This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/LKt5F8sCS2ed9oYF6mh7b_TXMlY.roa File: LKt5F8sCS2ed9oYF6mh7b_TXMlY.roa (raw, json) Hash identifier: m1IqW4axkBmcnF/dkKC+nzIPhkF51ROcNvNRFTsoXi4= Subject key identifier: 2C:AB:79:17:CB:02:4B:67:9D:F6:86:05:EA:68:7B:6F:F4:D7:32:56 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0D625E1BDFB40BD73A4A3850CC59 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/LKt5F8sCS2ed9oYF6mh7b_TXMlY.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47849 IP address blocks: 212.5.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0d:62:5e:1b:df:b4:0b:d7:3a:4a:38:50:cc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cab7917cb024b679df68605ea687b6ff4d73256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:56:54:0c:54:78:50:5f:2c:82:6b:9d:d5: aa:d5:21:36:70:c1:d6:99:04:66:14:45:6b:41:20: 00:a5:ab:92:2a:12:cd:04:9e:aa:0d:23:b2:20:56: e9:ae:cb:e1:ea:7d:64:99:59:bb:b2:71:3d:9e:ac: 79:de:c9:45:78:0c:37:46:80:1b:c9:21:f2:5b:ca: b0:10:10:52:8c:6c:74:06:e0:f9:b0:c0:7a:dc:3a: a2:b4:b8:1d:bf:93:09:ed:2a:a2:9d:cc:8a:c7:b0: c5:2f:af:38:51:e6:ce:8e:d6:d5:41:ef:c1:0b:57: a1:9e:c8:7a:38:d2:94:4d:b4:54:2f:56:0c:03:d2: 8c:da:76:df:ae:b2:bc:d4:28:83:49:7e:d2:09:07: cb:de:c9:c2:ec:2b:9e:62:5f:37:b4:49:b6:e4:5d: d8:2d:3f:dd:f1:92:06:f1:ac:e0:71:b5:79:d5:3d: 88:57:37:8e:9d:66:19:8f:9c:c7:0e:e8:d9:41:ef: ad:04:b1:c6:0f:b3:e8:a9:f6:9a:42:f9:d5:cd:26: 26:20:5b:31:88:57:3a:52:12:a8:ec:57:50:ee:d2: 4e:5f:e1:1c:1d:8e:fb:f1:15:f3:d2:41:2a:fd:85: c7:72:15:02:07:6b:50:0c:50:a9:5f:24:e9:0a:80: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AB:79:17:CB:02:4B:67:9D:F6:86:05:EA:68:7B:6F:F4:D7:32:56 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/LKt5F8sCS2ed9oYF6mh7b_TXMlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.5.32.0/21 Signature Algorithm: sha256WithRSAEncryption 76:cf:df:de:8c:3b:78:2c:23:ba:85:e5:29:87:42:5e:f3:38: 74:ce:ee:f2:a5:bc:00:9d:db:e8:9e:67:9e:80:2e:29:4a:3b: 5a:54:a8:7a:a2:f4:39:c5:b8:6a:10:47:19:34:98:b0:d1:fd: 54:2e:de:fa:b2:65:68:44:9a:2c:a7:9d:ee:27:93:5b:41:9b: 73:c6:ad:96:74:3a:95:03:80:3c:0c:11:8c:7a:6c:70:d5:2f: 1e:0e:46:18:55:b9:6f:e7:3e:9b:53:03:5c:5c:73:e8:0a:3f: 01:0a:6c:24:b8:a9:c1:6a:e9:18:b0:b6:51:8b:6e:31:d6:4b: af:f1:43:77:bb:39:87:2f:08:c3:1d:5d:7e:8b:be:76:dc:5d: aa:9e:ab:4f:4c:ef:76:e8:9c:ad:73:02:12:46:55:df:45:41: a3:ab:6f:ca:e9:e9:3b:66:b2:b3:84:60:be:78:3f:52:f6:94: 1c:0d:05:6f:40:c1:9f:46:c6:98:b0:6b:39:6e:f8:5e:93:31: 7e:c0:45:cc:5d:98:11:68:9a:a5:bc:8d:a8:a2:13:c5:24:dc: 2a:f8:5c:f7:75:3b:ea:1d:71:56:a7:0f:23:85:b7:54:72:e4: d4:de:27:a5:fa:ec:4d:ad:cf:64:fa:eb:32:9a:ba:26:25:3f: 21:c1:6c:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Ww1iXhvftAvXOko4UMxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2FiNzkxN2NiMDI0YjY3OWRmNjg2MDVlYTY4N2I2ZmY0ZDczMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVFWVAxUeFBfLIJrndWq1SE2cMHW mQRmFEVrQSAApauSKhLNBJ6qDSOyIFbprsvh6n1kmVm7snE9nqx53slFeAw3RoAb ySHyW8qwEBBSjGx0BuD5sMB63DqitLgdv5MJ7SqincyKx7DFL684UebOjtbVQe/B C1ehnsh6ONKUTbRUL1YMA9KM2nbfrrK81CiDSX7SCQfL3snC7CueYl83tEm25F3Y LT/d8ZIG8azgcbV51T2IVzeOnWYZj5zHDujZQe+tBLHGD7PoqfaaQvnVzSYmIFsx iFc6UhKo7FdQ7tJOX+EcHY778RXz0kEq/YXHchUCB2tQDFCpXyTpCoBWWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyreRfLAktnnfaGBepoe2/01zJWMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvTEt0NUY4c0NTMmVkOW9ZRjZtaDdiX1RYTWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1AUgMA0G CSqGSIb3DQEBCwUAA4IBAQB2z9/ejDt4LCO6heUph0Je8zh0zu7ypbwAndvonmee gC4pSjtaVKh6ovQ5xbhqEEcZNJiw0f1ULt76smVoRJosp53uJ5NbQZtzxq2WdDqV A4A8DBGMemxw1S8eDkYYVblv5z6bUwNcXHPoCj8BCmwkuKnBaukYsLZRi24x1kuv 8UN3uzmHLwjDHV1+i7523F2qnqtPTO926JytcwISRlXfRUGjq2/K6ek7ZrKzhGC+ eD9S9pQcDQVvQMGfRsaYsGs5bvhekzF+wEXMXZgRaJqlvI2oohPFJNwq+Fz3dTvq HXFWpw8jhbdUcuTU3iel+uxNrc9k+usymromJT8hwWzW -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:54 2026 by rpki-client