This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5lLrPkobYapeH_YEkj_cgVZiTl4.roa File: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (raw, json) Hash identifier: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4= Subject key identifier: E6:52:EB:3E:4A:1B:61:AA:5E:1F:F6:04:92:3F:DC:81:56:62:4E:5E Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B77C6981337A1DE324E0AA3C748D2EF1B Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5lLrPkobYapeH_YEkj_cgVZiTl4.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11404 IP address blocks: 9.142.32.0/20 maxlen: 20 9.142.192.0/19 maxlen: 19 138.226.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:13:37:a1:de:32:4e:0a:a3:c7:48:d2:ef:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e652eb3e4a1b61aa5e1ff604923fdc8156624e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:61:c6:6c:63:25:b5:70:ac:26:b9:00:60: 53:ea:87:09:98:3e:ad:0a:a7:68:01:2d:45:e0:0c: 1e:98:f5:cb:1e:25:78:88:67:65:41:32:50:5d:0f: f9:50:25:4f:e5:59:3c:98:37:e6:27:9a:6e:87:5b: ad:12:aa:3c:12:15:7e:c1:10:43:24:13:bf:60:19: 8a:10:42:31:4c:a1:ed:27:1e:62:40:8b:3a:53:92: b5:b1:47:d4:d6:66:5c:65:1c:0a:6f:18:74:06:af: c9:53:0a:8d:4b:9e:25:48:ac:d1:21:3c:a9:c0:95: 44:5d:5e:b4:cb:b4:36:d8:aa:d4:00:d3:1c:2d:b5: 62:ca:d4:ac:b8:92:fd:6f:3b:43:24:c4:c0:5a:2c: ea:51:01:72:2c:fe:ad:37:8c:88:dd:4e:af:ad:64: 8e:9f:50:c3:95:13:32:74:bb:63:43:49:8b:82:78: d1:09:7d:5f:af:71:b5:f8:14:a2:d2:e7:2a:d3:a9: 93:c2:84:b2:1e:5d:50:1b:54:26:bd:09:2b:07:13: 9f:bc:bd:8e:83:7e:cb:7b:01:19:b4:54:e5:52:1b: c0:86:ed:09:c0:de:20:28:c4:81:05:8f:b8:fe:2e: 7b:b9:c1:59:37:c9:e2:fd:4c:bf:7a:a3:fa:67:d6: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:52:EB:3E:4A:1B:61:AA:5E:1F:F6:04:92:3F:DC:81:56:62:4E:5E X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5lLrPkobYapeH_YEkj_cgVZiTl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.32.0/20 9.142.192.0/19 138.226.56.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:27:26:09:15:11:0c:5c:fe:c2:f3:1a:18:c6:7f:7a:03:6e: 21:13:2f:a6:40:cc:01:ea:4a:b6:fb:da:1c:80:1c:60:80:f3: fd:df:7e:d0:b7:df:c0:42:88:97:dd:f4:20:40:80:6e:f9:f6: a3:a8:c9:64:5c:be:cb:93:a2:9b:76:d0:1e:94:43:3f:10:31: a6:b5:dc:35:eb:45:ad:23:9d:75:60:d2:46:6a:09:7c:27:6f: 0b:54:55:ed:5b:76:7f:8b:ff:4e:1c:18:47:37:2a:0b:b1:90: d2:3f:c6:d8:69:43:90:25:ec:01:d8:47:b9:f8:10:19:ad:5c: 8e:56:08:e4:34:4c:63:0d:ca:0e:d8:63:c1:69:72:45:d5:97: 7d:42:3a:11:56:ca:60:0d:37:4e:9e:27:2a:fc:9f:44:51:32: a3:f3:a6:59:9e:35:91:0f:2f:b8:90:9e:e0:3b:61:a7:49:5c: 27:3a:6b:49:6c:8d:b9:5d:57:4a:d2:6e:24:c0:24:24:3a:3d: 69:3f:01:34:fc:8a:4d:6c:c6:9c:86:44:f0:70:f8:45:1a:81: 5b:44:be:cd:cc:5a:54:41:5e:ad:ee:f6:0f:a1:3f:19:51:16: 28:ce:5a:f9:e1:a5:b5:b2:c0:e1:d2:6c:43:21:b0:3d:eb:06: 90:88:7a:22 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xpgTN6HeMk4Ko8dI0u8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjUyZWIzZTRhMWI2MWFhNWUxZmY2MDQ5MjNmZGM4MTU2NjI0ZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZhxmxjJbVwrCa5AGBT6ocJmD6t CqdoAS1F4AwemPXLHiV4iGdlQTJQXQ/5UCVP5Vk8mDfmJ5puh1utEqo8EhV+wRBD JBO/YBmKEEIxTKHtJx5iQIs6U5K1sUfU1mZcZRwKbxh0Bq/JUwqNS54lSKzRITyp wJVEXV60y7Q22KrUANMcLbViytSsuJL9bztDJMTAWizqUQFyLP6tN4yI3U6vrWSO n1DDlRMydLtjQ0mLgnjRCX1fr3G1+BSi0ucq06mTwoSyHl1QG1QmvQkrBxOfvL2O g37LewEZtFTlUhvAhu0JwN4gKMSBBY+4/i57ucFZN8ni/Uy/eqP6Z9Z7lwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOZS6z5KG2GqXh/2BJI/3IFWYk5eMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvNWxMclBrb2JZYXBlSF9ZRWtqX2NnVlppVGw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQECY4gAwQF CY7AAwQDiuI4MA0GCSqGSIb3DQEBCwUAA4IBAQAqJyYJFREMXP7C8xoYxn96A24h Ey+mQMwB6kq2+9ocgBxggPP9337Qt9/AQoiX3fQgQIBu+fajqMlkXL7Lk6KbdtAe lEM/EDGmtdw160WtI511YNJGagl8J28LVFXtW3Z/i/9OHBhHNyoLsZDSP8bYaUOQ JewB2Ee5+BAZrVyOVgjkNExjDcoO2GPBaXJF1Zd9QjoRVspgDTdOnicq/J9EUTKj 86ZZnjWRDy+4kJ7gO2GnSVwnOmtJbI25XVdK0m4kwCQkOj1pPwE0/IpNbMachkTw cPhFGoFbRL7NzFpUQV6t7vYPoT8ZURYozlr54aW1ssDh0mxDIbA96waQiHoi -----END CERTIFICATE-----Generated at Tue Jan 20 15:35:16 2026 by rpki-client