This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/L5DinjaLbuQV0jkZXih1OZYBfqc.roa File: L5DinjaLbuQV0jkZXih1OZYBfqc.roa (raw, json) Hash identifier: WGAanQ2d4to2wZRQ+tbNH5tkzGGWfUjnRpuUYpyz8UA= Subject key identifier: 2F:90:E2:9E:36:8B:6E:E4:15:D2:39:19:5E:28:75:39:96:01:7E:A7 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FF503C65AF78F511313FB516C2F4 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/L5DinjaLbuQV0jkZXih1OZYBfqc.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207348 IP address blocks: 93.170.240.0/23 maxlen: 24 95.47.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ff:50:3c:65:af:78:f5:11:31:3f:b5:16:c2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f90e29e368b6ee415d239195e28753996017ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:e9:a6:b6:f6:f8:58:79:7a:1e:01:b2:02: b1:1a:7c:d0:20:10:ea:22:86:27:ae:9f:76:d0:96: 42:c6:60:4d:42:77:fa:23:4b:40:26:c1:13:1a:db: 46:ce:ce:b6:3a:3b:70:99:0a:9c:8a:96:5e:f8:fb: 8e:46:27:71:32:98:ee:40:29:4a:48:3d:6c:37:0b: 7a:6f:9f:ff:7d:bd:ae:21:7a:0b:ff:51:fd:2d:90: 18:e5:ed:8e:08:31:49:16:41:4a:89:1c:ab:b5:11: 32:56:0c:75:9f:fe:c5:c6:61:36:8a:73:03:0f:b4: eb:1b:49:4d:fc:8b:de:94:39:a0:aa:87:ca:c6:6b: ee:48:db:ad:f0:bd:27:3d:c1:5c:d3:16:d8:83:dc: b7:3c:bb:df:9e:ff:d8:8b:31:6c:e7:55:15:e2:61: 78:66:86:bd:e1:8c:06:0e:5f:ea:51:a7:69:da:7d: be:18:48:a2:cd:ba:60:0c:cb:1b:9b:b2:6c:fc:4a: 6b:9d:fc:bc:73:82:4f:1d:03:03:0c:e4:1b:3f:97: b7:36:08:79:4a:ce:c3:17:90:a2:71:39:03:fc:ee: ed:6b:75:8b:91:01:3e:68:5c:2a:5d:ad:72:75:09: 9c:ce:20:26:fd:82:1b:e3:76:41:c8:6f:b6:b2:2a: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:90:E2:9E:36:8B:6E:E4:15:D2:39:19:5E:28:75:39:96:01:7E:A7 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/L5DinjaLbuQV0jkZXih1OZYBfqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.240.0/23 95.47.160.0/24 Signature Algorithm: sha256WithRSAEncryption 16:53:ae:2d:3f:17:71:c0:0c:b1:17:19:98:f0:01:84:18:88: f2:f7:04:9b:0b:9c:a9:a7:e6:c5:5f:ae:59:d7:9b:8e:bf:c3: e2:5f:d4:05:2f:06:14:67:7a:41:14:e6:7d:53:ec:85:36:e5: 8d:8d:a6:2c:eb:74:97:b0:7d:80:b3:57:dc:b6:3a:c5:c0:6a: 05:88:36:6e:ff:05:b9:fd:65:96:f5:91:35:4a:22:f6:20:ec: bc:80:82:b3:c8:02:75:ca:8a:52:ba:53:ea:32:18:c9:a7:ce: 4c:5c:07:47:1a:6a:55:e0:9e:bc:ed:d7:9f:60:90:67:5d:79: 56:c1:97:cb:44:0a:0e:12:53:59:f1:25:f8:41:a6:b8:69:2b: c6:d1:62:4f:81:56:6c:78:ba:04:bd:49:0c:ae:b8:2b:9a:11: 83:76:d9:a4:2f:ab:f6:e2:0f:43:42:7f:4d:90:a5:8a:26:1b: 97:67:59:63:f7:2a:d7:59:66:28:25:ec:d9:0b:41:8e:f3:a4: 5d:35:e8:9d:b2:73:ef:95:59:88:3d:df:79:f9:f4:97:cf:b6: 7a:04:f3:e7:ff:a4:bf:d9:98:ca:2d:2c:a0:a6:3d:0e:c9:ef: 58:01:1c:61:3e:cc:c2:23:89:25:21:48:27:24:bd:d2:ce:1a: 64:96:b1:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hP9QPGWvePURMT+1FsL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjkwZTI5ZTM2OGI2ZWU0MTVkMjM5MTk1ZTI4NzUzOTk2MDE3ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv33pprb2+Fh5eh4BsgKxGnzQIBDq IoYnrp920JZCxmBNQnf6I0tAJsETGttGzs62OjtwmQqcipZe+PuORidxMpjuQClK SD1sNwt6b5//fb2uIXoL/1H9LZAY5e2OCDFJFkFKiRyrtREyVgx1n/7FxmE2inMD D7TrG0lN/IvelDmgqofKxmvuSNut8L0nPcFc0xbYg9y3PLvfnv/YizFs51UV4mF4 Zoa94YwGDl/qUadp2n2+GEiizbpgDMsbm7Js/Eprnfy8c4JPHQMDDOQbP5e3Ngh5 Ss7DF5CicTkD/O7ta3WLkQE+aFwqXa1ydQmcziAm/YIb43ZByG+2sip3rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC+Q4p42i27kFdI5GV4odTmWAX6nMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvTDVEaW5qYUxidVFWMGprWlhpaDFPWllCZnFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXarwAwQA Xy+gMA0GCSqGSIb3DQEBCwUAA4IBAQAWU64tPxdxwAyxFxmY8AGEGIjy9wSbC5yp p+bFX65Z15uOv8PiX9QFLwYUZ3pBFOZ9U+yFNuWNjaYs63SXsH2As1fctjrFwGoF iDZu/wW5/WWW9ZE1SiL2IOy8gIKzyAJ1yopSulPqMhjJp85MXAdHGmpV4J687def YJBnXXlWwZfLRAoOElNZ8SX4Qaa4aSvG0WJPgVZseLoEvUkMrrgrmhGDdtmkL6v2 4g9DQn9NkKWKJhuXZ1lj9yrXWWYoJezZC0GO86RdNeidsnPvlVmIPd95+fSXz7Z6 BPPn/6S/2ZjKLSygpj0Oye9YARxhPszCI4klIUgnJL3SzhpklrGr -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:42 2026 by rpki-client