This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/l_5sj0n83h1j-KNddGTmHYrghYs.roa File: l_5sj0n83h1j-KNddGTmHYrghYs.roa (raw, json) Hash identifier: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE= Subject key identifier: 97:FE:6C:8F:49:FC:DE:1D:63:F8:A3:5D:74:64:E6:1D:8A:E0:85:8B Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Certificate serial: 019B7EA7157DFDF54D50A4EB7295612E9C6D Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/l_5sj0n83h1j-KNddGTmHYrghYs.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.243.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:15:7d:fd:f5:4d:50:a4:eb:72:95:61:2e:9c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97fe6c8f49fcde1d63f8a35d7464e61d8ae0858b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:f9:3b:17:85:de:a3:33:9b:ff:eb:92:03: c4:23:81:28:dc:0f:ea:45:6c:f7:65:92:24:c3:60: 93:88:54:62:2e:d6:94:46:c6:c2:0e:53:e6:2e:15: 8f:83:19:11:f0:92:be:f5:77:77:2c:6c:6f:d3:df: 6a:0e:67:e7:90:fa:f0:fe:2d:77:1e:50:51:66:26: 40:fa:b1:ba:5a:20:7a:52:e8:cd:7c:e2:0b:9a:f1: d1:50:6b:61:61:7f:9a:20:8c:cf:c7:e2:05:d9:dd: 3b:d3:28:5b:a5:87:28:ff:19:f9:78:9a:0d:2f:fe: da:d6:c4:1a:e5:0a:1a:e5:2e:c4:52:e6:97:be:f8: 76:b9:cc:26:12:d3:98:54:62:cb:d0:78:5e:c9:1a: eb:8b:e8:50:b0:f4:e9:a0:85:d0:52:98:72:91:8d: 95:2b:40:96:6f:35:95:80:56:bc:c3:11:2b:40:6c: a4:5d:0e:26:f3:d7:cf:a6:ef:a3:41:38:fb:1a:8f: 18:08:e7:b7:85:5c:00:1d:98:b4:00:1e:ee:e1:d0: d8:d4:fa:0a:7f:8c:b1:32:29:8f:cf:5e:62:fc:71: ce:bb:74:ab:63:9d:f5:ae:cd:39:8a:6b:76:82:54: 09:cf:e0:8b:47:53:a6:25:c3:e9:98:73:02:f9:c9: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FE:6C:8F:49:FC:DE:1D:63:F8:A3:5D:74:64:E6:1D:8A:E0:85:8B X509v3 Authority Key Identifier: keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/l_5sj0n83h1j-KNddGTmHYrghYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.24.0/22 Signature Algorithm: sha256WithRSAEncryption 85:7b:01:c0:33:61:85:76:cd:56:b2:65:25:78:0b:ec:0c:a0: 01:b0:54:85:8b:0f:ff:11:f1:f5:6f:83:80:bb:7c:b7:48:19: 5e:88:7e:e0:6f:06:c5:8d:64:8d:3b:a9:14:f4:28:d8:57:c8: c4:da:58:24:27:24:f1:c0:89:b9:e2:26:90:e4:9a:1f:3d:8e: 18:e5:32:74:36:da:3d:67:96:6b:25:0f:2f:bb:6b:b7:25:d8: 1e:60:13:8a:00:c7:8f:11:9d:29:85:18:eb:fa:91:db:fc:d6: ee:90:c5:f2:4f:6e:1b:19:8a:c2:b9:51:36:4e:0f:71:0d:39: b2:23:2e:22:89:1e:81:24:49:35:c4:c6:ea:23:d5:ee:80:ef: 5c:b7:d8:7c:20:93:fd:bb:64:11:76:97:7d:c6:1b:0b:13:71: ac:7e:39:d4:c5:1c:8b:08:1c:41:4c:e0:aa:1b:7e:19:58:c2: bf:2b:e7:87:76:0e:ce:06:db:ec:68:e0:41:74:bf:98:79:d1: 25:37:46:37:77:56:49:f9:d3:22:49:e3:d7:df:94:ef:17:75: 01:32:3e:5d:ea:00:66:55:83:84:b0:b7:83:6d:f1:72:cc:5e: df:90:93:1c:1d:e3:cf:a9:5e:3c:ab:b6:af:b5:bc:d7:6c:04: ef:9e:41:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxV9/fVNUKTrcpVhLpxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0 ODQ0YzAwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2ZlNmM4ZjQ5ZmNkZTFkNjNmOGEzNWQ3NDY0ZTYxZDhhZTA4NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgP5OxeF3qMzm//rkgPEI4Eo3A/q RWz3ZZIkw2CTiFRiLtaURsbCDlPmLhWPgxkR8JK+9Xd3LGxv099qDmfnkPrw/i13 HlBRZiZA+rG6WiB6UujNfOILmvHRUGthYX+aIIzPx+IF2d070yhbpYco/xn5eJoN L/7a1sQa5Qoa5S7EUuaXvvh2ucwmEtOYVGLL0HheyRrri+hQsPTpoIXQUphykY2V K0CWbzWVgFa8wxErQGykXQ4m89fPpu+jQTj7Go8YCOe3hVwAHZi0AB7u4dDY1PoK f4yxMimPz15i/HHOu3SrY531rs05imt2glQJz+CLR1OmJcPpmHMC+cka9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJf+bI9J/N4dY/ijXXRk5h2K4IWLMB8GA1UdIwQY MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt MDUwMjA0NTMyMjg2LzEvbF81c2owbjgzaDFqLUtOZGRHVG1IWXJnaFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2 LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufMYMA0G CSqGSIb3DQEBCwUAA4IBAQCFewHAM2GFds1WsmUleAvsDKABsFSFiw//EfH1b4OA u3y3SBleiH7gbwbFjWSNO6kU9CjYV8jE2lgkJyTxwIm54iaQ5JofPY4Y5TJ0Nto9 Z5ZrJQ8vu2u3JdgeYBOKAMePEZ0phRjr+pHb/NbukMXyT24bGYrCuVE2Tg9xDTmy Iy4iiR6BJEk1xMbqI9XugO9ct9h8IJP9u2QRdpd9xhsLE3GsfjnUxRyLCBxBTOCq G34ZWMK/K+eHdg7OBtvsaOBBdL+YedElN0Y3d1ZJ+dMiSePX35TvF3UBMj5d6gBm VYOEsLeDbfFyzF7fkJMcHePPqV48q7avtbzXbATvnkGB -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:08 2026 by rpki-client