This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/L5eTLBvqKUwitE65briOF06m3VU.roa File: L5eTLBvqKUwitE65briOF06m3VU.roa (raw, json) Hash identifier: T6KgjxG0s3OapXDs1UaaVbk0Bs0ldleQJRHWiBwfAbo= Subject key identifier: 2F:97:93:2C:1B:EA:29:4C:22:B4:4E:B9:6E:B8:8E:17:4E:A6:DD:55 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8471C90D6DDC30DB15CFA3A3FDAFF3 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/L5eTLBvqKUwitE65briOF06m3VU.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203611 IP address blocks: 213.14.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:71:c9:0d:6d:dc:30:db:15:cf:a3:a3:fd:af:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f97932c1bea294c22b44eb96eb88e174ea6dd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:ab:bd:f9:00:3f:3b:04:39:fe:95:f2:1c: cf:70:30:e2:ed:61:99:0d:19:35:01:ad:af:3c:7b: ec:6d:e1:3e:33:a9:e5:1e:20:92:73:ba:c2:6e:bb: a3:b7:e0:f5:7c:19:c1:e5:35:8f:84:3c:34:38:a4: 59:ef:b7:da:5b:a6:2d:5d:da:f0:22:ad:72:96:0f: ca:87:5f:e8:da:76:66:1f:29:10:04:ce:20:21:42: 97:8d:1a:85:99:ec:24:93:d7:8f:dd:1d:08:86:7a: 36:50:8d:a7:e6:bb:dd:93:07:2d:e0:44:8c:89:35: fe:22:5e:a6:63:de:f2:45:50:ea:97:ea:30:89:59: 01:8d:6e:8e:dc:20:96:1d:d0:26:af:5f:e7:bb:8a: e1:77:14:3f:97:8a:e9:5b:f0:e2:5d:11:54:22:75: 69:6c:58:b9:1e:db:67:80:c6:0d:7f:f0:c3:77:8b: 4e:db:f1:cd:c7:02:d3:bb:24:28:5a:67:12:1e:e3: 65:6f:fe:93:7b:82:18:78:79:4e:1d:7e:b7:97:59: 0f:62:ef:40:49:1b:2c:df:eb:32:64:79:9e:7f:15: 38:a4:b2:8c:55:0c:da:46:3e:73:42:7d:7a:19:59: 65:dc:fa:bd:6c:67:e5:5d:cb:84:fb:35:d4:d7:c1: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:97:93:2C:1B:EA:29:4C:22:B4:4E:B9:6E:B8:8E:17:4E:A6:DD:55 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/L5eTLBvqKUwitE65briOF06m3VU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.14.243.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c3:75:ce:42:a3:88:b8:8b:2a:8b:eb:23:f2:a3:23:45:e9: ef:4c:b2:17:7c:7c:fb:37:ed:17:af:98:4c:8c:b8:91:83:de: 2a:44:28:58:b2:61:d9:6e:c1:f0:77:6f:44:f8:de:57:26:82: 9a:3e:24:d1:88:25:b9:8d:7a:30:17:38:38:f0:14:5f:e5:3e: 54:8b:29:5b:3d:67:29:fb:3b:22:dc:f8:7d:74:2f:7b:af:98: 85:58:11:49:0e:64:56:e9:25:73:26:03:4d:0b:86:9c:0d:62: 16:83:8b:a7:c3:67:27:60:3b:b6:8b:a3:df:1c:d6:19:fa:a4: 32:d5:b5:7a:fc:6d:85:b4:a9:90:79:0b:6e:0d:f1:d6:80:9c: 45:6c:59:ae:43:cc:ef:20:21:e2:6b:4c:b3:61:1d:60:05:5c: f1:16:0c:08:c1:c6:d6:1f:75:29:70:4c:91:a9:0d:e7:75:18: 81:b5:d0:67:e7:c0:ae:71:5a:b9:76:95:7f:fd:bd:0a:df:0e: be:02:34:c1:ab:e0:c6:58:55:7c:07:4a:8b:79:a2:c0:c8:a4: 46:63:b9:c3:19:da:1b:45:c4:ce:1d:45:52:7b:e4:2b:3b:04: 23:cb:03:1b:3e:2a:67:1a:c5:b7:99:7a:8f:12:fb:5c:d2:0f: 7a:3f:52:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHHJDW3cMNsVz6Oj/a/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjk3OTMyYzFiZWEyOTRjMjJiNDRlYjk2ZWI4OGUxNzRlYTZkZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBWrvfkAPzsEOf6V8hzPcDDi7WGZ DRk1Aa2vPHvsbeE+M6nlHiCSc7rCbrujt+D1fBnB5TWPhDw0OKRZ77faW6YtXdrw Iq1ylg/Kh1/o2nZmHykQBM4gIUKXjRqFmewkk9eP3R0Ihno2UI2n5rvdkwct4ESM iTX+Il6mY97yRVDql+owiVkBjW6O3CCWHdAmr1/nu4rhdxQ/l4rpW/DiXRFUInVp bFi5HttngMYNf/DDd4tO2/HNxwLTuyQoWmcSHuNlb/6Te4IYeHlOHX63l1kPYu9A SRss3+syZHmefxU4pLKMVQzaRj5zQn16GVll3Pq9bGflXcuE+zXU18EZtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+Xkywb6ilMIrROuW64jhdOpt1VMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvTDVlVExCdnFLVXdpdEU2NWJyaU9GMDZtM1ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7zMA0G CSqGSIb3DQEBCwUAA4IBAQB6w3XOQqOIuIsqi+sj8qMjRenvTLIXfHz7N+0Xr5hM jLiRg94qRChYsmHZbsHwd29E+N5XJoKaPiTRiCW5jXowFzg48BRf5T5UiylbPWcp +zsi3Ph9dC97r5iFWBFJDmRW6SVzJgNNC4acDWIWg4unw2cnYDu2i6PfHNYZ+qQy 1bV6/G2FtKmQeQtuDfHWgJxFbFmuQ8zvICHia0yzYR1gBVzxFgwIwcbWH3UpcEyR qQ3ndRiBtdBn58CucVq5dpV//b0K3w6+AjTBq+DGWFV8B0qLeaLAyKRGY7nDGdob RcTOHUVSe+QrOwQjywMbPipnGsW3mXqPEvtc0g96P1JX -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:18 2026 by rpki-client