This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/L5RtN4MYgylQB2sxCXbY7rkj9cw.roa
File: L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (raw, json)
Hash identifier: qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=
Subject key identifier: 2F:94:6D:37:83:18:83:29:50:07:6B:31:09:76:D8:EE:B9:23:F5:CC
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019B7B35ADA9BA3A523E427741C50FE8268B
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/L5RtN4MYgylQB2sxCXbY7rkj9cw.roa
Signing time: Thu 01 Jan 2026 20:17:53 +0000
ROA not before: Thu 01 Jan 2026 20:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198032
IP address blocks: 91.240.2.0/24 maxlen: 24
185.198.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:ad:a9:ba:3a:52:3e:42:77:41:c5:0f:e8:26:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Jan 1 20:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f946d378318832950076b310976d8eeb923f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:15:6a:0b:fd:4f:56:67:33:c2:bc:3c:ee:
18:95:81:44:be:d4:7a:ba:41:f5:8f:75:a3:47:a4:
26:b2:15:06:b8:c7:75:eb:52:fc:ba:c4:42:c8:df:
18:61:80:a9:72:4d:9d:69:24:91:02:ad:be:4b:38:
d9:8a:99:98:d5:f1:59:3f:52:1a:2d:a8:de:e3:ed:
56:b7:e2:53:5d:80:6c:47:e1:05:52:47:87:6d:16:
ae:1f:c6:9d:90:91:c3:93:c7:04:b7:4f:6b:64:bc:
05:c4:94:2d:be:eb:8f:17:85:cf:cc:56:87:49:32:
f1:1c:c0:d6:0a:ed:89:78:3a:f9:d5:74:30:55:68:
9e:1b:89:b4:37:e0:2a:fb:0f:bd:a6:cd:c7:bb:47:
d8:e4:ca:7c:c4:91:fd:7f:d9:ba:75:9d:45:6e:0a:
83:80:ad:8d:60:ff:db:11:49:a4:d1:d6:9f:b6:67:
25:8f:b8:69:81:1b:5c:d5:f1:59:88:e1:b8:b8:68:
58:db:01:41:21:c7:01:7c:02:12:e2:cf:3c:60:b5:
68:8b:b5:d4:71:c0:c5:f1:6a:5d:63:89:28:ee:7d:
1b:41:db:31:b5:cc:7f:73:bd:50:87:de:2f:e7:48:
b7:f3:4e:11:91:6c:56:7e:43:2b:4e:64:14:41:ce:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:6D:37:83:18:83:29:50:07:6B:31:09:76:D8:EE:B9:23:F5:CC
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/L5RtN4MYgylQB2sxCXbY7rkj9cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.2.0/24
185.198.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fe:95:93:1f:a8:48:ca:28:0e:8a:26:43:5d:58:1d:0c:42:
64:9e:c7:06:f2:0d:fb:4e:51:10:b8:f5:31:6f:a0:0f:82:85:
c5:a7:f9:57:5a:4c:e8:14:72:c9:3c:0d:e4:16:61:1a:0a:7e:
14:e0:e8:80:a5:bf:0c:07:aa:22:12:c6:16:96:e5:82:96:c4:
d6:cc:97:24:b9:ef:51:ba:c0:c3:0a:16:fe:86:af:65:ee:c5:
02:19:f0:1d:a6:a5:b1:6e:ad:27:fb:f0:14:8b:1a:be:fc:a7:
00:ab:e0:95:fa:3e:4a:6a:0c:38:9b:30:2e:6b:c4:4a:13:11:
05:3b:9d:26:1d:63:4b:3a:0e:e6:fe:2e:cd:7d:5e:6f:25:42:
e1:6a:e4:28:aa:b6:e2:34:cf:2d:70:4d:45:5c:5e:fb:0e:aa:
c0:d5:e0:d3:78:74:81:57:5b:24:c1:57:1b:f9:04:c4:8a:91:
18:23:d4:90:6d:9f:27:2f:7c:4d:cc:ca:72:45:2a:c1:bb:49:
6a:26:e1:0c:11:13:dc:1a:97:94:6d:77:90:38:c0:ac:90:2b:
61:25:ea:8e:a1:d5:d9:20:cf:19:27:17:62:17:b4:85:0b:74:
82:02:5e:9d:dd:b2:51:57:2c:93:25:40:84:25:8a:27:0a:73:
2c:19:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:20:22 2026 by rpki-client