This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/L6SdCLp_FHvz3o3tKNX0l8WA490.roa File: L6SdCLp_FHvz3o3tKNX0l8WA490.roa (raw, json) Hash identifier: 9JHTUcRidI2GiaDB1BZb9pHbOm8ZJYd9k9gXu4meKKU= Subject key identifier: 2F:A4:9D:08:BA:7F:14:7B:F3:DE:8D:ED:28:D5:F4:97:C5:80:E3:DD Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353 Certificate serial: 019B7D5BF75AAC644B5878D1B8EE6E7EBCB6 Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/L6SdCLp_FHvz3o3tKNX0l8WA490.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 152.89.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f7:5a:ac:64:4b:58:78:d1:b8:ee:6e:7e:bc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353 Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fa49d08ba7f147bf3de8ded28d5f497c580e3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:d8:ab:ae:41:dd:31:b5:3d:fe:fa:8a:3b: 31:d1:29:d9:fa:1c:f1:1f:98:fb:56:c3:c7:d1:cb: d8:4e:a1:fc:43:19:58:1f:dc:94:b2:39:64:b7:d6: 68:7b:ee:ce:e4:73:6b:b1:24:f0:df:76:8a:98:6a: 17:af:e1:7a:da:81:de:af:4b:99:e5:59:13:16:8d: d8:c3:d5:aa:7b:79:0f:c1:3f:1d:1a:ff:2b:e8:5d: a6:02:bd:8b:88:11:eb:6e:71:76:ec:62:76:42:35: 0d:a7:ac:77:da:e6:f3:6f:60:fb:29:d0:eb:6a:69: 09:83:5c:dc:97:b8:41:1a:c7:35:6d:9f:b3:24:b6: c0:42:55:fd:14:7b:21:45:49:3c:1c:87:7e:af:99: 0a:d7:9f:84:b2:64:02:9d:35:e8:eb:be:43:4f:10: de:82:6a:78:9e:8d:ac:47:43:39:38:18:ff:ef:8c: f5:d3:ed:4a:18:7a:59:38:82:cb:7f:45:74:ab:e6: 68:09:0b:d6:bd:1f:ae:a0:28:64:89:2b:d3:d1:55: c6:e8:ff:b9:fd:a2:0d:1a:9c:41:17:31:84:af:86: a9:d6:91:9b:ce:ac:cb:dc:7d:e0:82:29:99:8b:db: e0:31:44:00:f5:a8:3a:65:b8:b4:47:29:c2:33:0e: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A4:9D:08:BA:7F:14:7B:F3:DE:8D:ED:28:D5:F4:97:C5:80:E3:DD X509v3 Authority Key Identifier: keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/L6SdCLp_FHvz3o3tKNX0l8WA490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.24.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:e9:07:b7:0a:f5:03:8b:73:c0:d6:c9:bf:ac:62:02:d4:2b: 99:02:af:b3:f3:f8:26:30:b7:91:95:6f:bf:4c:5a:a1:9e:ad: a5:37:e5:9f:32:97:dc:15:12:b6:b9:23:c0:b4:30:31:04:15: 37:b7:b0:32:0b:02:a2:ac:45:e2:47:ab:4b:03:11:f7:d4:b5: 5a:be:35:44:f3:e0:77:56:4c:16:ff:37:85:c1:a2:97:49:41: 43:19:aa:dd:e2:23:a2:cc:be:96:ca:a4:6b:28:e8:b9:25:e6: 59:ad:ea:23:a2:f2:22:cf:dc:d8:65:d5:5a:44:dc:a2:0f:ef: c5:ec:78:0b:61:02:b2:5f:5f:da:83:6a:18:01:20:3e:02:da: 99:18:16:7c:31:2e:5f:e5:53:37:e6:38:02:a4:8d:6b:8e:d5: f2:1f:7a:a2:00:0b:8f:b0:02:ae:7c:5a:ed:81:fb:e5:f1:56: e3:ac:89:54:5d:13:2f:2a:93:a0:87:a9:0d:88:c5:1b:5e:b4: 20:41:59:54:76:0a:09:d4:f1:b6:2e:e0:60:42:a1:a5:02:99: c2:8c:40:66:2f:c3:e5:ea:63:f0:ca:2e:24:70:1c:00:33:75: 9d:a0:c3:da:1f:7a:b9:b0:b0:ae:2f:69:8e:60:e7:41:ea:4e: e9:56:98:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W/darGRLWHjRuO5ufry2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjODc0YTVmNTI3MzRlMjYwZTdiZmE0ZDQ1MTE0YWRkOTI3 N2UzNTMwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmE0OWQwOGJhN2YxNDdiZjNkZThkZWQyOGQ1ZjQ5N2M1ODBlM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WzYq65B3TG1Pf76ijsx0SnZ+hzx H5j7VsPH0cvYTqH8QxlYH9yUsjlkt9Zoe+7O5HNrsSTw33aKmGoXr+F62oHer0uZ 5VkTFo3Yw9Wqe3kPwT8dGv8r6F2mAr2LiBHrbnF27GJ2QjUNp6x32ubzb2D7KdDr amkJg1zcl7hBGsc1bZ+zJLbAQlX9FHshRUk8HId+r5kK15+EsmQCnTXo675DTxDe gmp4no2sR0M5OBj/74z10+1KGHpZOILLf0V0q+ZoCQvWvR+uoChkiSvT0VXG6P+5 /aINGpxBFzGEr4ap1pGbzqzL3H3ggimZi9vgMUQA9ag6Zbi0RynCMw4AywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+knQi6fxR7896N7SjV9JfFgOPdMB8GA1UdIwQY MBaAFAyHSl9Sc04mDnv6TUURSt2Sd+NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEt YTBlMzdmMjVhNTE1LzEvTDZTZENMcF9GSHZ6M28zdEtOWDBsOFdBNDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEtYTBlMzdmMjVhNTE1 LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFkYMA0G CSqGSIb3DQEBCwUAA4IBAQCN6Qe3CvUDi3PA1sm/rGIC1CuZAq+z8/gmMLeRlW+/ TFqhnq2lN+WfMpfcFRK2uSPAtDAxBBU3t7AyCwKirEXiR6tLAxH31LVavjVE8+B3 VkwW/zeFwaKXSUFDGard4iOizL6WyqRrKOi5JeZZreojovIiz9zYZdVaRNyiD+/F 7HgLYQKyX1/ag2oYASA+AtqZGBZ8MS5f5VM35jgCpI1rjtXyH3qiAAuPsAKufFrt gfvl8VbjrIlUXRMvKpOgh6kNiMUbXrQgQVlUdgoJ1PG2LuBgQqGlApnCjEBmL8Pl 6mPwyi4kcBwAM3WdoMPaH3q5sLCuL2mOYOdB6k7pVphn -----END CERTIFICATE-----Generated at Sat Jan 10 01:49:50 2026 by rpki-client