This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/l_b58pljUUJymixbVYg_j7s7_b4.roa File: l_b58pljUUJymixbVYg_j7s7_b4.roa (raw, json) Hash identifier: tkw9nfwUKY8DeE3LkaxnF3Ie+Qlq21vHeZW4yxJTxd4= Subject key identifier: 97:F6:F9:F2:99:63:51:42:72:9A:2C:5B:55:88:3F:8F:BB:3B:FD:BE Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019BE361B71A027F89D78C051481992863FF Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/l_b58pljUUJymixbVYg_j7s7_b4.roa Signing time: Thu 22 Jan 2026 01:46:30 +0000 ROA not before: Thu 22 Jan 2026 01:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206336 IP address blocks: 213.165.45.0/24 maxlen: 24 213.165.47.0/24 maxlen: 24 213.165.50.0/24 maxlen: 24 213.165.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e3:61:b7:1a:02:7f:89:d7:8c:05:14:81:99:28:63:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 22 01:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97f6f9f299635142729a2c5b55883f8fbb3bfdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:64:a3:1a:b8:c2:d9:e8:77:97:93:6e:56: 73:37:02:c0:d9:8a:ce:89:32:d8:7b:6a:fe:8a:b6: bd:b9:37:71:ec:7a:61:cd:0a:f5:9a:87:21:cc:9e: d7:61:8f:cc:15:ca:84:94:4f:09:d7:f0:41:70:41: ee:ac:1f:17:a7:fb:75:dd:8e:f4:4b:07:51:2c:4e: 5e:00:f5:ba:60:31:35:a4:8c:34:18:b9:86:e7:54: 90:a3:16:86:61:7b:50:20:fd:a2:a6:df:e0:19:40: d5:cb:7b:dd:ac:85:c1:67:a5:91:ba:c8:14:41:2a: 40:01:c0:9d:96:bf:0f:ad:a9:43:1c:1d:8a:85:16: df:5b:38:3b:c8:29:c3:74:f8:76:a5:18:f9:d4:3a: f0:e1:23:a6:f6:7f:3c:c5:52:9e:92:d2:2e:72:cc: 90:14:2b:9d:fa:f3:26:af:e2:f7:ed:87:e2:6d:dd: 56:f6:eb:52:4a:36:e6:1d:a3:8f:d0:d0:96:36:3c: ab:b2:f7:ac:65:cf:42:f0:1d:b2:ad:cc:28:62:4b: 22:98:97:e0:b9:f1:48:65:df:4d:87:21:b9:4a:bf: 29:38:03:01:29:c8:dd:8b:dd:c3:6d:e8:a6:28:04: 58:0c:be:fe:0c:1d:3d:80:da:7e:d0:41:67:d1:43: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:F9:F2:99:63:51:42:72:9A:2C:5B:55:88:3F:8F:BB:3B:FD:BE X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/l_b58pljUUJymixbVYg_j7s7_b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.45.0/24 213.165.47.0/24 213.165.50.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:fb:f8:a5:28:5f:5d:a3:2e:98:e0:91:3a:89:a1:f8:91:04: 3d:51:31:98:79:f2:52:96:22:e8:47:d1:9b:95:1a:c8:79:ba: 23:7d:ed:23:dd:67:8a:9b:e2:7a:71:54:35:c8:76:4d:2a:87: 5b:8b:e0:72:fb:25:d3:02:b5:41:35:f0:13:4b:e7:27:a8:0a: f3:e5:98:cc:54:a3:c3:a4:97:10:34:ca:ab:95:a5:04:55:b2: 26:20:03:41:91:07:e4:50:ca:7d:1f:d8:a6:77:e0:b3:83:f5: 25:b2:f1:8d:81:92:25:1c:bb:6b:bc:54:e5:04:90:66:cb:2b: 9f:57:25:5b:dc:20:21:89:3b:93:2e:b5:15:b0:ad:a8:83:fb: a3:14:21:ee:6e:2e:dc:d1:4b:b4:2d:db:66:e1:b3:db:a7:be: 4e:98:37:65:ca:18:0d:b0:01:b8:d6:f4:9c:81:80:2b:e3:8e: 7f:19:81:3e:e4:64:73:e6:66:1d:8f:d0:5f:70:b5:d4:86:0d: a7:88:7d:ee:c0:5d:80:7f:76:ac:ea:cf:6b:12:a5:ef:b9:40: 47:bb:37:97:5b:77:91:7a:8a:53:ef:bb:23:3c:a2:60:58:36: af:8f:08:d5:99:f2:96:75:5f:f6:ea:b5:6d:20:9a:53:4b:d0: dc:7e:1c:a5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvjYbcaAn+J14wFFIGZKGP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTIyMDE0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2Y2ZjlmMjk5NjM1MTQyNzI5YTJjNWI1NTg4M2Y4ZmJiM2JmZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJFkoxq4wtnod5eTblZzNwLA2YrO iTLYe2r+ira9uTdx7HphzQr1mochzJ7XYY/MFcqElE8J1/BBcEHurB8Xp/t13Y70 SwdRLE5eAPW6YDE1pIw0GLmG51SQoxaGYXtQIP2ipt/gGUDVy3vdrIXBZ6WRusgU QSpAAcCdlr8PralDHB2KhRbfWzg7yCnDdPh2pRj51Drw4SOm9n88xVKektIucsyQ FCud+vMmr+L37Yfibd1W9utSSjbmHaOP0NCWNjyrsvesZc9C8B2yrcwoYksimJfg ufFIZd9NhyG5Sr8pOAMBKcjdi93DbeimKARYDL7+DB09gNp+0EFn0UPkywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJf2+fKZY1FCcposW1WIP4+7O/2+MB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvbF9iNThwbGpVVUp5bWl4YlZZZ19qN3M3X2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1aUtAwQA 1aUvAwQB1aUyMA0GCSqGSIb3DQEBCwUAA4IBAQAP+/ilKF9doy6Y4JE6iaH4kQQ9 UTGYefJSliLoR9GblRrIebojfe0j3WeKm+J6cVQ1yHZNKodbi+By+yXTArVBNfAT S+cnqArz5ZjMVKPDpJcQNMqrlaUEVbImIANBkQfkUMp9H9imd+Czg/UlsvGNgZIl HLtrvFTlBJBmyyufVyVb3CAhiTuTLrUVsK2og/ujFCHubi7c0Uu0Ldtm4bPbp75O mDdlyhgNsAG41vScgYAr445/GYE+5GRz5mYdj9BfcLXUhg2niH3uwF2Af3as6s9r EqXvuUBHuzeXW3eReopT77sjPKJgWDavjwjVmfKWdV/26rVtIJpTS9Dcfhyl -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:08 2026 by rpki-client