This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/L_g2HP_CSAtm_vjUjW7o_vi4UHY.roa File: L_g2HP_CSAtm_vjUjW7o_vi4UHY.roa (raw, json) Hash identifier: nJArAGNM9l+5POjmpHW3gMbXMxSlqtaHWT5uXV2T09Q= Subject key identifier: 2F:F8:36:1C:FF:C2:48:0B:66:FE:F8:D4:8D:6E:E8:FE:F8:B8:50:76 Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9 Certificate serial: 019B7F149006A7EE6E4E85122857CFBE0181 Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/L_g2HP_CSAtm_vjUjW7o_vi4UHY.roa Signing time: Fri 02 Jan 2026 14:20:12 +0000 ROA not before: Fri 02 Jan 2026 14:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207275 IP address blocks: 91.226.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:90:06:a7:ee:6e:4e:85:12:28:57:cf:be:01:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9 Validity Not Before: Jan 2 14:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ff8361cffc2480b66fef8d48d6ee8fef8b85076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:42:4b:6a:1b:e9:9d:14:bb:d1:d9:86:0b:63: 06:aa:0d:0f:76:d7:cc:01:2e:ca:87:57:c8:27:f2: 84:43:da:19:d5:d7:21:23:1f:e0:cd:38:5e:98:8e: c8:3a:e3:53:69:c3:3a:7a:b5:0b:1d:0d:06:bd:7e: 2a:92:19:74:b5:a5:17:58:b3:68:31:cc:92:cf:dc: b9:d7:4f:2d:18:f9:a6:62:53:48:b4:b2:f6:2e:6a: af:eb:76:6d:6a:a1:1f:d9:53:c4:a1:59:0e:e4:95: a6:57:33:68:bd:e2:c0:ec:87:fc:35:c5:5c:4f:e8: c1:ed:24:68:66:d8:34:e3:16:b4:c8:13:f7:46:84: fb:fc:d6:46:c6:93:b3:ac:aa:89:7c:aa:44:29:85: 79:12:12:47:94:7d:fc:91:a3:6e:83:78:68:a8:4a: c6:eb:f6:44:75:80:b4:04:01:00:a8:5c:fe:13:51: 7a:71:a2:aa:6b:c5:d3:5e:5b:ec:57:83:52:6a:79: 09:06:b4:a3:99:ab:dd:ac:91:99:fb:8b:ea:fb:24: 75:01:69:90:10:c7:c0:c0:77:83:cd:b1:0c:83:6b: 7f:bf:1f:d5:82:ed:b3:44:65:00:a1:f3:0d:11:f9: 22:8c:95:44:6f:6d:73:db:a1:09:6b:1d:49:c1:18: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F8:36:1C:FF:C2:48:0B:66:FE:F8:D4:8D:6E:E8:FE:F8:B8:50:76 X509v3 Authority Key Identifier: keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/L_g2HP_CSAtm_vjUjW7o_vi4UHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.33.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:55:4d:61:ef:8b:6f:8e:50:f9:85:9a:f4:c1:f7:b3:6d:0e: 64:72:1b:47:22:f0:e9:3a:43:00:d1:cb:ad:33:14:35:3e:e0: 9b:38:d0:8e:98:42:87:e7:84:b7:30:5e:c8:88:1b:85:6e:bd: cc:05:4b:82:85:72:63:9d:9e:e6:74:78:01:98:76:fd:59:ec: 19:ed:20:cd:4d:09:f1:8f:b7:15:a4:aa:a4:9d:13:c8:c4:d9: 97:96:11:40:0f:81:0d:b6:a2:8d:d5:aa:f4:e2:9d:d3:a2:a3: a6:04:0f:ae:2c:9f:b0:cb:1b:43:79:8c:f7:0c:76:7c:42:d6: 53:15:e8:9e:2f:35:a7:21:92:1a:aa:bf:c6:d1:91:e5:98:58: f4:57:0b:c4:8a:32:e5:6b:ff:5d:ae:29:95:dc:db:65:ea:32: d4:7e:98:50:39:37:e7:9f:5d:b5:a0:78:22:62:33:ed:66:cf: f3:c6:19:36:10:64:17:3b:21:74:fe:08:4a:c9:c3:71:bf:fc: 62:99:7e:cd:a5:e4:34:66:65:b1:8f:a8:3c:3b:80:99:b5:0e: 5b:4c:61:94:c8:a7:7e:46:da:e0:82:d2:79:a4:5a:12:a2:4d: 13:94:22:d3:77:0e:2d:7e:b2:53:d1:fe:28:70:53:17:a8:ab: ed:0f:8f:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FJAGp+5uToUSKFfPvgGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTM4NjkzMTY3YWZkNGM1YWFlNTFkZWE3ZTVmM2Y5OWJh NjViZTkwHhcNMjYwMTAyMTQyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmY4MzYxY2ZmYzI0ODBiNjZmZWY4ZDQ4ZDZlZThmZWY4Yjg1MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kJLahvpnRS70dmGC2MGqg0PdtfM AS7Kh1fIJ/KEQ9oZ1dchIx/gzThemI7IOuNTacM6erULHQ0GvX4qkhl0taUXWLNo McySz9y5108tGPmmYlNItLL2Lmqv63ZtaqEf2VPEoVkO5JWmVzNoveLA7If8NcVc T+jB7SRoZtg04xa0yBP3RoT7/NZGxpOzrKqJfKpEKYV5EhJHlH38kaNug3hoqErG 6/ZEdYC0BAEAqFz+E1F6caKqa8XTXlvsV4NSankJBrSjmavdrJGZ+4vq+yR1AWmQ EMfAwHeDzbEMg2t/vx/Vgu2zRGUAofMNEfkijJVEb21z26EJax1JwRisrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/4Nhz/wkgLZv741I1u6P74uFB2MB8GA1UdIwQY MBaAFMVThpMWev1MWq5R3qfl8/mbplvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDIt YmMyYjdlNmYxY2E0LzEvTF9nMkhQX0NTQXRtX3ZqVWpXN29fdmk0VUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDItYmMyYjdlNmYxY2E0 LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+IhMA0G CSqGSIb3DQEBCwUAA4IBAQAMVU1h74tvjlD5hZr0wfezbQ5kchtHIvDpOkMA0cut MxQ1PuCbONCOmEKH54S3MF7IiBuFbr3MBUuChXJjnZ7mdHgBmHb9WewZ7SDNTQnx j7cVpKqknRPIxNmXlhFAD4ENtqKN1ar04p3ToqOmBA+uLJ+wyxtDeYz3DHZ8QtZT FeieLzWnIZIaqr/G0ZHlmFj0VwvEijLla/9drimV3Ntl6jLUfphQOTfnn121oHgi YjPtZs/zxhk2EGQXOyF0/ghKycNxv/ximX7NpeQ0ZmWxj6g8O4CZtQ5bTGGUyKd+ RtrggtJ5pFoSok0TlCLTdw4tfrJT0f4ocFMXqKvtD4/4 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:38 2026 by rpki-client