This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/L5IMZs754Co_x1FOI24kT4PtqBs.roa File: L5IMZs754Co_x1FOI24kT4PtqBs.roa (raw, json) Hash identifier: GSYk238NmjU6z5E8b0YRRQrT7uOenGCF93WcmI24gj8= Subject key identifier: 2F:92:0C:66:CE:F9:E0:2A:3F:C7:51:4E:23:6E:24:4F:83:ED:A8:1B Certificate issuer: /CN=576b57aed853f89da2a5b23df17f9217eefa61b6 Certificate serial: 019B7835396B9B1FC86B4CB35EAC5D2EE538 Authority key identifier: 57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/L5IMZs754Co_x1FOI24kT4PtqBs.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51053 IP address blocks: 141.101.40.0/21 maxlen: 24 185.208.160.0/22 maxlen: 24 193.104.3.0/24 maxlen: 24 2a01:4f80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:39:6b:9b:1f:c8:6b:4c:b3:5e:ac:5d:2e:e5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576b57aed853f89da2a5b23df17f9217eefa61b6 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f920c66cef9e02a3fc7514e236e244f83eda81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:dc:34:37:d4:12:96:1e:30:b0:0b:37:a7: e3:a5:39:a5:02:7b:84:33:8a:57:ec:78:51:55:35: 59:c8:17:80:cf:fa:15:57:9c:a6:57:45:b8:45:e3: 4a:77:ff:23:ea:ac:ea:df:3a:1b:eb:3a:68:19:f6: e8:e2:86:a1:7d:56:98:f3:2f:af:16:c3:5d:f8:7e: a9:5b:a6:3e:7c:9c:73:21:94:d1:a2:b9:06:18:28: c0:6f:79:16:2b:63:50:9c:a6:4b:2a:dd:6a:ae:9f: 56:90:e8:a8:8f:ac:0a:f9:22:94:80:93:0d:7b:f0: 3a:3c:4d:32:e1:2c:d9:fc:aa:6f:f6:28:ab:a9:19: cf:b7:f8:44:b0:c5:6a:61:61:cc:78:d8:14:f8:57: c6:1a:b3:6b:7b:2b:54:d1:e2:6f:6e:3e:00:5c:e9: 79:3b:50:37:d2:4b:51:5d:a4:1a:b8:4c:36:6c:7b: 3b:76:2c:a8:15:f0:bf:77:cd:d5:f7:ff:35:1c:51: 90:33:04:0c:4d:77:37:0c:0a:4c:74:d3:ad:fb:ef: b3:ba:ee:23:ea:de:79:18:31:0a:e8:46:6b:98:88: 1d:2f:87:7a:a3:be:07:b6:5d:0f:03:40:d8:e8:0d: 00:4f:ac:9b:a7:ac:08:e5:28:0a:36:8d:9f:ed:ab: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:92:0C:66:CE:F9:E0:2A:3F:C7:51:4E:23:6E:24:4F:83:ED:A8:1B X509v3 Authority Key Identifier: keyid:57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/L5IMZs754Co_x1FOI24kT4PtqBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.40.0/21 185.208.160.0/22 193.104.3.0/24 IPv6: 2a01:4f80::/29 Signature Algorithm: sha256WithRSAEncryption 03:f1:db:13:a5:03:72:ef:c8:4e:b8:71:f7:9e:98:60:9a:1b: bd:67:9b:a0:e1:47:38:1c:39:f7:f6:1b:8a:77:98:e9:45:e9: b0:36:67:5a:19:b8:f9:69:84:b2:05:dc:5c:fe:b4:28:0a:30: 88:ba:90:7d:2e:e0:7b:c4:15:08:6f:86:4c:03:81:32:15:3a: 7d:c7:9c:93:a7:aa:e2:c8:94:a3:98:bd:8e:5f:b6:e2:f3:48: b8:53:ea:55:c3:95:fe:b3:7b:b2:42:33:f7:b6:e8:0a:e6:41: aa:40:c1:78:ce:b2:40:57:f3:94:92:ce:8b:8a:59:75:37:e8: 71:9b:83:8f:a9:1c:1e:b3:19:74:f2:c7:aa:ee:8c:40:b3:47: 2a:87:c4:d3:ab:50:f5:65:31:2b:01:ba:61:0a:75:33:61:a3: b9:5a:eb:dc:24:7c:9d:e4:be:8e:d6:47:c7:56:70:5c:be:72: cf:3c:13:87:3e:fa:b4:72:c9:62:dc:58:6f:13:ee:3c:3e:24: 8f:63:c5:1a:d8:c4:9e:3d:21:45:7b:3e:5d:4d:3b:23:de:d3: 89:54:7a:0a:7f:a2:0a:be:a9:83:8c:24:fa:11:4f:a8:97:6a: 1e:69:94:59:de:dc:cd:43:d6:a9:dc:e0:68:52:d9:05:0d:21: 83:c5:0c:ae -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NTlrmx/Ia0yzXqxdLuU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmI1N2FlZDg1M2Y4OWRhMmE1YjIzZGYxN2Y5MjE3ZWVm YTYxYjYwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjkyMGM2NmNlZjllMDJhM2ZjNzUxNGUyMzZlMjQ0ZjgzZWRhODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSXcNDfUEpYeMLALN6fjpTmlAnuE M4pX7HhRVTVZyBeAz/oVV5ymV0W4ReNKd/8j6qzq3zob6zpoGfbo4oahfVaY8y+v FsNd+H6pW6Y+fJxzIZTRorkGGCjAb3kWK2NQnKZLKt1qrp9WkOioj6wK+SKUgJMN e/A6PE0y4SzZ/Kpv9iirqRnPt/hEsMVqYWHMeNgU+FfGGrNreytU0eJvbj4AXOl5 O1A30ktRXaQauEw2bHs7diyoFfC/d83V9/81HFGQMwQMTXc3DApMdNOt+++zuu4j 6t55GDEK6EZrmIgdL4d6o74Htl0PA0DY6A0AT6ybp6wI5SgKNo2f7avaHwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFC+SDGbO+eAqP8dRTiNuJE+D7agbMB8GA1UdIwQY MBaAFFdrV67YU/idoqWyPfF/khfu+mG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJ0WHJ0aFQtSjJpcGJJOThYLVNGLTc2WWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80NmY1MDEtNzc0NS00OWRhLWIxZDgt MDczMDllNzk2Yzc4LzEvTDVJTVpzNzU0Q29feDFGT0kyNGtUNFB0cUJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80NmY1MDEtNzc0NS00OWRhLWIxZDgtMDczMDllNzk2Yzc4 LzEvVjJ0WHJ0aFQtSjJpcGJJOThYLVNGLTc2WWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDjWUoAwQC udCgAwQAwWgDMA0EAgACMAcDBQMqAU+AMA0GCSqGSIb3DQEBCwUAA4IBAQAD8dsT pQNy78hOuHH3nphgmhu9Z5ug4Uc4HDn39huKd5jpRemwNmdaGbj5aYSyBdxc/rQo CjCIupB9LuB7xBUIb4ZMA4EyFTp9x5yTp6riyJSjmL2OX7bi80i4U+pVw5X+s3uy QjP3tugK5kGqQMF4zrJAV/OUks6Lill1N+hxm4OPqRwesxl08seq7oxAs0cqh8TT q1D1ZTErAbphCnUzYaO5WuvcJHyd5L6O1kfHVnBcvnLPPBOHPvq0csli3FhvE+48 PiSPY8Ua2MSePSFFez5dTTsj3tOJVHoKf6IKvqmDjCT6EU+ol2oeaZRZ3tzNQ9ap 3OBoUtkFDSGDxQyu -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:03 2026 by rpki-client