This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa File: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (raw, json) Hash identifier: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44= Subject key identifier: 95:17:6E:64:19:3A:9C:4B:EC:45:86:5F:CD:80:59:DC:FA:0F:9A:A2 Certificate issuer: /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc Certificate serial: 019B7C80AAC26AFCF9080B587635155EB0EA Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201593 IP address blocks: 194.49.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:aa:c2:6a:fc:f9:08:0b:58:76:35:15:5e:b0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95176e64193a9c4bec45865fcd8059dcfa0f9aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:80:e0:2e:34:4d:c0:53:a8:9e:7e:eb:43: 1e:32:d9:2c:69:59:05:7e:83:9c:e1:9d:8b:3b:87: 96:09:16:6f:9f:4d:ea:d1:6f:20:2e:5a:58:15:96: 6a:bc:f9:5a:3b:21:35:7a:85:a4:c2:11:7c:e4:74: 8f:3f:e2:e9:f2:22:c7:61:ee:e5:e0:3b:52:1e:90: ac:af:3a:45:e3:10:72:84:07:aa:f9:65:27:bc:bf: b8:bb:91:09:3c:7b:84:e9:7b:aa:e3:fa:8d:57:4b: 33:12:89:9d:57:31:e6:81:20:75:b2:61:8d:94:39: 44:30:97:54:1d:93:cc:a0:19:e9:64:f7:ce:ab:35: 5a:65:5d:89:59:8b:9e:e7:5a:aa:ac:80:26:20:d6: d4:f9:4b:a5:16:cd:ce:66:0b:f9:c1:6c:22:6c:9c: 9b:0b:7c:f1:6a:7e:0b:eb:f0:21:43:e4:51:5a:e8: fb:86:3b:5f:3c:25:0c:32:7a:27:c6:fd:7c:16:ab: e0:d9:c9:e1:35:dd:64:e3:3d:d4:31:ef:e6:14:b3: 66:af:96:29:37:e4:68:95:dc:4e:c1:51:85:94:12: 30:78:7f:5b:3b:56:38:00:f5:26:a5:31:91:e7:75: c7:5a:17:6a:11:eb:21:bd:70:58:a6:a5:e6:11:14: ac:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:6E:64:19:3A:9C:4B:EC:45:86:5F:CD:80:59:DC:FA:0F:9A:A2 X509v3 Authority Key Identifier: keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.127.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:23:4d:db:df:ab:c1:94:35:a7:cf:7f:de:5e:e8:f7:44:6d: 77:13:82:8a:8d:f3:7d:ee:85:55:23:76:ff:2f:7b:60:b1:32: 6c:b7:c6:91:e2:6c:76:27:96:71:24:42:9d:bd:1f:38:fb:14: 19:7e:c1:52:cb:fc:7a:06:29:c8:9b:61:26:32:a5:78:e3:50: 42:f7:a4:be:59:73:ba:da:8c:b2:9f:23:ce:2b:21:77:60:a8: b3:61:d5:be:ab:34:9c:9d:34:04:15:b7:2f:82:90:a1:62:37: da:5b:2d:d0:8f:fa:b5:f0:62:84:75:0b:f6:91:df:1e:5f:69: a9:35:af:bd:f8:b9:e7:7b:3e:fc:1b:29:bb:04:79:d6:76:b1: c7:72:96:7c:d0:89:50:9e:0e:9f:1a:db:62:87:ff:6e:ac:80: 18:af:2d:d4:89:bf:41:f9:53:b2:56:88:84:b8:86:bf:25:f4: 91:75:4b:72:24:96:66:76:f2:85:0d:6f:e7:ed:2c:56:07:a3: ac:7b:1f:88:6c:91:61:e5:e5:cb:13:f5:c6:17:f7:4a:fe:97: 68:4b:c8:63:1a:38:17:51:54:af:a5:88:21:cc:f5:dd:ea:e1: b2:8c:bb:67:4f:18:6a:d8:75:40:55:66:f3:ab:9f:87:61:08: 41:48:57:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKrCavz5CAtYdjUVXrDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZTk3ZmJlNjdkOTVkZjZlNGE4MDY1ZTI2NzVlMDQwZDZl ODBlZmMwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTE3NmU2NDE5M2E5YzRiZWM0NTg2NWZjZDgwNTlkY2ZhMGY5YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrCA4C40TcBTqJ5+60MeMtksaVkF foOc4Z2LO4eWCRZvn03q0W8gLlpYFZZqvPlaOyE1eoWkwhF85HSPP+Lp8iLHYe7l 4DtSHpCsrzpF4xByhAeq+WUnvL+4u5EJPHuE6Xuq4/qNV0szEomdVzHmgSB1smGN lDlEMJdUHZPMoBnpZPfOqzVaZV2JWYue51qqrIAmINbU+UulFs3OZgv5wWwibJyb C3zxan4L6/AhQ+RRWuj7hjtfPCUMMnonxv18Fqvg2cnhNd1k4z3UMe/mFLNmr5Yp N+RoldxOwVGFlBIweH9bO1Y4APUmpTGR53XHWhdqEeshvXBYpqXmERSsRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUXbmQZOpxL7EWGX82AWdz6D5qiMB8GA1UdIwQY MBaAFLXpf75n2V325KgGXiZ14EDW6A78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEt YmI0NGE4MjhjZWE3LzEvbFJkdVpCazZuRXZzUllaZnpZQlozUG9QbXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEtYmI0NGE4MjhjZWE3 LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjF/MA0G CSqGSIb3DQEBCwUAA4IBAQBsI03b36vBlDWnz3/eXuj3RG13E4KKjfN97oVVI3b/ L3tgsTJst8aR4mx2J5ZxJEKdvR84+xQZfsFSy/x6BinIm2EmMqV441BC96S+WXO6 2oyynyPOKyF3YKizYdW+qzScnTQEFbcvgpChYjfaWy3Qj/q18GKEdQv2kd8eX2mp Na+9+Lnnez78Gym7BHnWdrHHcpZ80IlQng6fGttih/9urIAYry3Uib9B+VOyVoiE uIa/JfSRdUtyJJZmdvKFDW/n7SxWB6Osex+IbJFh5eXLE/XGF/dK/pdoS8hjGjgX UVSvpYghzPXd6uGyjLtnTxhq2HVAVWbzq5+HYQhBSFd7 -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:18 2026 by rpki-client