This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/L3zQrDly_cgu2DtWRJFHDzULtOQ.roa File: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (raw, json) Hash identifier: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk= Subject key identifier: 2F:7C:D0:AC:39:72:FD:C8:2E:D8:3B:56:44:91:47:0F:35:0B:B4:E4 Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3 Certificate serial: 019B7834C54E9FA671C8684A42B0C8874787 Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/L3zQrDly_cgu2DtWRJFHDzULtOQ.roa Signing time: Thu 01 Jan 2026 06:18:02 +0000 ROA not before: Thu 01 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 91.220.231.0/24 maxlen: 24 2a0a:ed80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c5:4e:9f:a6:71:c8:68:4a:42:b0:c8:87:47:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f7cd0ac3972fdc82ed83b564491470f350bb4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:99:81:4a:2a:b2:25:54:5b:20:f1:7c:68: 0a:85:e3:dc:25:d9:28:4f:7f:2e:11:ba:e7:32:0e: 01:de:87:6e:50:1c:0b:0d:8b:b9:09:54:78:a2:21: fa:61:96:5a:dc:5b:fd:02:9f:5e:1b:32:e8:14:db: 61:47:2e:65:39:f9:08:5f:89:56:d8:a1:05:61:8e: 96:a4:3c:eb:56:b7:72:59:ec:af:1c:8f:fd:1f:91: ca:ff:52:df:51:7a:7e:47:8c:2f:9f:9d:28:b4:f7: a6:e2:9d:6d:ff:57:ca:40:c5:3b:c6:12:0a:f5:6b: e5:c2:1e:79:2b:56:57:dd:d1:02:1a:23:6c:9f:2d: 9c:9f:db:e4:41:64:eb:09:21:12:17:9a:6b:c3:eb: b2:17:76:fe:57:fa:83:db:79:ca:58:1b:cb:46:66: d9:dc:fd:6b:21:63:78:4e:4e:10:63:00:c4:21:6a: 47:d0:1f:dc:9f:68:d8:ee:2c:a7:d3:30:42:8c:1d: 95:7e:86:92:92:fa:b2:a5:ed:4f:2c:5d:11:e4:65: f3:4e:41:ee:44:88:a7:e9:0e:51:aa:04:b3:47:95: c7:93:81:eb:52:97:76:c4:6d:bd:78:7a:da:46:9d: 22:42:94:b5:6d:3d:67:83:f1:b7:8e:e8:23:b6:02: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:D0:AC:39:72:FD:C8:2E:D8:3B:56:44:91:47:0F:35:0B:B4:E4 X509v3 Authority Key Identifier: keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/L3zQrDly_cgu2DtWRJFHDzULtOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.231.0/24 IPv6: 2a0a:ed80::/29 Signature Algorithm: sha256WithRSAEncryption 58:19:d0:18:5e:b6:9b:d1:b4:44:a1:37:10:8f:91:a7:da:f2: 7e:7e:3a:fe:6b:90:2e:f4:08:ac:7b:6b:ea:bb:a5:59:4e:1f: f1:fc:98:af:0f:fe:ad:43:51:3d:98:c6:a0:31:0c:6c:6b:a2: 63:98:df:80:23:0d:b8:c7:ff:fa:21:14:9f:86:b7:64:2f:ed: 75:39:5d:f6:a9:a5:b6:47:32:04:62:d6:6d:85:ca:b9:81:93: f5:b5:0f:53:8a:61:55:ab:0b:ff:a1:d5:0f:d3:2d:72:9e:7f: 8a:3d:11:fb:d9:b0:d4:18:ac:6c:dd:80:3d:77:93:bb:3a:30: 8e:6a:98:23:da:37:99:fd:e1:14:67:c4:c4:52:5d:c9:79:cb: aa:f0:5c:97:36:1c:83:16:69:ac:d0:fa:49:bb:6f:4a:ea:f9: 26:62:b3:b5:80:27:df:b5:e4:1b:45:61:d7:8d:d6:3d:c3:b0: e5:77:92:32:6a:bd:3d:83:6e:a2:88:03:51:6a:f3:62:3a:4b: 8a:cc:8d:d1:ea:b0:f4:75:93:88:ac:40:d0:d6:31:df:5c:e5: 0b:b0:6f:7e:a1:d4:ec:0c:cc:fb:89:ca:ba:80:2e:9a:32:2e: 7a:c8:81:c9:ee:68:6a:b1:ba:d8:57:c7:77:85:1f:0e:bd:6b: e1:82:65:02 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NMVOn6ZxyGhKQrDIh0eHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4 NGI3YjMwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjdjZDBhYzM5NzJmZGM4MmVkODNiNTY0NDkxNDcwZjM1MGJiNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8qZgUoqsiVUWyDxfGgKhePcJdko T38uEbrnMg4B3oduUBwLDYu5CVR4oiH6YZZa3Fv9Ap9eGzLoFNthRy5lOfkIX4lW 2KEFYY6WpDzrVrdyWeyvHI/9H5HK/1LfUXp+R4wvn50otPem4p1t/1fKQMU7xhIK 9Wvlwh55K1ZX3dECGiNsny2cn9vkQWTrCSESF5prw+uyF3b+V/qD23nKWBvLRmbZ 3P1rIWN4Tk4QYwDEIWpH0B/cn2jY7iyn0zBCjB2VfoaSkvqype1PLF0R5GXzTkHu RIin6Q5RqgSzR5XHk4HrUpd2xG29eHraRp0iQpS1bT1ng/G3jugjtgKsnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC980Kw5cv3ILtg7VkSRRw81C7TkMB8GA1UdIwQY MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt NTU2MzQ3YTVmMDU2LzEvTDN6UXJEbHlfY2d1MkR0V1JKRkhEelVMdE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2 LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9znMA0E AgACMAcDBQMqCu2AMA0GCSqGSIb3DQEBCwUAA4IBAQBYGdAYXrab0bREoTcQj5Gn 2vJ+fjr+a5Au9Aise2vqu6VZTh/x/JivD/6tQ1E9mMagMQxsa6JjmN+AIw24x//6 IRSfhrdkL+11OV32qaW2RzIEYtZthcq5gZP1tQ9TimFVqwv/odUP0y1ynn+KPRH7 2bDUGKxs3YA9d5O7OjCOapgj2jeZ/eEUZ8TEUl3Jecuq8FyXNhyDFmms0PpJu29K 6vkmYrO1gCffteQbRWHXjdY9w7Dld5Iyar09g26iiANRavNiOkuKzI3R6rD0dZOI rEDQ1jHfXOULsG9+odTsDMz7icq6gC6aMi56yIHJ7mhqsbrYV8d3hR8OvWvhgmUC -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:37 2026 by rpki-client