This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/L5pCjalqFD7k2rP1GiaDtM0cCgc.roa File: L5pCjalqFD7k2rP1GiaDtM0cCgc.roa (raw, json) Hash identifier: 2H065mG7FaJdzatkorILsgskdaChkV/30HaIDDq9FFA= Subject key identifier: 2F:9A:42:8D:A9:6A:14:3E:E4:DA:B3:F5:1A:26:83:B4:CD:1C:0A:07 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5EFC9ABB00A8C7C87FECE4B61F55 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/L5pCjalqFD7k2rP1GiaDtM0cCgc.roa Signing time: Fri 02 Jan 2026 02:18:00 +0000 ROA not before: Fri 02 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201908 IP address blocks: 212.91.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5e:fc:9a:bb:00:a8:c7:c8:7f:ec:e4:b6:1f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f9a428da96a143ee4dab3f51a2683b4cd1c0a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:9a:33:c8:27:2a:7c:5b:76:84:eb:52:c9: 8b:a0:3d:da:f2:cb:d1:33:f3:fd:89:fd:c5:38:b9: c0:29:0d:bc:2b:bf:5e:20:40:bb:e7:b1:06:f0:b6: 5c:a8:fb:5d:13:e1:5a:84:af:8f:92:4f:e6:45:f9: 8e:c5:44:25:70:93:f9:6f:95:c5:5e:b3:75:69:9d: df:fe:ba:b3:08:b5:13:fb:77:bc:a6:5c:16:0f:92: 9f:c6:7e:0f:bd:5d:49:6e:3d:71:06:bc:e4:23:07: ac:65:ad:e2:72:c4:18:04:40:d8:be:88:3f:54:e7: a1:f2:7d:ad:69:29:87:3b:31:fa:af:a7:9e:25:4a: d0:09:c5:ce:8e:98:c9:8b:50:27:58:d7:e0:62:bd: 4d:bd:79:ed:14:6f:a6:9b:1e:07:c1:50:8d:80:82: 5c:52:15:15:b5:52:cc:95:a0:c3:e5:32:04:9c:7b: 6c:7d:76:20:19:9d:7f:d9:e6:ac:41:8d:8c:62:8a: 48:b3:bb:9a:67:d6:d6:d5:27:75:99:8e:42:b7:9e: 2b:3f:51:d3:7f:81:3b:06:63:b9:b5:02:59:c6:c2: 71:90:e6:cf:43:d6:bf:c1:2f:2a:52:00:10:2f:37: 9c:a4:62:8b:76:1a:75:7f:a3:49:50:2d:f9:19:a9: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9A:42:8D:A9:6A:14:3E:E4:DA:B3:F5:1A:26:83:B4:CD:1C:0A:07 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/L5pCjalqFD7k2rP1GiaDtM0cCgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.91.30.0/23 Signature Algorithm: sha256WithRSAEncryption 84:fa:88:45:cb:a2:08:f3:c6:ea:2f:84:88:65:37:5b:33:aa: db:54:b2:22:b0:ad:aa:04:69:98:f2:13:bc:96:c8:98:9d:a8: 91:f4:ac:a5:da:05:c1:2f:0f:67:e8:91:8c:10:9b:13:6d:43: c8:f2:92:94:e7:c8:80:b9:73:e5:a8:ce:bd:0d:ed:74:83:87: d1:f5:d9:b5:83:18:a1:68:87:dc:aa:c1:6d:5d:a6:99:4b:6d: 53:a7:b4:7f:d7:14:97:98:2a:6c:50:73:ba:9c:e6:d4:77:e0: ee:4d:a2:54:df:fb:6d:f0:22:81:33:ca:60:6e:47:8f:9e:40: fd:94:d8:21:0b:57:e8:07:45:65:3e:6c:de:44:da:14:10:6c: cb:0d:4b:7f:1d:1e:2d:6d:a3:e2:6d:65:1d:2c:30:f0:61:8f: 7f:24:f4:db:d9:4b:dc:79:cc:c4:3b:88:9f:5d:bd:85:af:96: 81:49:24:7d:04:88:44:23:28:a1:c7:46:bc:85:0d:c3:7f:78: 36:ba:62:9a:18:b0:67:05:a8:f9:9f:90:42:6d:44:81:7d:3c: 9d:b0:29:e0:10:fb:68:c3:4a:19:09:e9:00:05:b3:e6:17:d4: 01:a3:0d:ed:c3:11:59:92:cd:c6:ce:f1:35:57:80:59:86:5b: 05:e4:20:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f178mrsAqMfIf+zkth9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjlhNDI4ZGE5NmExNDNlZTRkYWIzZjUxYTI2ODNiNGNkMWMwYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9aaM8gnKnxbdoTrUsmLoD3a8svR M/P9if3FOLnAKQ28K79eIEC757EG8LZcqPtdE+FahK+Pkk/mRfmOxUQlcJP5b5XF XrN1aZ3f/rqzCLUT+3e8plwWD5Kfxn4PvV1Jbj1xBrzkIwesZa3icsQYBEDYvog/ VOeh8n2taSmHOzH6r6eeJUrQCcXOjpjJi1AnWNfgYr1NvXntFG+mmx4HwVCNgIJc UhUVtVLMlaDD5TIEnHtsfXYgGZ1/2easQY2MYopIs7uaZ9bW1Sd1mY5Ct54rP1HT f4E7BmO5tQJZxsJxkObPQ9a/wS8qUgAQLzecpGKLdhp1f6NJUC35Gal7cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+aQo2pahQ+5Nqz9Romg7TNHAoHMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvTDVwQ2phbHFGRDdrMnJQMUdpYUR0TTBjQ2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FseMA0G CSqGSIb3DQEBCwUAA4IBAQCE+ohFy6II88bqL4SIZTdbM6rbVLIisK2qBGmY8hO8 lsiYnaiR9Kyl2gXBLw9n6JGMEJsTbUPI8pKU58iAuXPlqM69De10g4fR9dm1gxih aIfcqsFtXaaZS21Tp7R/1xSXmCpsUHO6nObUd+DuTaJU3/tt8CKBM8pgbkePnkD9 lNghC1foB0VlPmzeRNoUEGzLDUt/HR4tbaPibWUdLDDwYY9/JPTb2UvceczEO4if Xb2Fr5aBSSR9BIhEIyihx0a8hQ3Df3g2umKaGLBnBaj5n5BCbUSBfTydsCngEPto w0oZCekABbPmF9QBow3twxFZks3GzvE1V4BZhlsF5CCb -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client