This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa File: L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa (raw, json) Hash identifier: +Gwjcjom9pqLSyIZJDE+ooi9DSzl5I6UWWhpsWsU6XE= Subject key identifier: 2F:94:B9:78:43:E8:DD:39:69:DB:E1:AE:DB:BE:CB:D1:F8:B8:FB:1D Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3 Certificate serial: 019B7DCB467B59FA5D798425215201542CB1 Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12773 IP address blocks: 93.157.12.0/24 maxlen: 24 93.157.13.0/24 maxlen: 24 93.157.14.0/24 maxlen: 24 93.157.15.0/24 maxlen: 24 193.254.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:46:7b:59:fa:5d:79:84:25:21:52:01:54:2c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f94b97843e8dd3969dbe1aedbbecbd1f8b8fb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c9:47:93:50:44:13:c1:ee:25:7e:49:fc:59: 61:80:fc:07:27:45:35:8d:15:4f:2d:ef:a6:12:0c: 56:4d:ab:a8:1e:d0:24:ba:aa:ca:62:bd:15:7f:f2: a5:eb:e3:50:82:a8:e6:b3:af:ab:44:6e:33:76:ec: 1a:c7:9b:27:be:9a:93:ae:7f:bb:ad:dd:6a:23:17: e9:be:ab:24:f3:07:06:3c:9f:f8:35:3b:9f:1d:df: c9:cd:65:1c:fd:aa:31:57:53:5f:34:44:e2:1a:99: 1e:67:75:e7:11:65:fb:9d:18:c3:06:ab:35:44:ce: 53:18:dc:10:06:1b:d6:73:74:bd:5b:81:b8:3e:5b: 76:aa:a8:b3:60:b7:2f:ac:e0:6b:12:09:b8:6e:55: 93:ca:bd:5f:df:42:04:45:a4:79:93:78:25:85:0e: b4:4b:18:64:f6:f1:32:1f:03:68:cf:2e:54:71:97: 26:d7:b9:3c:3f:c2:e8:5e:73:b9:ec:e8:82:33:4c: a8:f3:d5:3a:82:27:3e:5b:a7:6e:a2:42:00:83:8f: 73:03:e3:95:0c:07:41:90:5e:9b:15:d8:57:ce:d0: 75:ff:84:d8:29:4e:a0:7d:84:ac:ba:69:78:ac:0b: bd:48:e5:ae:c0:7b:42:d8:6e:52:e0:5e:23:ca:e6: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:B9:78:43:E8:DD:39:69:DB:E1:AE:DB:BE:CB:D1:F8:B8:FB:1D X509v3 Authority Key Identifier: keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.12.0/22 193.254.232.0/23 Signature Algorithm: sha256WithRSAEncryption 71:4b:df:88:8d:0b:c8:87:8e:97:b3:64:3f:e1:fc:16:24:24: 63:b3:4c:9c:cf:a2:5d:e4:ac:07:dd:29:5b:34:21:14:90:50: d6:dd:bb:63:59:31:d8:90:8a:03:1d:de:11:cf:bd:52:7d:29: 6b:7e:b5:14:b4:a6:cc:6a:82:c1:5b:3b:a4:f5:00:10:75:6b: 69:36:d2:c6:b6:da:0b:ef:07:54:6f:4a:1d:7d:72:5d:9a:5a: 28:b7:27:10:ea:aa:b7:59:59:f0:71:f7:8d:4f:18:b0:3c:09: e3:37:76:14:62:18:04:b8:a4:8b:a6:98:ab:5c:55:75:c3:92: 2c:0e:17:a7:f7:82:a1:b5:99:c5:43:2f:92:e1:52:0e:37:29: b7:93:bf:33:df:f2:65:47:58:4a:90:da:66:aa:4c:61:f6:d8: 84:5f:65:a7:37:7f:52:b1:c2:07:20:08:25:b1:0f:ef:a9:d2: 5b:c5:16:a9:6a:d8:e0:ce:77:75:5d:52:4c:e6:e7:40:38:35: 02:d4:fb:2d:ff:03:ca:21:48:a0:06:64:ed:c9:bb:39:87:2d: d4:9a:c3:19:5f:89:48:22:c7:be:65:e7:6b:c2:5f:3c:02:ff: 48:71:63:df:31:a7:62:ee:b7:db:3f:b4:4a:13:e4:97:d7:e7: 37:0a:4e:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y0Z7WfpdeYQlIVIBVCyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjY2I5Yjg5YmMwYmMyMTc1MjQ3NGU2NTBkYzM0ZjA2OWRh NWMwYjMwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjk0Yjk3ODQzZThkZDM5NjlkYmUxYWVkYmJlY2JkMWY4YjhmYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8lHk1BEE8HuJX5J/FlhgPwHJ0U1 jRVPLe+mEgxWTauoHtAkuqrKYr0Vf/Kl6+NQgqjms6+rRG4zduwax5snvpqTrn+7 rd1qIxfpvqsk8wcGPJ/4NTufHd/JzWUc/aoxV1NfNETiGpkeZ3XnEWX7nRjDBqs1 RM5TGNwQBhvWc3S9W4G4Plt2qqizYLcvrOBrEgm4blWTyr1f30IERaR5k3glhQ60 Sxhk9vEyHwNozy5UcZcm17k8P8LoXnO57OiCM0yo89U6gic+W6duokIAg49zA+OV DAdBkF6bFdhXztB1/4TYKU6gfYSsuml4rAu9SOWuwHtC2G5S4F4jyuY5AwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC+UuXhD6N05advhrtu+y9H4uPsdMB8GA1UdIwQY MBaAFCzLm4m8C8IXUkdOZQ3DTwadpcCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWIt MDYyYWVkNTEzODFjLzEvTDVTNWVFUG8zVGxwMi1HdTI3N0wwZmk0LXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWItMDYyYWVkNTEzODFj LzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXZ0MAwQB wf7oMA0GCSqGSIb3DQEBCwUAA4IBAQBxS9+IjQvIh46Xs2Q/4fwWJCRjs0ycz6Jd 5KwH3SlbNCEUkFDW3btjWTHYkIoDHd4Rz71SfSlrfrUUtKbMaoLBWzuk9QAQdWtp NtLGttoL7wdUb0odfXJdmlootycQ6qq3WVnwcfeNTxiwPAnjN3YUYhgEuKSLppir XFV1w5IsDhen94KhtZnFQy+S4VIONym3k78z3/JlR1hKkNpmqkxh9tiEX2WnN39S scIHIAglsQ/vqdJbxRapatjgznd1XVJM5udAODUC1Pst/wPKIUigBmTtybs5hy3U msMZX4lIIse+Zedrwl88Av9IcWPfMadi7rfbP7RKE+SX1+c3Ck4D -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:28 2026 by rpki-client