:e0:cb:cb:d5:ed:03:84:
aa:19:12:68:b5:0a:cb:52:d6:9f:cc:91:27:98:f0:
d9:64:b9:d1:29:97:64:eb:0b:02:a5:76:71:34:f9:
9d:b0:27:b5:f4:d1:69:5f:be:26:08:ab:ee:6a:69:
0f:cb:69:07:64:fc:ea:cd:ce:ca:f1:96:c9:a9:36:
10:11:ef:eb:b2:af:17:c0:8a:c8:8d:c5:6b:8e:9c:
2e:a4:77:1e:13:14:ef:ef:ea:71:be:67:78:fa:4f:
51:ba:64:55:a7:b4:6a:a2:b1:42:b0:22:d1:73:52:
3d:67:db:27:1a:97:5b:7e:2c:1c:91:fa:c8:32:fd:
03:dd:99:24:ca:a9:5b:89:7a:36:63:ab:82:54:ef:
4d:ac:ed:4b:4e:53:ec:c2:19:17:30:0d:a2:0a:6e:
64:74:6a:55:9d:07:d3:d2:a9:de:94:ff:f5:a9:62:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:0B:07:42:E0:B4:04:A7:F5:6D:B7:36:E8:9C:85:C6:34:48:34
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/l6MLB0LgtASn9W23NuichcY0SDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9f:fc:e7:d2:b6:8d:0a:a2:f0:cb:19:52:fb:b9:b1:ce:b3:
53:72:5b:77:3f:7b:7d:05:06:db:23:05:29:1d:9b:52:15:12:
9f:76:10:cd:ec:c0:c3:74:f5:1e:a6:7f:7d:d0:2d:e6:7d:7c:
c7:9a:2d:5e:81:d7:15:31:ff:ca:7f:c0:60:17:7f:fe:f0:36:
c5:be:fd:9f:0d:98:4d:7a:ba:ce:47:fd:c4:ed:82:6e:7d:62:
f8:f0:df:0b:91:81:5a:60:50:57:23:65:2c:d9:24:65:6c:99:
0c:46:2a:da:0c:9a:e9:b6:99:a9:1e:9a:f4:55:79:71:a6:f0:
2a:52:39:8a:e9:81:98:ae:43:8a:ed:6f:f3:41:c1:7f:80:52:
ba:a0:8e:aa:69:ce:8b:35:4a:e0:1d:ff:a2:ff:b1:a6:e5:21:
33:6e:26:32:d8:45:29:5f:c3:86:38:5d:ee:e1:b0:6d:a2:da:
b9:68:c3:19:b8:e5:ec:66:cd:d1:7d:ba:39:33:b6:35:b1:f5:
1b:ae:ce:b9:8c:13:04:7e:15:5d:1a:c2:89:c6:66:66:a0:11:
73:3c:b5:9b:ca:d3:00:8a:21:69:67:cf:b5:7f:63:d3:28:09:
0c:ff:5a:ef:61:d2:4c:7d:01:71:24:e3:0f:5d:b3:fa:2d:b1:
7e:e7:db:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EIq/LmpxB5Q66nKE+Dt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2EzMGIwNzQyZTBiNDA0YTdmNTZkYjczNmU4OWM4NWM2MzQ0ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zgz+DAIbdaUh98249hGXoqfjwSE
cbZEOiAgBhJDBiUZgW3/9ef7nGKSTW9rAJYcKNUzNBEbfyBtJS63rSeceFVPM+q5
LbTLez+Qf7h+duAXMuDLy9XtA4SqGRJotQrLUtafzJEnmPDZZLnRKZdk6wsCpXZx
NPmdsCe19NFpX74mCKvuamkPy2kHZPzqzc7K8ZbJqTYQEe/rsq8XwIrIjcVrjpwu
pHceExTv7+pxvmd4+k9RumRVp7RqorFCsCLRc1I9Z9snGpdbfiwckfrIMv0D3Zkk
yqlbiXo2Y6uCVO9NrO1LTlPswhkXMA2iCm5kdGpVnQfT0qnelP/1qWJWCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJejCwdC4LQEp/VttzbonIXGNEg0MB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvbDZNTEIwTGd0QVNuOVcyM051aWNoY1kwU0RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+fuMA0G
CSqGSIb3DQEBCwUAA4IBAQAun/zn0raNCqLwyxlS+7mxzrNTclt3P3t9BQbbIwUp
HZtSFRKfdhDN7MDDdPUepn990C3mfXzHmi1egdcVMf/Kf8BgF3/+8DbFvv2fDZhN
errOR/3E7YJufWL48N8LkYFaYFBXI2Us2SRlbJkMRiraDJrptpmpHpr0VXlxpvAq
UjmK6YGYrkOK7W/zQcF/gFK6oI6qac6LNUrgHf+i/7Gm5SEzbiYy2EUpX8OGOF3u
4bBtotq5aMMZuOXsZs3Rfbo5M7Y1sfUbrs65jBMEfhVdGsKJxmZmoBFzPLWbytMA
iiFpZ8+1f2PTKAkM/1rvYdJMfQFxJOMPXbP6LbF+59sB
-----END CERTIFICATE-----
Generated at Sun Jan 25 00:59:03 2026 by rpki-client