This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/5Lz9w0B7jrAzPI5acoujGxqoJpE.roa File: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (raw, json) Hash identifier: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ= Subject key identifier: E4:BC:FD:C3:40:7B:8E:B0:33:3C:8E:5A:72:8B:A3:1B:1A:A8:26:91 Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Certificate serial: 019B7B35684AF0CB1BD29118719EF96F7BFA Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/5Lz9w0B7jrAzPI5acoujGxqoJpE.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 83.137.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:68:4a:f0:cb:1b:d2:91:18:71:9e:f9:6f:7b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4bcfdc3407b8eb0333c8e5a728ba31b1aa82691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:7f:b9:37:31:fb:13:6e:8f:05:1b:20:14: 54:c1:40:e5:c2:8b:44:fc:2a:3e:1f:d2:89:b1:0d: 90:84:be:98:e7:dc:dc:d0:22:d3:95:1f:5d:e9:39: 22:42:fd:d1:6b:5d:b4:f1:bb:d1:73:ce:02:8d:2b: 32:44:75:60:f1:e9:67:a6:5d:50:2c:72:db:2e:09: 31:db:a7:9d:8b:62:a7:91:76:63:e1:16:c6:2c:76: 96:c6:96:5a:c4:65:86:e9:4d:1a:44:b3:ab:db:ca: 59:05:35:05:10:d5:c2:5b:fc:1e:29:7d:e1:56:6e: 97:c4:f2:44:dd:39:bc:72:ce:dc:cb:fe:74:9b:de: 50:8e:1c:9f:df:7e:6d:86:94:23:28:50:c8:81:d9: bc:f2:56:a1:04:19:02:50:ee:ee:cc:df:e0:74:cf: 94:76:e5:1c:be:ba:ae:00:01:93:c4:a0:22:91:28: ce:20:ef:81:2d:65:70:7b:eb:47:ea:2d:96:11:24: 7f:a4:86:88:5c:ac:b2:d6:7d:bd:11:d6:c0:e9:74: 80:6e:dd:f1:94:1c:75:6c:86:44:9a:9a:63:ff:77: 26:94:2e:b0:0f:20:39:f9:da:a3:55:0e:e2:39:52: 09:e2:4a:9a:df:84:23:8e:3f:f9:e6:0f:d6:6f:dc: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BC:FD:C3:40:7B:8E:B0:33:3C:8E:5A:72:8B:A3:1B:1A:A8:26:91 X509v3 Authority Key Identifier: keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/5Lz9w0B7jrAzPI5acoujGxqoJpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.241.0/24 Signature Algorithm: sha256WithRSAEncryption 15:bc:dd:db:e2:bb:a3:55:96:ee:5d:39:5b:b1:02:70:3a:88: 77:b0:01:9b:2a:b7:0e:d9:8b:82:a4:1e:19:14:de:df:22:02: 4e:12:c4:0a:c0:de:a5:bb:82:fb:72:75:41:3b:7f:47:b9:12: 70:5a:1d:92:f9:04:a8:28:ee:38:b0:99:be:20:7c:26:e2:62: d0:e9:41:5c:16:39:53:fe:4c:80:21:e9:a3:b7:e8:e2:74:c4: 7b:3c:c5:d2:e2:bc:be:9e:3e:fe:dc:fb:96:b7:8b:3f:50:11: 6b:15:db:53:1a:0d:21:6b:5f:9e:6c:44:96:c7:e1:4c:62:91: 25:a5:eb:46:20:70:e4:93:4a:d0:f5:29:0a:d1:63:05:44:8f: 83:e3:35:f9:7e:a9:f4:e3:aa:73:9d:2c:f0:84:b4:24:8d:81: bd:e6:bf:22:a4:0c:0e:50:a1:17:54:51:20:aa:ba:be:39:41: 9e:cc:6a:39:55:60:28:94:79:fc:26:af:7f:07:0f:fb:6e:a0: 99:af:9a:ad:c1:30:c5:10:76:34:98:00:12:33:8b:0a:67:6c: b2:30:38:dd:45:3b:30:ff:f7:f4:27:9f:4e:65:c7:e6:33:cd: 6e:e0:2c:64:7c:61:4b:72:bf:e6:0d:22:81:df:dd:0d:bd:f7: 91:e9:f8:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWhK8Msb0pEYcZ75b3v6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2 ZjRkYjQwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJjZmRjMzQwN2I4ZWIwMzMzYzhlNWE3MjhiYTMxYjFhYTgyNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MB/uTcx+xNujwUbIBRUwUDlwotE /Co+H9KJsQ2QhL6Y59zc0CLTlR9d6TkiQv3Ra1208bvRc84CjSsyRHVg8elnpl1Q LHLbLgkx26edi2KnkXZj4RbGLHaWxpZaxGWG6U0aRLOr28pZBTUFENXCW/weKX3h Vm6XxPJE3Tm8cs7cy/50m95Qjhyf335thpQjKFDIgdm88lahBBkCUO7uzN/gdM+U duUcvrquAAGTxKAikSjOIO+BLWVwe+tH6i2WESR/pIaIXKyy1n29EdbA6XSAbt3x lBx1bIZEmppj/3cmlC6wDyA5+dqjVQ7iOVIJ4kqa34Qjjj/55g/Wb9wVwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOS8/cNAe46wMzyOWnKLoxsaqCaRMB8GA1UdIwQY MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt MmVlMmI3Mjk1ZGZmLzEvNUx6OXcwQjdqckF6UEk1YWNvdWpHeHFvSnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4nxMA0G CSqGSIb3DQEBCwUAA4IBAQAVvN3b4rujVZbuXTlbsQJwOoh3sAGbKrcO2YuCpB4Z FN7fIgJOEsQKwN6lu4L7cnVBO39HuRJwWh2S+QSoKO44sJm+IHwm4mLQ6UFcFjlT /kyAIemjt+jidMR7PMXS4ry+nj7+3PuWt4s/UBFrFdtTGg0ha1+ebESWx+FMYpEl petGIHDkk0rQ9SkK0WMFRI+D4zX5fqn046pznSzwhLQkjYG95r8ipAwOUKEXVFEg qrq+OUGezGo5VWAolHn8Jq9/Bw/7bqCZr5qtwTDFEHY0mAASM4sKZ2yyMDjdRTsw //f0J59OZcfmM81u4CxkfGFLcr/mDSKB390NvfeR6fhM -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:01 2026 by rpki-client