This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/l2P0mxBrMP0-gKQJcXN6hgGkulw.roa File: l2P0mxBrMP0-gKQJcXN6hgGkulw.roa (raw, json) Hash identifier: Q3m/SnyzSZoKyPQ/bGdtUA1H1iCV504p0qUtfrdts1A= Subject key identifier: 97:63:F4:9B:10:6B:30:FD:3E:80:A4:09:71:73:7A:86:01:A4:BA:5C Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019BE033CF3E13157D26EBD39B2E133FA11E Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/l2P0mxBrMP0-gKQJcXN6hgGkulw.roa Signing time: Wed 21 Jan 2026 10:57:30 +0000 ROA not before: Wed 21 Jan 2026 10:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51791 IP address blocks: 153.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:33:cf:3e:13:15:7d:26:eb:d3:9b:2e:13:3f:a1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 21 10:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9763f49b106b30fd3e80a40971737a8601a4ba5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:cd:a2:c0:cf:89:f3:af:bd:dc:30:18:5a: 70:71:a4:8a:c5:8d:5d:96:f9:3b:c2:b1:55:68:12: 76:57:d3:3d:02:6d:02:b3:6c:73:7c:77:e6:b7:55: 36:de:47:8f:30:f6:a3:3e:99:15:b0:61:27:71:2b: 8d:f3:a1:2a:ef:a6:60:6b:8e:4a:ea:13:63:f5:0f: cd:4b:a7:71:4d:41:15:ea:f3:be:83:38:b2:46:be: 9b:0b:07:03:f2:86:94:13:1c:cf:11:f1:93:fe:88: e8:89:67:9b:69:55:5e:55:76:85:c1:72:2f:7a:1a: 37:3c:73:5f:4b:60:0d:a5:da:96:8d:3d:27:4c:b3: 13:8f:26:f4:74:71:b0:ce:72:ac:8a:68:74:5f:8c: 2c:69:2a:73:15:b4:ed:03:da:04:ed:5a:37:15:31: f8:35:8f:67:2d:a5:84:ba:f2:0b:c2:de:ab:0d:70: 45:22:59:83:df:03:df:99:93:88:ef:66:98:03:44: ec:cc:dc:22:c7:57:57:7d:08:18:83:dc:a7:dd:94: 94:c3:1c:9f:7d:c8:2e:1e:b8:8b:dd:4c:18:a9:f5: 26:ea:7c:5d:61:0d:cb:70:7a:38:3b:1e:40:75:3c: 6e:6b:52:dd:2b:b7:89:94:29:18:8b:7d:ee:08:b0: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:F4:9B:10:6B:30:FD:3E:80:A4:09:71:73:7A:86:01:A4:BA:5C X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/l2P0mxBrMP0-gKQJcXN6hgGkulw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.56.129.0/24 Signature Algorithm: sha256WithRSAEncryption 50:2a:6c:dc:c6:0e:ae:ae:34:5b:53:38:34:c9:d9:55:f2:89: ef:e6:33:63:67:4f:d6:d9:7d:ff:c8:c5:fa:04:5c:e8:3d:9d: 04:4c:61:ef:ef:d1:26:e1:28:7c:e9:55:07:2d:5b:fe:92:0e: be:7e:90:43:96:3b:43:da:08:9f:87:7a:6a:f6:b0:06:21:bd: 2f:0a:1c:8e:eb:be:80:17:4c:d8:6f:d6:ef:11:80:76:1e:58: 35:18:f2:94:6f:03:27:3c:2a:cd:2e:43:07:e6:a0:94:53:8a: 1b:63:2f:4e:b2:30:91:20:f3:be:ba:48:13:4f:e0:1e:7b:d0: 7e:a6:2e:7a:8b:8c:5e:b8:90:69:aa:d6:6e:78:8b:a0:4d:81: eb:59:ec:37:62:4e:bc:ea:3d:7a:69:d8:d2:14:74:35:31:0c: ff:14:ea:6e:85:1f:67:a1:cb:4c:a5:49:03:50:ad:6e:24:98: c1:89:38:d1:ab:e3:82:eb:86:94:50:2b:cb:cf:b3:0b:de:86: 33:c3:4a:f9:f0:19:5a:b3:36:27:16:95:ea:d4:22:4f:3f:5b: 27:a1:66:1e:c3:19:a7:56:40:41:9d:25:eb:19:9f:08:e1:8b: b7:20:31:5e:df:9b:22:a4:2b:ce:79:ec:01:11:ce:34:a4:b5: c8:f4:6e:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgM88+ExV9JuvTmy4TP6EeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTIxMTA1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzYzZjQ5YjEwNmIzMGZkM2U4MGE0MDk3MTczN2E4NjAxYTRiYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrDNosDPifOvvdwwGFpwcaSKxY1d lvk7wrFVaBJ2V9M9Am0Cs2xzfHfmt1U23kePMPajPpkVsGEncSuN86Eq76Zga45K 6hNj9Q/NS6dxTUEV6vO+gziyRr6bCwcD8oaUExzPEfGT/ojoiWebaVVeVXaFwXIv eho3PHNfS2ANpdqWjT0nTLMTjyb0dHGwznKsimh0X4wsaSpzFbTtA9oE7Vo3FTH4 NY9nLaWEuvILwt6rDXBFIlmD3wPfmZOI72aYA0TszNwix1dXfQgYg9yn3ZSUwxyf fcguHriL3UwYqfUm6nxdYQ3LcHo4Ox5AdTxua1LdK7eJlCkYi33uCLC8/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdj9JsQazD9PoCkCXFzeoYBpLpcMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvbDJQMG14QnJNUDAtZ0tRSmNYTjZoZ0drdWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTiBMA0G CSqGSIb3DQEBCwUAA4IBAQBQKmzcxg6urjRbUzg0ydlV8onv5jNjZ0/W2X3/yMX6 BFzoPZ0ETGHv79Em4Sh86VUHLVv+kg6+fpBDljtD2gifh3pq9rAGIb0vChyO676A F0zYb9bvEYB2Hlg1GPKUbwMnPCrNLkMH5qCUU4obYy9OsjCRIPO+ukgTT+Aee9B+ pi56i4xeuJBpqtZueIugTYHrWew3Yk686j16adjSFHQ1MQz/FOpuhR9noctMpUkD UK1uJJjBiTjRq+OC64aUUCvLz7ML3oYzw0r58BlaszYnFpXq1CJPP1snoWYewxmn VkBBnSXrGZ8I4Yu3IDFe35sipCvOeewBEc40pLXI9G5I -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:23 2026 by rpki-client