This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/5lor0bwtxK_7lFhqP5JQsE38fgY.roa File: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (raw, json) Hash identifier: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ= Subject key identifier: E6:5A:2B:D1:BC:2D:C4:AF:FB:94:58:6A:3F:92:50:B0:4D:FC:7E:06 Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36 Certificate serial: 019B7DCB4E333F2E8330224822AA22468955 Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/5lor0bwtxK_7lFhqP5JQsE38fgY.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 45.13.124.0/22 maxlen: 24 185.96.40.0/22 maxlen: 24 2a03:fd80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4e:33:3f:2e:83:30:22:48:22:aa:22:46:89:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e65a2bd1bc2dc4affb94586a3f9250b04dfc7e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:66:90:30:93:c9:54:39:0b:b2:3d:5d:83: 60:80:40:c0:36:7a:72:1e:95:65:f9:67:c7:ae:30: 19:d6:27:b9:a0:66:97:c1:83:ed:8d:62:a0:3d:4f: 45:9b:80:92:27:d9:76:c4:5b:b6:f8:3d:87:d7:31: 33:0e:f9:f8:08:8a:fa:6f:01:7d:a4:55:74:c9:bc: 3d:9e:c0:d5:96:ea:60:af:fe:b7:91:35:f3:20:6e: d9:5b:8f:f3:1b:60:ee:73:22:bc:2a:5f:66:ec:e6: 7f:e3:f1:35:62:b8:a8:e4:7d:92:a2:87:94:5b:ee: f3:e5:b1:c8:98:4a:99:ad:52:d8:b1:9f:e4:86:a5: 27:9a:3c:84:24:11:a8:c2:ca:5d:3f:cd:18:ba:d8: eb:87:82:dc:a1:ad:bd:b2:6b:3a:1d:fc:c3:fd:d4: d0:d9:62:7b:b6:84:e9:5c:33:ac:11:cd:27:ea:55: ee:6a:77:04:dd:37:6a:f1:59:5c:55:da:7f:a8:ac: 98:4f:36:1d:26:01:be:ce:e8:15:64:52:88:05:be: c9:d8:bb:4a:76:58:d0:dc:0b:b5:92:e1:cb:68:d4: c5:24:4d:92:17:26:10:93:76:2b:12:73:5b:15:7c: b2:f6:3a:00:c4:08:cc:ab:af:98:2a:af:f7:41:77: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:2B:D1:BC:2D:C4:AF:FB:94:58:6A:3F:92:50:B0:4D:FC:7E:06 X509v3 Authority Key Identifier: keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/5lor0bwtxK_7lFhqP5JQsE38fgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.124.0/22 185.96.40.0/22 IPv6: 2a03:fd80::/29 Signature Algorithm: sha256WithRSAEncryption a4:ae:48:15:01:55:37:c9:b2:2a:87:2e:58:41:af:01:a0:4e: 2b:f1:ec:57:64:1d:a9:6e:e1:52:3d:27:66:59:8c:c1:28:79: 07:a2:43:f6:79:cd:97:d6:7f:3d:17:68:13:5d:99:85:de:8c: 51:09:99:03:4a:1d:a9:ce:70:6c:a6:fc:4a:71:10:59:ed:a7: 88:4d:13:21:8a:19:56:af:e4:a5:44:be:ed:e5:86:51:08:3d: af:42:ca:82:d5:c6:87:fe:be:bd:59:a1:44:16:12:e0:f9:5b: 55:97:65:4d:de:c7:6e:26:e2:0b:4d:e7:0b:bb:9a:f0:25:79: 5b:5d:4d:3f:d1:e4:13:c0:12:42:0c:9d:ed:46:1e:ce:a6:26: 30:db:69:64:49:80:7a:e9:f6:ff:fb:8b:8b:23:3e:83:0f:30: 7e:75:8e:ef:52:2a:98:af:ab:14:82:50:08:8f:51:ab:1d:04: 5c:c8:5d:61:73:39:32:52:a9:00:b3:c9:85:80:19:a8:a6:3c: ee:90:e7:5f:ca:05:c6:a3:44:80:de:64:4b:07:aa:99:28:ad: 67:12:7e:a7:ca:65:ab:ae:a1:7f:b7:0b:e8:8a:02:fe:6c:82: ac:06:e7:d2:e1:7a:65:7a:eb:f8:7f:04:ad:83:c7:66:b0:25: 7e:9f:87:7b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9y04zPy6DMCJIIqoiRolVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5 MjJlMzYwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjVhMmJkMWJjMmRjNGFmZmI5NDU4NmEzZjkyNTBiMDRkZmM3ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC1mkDCTyVQ5C7I9XYNggEDANnpy HpVl+WfHrjAZ1ie5oGaXwYPtjWKgPU9Fm4CSJ9l2xFu2+D2H1zEzDvn4CIr6bwF9 pFV0ybw9nsDVlupgr/63kTXzIG7ZW4/zG2DucyK8Kl9m7OZ/4/E1Yrio5H2SooeU W+7z5bHImEqZrVLYsZ/khqUnmjyEJBGowspdP80Yutjrh4Lcoa29sms6HfzD/dTQ 2WJ7toTpXDOsEc0n6lXuancE3Tdq8VlcVdp/qKyYTzYdJgG+zugVZFKIBb7J2LtK dljQ3Au1kuHLaNTFJE2SFyYQk3YrEnNbFXyy9joAxAjMq6+YKq/3QXf/NwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOZaK9G8LcSv+5RYaj+SULBN/H4GMB8GA1UdIwQY MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt NjY0NWRkM2Q2MjRiLzEvNWxvcjBid3R4S183bEZocVA1SlFzRTM4ZmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQ18AwQC uWAoMA0EAgACMAcDBQMqA/2AMA0GCSqGSIb3DQEBCwUAA4IBAQCkrkgVAVU3ybIq hy5YQa8BoE4r8exXZB2pbuFSPSdmWYzBKHkHokP2ec2X1n89F2gTXZmF3oxRCZkD Sh2pznBspvxKcRBZ7aeITRMhihlWr+SlRL7t5YZRCD2vQsqC1caH/r69WaFEFhLg +VtVl2VN3sduJuILTecLu5rwJXlbXU0/0eQTwBJCDJ3tRh7OpiYw22lkSYB66fb/ +4uLIz6DDzB+dY7vUiqYr6sUglAIj1GrHQRcyF1hczkyUqkAs8mFgBmopjzukOdf ygXGo0SA3mRLB6qZKK1nEn6nymWrrqF/twvoigL+bIKsBufS4Xpleuv4fwStg8dm sCV+n4d7 -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:28 2026 by rpki-client