This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l5tnW24hZnL-75ZDiQgn2mlHLh8.roa File: l5tnW24hZnL-75ZDiQgn2mlHLh8.roa (raw, json) Hash identifier: wtYdPbysH/zpDTtk4qDpiH0biYkFenksgDyz5GSDbhY= Subject key identifier: 97:9B:67:5B:6E:21:66:72:FE:EF:96:43:89:08:27:DA:69:47:2E:1F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CACA9C5F905AAEAD41A0B8B8B5E24 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l5tnW24hZnL-75ZDiQgn2mlHLh8.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 45.12.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ac:a9:c5:f9:05:aa:ea:d4:1a:0b:8b:8b:5e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=979b675b6e216672feef9643890827da69472e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:62:bf:3e:59:9f:65:c1:c3:43:da:5a:f7: 21:b0:f3:aa:ec:6d:09:6c:48:30:dc:42:d5:d1:82: f2:c9:52:70:70:c3:9e:05:6e:a8:f5:80:55:c7:98: bc:c1:a7:a4:da:56:ad:59:ae:f2:b3:fe:5a:20:45: 8d:e9:81:1c:3a:ae:d9:60:0e:c6:30:d8:f0:74:dd: 9b:60:ad:56:f2:c8:85:66:46:81:d8:ac:ec:78:f3: 41:a5:d5:68:ed:0c:a2:a4:e6:18:cb:60:e4:0a:dd: a2:d9:9f:2f:b1:f7:25:c5:3e:20:39:2f:cf:2d:ba: 7a:db:0d:f9:bf:aa:b0:05:f4:56:87:c1:4f:32:5c: bb:eb:42:da:68:1a:d9:eb:30:ee:cd:31:89:2e:7a: 7b:49:f3:88:26:b6:77:1d:54:2b:86:88:c6:3b:a9: e7:f1:13:ca:07:de:e7:cf:77:0a:25:ae:f4:1f:e8: 7b:ea:a9:b1:a8:8a:8f:0f:d8:c4:f3:6a:e1:aa:fa: 1a:d2:7e:85:c5:09:1e:06:6b:8d:a9:2c:37:5b:1c: 6b:b1:ca:9e:94:8b:20:53:34:3e:b1:b9:6f:ea:dc: ca:63:90:a9:2a:0b:e1:46:7a:61:7e:f5:19:00:c6: 92:d4:a9:38:f1:41:c4:48:57:40:1d:9c:14:75:60: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:67:5B:6E:21:66:72:FE:EF:96:43:89:08:27:DA:69:47:2E:1F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l5tnW24hZnL-75ZDiQgn2mlHLh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.70.0/24 Signature Algorithm: sha256WithRSAEncryption b1:eb:8f:9d:9b:0e:e7:1b:98:87:03:e0:fa:d5:02:c7:65:8f: 73:d6:60:e0:ac:40:eb:e0:d9:87:46:67:13:2a:76:52:87:0c: 8f:86:e4:7e:25:4c:bb:d9:dd:80:0c:3b:fb:c2:ac:85:15:0c: 35:d2:48:25:f3:10:5c:88:f5:a8:7f:ac:36:98:32:10:90:f1: e3:eb:43:58:10:27:3f:a2:cb:a8:a9:1b:67:ec:8d:41:20:41: 3a:b3:94:ca:09:b0:e2:fb:a1:64:f3:57:f9:f5:58:7f:28:5b: e3:ff:7c:fb:05:1e:5a:be:13:5f:4a:4f:24:18:da:c9:e6:d1: 70:57:28:66:b1:99:75:06:d3:1a:c6:1b:fc:f9:48:00:72:ae: 9b:47:d7:57:74:9b:34:3d:de:6d:fc:9b:5e:9d:91:93:3e:0e: e3:aa:27:67:ad:42:c4:f4:6b:19:b3:40:42:97:b4:d0:68:4f: 95:dd:5e:3a:f4:d1:0a:dd:43:f2:a9:63:3a:00:cd:0c:35:ba: 92:50:00:56:79:4f:d7:e3:e3:4f:19:71:26:53:c9:59:23:0e: 44:62:7a:71:09:9b:86:a5:c8:eb:d8:c9:32:0e:7b:1a:d9:b4: 13:76:53:60:42:f5:83:11:f5:36:8e:26:da:67:b1:aa:52:e1: 73:64:a8:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKypxfkFqurUGguLi14kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzliNjc1YjZlMjE2NjcyZmVlZjk2NDM4OTA4MjdkYTY5NDcyZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Jivz5Zn2XBw0PaWvchsPOq7G0J bEgw3ELV0YLyyVJwcMOeBW6o9YBVx5i8waek2latWa7ys/5aIEWN6YEcOq7ZYA7G MNjwdN2bYK1W8siFZkaB2KzsePNBpdVo7QyipOYYy2DkCt2i2Z8vsfclxT4gOS/P Lbp62w35v6qwBfRWh8FPMly760LaaBrZ6zDuzTGJLnp7SfOIJrZ3HVQrhojGO6nn 8RPKB97nz3cKJa70H+h76qmxqIqPD9jE82rhqvoa0n6FxQkeBmuNqSw3Wxxrscqe lIsgUzQ+sblv6tzKY5CpKgvhRnphfvUZAMaS1Kk48UHESFdAHZwUdWC2vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJebZ1tuIWZy/u+WQ4kIJ9ppRy4fMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbDV0blcyNGhabkwtNzVaRGlRZ24ybWxITGg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxGMA0G CSqGSIb3DQEBCwUAA4IBAQCx64+dmw7nG5iHA+D61QLHZY9z1mDgrEDr4NmHRmcT KnZShwyPhuR+JUy72d2ADDv7wqyFFQw10kgl8xBciPWof6w2mDIQkPHj60NYECc/ osuoqRtn7I1BIEE6s5TKCbDi+6Fk81f59Vh/KFvj/3z7BR5avhNfSk8kGNrJ5tFw VyhmsZl1BtMaxhv8+UgAcq6bR9dXdJs0Pd5t/JtenZGTPg7jqidnrULE9GsZs0BC l7TQaE+V3V469NEK3UPyqWM6AM0MNbqSUABWeU/X4+NPGXEmU8lZIw5EYnpxCZuG pcjr2MkyDnsa2bQTdlNgQvWDEfU2jibaZ7GqUuFzZKh6 -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:49 2026 by rpki-client