This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/l5bd30j_MQRGXqfWahBHTqJdoFc.roa File: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (raw, json) Hash identifier: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU= Subject key identifier: 97:96:DD:DF:48:FF:31:04:46:5E:A7:D6:6A:10:47:4E:A2:5D:A0:57 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019B797EFDC568A175107A9AC48451F5388D Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/l5bd30j_MQRGXqfWahBHTqJdoFc.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214317 IP address blocks: 94.247.104.0/23 maxlen: 23 94.247.104.0/24 maxlen: 24 94.247.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:c5:68:a1:75:10:7a:9a:c4:84:51:f5:38:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9796dddf48ff3104465ea7d66a10474ea25da057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:e3:2c:33:69:e8:d8:60:0b:45:4c:90:26: 16:85:67:ec:22:82:06:a3:82:25:04:e8:0b:88:a0: 6a:0a:f3:e4:6e:f1:9a:65:69:94:89:13:24:b8:09: 21:3c:fa:8f:02:74:90:21:70:5c:ab:f8:d1:8b:15: 78:b7:3b:81:8f:d8:dc:7e:5c:d4:47:46:29:2b:c0: 19:ba:dc:ff:da:1d:b3:51:fb:fe:18:f3:92:db:f5: c2:64:fc:f0:33:de:cc:c9:3d:7e:33:20:31:6f:69: e1:2d:52:9b:6b:63:45:9e:2d:1a:79:9d:b8:c3:73: ea:88:f0:79:51:e2:9e:87:a2:80:14:3f:95:9e:3b: 22:b1:11:ee:90:94:23:4b:20:cf:5b:12:67:9a:0b: 84:3c:33:e8:bf:9d:63:22:15:97:19:b5:05:32:38: 28:33:06:a8:4b:26:95:bf:e8:2b:c7:22:5a:ee:3d: 47:84:3f:b4:a0:09:26:d4:77:e8:d8:ce:13:e7:da: 4a:6e:b7:fb:05:37:d0:86:36:26:bc:7b:24:4f:27: ec:70:c3:61:ef:8c:8b:7f:3a:ca:4c:91:05:fe:54: da:df:35:1b:85:77:9d:47:45:9a:61:87:98:3f:2f: 3a:47:e3:3f:ca:d4:81:95:5f:f0:a0:68:22:10:35: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:96:DD:DF:48:FF:31:04:46:5E:A7:D6:6A:10:47:4E:A2:5D:A0:57 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/l5bd30j_MQRGXqfWahBHTqJdoFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.104.0/23 Signature Algorithm: sha256WithRSAEncryption 92:ee:ef:b2:4c:2e:83:ae:20:39:ed:55:d0:d4:b3:4c:0c:99: 10:38:a2:22:e8:68:67:7c:79:01:f9:dd:aa:25:77:10:04:01: c8:da:81:51:d1:e8:41:25:69:10:42:be:59:ce:94:db:b3:8d: c7:cf:7e:af:6b:1a:6d:ca:d8:53:71:e0:fd:24:11:12:f4:17: 44:2e:a0:cc:96:bb:a3:1d:55:61:9a:f2:f9:df:f5:93:37:aa: 43:bf:5c:8a:09:b7:a0:a4:97:a6:24:a4:71:aa:9a:13:db:fc: 53:f6:65:1e:b7:4c:80:af:ae:ed:be:70:2f:c7:16:92:22:e6: f6:bd:42:74:8b:e3:69:92:de:62:05:60:11:9d:15:1e:01:8a: 76:3c:04:01:8d:72:ed:8a:42:04:5e:ba:f5:4e:2e:ac:99:ad: 04:5a:3d:00:ed:22:85:0a:46:8b:d7:54:c6:f6:69:5d:e9:76: ad:2f:de:2a:45:7a:df:7d:42:6c:55:1e:48:2c:66:af:16:56: 36:b6:6f:25:7b:6d:dc:ed:26:b2:e7:a0:30:66:7c:9b:37:c6: cf:0b:0d:85:59:bc:96:17:32:42:8b:4d:7b:5f:16:d4:b0:c9: 22:b6:4c:f6:ed:06:c9:63:1e:d3:1e:21:73:7f:81:e8:99:41: fc:6b:b6:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fv3FaKF1EHqaxIRR9TiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzk2ZGRkZjQ4ZmYzMTA0NDY1ZWE3ZDY2YTEwNDc0ZWEyNWRhMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tjjLDNp6NhgC0VMkCYWhWfsIoIG o4IlBOgLiKBqCvPkbvGaZWmUiRMkuAkhPPqPAnSQIXBcq/jRixV4tzuBj9jcflzU R0YpK8AZutz/2h2zUfv+GPOS2/XCZPzwM97MyT1+MyAxb2nhLVKba2NFni0aeZ24 w3PqiPB5UeKeh6KAFD+VnjsisRHukJQjSyDPWxJnmguEPDPov51jIhWXGbUFMjgo MwaoSyaVv+grxyJa7j1HhD+0oAkm1Hfo2M4T59pKbrf7BTfQhjYmvHskTyfscMNh 74yLfzrKTJEF/lTa3zUbhXedR0WaYYeYPy86R+M/ytSBlV/woGgiEDU22QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJeW3d9I/zEERl6n1moQR06iXaBXMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvbDViZDMwal9NUVJHWHFmV2FoQkhUcUpkb0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvdoMA0G CSqGSIb3DQEBCwUAA4IBAQCS7u+yTC6DriA57VXQ1LNMDJkQOKIi6GhnfHkB+d2q JXcQBAHI2oFR0ehBJWkQQr5ZzpTbs43Hz36vaxptythTceD9JBES9BdELqDMlruj HVVhmvL53/WTN6pDv1yKCbegpJemJKRxqpoT2/xT9mUet0yAr67tvnAvxxaSIub2 vUJ0i+Npkt5iBWARnRUeAYp2PAQBjXLtikIEXrr1Ti6sma0EWj0A7SKFCkaL11TG 9mld6XatL94qRXrffUJsVR5ILGavFlY2tm8le23c7Say56AwZnybN8bPCw2FWbyW FzJCi017XxbUsMkitkz27QbJYx7THiFzf4HomUH8a7Yb -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:58 2026 by rpki-client