This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L59NpHm2NH8J1Vn3T9ajjtbJVw4.roa File: L59NpHm2NH8J1Vn3T9ajjtbJVw4.roa (raw, json) Hash identifier: JUg/5qsaI2sK4EN2k9d68hzf0eaO0Gco1ikySWF6isA= Subject key identifier: 2F:9F:4D:A4:79:B6:34:7F:09:D5:59:F7:4F:D6:A3:8E:D6:C9:57:0E Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B790FFCC2EF55268BD359E4C7430A3195 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L59NpHm2NH8J1Vn3T9ajjtbJVw4.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62159 IP address blocks: 185.32.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fc:c2:ef:55:26:8b:d3:59:e4:c7:43:0a:31:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f9f4da479b6347f09d559f74fd6a38ed6c9570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:7c:b3:3a:5a:ef:44:60:8f:28:49:e5:08: 43:dd:d4:dd:58:ee:f7:e8:dc:be:04:11:46:6f:43: 66:21:bc:3c:1a:6c:b9:ea:3f:3c:6b:5b:f0:78:e0: 81:f9:6e:b6:6e:79:10:53:d1:bb:e5:ac:2e:70:28: 2f:04:33:e4:b0:44:69:1b:24:c3:51:b5:fa:72:cb: 62:2a:81:2f:3c:f8:c8:8f:1f:6d:b6:b4:16:ce:f9: c8:d3:8c:cb:59:37:e1:c2:41:c2:62:4a:34:c1:5f: 67:79:1f:01:6c:c0:03:db:d3:f7:d5:ce:6f:04:10: 68:07:b4:c1:8c:c4:56:72:1d:fc:aa:61:2c:20:de: 39:a7:ef:06:3f:f3:27:be:5b:62:cc:68:dd:8b:81: d6:2d:be:8c:e8:0b:07:a7:3a:19:28:76:c6:13:0c: 38:fd:65:da:4f:c0:f4:b7:ea:5b:7f:0b:2e:bb:be: ad:36:4f:47:de:a6:fd:bd:99:90:23:46:aa:a3:39: b9:b1:fb:da:be:dc:8c:8a:26:ea:d7:47:af:38:2a: 0e:c3:0f:0a:d9:a8:ec:9a:98:41:c0:1f:54:90:e7: 7f:5b:d4:32:a8:6f:73:b6:11:f9:b9:6f:05:4e:ec: a1:06:84:22:a0:c0:dc:e1:f1:c9:c5:36:6e:c8:4a: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:4D:A4:79:B6:34:7F:09:D5:59:F7:4F:D6:A3:8E:D6:C9:57:0E X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L59NpHm2NH8J1Vn3T9ajjtbJVw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.181.0/24 Signature Algorithm: sha256WithRSAEncryption 97:24:8c:b0:1d:9a:34:47:9e:62:b2:91:6c:44:fc:78:ab:fc: 3b:58:b1:26:80:0a:6c:e3:c4:3a:8a:04:cc:c7:7b:65:8a:67: c6:3d:7f:4a:ca:3c:1c:99:74:88:3c:89:dd:12:6c:55:80:77: ea:ae:41:90:cc:87:2d:f3:95:af:dc:3a:55:1b:17:e9:34:a7: d7:c7:00:de:84:a1:85:ad:09:2c:b8:7e:6b:a7:45:67:59:db: 3f:d9:ce:4f:51:ca:6d:7a:36:db:8d:3a:0d:56:7c:52:a5:71: 3b:50:9c:9e:08:13:08:5e:c4:0e:a8:c4:27:0e:a9:e6:b0:9d: 98:7b:a1:63:fb:f6:98:df:c6:ae:56:18:fd:34:71:f4:e5:25: a4:f5:5c:ba:d2:cb:9f:fb:3f:7c:9d:ba:cb:89:c3:30:30:e9: 72:3f:8f:46:41:05:e1:e4:2e:8c:f6:00:fb:4e:cf:85:85:93: 80:c8:7b:f5:c1:02:d4:a9:99:82:2d:37:76:71:11:1f:a7:f9: 74:ed:a1:89:6d:0a:de:d9:c8:7f:92:49:23:a1:bd:41:da:a6: cd:a4:b9:30:c9:bd:99:64:f5:8e:e8:2e:40:05:54:a4:bd:e5: 9c:94:ac:17:2e:01:ed:c3:7f:50:bd:3e:65:79:ce:b0:ed:3e: f7:34:17:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/zC71Umi9NZ5MdDCjGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjlmNGRhNDc5YjYzNDdmMDlkNTU5Zjc0ZmQ2YTM4ZWQ2Yzk1NzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE58szpa70RgjyhJ5QhD3dTdWO73 6Ny+BBFGb0NmIbw8Gmy56j88a1vweOCB+W62bnkQU9G75awucCgvBDPksERpGyTD UbX6cstiKoEvPPjIjx9ttrQWzvnI04zLWTfhwkHCYko0wV9neR8BbMAD29P31c5v BBBoB7TBjMRWch38qmEsIN45p+8GP/MnvltizGjdi4HWLb6M6AsHpzoZKHbGEww4 /WXaT8D0t+pbfwsuu76tNk9H3qb9vZmQI0aqozm5sfvavtyMiibq10evOCoOww8K 2ajsmphBwB9UkOd/W9QyqG9zthH5uW8FTuyhBoQioMDc4fHJxTZuyEoqnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+fTaR5tjR/CdVZ90/Wo47WyVcOMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvTDU5TnBIbTJOSDhKMVZuM1Q5YWpqdGJKVnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSC1MA0G CSqGSIb3DQEBCwUAA4IBAQCXJIywHZo0R55ispFsRPx4q/w7WLEmgAps48Q6igTM x3tlimfGPX9KyjwcmXSIPIndEmxVgHfqrkGQzIct85Wv3DpVGxfpNKfXxwDehKGF rQksuH5rp0VnWds/2c5PUcptejbbjToNVnxSpXE7UJyeCBMIXsQOqMQnDqnmsJ2Y e6Fj+/aY38auVhj9NHH05SWk9Vy60suf+z98nbrLicMwMOlyP49GQQXh5C6M9gD7 Ts+FhZOAyHv1wQLUqZmCLTd2cREfp/l07aGJbQre2ch/kkkjob1B2qbNpLkwyb2Z ZPWO6C5ABVSkveWclKwXLgHtw39QvT5lec6w7T73NBcJ -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:49 2026 by rpki-client