This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa File: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (raw, json) Hash identifier: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk= Subject key identifier: 2F:C0:15:28:66:BE:07:4C:13:53:83:DB:2F:D4:1C:C5:B6:1E:24:99 Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a Certificate serial: 019B7D5C6A16C12D7ACC3664E5CEE80E6C75 Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa Signing time: Fri 02 Jan 2026 06:19:26 +0000 ROA not before: Fri 02 Jan 2026 06:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211420 IP address blocks: 5.255.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6a:16:c1:2d:7a:cc:36:64:e5:ce:e8:0e:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a Validity Not Before: Jan 2 06:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fc0152866be074c135383db2fd41cc5b61e2499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:4f:73:0e:1c:5a:ae:61:79:57:e9:fc:68: 5d:e1:13:b8:a8:33:27:0a:d1:8b:14:db:57:19:90: 4e:92:f9:d2:b6:5c:a2:d8:4b:75:0e:f5:d3:7a:1d: 81:96:42:04:ef:44:0d:df:ac:70:11:5c:ae:39:65: 4f:a1:0b:9c:b1:41:61:b0:16:15:9e:f0:f0:53:25: 2f:c3:55:db:16:d9:d5:b6:4f:4a:e1:42:ed:1c:4d: f4:72:05:e3:14:aa:c4:f3:b7:63:cb:84:97:16:a5: 20:e3:4c:28:76:4a:b0:7c:82:84:58:4a:8b:6e:0e: 29:59:a8:42:0d:aa:df:e1:b9:47:65:32:ac:02:34: 1f:2a:82:82:96:3d:a4:14:91:3e:ff:3b:ba:c1:80: c1:bb:33:51:f6:da:21:7a:63:eb:51:5d:99:6f:29: 4d:81:39:b6:b8:b0:07:05:b4:f3:b6:48:96:b7:31: 59:17:d0:a6:cd:38:47:b7:7a:c4:6c:55:fc:1b:95: 78:25:e6:7f:41:9e:80:03:f1:d0:5c:6c:aa:84:55: 0f:97:a4:d9:00:37:cc:49:75:6f:9a:e8:32:43:19: 3f:b2:64:2b:5e:51:b3:0c:b9:76:82:f9:3e:55:c4: 53:15:5c:e2:6f:c0:1d:3c:54:24:5e:8b:a4:c7:0a: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C0:15:28:66:BE:07:4C:13:53:83:DB:2F:D4:1C:C5:B6:1E:24:99 X509v3 Authority Key Identifier: keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.255.60.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ee:e9:7a:4d:b2:0d:6e:98:84:99:90:48:b1:8e:ae:39:e0: 38:ce:3d:dd:89:65:03:1a:aa:f8:67:4e:17:60:d7:2d:15:18: b9:5c:f7:63:ef:14:92:b1:d6:6f:8f:09:36:d3:21:45:22:c7: 84:e3:4d:2a:1e:87:48:04:c1:eb:9b:ca:31:58:5c:2e:ea:a9: b4:7c:38:0c:c5:f4:ef:4e:37:99:87:d8:c0:7f:46:93:6f:53: 1e:e9:0e:8c:a0:98:86:11:92:e4:38:72:83:5b:73:fa:44:80: 33:b1:f7:70:2e:9f:82:93:7a:37:a0:c2:44:15:ef:b0:86:c5: 3d:e4:3b:12:d5:c4:4a:e6:9c:9a:fc:6d:e8:07:42:00:36:d7: d8:e1:22:fb:cd:9c:c1:7d:9c:e2:4c:88:6b:55:a5:f1:ac:b8: 61:9d:e3:ff:56:a2:d0:0e:95:c7:4f:24:b7:f6:04:b1:9d:97: 30:b0:dc:fa:aa:ca:77:5c:71:29:47:22:db:23:7a:d8:29:a8: 86:6f:d1:59:63:53:bc:e0:88:d0:12:b2:e3:83:64:3c:e0:5e: fd:e9:97:10:9f:e9:7a:0a:80:96:ef:b7:cf:d7:8b:80:ab:d6: a2:f0:c8:1c:f9:32:13:34:e2:e3:ee:22:ba:1d:c3:6c:ed:bd: 17:17:3c:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XGoWwS16zDZk5c7oDmx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWVjNmUwNjYwZGI2ZjYyNWI5NzhiZTBkNWVlNzFjMmRj ZDQ2NWEwHhcNMjYwMTAyMDYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmMwMTUyODY2YmUwNzRjMTM1MzgzZGIyZmQ0MWNjNWI2MWUyNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MlPcw4cWq5heVfp/Ghd4RO4qDMn CtGLFNtXGZBOkvnStlyi2Et1DvXTeh2BlkIE70QN36xwEVyuOWVPoQucsUFhsBYV nvDwUyUvw1XbFtnVtk9K4ULtHE30cgXjFKrE87djy4SXFqUg40wodkqwfIKEWEqL bg4pWahCDarf4blHZTKsAjQfKoKClj2kFJE+/zu6wYDBuzNR9tohemPrUV2ZbylN gTm2uLAHBbTztkiWtzFZF9CmzThHt3rEbFX8G5V4JeZ/QZ6AA/HQXGyqhFUPl6TZ ADfMSXVvmugyQxk/smQrXlGzDLl2gvk+VcRTFVzib8AdPFQkXoukxwrOAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/AFShmvgdME1OD2y/UHMW2HiSZMB8GA1UdIwQY MBaAFApexuBmDbb2Jbl4vg1e5xwtzUZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYt ZDNlM2M3OGU3YzQ0LzEvTDhBVktHYS1CMHdUVTRQYkw5UWN4YlllSkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYtZDNlM2M3OGU3YzQ0 LzEvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf88MA0G CSqGSIb3DQEBCwUAA4IBAQCb7ul6TbINbpiEmZBIsY6uOeA4zj3diWUDGqr4Z04X YNctFRi5XPdj7xSSsdZvjwk20yFFIseE400qHodIBMHrm8oxWFwu6qm0fDgMxfTv TjeZh9jAf0aTb1Me6Q6MoJiGEZLkOHKDW3P6RIAzsfdwLp+Ck3o3oMJEFe+whsU9 5DsS1cRK5pya/G3oB0IANtfY4SL7zZzBfZziTIhrVaXxrLhhneP/VqLQDpXHTyS3 9gSxnZcwsNz6qsp3XHEpRyLbI3rYKaiGb9FZY1O84IjQErLjg2Q84F796ZcQn+l6 CoCW77fP14uAq9ai8Mgc+TITNOLj7iK6HcNs7b0XFzyb -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:50 2026 by rpki-client