This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/lTWXPz06bEAmSyhncINOkWQJjFk.roa File: lTWXPz06bEAmSyhncINOkWQJjFk.roa (raw, json) Hash identifier: v+buH1cwwJcmc8sezDk7Kp2hgjLe/QgwmP0vygPswHo= Subject key identifier: 95:35:97:3F:3D:3A:6C:40:26:4B:28:67:70:83:4E:91:64:09:8C:59 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC94FBC2D1E31E3CDF765F1499918AF Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/lTWXPz06bEAmSyhncINOkWQJjFk.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202813 IP address blocks: 5.59.60.0/22 maxlen: 24 5.59.64.0/22 maxlen: 24 5.59.172.0/24 maxlen: 24 5.59.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4f:bc:2d:1e:31:e3:cd:f7:65:f1:49:99:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9535973f3d3a6c40264b286770834e9164098c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3e:43:5a:97:16:3f:6d:4f:e9:9f:31:bd:05: 01:80:fa:fb:1c:79:32:ec:48:ad:41:9e:50:f6:41: ab:22:5a:06:be:62:d1:8c:4a:85:77:10:69:44:41: 04:78:f2:61:8c:d9:f5:0a:6b:f6:71:96:b0:e4:12: 3a:3a:cf:6a:2e:89:eb:7a:2d:7d:22:e2:f8:d2:76: e4:66:84:97:73:f8:e9:29:71:7c:75:d9:48:2e:c6: 38:ec:49:3e:bd:3f:b3:4b:dd:37:f7:c1:ed:76:b8: 4e:6d:e5:cd:b3:f8:42:6d:54:ab:3c:fb:ae:f2:1a: e9:f5:d2:28:cb:df:00:e4:04:fb:86:d6:1d:3a:38: ed:42:a0:75:8a:6c:7e:80:42:a8:7d:26:ae:66:74: 2a:7e:27:31:7c:16:38:e4:8b:58:99:d1:4e:04:ce: 36:74:05:51:1c:03:6a:c2:0a:09:e4:95:37:7a:95: 5b:e3:bf:10:60:fa:9d:89:55:d1:05:76:34:d5:d2: 94:aa:de:20:d6:54:97:af:55:ab:26:0b:a1:99:59: 3c:9d:b9:b7:49:ce:06:a7:70:a3:31:9b:07:59:70: f0:07:58:5e:25:f8:66:71:73:40:c1:92:fc:f5:a3: b3:36:bd:22:24:a9:e7:e2:20:1f:20:d9:52:37:df: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:35:97:3F:3D:3A:6C:40:26:4B:28:67:70:83:4E:91:64:09:8C:59 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/lTWXPz06bEAmSyhncINOkWQJjFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.60.0-5.59.67.255 5.59.172.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:28:3e:f6:84:b8:db:f7:b1:a3:9c:e0:2f:2a:c5:a7:98:48: e8:a4:c9:99:9b:09:b2:3f:96:f9:fb:7d:05:2b:6c:40:6d:fa: 29:21:bf:8c:40:5e:ed:a2:8e:f9:97:f6:df:58:c7:3c:9e:23: 39:d0:f7:51:e0:e5:50:6d:9b:c7:3d:9a:ad:0b:ed:8f:70:75: 2e:44:45:34:be:26:17:c7:f6:8a:5c:7c:f1:a1:0d:3c:10:0a: 71:80:b7:ec:f7:93:8d:f7:14:75:bc:16:ee:7e:18:98:a1:fc: 76:41:0e:86:fc:e6:6a:38:0d:c8:b0:f6:6d:34:9a:43:f1:a4: 26:b4:29:8b:ad:37:ae:62:73:60:45:f4:09:8c:fd:02:ae:b8: d9:8c:1c:d7:6a:eb:e3:4c:d0:6e:00:1a:68:b7:90:af:67:03: aa:4e:43:c4:05:3d:d5:6f:f7:27:35:2d:01:2b:56:55:d7:71: 1d:8c:1d:8c:d6:71:34:87:db:8c:ba:5d:79:a6:ea:eb:97:1b: 32:6c:96:5e:32:d5:38:1c:95:13:70:85:cc:da:d5:04:91:42: 9b:7d:99:62:32:d8:6a:f6:5e:31:a9:bc:cb:90:b1:9c:9a:8b: e9:a2:fe:f7:33:6b:d1:c6:db:f4:55:75:9c:bb:0a:a2:dc:f9: bc:ce:a9:56 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yU+8LR4x4833ZfFJmRivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTM1OTczZjNkM2E2YzQwMjY0YjI4Njc3MDgzNGU5MTY0MDk4YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T5DWpcWP21P6Z8xvQUBgPr7HHky 7EitQZ5Q9kGrIloGvmLRjEqFdxBpREEEePJhjNn1Cmv2cZaw5BI6Os9qLonrei19 IuL40nbkZoSXc/jpKXF8ddlILsY47Ek+vT+zS90398HtdrhObeXNs/hCbVSrPPuu 8hrp9dIoy98A5AT7htYdOjjtQqB1imx+gEKofSauZnQqficxfBY45ItYmdFOBM42 dAVRHANqwgoJ5JU3epVb478QYPqdiVXRBXY01dKUqt4g1lSXr1WrJguhmVk8nbm3 Sc4Gp3CjMZsHWXDwB1heJfhmcXNAwZL89aOzNr0iJKnn4iAfINlSN98EowIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJU1lz89OmxAJksoZ3CDTpFkCYxZMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvbFRXWFB6MDZiRUFtU3lobmNJTk9rV1FKakZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIFOzwD BAIFO0ADBAEFO6wwDQYJKoZIhvcNAQELBQADggEBACooPvaEuNv3saOc4C8qxaeY SOikyZmbCbI/lvn7fQUrbEBt+ikhv4xAXu2ijvmX9t9YxzyeIznQ91Hg5VBtm8c9 mq0L7Y9wdS5ERTS+JhfH9opcfPGhDTwQCnGAt+z3k433FHW8Fu5+GJih/HZBDob8 5mo4Dciw9m00mkPxpCa0KYutN65ic2BF9AmM/QKuuNmMHNdq6+NM0G4AGmi3kK9n A6pOQ8QFPdVv9yc1LQErVlXXcR2MHYzWcTSH24y6XXmm6uuXGzJsll4y1TgclRNw hcza1QSRQpt9mWIy2Gr2XjGpvMuQsZyai+mi/vcza9HG2/RVdZy7CqLc+bzOqVY= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:33 2026 by rpki-client