This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5LVCxwGKG5OTsLcVCZYOnpJPl8o.roa File: 5LVCxwGKG5OTsLcVCZYOnpJPl8o.roa (raw, json) Hash identifier: BuS185pQWT4LMqQ2mR2/Ma86t33wJVrCXeohivALlUs= Subject key identifier: E4:B5:42:C7:01:8A:1B:93:93:B0:B7:15:09:96:0E:9E:92:4F:97:CA Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349B01EAE394CB9C969EA84816C538 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5LVCxwGKG5OTsLcVCZYOnpJPl8o.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214251 IP address blocks: 194.14.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9b:01:ea:e3:94:cb:9c:96:9e:a8:48:16:c5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4b542c7018a1b9393b0b71509960e9e924f97ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:fb:c2:ef:31:ab:26:29:8f:84:4d:b3:83: 56:03:3e:fb:3f:30:ae:c7:6f:b8:a1:6b:20:02:d8: 41:b7:a1:ad:79:23:60:a2:5a:56:39:e0:f2:18:37: b7:6c:f1:d4:83:da:76:f8:d0:1a:95:8d:3a:09:6d: ab:cc:30:96:13:5f:34:cb:7d:35:d1:99:a3:ed:8a: 15:64:e9:37:14:ae:d3:35:e8:4b:6c:80:61:27:24: 42:23:89:a6:59:85:92:6d:dd:36:78:6f:f4:d3:2e: 58:1b:53:c0:03:04:5f:d7:aa:0b:b1:f5:6d:99:fb: af:5f:d4:25:6f:03:46:ae:3b:78:06:67:ce:ff:ac: 68:05:d1:52:4e:97:6a:d3:19:77:35:f9:51:11:8a: 0c:33:d5:f1:30:00:7e:b3:3d:ee:4a:40:58:98:4e: 52:7e:d8:b8:b0:3c:ca:80:bd:ee:fa:f0:f0:0f:6f: 7f:0b:16:0a:3d:25:6b:42:b1:45:68:7f:01:fb:cb: 66:34:f1:fc:11:cb:75:d1:e2:7e:e7:85:10:02:ca: 6f:a3:14:24:f4:cf:17:36:33:78:dd:0c:70:45:be: f4:93:6f:50:81:f6:29:f8:cc:6d:be:24:0f:65:f4: 77:66:19:73:37:a4:50:e7:e8:cb:12:27:1b:09:6f: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:42:C7:01:8A:1B:93:93:B0:B7:15:09:96:0E:9E:92:4F:97:CA X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5LVCxwGKG5OTsLcVCZYOnpJPl8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.133.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:a3:35:5a:5e:4a:12:27:af:b3:c9:b1:1b:b1:99:06:71:e6: 9b:b6:bc:ec:0a:1b:f8:67:6d:32:bb:4f:e2:2d:b9:d6:fc:09: 0c:a8:54:a4:88:0e:f1:9d:6a:83:5f:c4:21:8b:da:9d:60:03: ca:85:32:9b:14:ca:c2:bb:54:e2:57:f0:09:e3:7b:38:04:07: f1:ed:37:b2:0b:f9:4c:27:c4:93:89:5c:2e:c1:08:9a:0a:c6: c6:61:fd:ea:32:65:14:55:1e:0a:fc:81:41:8e:10:10:21:4b: b6:b5:38:e6:67:64:fc:cc:98:bc:de:f9:a7:20:96:a5:07:3f: ca:f2:5d:2d:da:6c:63:18:bd:a3:b3:cc:aa:7f:ce:08:66:ca: fe:9c:14:a0:ef:cd:e1:16:46:73:27:1d:81:27:12:9a:87:0c: 08:9e:ee:02:5a:8a:42:9a:ea:32:a5:51:d4:8f:a8:99:1c:17: 53:04:0a:dd:8f:3f:2b:d8:78:0b:0a:d9:e6:08:b9:e5:63:f7: 56:e1:9a:e9:47:76:1e:b0:d0:c6:92:e5:94:8f:17:69:6b:68: 16:19:32:59:3d:bf:e3:1e:f8:d4:54:e4:6c:2d:a6:1a:db:22: 9a:db:6f:8b:c8:e3:5b:87:65:fe:87:ba:3c:dd:56:31:8d:1e: 32:03:61:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJsB6uOUy5yWnqhIFsU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGI1NDJjNzAxOGExYjkzOTNiMGI3MTUwOTk2MGU5ZTkyNGY5N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuD7wu8xqyYpj4RNs4NWAz77PzCu x2+4oWsgAthBt6GteSNgolpWOeDyGDe3bPHUg9p2+NAalY06CW2rzDCWE180y301 0Zmj7YoVZOk3FK7TNehLbIBhJyRCI4mmWYWSbd02eG/00y5YG1PAAwRf16oLsfVt mfuvX9QlbwNGrjt4BmfO/6xoBdFSTpdq0xl3NflREYoMM9XxMAB+sz3uSkBYmE5S fti4sDzKgL3u+vDwD29/CxYKPSVrQrFFaH8B+8tmNPH8Ect10eJ+54UQAspvoxQk 9M8XNjN43QxwRb70k29QgfYp+MxtviQPZfR3ZhlzN6RQ5+jLEicbCW//lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOS1QscBihuTk7C3FQmWDp6ST5fKMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvNUxWQ3h3R0tHNU9Uc0xjVkNaWU9ucEpQbDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg6FMA0G CSqGSIb3DQEBCwUAA4IBAQB8ozVaXkoSJ6+zybEbsZkGceabtrzsChv4Z20yu0/i LbnW/AkMqFSkiA7xnWqDX8Qhi9qdYAPKhTKbFMrCu1TiV/AJ43s4BAfx7TeyC/lM J8STiVwuwQiaCsbGYf3qMmUUVR4K/IFBjhAQIUu2tTjmZ2T8zJi83vmnIJalBz/K 8l0t2mxjGL2js8yqf84IZsr+nBSg783hFkZzJx2BJxKahwwInu4CWopCmuoypVHU j6iZHBdTBArdjz8r2HgLCtnmCLnlY/dW4ZrpR3YesNDGkuWUjxdpa2gWGTJZPb/j HvjUVORsLaYa2yKa22+LyONbh2X+h7o83VYxjR4yA2GO -----END CERTIFICATE-----Generated at Sun Jan 25 16:34:46 2026 by rpki-client