This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/g5UC2_gEiY8qR2lL0R_mIadH9a8.roa File: g5UC2_gEiY8qR2lL0R_mIadH9a8.roa (raw, json) Hash identifier: UVfnvyfCrtEFC4VZZRzHuaDZ2CJvZf6Dd6EnsrlxGTI= Subject key identifier: 83:95:02:DB:F8:04:89:8F:2A:47:69:4B:D1:1F:E6:21:A7:47:F5:AF Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B791006C2D7902AD493ABAA00B31CBD8E Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/g5UC2_gEiY8qR2lL0R_mIadH9a8.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210273 IP address blocks: 94.125.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:06:c2:d7:90:2a:d4:93:ab:aa:00:b3:1c:bd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=839502dbf804898f2a47694bd11fe621a747f5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:6e:74:02:81:79:03:ea:a2:0f:8c:8e:af: 3a:48:14:d4:6c:64:58:92:9f:c5:92:12:0d:d0:59: e1:15:0e:bf:57:74:7e:da:74:f0:67:59:c6:4f:f0: 38:9d:9d:cd:9c:5c:c9:71:54:c6:54:0b:98:ac:1e: ca:24:0f:40:84:19:27:ca:83:29:ae:9f:26:21:4e: 88:f3:e0:a1:a2:e1:05:59:fd:4f:34:e4:18:fa:4d: c1:6a:ce:f6:5b:41:e9:07:c9:fb:4e:bc:90:cc:f4: 6a:6d:5b:93:61:9b:a7:ff:d4:68:ee:56:5f:92:fc: 20:1a:69:f9:93:d0:5f:1f:22:7e:d8:f3:ad:ba:aa: ff:5f:92:79:40:89:48:07:e6:f6:b4:3c:14:95:d9: a4:4f:97:07:ba:d3:67:51:90:78:10:e2:36:79:2a: 4a:2f:c4:9a:a4:b7:e5:bc:9b:50:85:b9:db:54:b7: e4:44:bd:37:e4:92:11:e7:56:87:04:1e:9c:9a:9f: 9a:fc:5a:75:4e:74:1a:54:b2:84:d9:a1:3b:ea:a5: 72:32:59:05:84:25:d9:bf:b5:a3:c1:08:ec:e5:75: 49:fe:d4:0b:bf:af:2b:3c:77:de:e3:73:f3:8b:3d: 67:a9:c4:65:cf:8b:8f:3a:56:83:f1:44:54:40:72: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:95:02:DB:F8:04:89:8F:2A:47:69:4B:D1:1F:E6:21:A7:47:F5:AF X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/g5UC2_gEiY8qR2lL0R_mIadH9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.99.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:2c:93:73:ea:91:80:0b:6a:a2:f1:c3:55:35:5e:77:c3:44: 7d:56:25:9d:00:ec:50:86:a3:d5:6d:b6:aa:d8:3d:92:0f:5a: c6:92:b8:9d:0b:ed:b1:1c:de:b9:ad:89:4a:6c:5b:a8:b0:af: a3:d6:7c:a4:71:f8:a8:81:eb:3b:f8:9b:fb:55:87:3a:94:08: 6a:64:5b:7a:d6:12:19:3e:ab:ed:14:61:7c:a3:4d:37:20:d4: 48:37:4d:ed:a2:43:da:a5:ef:62:ee:1b:9d:26:f0:f5:b2:e0: 00:51:6d:90:90:3f:9c:13:3c:aa:ab:45:c3:76:9c:03:35:a6: 00:8c:30:80:f0:53:a0:61:1d:8f:4a:46:da:6d:af:bd:9d:8b: b0:9c:4f:19:36:68:a1:89:e2:53:e5:e7:db:60:74:a6:0b:ad: 04:9d:9e:c3:2c:59:dc:31:a7:72:54:1a:c4:26:28:bd:7e:44: 76:3e:b6:b6:63:ba:71:01:85:7a:d3:87:a6:ed:5a:ad:5d:e7: c7:b8:0a:2d:fa:e5:b8:d9:8c:56:18:ac:94:29:92:93:12:d1: 59:0f:a7:de:c7:b7:75:50:02:bd:10:69:39:da:54:19:04:b1: be:99:36:2f:ac:8d:65:f5:7b:4e:0e:17:15:e7:dd:48:32:ec: b8:f1:c5:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAbC15Aq1JOrqgCzHL2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk1MDJkYmY4MDQ4OThmMmE0NzY5NGJkMTFmZTYyMWE3NDdmNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP5udAKBeQPqog+Mjq86SBTUbGRY kp/FkhIN0FnhFQ6/V3R+2nTwZ1nGT/A4nZ3NnFzJcVTGVAuYrB7KJA9AhBknyoMp rp8mIU6I8+ChouEFWf1PNOQY+k3Bas72W0HpB8n7TryQzPRqbVuTYZun/9Ro7lZf kvwgGmn5k9BfHyJ+2POtuqr/X5J5QIlIB+b2tDwUldmkT5cHutNnUZB4EOI2eSpK L8SapLflvJtQhbnbVLfkRL035JIR51aHBB6cmp+a/Fp1TnQaVLKE2aE76qVyMlkF hCXZv7WjwQjs5XVJ/tQLv68rPHfe43Pziz1nqcRlz4uPOlaD8URUQHI/8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOVAtv4BImPKkdpS9Ef5iGnR/WvMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvZzVVQzJfZ0VpWThxUjJsTDBSX21JYWRIOWE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXn1jMA0G CSqGSIb3DQEBCwUAA4IBAQCPLJNz6pGAC2qi8cNVNV53w0R9ViWdAOxQhqPVbbaq 2D2SD1rGkridC+2xHN65rYlKbFuosK+j1nykcfioges7+Jv7VYc6lAhqZFt61hIZ PqvtFGF8o003INRIN03tokPape9i7hudJvD1suAAUW2QkD+cEzyqq0XDdpwDNaYA jDCA8FOgYR2PSkbaba+9nYuwnE8ZNmihieJT5efbYHSmC60EnZ7DLFncMadyVBrE Jii9fkR2Pra2Y7pxAYV604em7VqtXefHuAot+uW42YxWGKyUKZKTEtFZD6fex7d1 UAK9EGk52lQZBLG+mTYvrI1l9XtODhcV591IMuy48cXD -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:02 2026 by rpki-client