This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5lc5mB6krfQlfFcQhlBcoujOnZw.roa File: 5lc5mB6krfQlfFcQhlBcoujOnZw.roa (raw, json) Hash identifier: OZ3Y9SVCsPFWvekuBRVEJT1Rolywt27MFoycalwxxS0= Subject key identifier: E6:57:39:98:1E:A4:AD:F4:25:7C:57:10:86:50:5C:A2:E8:CE:9D:9C Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F23005E99CA0A51604F960069B84D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5lc5mB6krfQlfFcQhlBcoujOnZw.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43278 IP address blocks: 91.192.93.0/24 maxlen: 24 170.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:23:00:5e:99:ca:0a:51:60:4f:96:00:69:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e65739981ea4adf4257c571086505ca2e8ce9d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:a0:49:25:69:ed:ac:b9:cc:21:44:46:02: d5:67:33:2d:f3:3f:b8:97:fe:7f:b5:c3:e1:5b:14: 99:4a:38:7e:57:cf:02:6a:b1:c3:2d:5d:82:e1:ee: b0:e3:92:8f:fb:a1:26:99:2b:b1:63:a4:0d:b6:a3: db:b7:0b:c6:35:92:fd:5c:23:cc:b5:62:25:60:89: 3a:03:28:8e:98:df:95:23:c2:eb:18:bd:b6:71:8a: 5b:d1:a0:8c:ca:2b:09:57:ac:e0:d5:c8:8b:3e:4c: b1:27:82:ec:5d:d6:b7:23:00:c4:cf:5e:0a:90:f3: 9d:ec:c1:f7:cb:85:ce:71:53:98:f4:06:5c:4a:9f: c9:2d:37:ed:92:de:93:f3:a0:82:18:42:37:13:a5: 14:38:d1:04:c4:14:e4:f0:6c:10:9b:ed:83:64:d9: f6:94:fd:6f:44:68:95:01:33:62:0d:7a:98:c2:03: 48:78:a7:7a:29:f5:49:21:d3:8d:8a:fc:6e:c6:ae: 10:0c:95:c1:75:90:c2:c6:b8:2e:e5:f4:fe:0a:bc: cd:95:a2:fc:18:dd:93:9a:14:fb:49:a1:b3:06:2f: 47:9e:d3:65:86:5f:94:bd:ff:43:77:a3:cd:1c:97: a1:27:06:0d:82:1d:22:b9:d0:58:8c:3a:65:ac:1e: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:39:98:1E:A4:AD:F4:25:7C:57:10:86:50:5C:A2:E8:CE:9D:9C X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5lc5mB6krfQlfFcQhlBcoujOnZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.93.0/24 170.168.20.0/24 Signature Algorithm: sha256WithRSAEncryption 17:31:15:51:08:99:3c:c1:64:d0:9d:b5:c8:e3:a2:37:b6:a6: 97:e7:8b:1f:92:64:04:7d:a1:20:2d:76:6a:b3:ab:f7:46:0b: 04:4e:b1:ef:8c:9e:b2:36:8b:1a:ad:70:5e:ed:94:93:5b:a6: 53:c1:86:d5:8f:7c:b0:a1:e0:90:c7:3f:9b:c5:6a:b2:9c:36: c5:ab:5f:b0:d8:53:87:6f:0a:83:38:6b:57:01:45:38:7c:89: 85:5b:ed:01:2d:6d:2c:d8:d2:85:1a:a8:b6:68:f0:1a:a0:43: 0e:4d:ff:4e:57:4c:ce:27:10:c5:76:33:ca:c4:99:78:3b:be: a3:20:94:39:bf:d2:59:f3:ea:9d:fa:01:83:9e:ea:a7:36:18: 6d:c4:9d:5e:e3:ce:ba:5c:c7:0a:5d:55:fb:dc:4f:28:ed:0d: bd:58:24:12:9c:88:fa:e8:43:83:5d:9e:78:96:10:c0:21:c6: fd:97:5d:44:6a:3d:2a:c9:06:a2:43:86:2f:f8:b5:36:37:0c: 03:5f:60:58:bc:85:4f:27:05:d0:d2:b2:e1:2c:ef:3f:8b:7e: f3:45:b5:d9:99:e2:c2:c1:3a:24:bd:ef:b8:b2:c3:42:26:35: d5:95:00:b7:fa:24:62:74:5d:f3:09:23:33:d8:02:90:27:87: 8d:b8:fe:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fyMAXpnKClFgT5YAabhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjU3Mzk5ODFlYTRhZGY0MjU3YzU3MTA4NjUwNWNhMmU4Y2U5ZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmWgSSVp7ay5zCFERgLVZzMt8z+4 l/5/tcPhWxSZSjh+V88CarHDLV2C4e6w45KP+6EmmSuxY6QNtqPbtwvGNZL9XCPM tWIlYIk6AyiOmN+VI8LrGL22cYpb0aCMyisJV6zg1ciLPkyxJ4LsXda3IwDEz14K kPOd7MH3y4XOcVOY9AZcSp/JLTftkt6T86CCGEI3E6UUONEExBTk8GwQm+2DZNn2 lP1vRGiVATNiDXqYwgNIeKd6KfVJIdONivxuxq4QDJXBdZDCxrgu5fT+CrzNlaL8 GN2TmhT7SaGzBi9HntNlhl+Uvf9Dd6PNHJehJwYNgh0iudBYjDplrB4lqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOZXOZgepK30JXxXEIZQXKLozp2cMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNWxjNW1CNmtyZlFsZkZjUWhsQmNvdWpPblp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8BdAwQA qqgUMA0GCSqGSIb3DQEBCwUAA4IBAQAXMRVRCJk8wWTQnbXI46I3tqaX54sfkmQE faEgLXZqs6v3RgsETrHvjJ6yNosarXBe7ZSTW6ZTwYbVj3ywoeCQxz+bxWqynDbF q1+w2FOHbwqDOGtXAUU4fImFW+0BLW0s2NKFGqi2aPAaoEMOTf9OV0zOJxDFdjPK xJl4O76jIJQ5v9JZ8+qd+gGDnuqnNhhtxJ1e4866XMcKXVX73E8o7Q29WCQSnIj6 6EODXZ54lhDAIcb9l11Eaj0qyQaiQ4Yv+LU2NwwDX2BYvIVPJwXQ0rLhLO8/i37z RbXZmeLCwTokve+4ssNCJjXVlQC3+iRidF3zCSMz2AKQJ4eNuP7j -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:15 2026 by rpki-client