This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/l5Do3piPY7VvpzWYbYrpo8WUluE.roa File: l5Do3piPY7VvpzWYbYrpo8WUluE.roa (raw, json) Hash identifier: eUmIdaUqgQ9jGvane0Y13/htrCjBk/WMjoMbVDh/P30= Subject key identifier: 97:90:E8:DE:98:8F:63:B5:6F:A7:35:98:6D:8A:E9:A3:C5:94:96:E1 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F75434463DF25C03AC31C6DA4E8C Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/l5Do3piPY7VvpzWYbYrpo8WUluE.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212349 IP address blocks: 5.1.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f7:54:34:46:3d:f2:5c:03:ac:31:c6:da:4e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9790e8de988f63b56fa735986d8ae9a3c59496e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:d0:e1:ea:22:0e:62:ee:fa:d0:01:e0:49: e5:f6:46:2b:0a:e1:dc:78:f3:87:d6:34:d7:cd:0a: ce:4e:c2:f2:c5:b5:05:fe:2b:25:1f:a4:20:51:6a: 85:9d:13:6d:57:b5:10:ba:04:6d:ec:ae:bf:57:f7: 8b:1d:87:fc:8e:dd:a5:c7:f1:b9:f1:27:21:19:08: d5:70:41:0a:ba:9e:8c:d5:bd:44:ec:39:f7:51:52: 6e:ba:6c:79:b7:89:af:00:2c:8f:bb:5f:b3:d2:46: 16:cb:a3:4c:08:e2:0a:33:28:6f:7e:6f:7b:f8:c3: 62:bd:d9:68:9a:37:d2:23:cc:a7:69:bc:e6:3d:3c: ba:c2:39:f5:a8:f5:5e:4f:4b:00:10:3d:dd:0b:1a: b3:a2:de:24:be:1c:3c:e4:91:d9:82:56:1c:01:75: 17:2c:54:91:c4:11:d6:f0:01:52:e9:2c:2e:f6:ab: f9:6f:8e:06:2c:03:15:af:62:69:26:f5:22:40:81: 97:b2:de:bb:53:f9:ae:95:95:a7:d6:d4:5a:e6:aa: a8:f4:33:72:16:c4:c2:4f:38:75:02:dd:f6:e5:5b: 44:0d:f8:6d:66:96:1f:c8:90:6a:c1:35:cc:99:c2: 69:ee:2b:78:95:5d:fa:11:91:f8:78:1c:fe:e2:62: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:90:E8:DE:98:8F:63:B5:6F:A7:35:98:6D:8A:E9:A3:C5:94:96:E1 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/l5Do3piPY7VvpzWYbYrpo8WUluE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.79.0/24 Signature Algorithm: sha256WithRSAEncryption 51:1f:99:b9:42:26:7b:80:72:08:6c:e3:38:02:ad:8c:10:44: e8:cb:a2:93:c5:ba:b7:40:de:b7:c8:e7:00:8f:e9:30:d3:0b: c2:c7:96:a6:34:00:ea:f6:1b:2a:25:92:e2:41:f8:a9:30:14: ea:50:01:70:df:d6:9f:94:3a:39:c1:1b:3e:60:f8:06:46:de: db:01:88:47:42:4a:04:9f:37:32:ff:8a:c0:9d:c0:d2:d7:73: b8:0f:c2:71:78:00:c9:e3:26:e0:65:8a:a0:ac:01:cd:fa:71: 87:b4:58:64:0b:21:81:72:5d:bd:5e:82:a9:8e:3b:3c:43:0d: 96:1b:f7:11:2b:f9:16:be:2d:c9:3b:78:14:31:51:ed:ef:07: 06:bb:a3:a7:a3:48:40:c1:a5:91:25:e6:b4:bb:7a:14:5c:77: 94:72:19:09:8e:4b:2c:53:4d:58:b0:0f:10:f3:9a:4f:a0:e8: 2f:58:44:09:53:54:e5:b4:95:bb:bf:2e:1c:23:14:e1:d0:5f: a2:4d:62:3d:9b:b4:66:f1:6a:d1:5e:e8:0c:96:66:2c:14:6a: 63:68:c2:3b:d1:d0:cb:01:cc:4f:2c:aa:c0:58:43:db:c2:99: a0:cc:f3:2a:81:b7:e3:b1:6a:b3:ad:da:4f:bf:63:f4:59:1c: 28:cc:0b:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPdUNEY98lwDrDHG2k6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzkwZThkZTk4OGY2M2I1NmZhNzM1OTg2ZDhhZTlhM2M1OTQ5NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CDQ4eoiDmLu+tAB4Enl9kYrCuHc ePOH1jTXzQrOTsLyxbUF/islH6QgUWqFnRNtV7UQugRt7K6/V/eLHYf8jt2lx/G5 8SchGQjVcEEKup6M1b1E7Dn3UVJuumx5t4mvACyPu1+z0kYWy6NMCOIKMyhvfm97 +MNivdlomjfSI8ynabzmPTy6wjn1qPVeT0sAED3dCxqzot4kvhw85JHZglYcAXUX LFSRxBHW8AFS6Swu9qv5b44GLAMVr2JpJvUiQIGXst67U/mulZWn1tRa5qqo9DNy FsTCTzh1At325VtEDfhtZpYfyJBqwTXMmcJp7it4lV36EZH4eBz+4mIgKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJeQ6N6Yj2O1b6c1mG2K6aPFlJbhMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvbDVEbzNwaVBZN1Z2cHpXWWJZcnBvOFdVbHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQFPMA0G CSqGSIb3DQEBCwUAA4IBAQBRH5m5QiZ7gHIIbOM4Aq2MEEToy6KTxbq3QN63yOcA j+kw0wvCx5amNADq9hsqJZLiQfipMBTqUAFw39aflDo5wRs+YPgGRt7bAYhHQkoE nzcy/4rAncDS13O4D8JxeADJ4ybgZYqgrAHN+nGHtFhkCyGBcl29XoKpjjs8Qw2W G/cRK/kWvi3JO3gUMVHt7wcGu6Ono0hAwaWRJea0u3oUXHeUchkJjkssU01YsA8Q 85pPoOgvWEQJU1TltJW7vy4cIxTh0F+iTWI9m7Rm8WrRXugMlmYsFGpjaMI70dDL AcxPLKrAWEPbwpmgzPMqgbfjsWqzrdpPv2P0WRwozAs8 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:45 2026 by rpki-client