This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/l5tw0iDO7abT_AibKjZJaQ4nwWc.roa File: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (raw, json) Hash identifier: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img= Subject key identifier: 97:9B:70:D2:20:CE:ED:A6:D3:FC:08:9B:2A:36:49:69:0E:27:C1:67 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B7C12BB6F18A3BE6AE6270A9CE1A50716 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/l5tw0iDO7abT_AibKjZJaQ4nwWc.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 193.8.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bb:6f:18:a3:be:6a:e6:27:0a:9c:e1:a5:07:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=979b70d220ceeda6d3fc089b2a3649690e27c167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:cf:d3:75:b7:94:21:3d:86:12:27:f7:c7: ff:aa:cd:6a:1c:df:7c:7a:0c:ba:96:bf:2d:f6:31: d0:8c:7b:a2:35:d1:58:00:53:bf:dc:3d:b0:35:c0: c0:a6:8c:44:e7:fa:43:d4:04:69:1f:38:6a:e8:df: 57:ab:02:86:54:ee:09:69:8c:ad:96:45:3e:72:10: ed:68:dd:7b:cd:9e:03:8b:ca:6c:2d:28:83:27:9d: 8f:cc:ad:37:f7:6f:0b:d4:bd:64:0f:21:05:31:5b: e6:82:c4:f3:56:36:12:60:e7:67:50:3e:f8:36:93: 72:46:1e:87:81:92:8f:59:b4:79:34:e0:ba:03:ce: a3:1f:ba:8b:3f:51:8a:fc:d1:88:a4:a8:20:6d:eb: e6:15:c6:89:53:f0:d6:bf:87:43:a1:5a:2c:e8:8f: 9d:08:76:bd:05:a9:44:d1:a6:f4:25:c9:7c:6b:2e: 62:38:67:2c:d1:6c:ab:6a:0f:d3:a3:f8:51:5e:71: 78:e6:ba:ab:d4:94:5b:ed:ff:b0:f3:8c:78:b1:85: 63:5a:4f:5d:b3:9d:2d:7b:b0:2e:45:8d:80:1e:aa: 4c:dd:0d:64:3b:0d:1c:27:78:b3:28:5f:0b:ba:74: 24:42:ff:56:f7:aa:a3:ac:22:b1:18:86:dc:88:b4: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:70:D2:20:CE:ED:A6:D3:FC:08:9B:2A:36:49:69:0E:27:C1:67 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/l5tw0iDO7abT_AibKjZJaQ4nwWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.237.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:96:9b:1c:b8:97:a0:bc:93:a5:78:19:7a:0e:48:5c:cc:44: 8c:e8:f8:3a:cd:9e:83:4c:dc:3d:8d:71:34:6c:c0:8f:3a:39: 78:88:43:ca:38:8f:fc:a6:e7:2a:8f:d6:6f:6b:ce:eb:a8:f6: 09:a5:55:21:c4:d1:af:3a:dc:11:f0:6d:62:a3:cb:37:63:bf: 85:13:c6:86:0f:d9:24:ba:19:59:85:43:f7:d2:6c:5b:0d:24: 86:d6:fe:0f:40:c1:f7:ce:56:63:c3:6a:f1:d2:29:23:d1:db: d6:f4:31:97:0a:85:30:22:0d:47:00:cf:6a:7e:66:59:f9:20: e5:f9:a5:bd:e8:ca:27:75:21:ce:70:e4:51:ef:de:60:fc:ba: c5:89:03:be:a1:c6:76:0f:46:43:68:b0:30:9e:2d:d6:1a:31: 9e:31:12:63:75:53:6e:4e:d5:e0:b3:37:8c:11:8e:c6:85:2c: 44:f0:fe:02:fa:5a:ef:b7:9a:78:cd:dd:e0:11:77:03:ef:41: fb:43:8b:1e:df:91:43:aa:9f:1a:ea:bc:0d:19:fb:25:5c:4c: 59:58:86:17:c7:9a:1b:52:e3:cb:cc:5d:0f:36:16:f3:29:50: ea:d7:88:b8:d1:e5:ca:b2:8b:66:39:3e:08:90:bc:3d:de:f5: 39:fb:fb:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErtvGKO+auYnCpzhpQcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzliNzBkMjIwY2VlZGE2ZDNmYzA4OWIyYTM2NDk2OTBlMjdjMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNbP03W3lCE9hhIn98f/qs1qHN98 egy6lr8t9jHQjHuiNdFYAFO/3D2wNcDApoxE5/pD1ARpHzhq6N9XqwKGVO4JaYyt lkU+chDtaN17zZ4Di8psLSiDJ52PzK03928L1L1kDyEFMVvmgsTzVjYSYOdnUD74 NpNyRh6HgZKPWbR5NOC6A86jH7qLP1GK/NGIpKggbevmFcaJU/DWv4dDoVos6I+d CHa9BalE0ab0Jcl8ay5iOGcs0Wyrag/To/hRXnF45rqr1JRb7f+w84x4sYVjWk9d s50te7AuRY2AHqpM3Q1kOw0cJ3izKF8LunQkQv9W96qjrCKxGIbciLT2uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJebcNIgzu2m0/wImyo2SWkOJ8FnMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvbDV0dzBpRE83YWJUX0FpYktqWkphUTRud1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQjtMA0G CSqGSIb3DQEBCwUAA4IBAQCMlpscuJegvJOleBl6DkhczESM6Pg6zZ6DTNw9jXE0 bMCPOjl4iEPKOI/8pucqj9Zva87rqPYJpVUhxNGvOtwR8G1io8s3Y7+FE8aGD9kk uhlZhUP30mxbDSSG1v4PQMH3zlZjw2rx0ikj0dvW9DGXCoUwIg1HAM9qfmZZ+SDl +aW96MondSHOcORR795g/LrFiQO+ocZ2D0ZDaLAwni3WGjGeMRJjdVNuTtXgszeM EY7GhSxE8P4C+lrvt5p4zd3gEXcD70H7Q4se35FDqp8a6rwNGfslXExZWIYXx5ob UuPLzF0PNhbzKVDq14i40eXKsotmOT4IkLw93vU5+/tz -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:29 2026 by rpki-client