This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/L-n62_-n406OrplxAWexZKyVSbU.roa
File: L-n62_-n406OrplxAWexZKyVSbU.roa (raw, json)
Hash identifier: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=
Subject key identifier: 2F:E9:FA:DB:FF:A7:E3:4E:8E:AE:99:71:01:67:B1:64:AC:95:49:B5
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019B7A5B76E9AE50B991766EF143823748AC
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/L-n62_-n406OrplxAWexZKyVSbU.roa
Signing time: Thu 01 Jan 2026 16:19:33 +0000
ROA not before: Thu 01 Jan 2026 16:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49433
IP address blocks: 5.160.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:76:e9:ae:50:b9:91:76:6e:f1:43:82:37:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 16:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fe9fadbffa7e34e8eae99710167b164ac9549b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:fc:e0:e9:20:5b:fd:1c:5b:7d:d5:83:0f:
8c:ac:b1:d0:0f:22:7f:ef:33:95:5e:ab:92:fe:e4:
92:c3:a4:02:3f:89:9c:48:ce:d0:c7:6f:d3:17:bb:
b6:09:87:4a:d1:0a:7b:a7:55:94:21:d0:89:aa:53:
c2:9a:a2:9f:d0:4d:6b:a7:6b:8e:1f:36:63:bc:e0:
45:f9:98:06:99:0a:3c:5a:68:53:7d:93:82:8f:95:
a3:13:b9:f5:6f:fd:0e:85:7e:ff:cd:83:58:e8:fd:
22:b2:5e:45:0c:04:17:2c:9c:90:6e:ea:70:61:39:
18:ae:4f:f6:46:38:ce:52:b4:46:f3:28:6b:c3:ce:
7f:b8:ee:7a:01:08:ad:74:00:0a:19:2a:76:97:d9:
eb:f6:52:f5:12:2f:15:31:72:c7:c4:81:6b:ce:c8:
77:d9:e2:8e:0c:77:de:c7:50:60:b3:b5:01:4a:ab:
ba:04:d5:38:f3:52:64:2c:2c:d6:14:b9:3f:c0:5d:
d5:70:30:62:e7:f6:10:bd:13:28:ff:85:c6:50:e4:
e0:2f:d1:eb:ce:33:52:36:b9:e5:2d:92:29:e7:69:
d5:d3:ff:af:2b:db:c8:6e:87:6a:f0:19:3c:a6:39:
f3:e4:1d:27:9f:46:29:a8:0a:4c:99:85:38:8b:f8:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:FA:DB:FF:A7:E3:4E:8E:AE:99:71:01:67:B1:64:AC:95:49:B5
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/L-n62_-n406OrplxAWexZKyVSbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.242.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3f:08:42:df:9c:86:99:6f:3e:03:54:65:ad:a6:76:80:9d:
14:77:4c:09:a2:8d:6b:d0:70:48:8c:44:f6:1a:28:e0:b4:6c:
ba:c6:2c:46:f1:78:bf:9f:e8:cf:a2:d9:9d:e8:96:9e:0c:11:
f0:0b:df:f3:92:f6:96:ad:be:1d:67:d7:6d:fd:e8:99:53:3e:
35:42:89:39:40:00:03:c2:2d:4f:36:7f:9c:9d:b7:34:75:c9:
d3:fe:fd:a0:94:a9:ca:9b:89:01:07:5a:58:07:79:c6:c1:38:
18:d7:c7:78:79:c1:c1:a0:06:03:71:6d:cc:2b:1e:84:5f:70:
21:1e:c8:3b:15:88:cd:dd:31:27:a5:5e:6b:1d:a1:41:e1:c2:
ec:37:00:ec:45:dd:4e:91:28:f5:3e:61:22:44:6a:3f:4e:f7:
29:d5:32:03:c1:5e:12:a2:84:22:eb:3c:2b:f1:55:71:f6:61:
d4:c9:d0:ec:9e:41:77:97:26:8c:a5:ca:cd:ca:77:b5:c8:07:
47:b7:d4:c9:30:22:e3:cc:de:6d:9b:7c:39:5a:d4:b1:97:38:
d8:a0:1e:3a:2b:c7:56:b5:24:96:58:6d:cf:84:a8:5c:a0:7e:
5b:05:98:f9:96:53:09:20:8a:b3:20:9f:2b:30:30:c4:c5:56:
42:21:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:31 2026 by rpki-client