This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lV5iyKtmsxD_awHewNcWaGgE7R4.roa File: lV5iyKtmsxD_awHewNcWaGgE7R4.roa (raw, json) Hash identifier: y6BgyTNpej5HNXC5L8IX/Ylm5yZcTLy7sWFL2ofekX0= Subject key identifier: 95:5E:62:C8:AB:66:B3:10:FF:6B:01:DE:C0:D7:16:68:68:04:ED:1E Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C807E037BE292C9988E1ADE4B438D39 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lV5iyKtmsxD_awHewNcWaGgE7R4.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 109.69.61.0/24 maxlen: 24 194.31.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7e:03:7b:e2:92:c9:98:8e:1a:de:4b:43:8d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=955e62c8ab66b310ff6b01dec0d716686804ed1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:ba:ee:8d:1c:7a:78:98:d7:23:c5:2c:0e: 72:31:90:74:9f:1e:24:4d:d3:11:1e:42:93:1d:b4: 4c:ee:c9:c4:ff:8c:b1:cf:c6:8f:80:23:88:70:44: fa:7b:e5:59:4a:f2:4d:ce:5a:6e:ac:e4:e6:77:52: 2b:27:1a:83:62:8a:d9:48:29:09:07:f5:ae:ca:48: 54:64:89:9d:28:96:36:90:29:cb:4e:aa:ba:78:fd: c9:65:80:a5:49:24:5d:74:ae:75:e1:15:99:26:91: 9e:bc:d8:bd:8d:84:0d:0e:20:3c:bf:dd:d1:4c:e9: a0:51:4a:6e:50:78:c5:fb:dd:21:27:cc:c4:af:8e: 78:27:fb:d4:3c:17:27:18:4a:ee:c2:89:e7:26:20: 46:03:ae:93:9f:3f:46:52:d5:8e:6e:08:cd:5a:14: 7b:bc:84:56:8c:d0:da:73:c5:75:29:63:ec:92:30: 37:3c:5e:ef:59:ab:73:21:14:37:af:11:d7:87:22: c0:c6:9b:e2:ec:2c:ff:78:b3:15:fa:10:6d:c3:43: d5:55:e3:72:e7:66:78:e0:a4:71:09:9b:39:ae:fe: 98:fc:d6:25:19:bb:63:7e:9c:2a:b7:f7:78:f8:a8: 68:5b:d8:85:fa:a5:9f:d9:16:14:d3:7c:ba:b2:34: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:62:C8:AB:66:B3:10:FF:6B:01:DE:C0:D7:16:68:68:04:ED:1E X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lV5iyKtmsxD_awHewNcWaGgE7R4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.61.0/24 194.31.73.0/24 Signature Algorithm: sha256WithRSAEncryption 89:81:c3:5f:75:91:d3:96:2b:3d:16:75:21:29:81:9d:d8:32: bf:3d:b2:82:0b:a3:89:64:a3:f9:7f:44:cf:1e:eb:77:56:e1: 5c:a0:fb:7a:c8:50:fe:ac:13:9a:3d:29:d7:ae:87:36:0d:15: e5:41:df:89:82:b8:b8:12:49:31:bb:46:ee:ef:10:5b:09:dd: 67:ee:ec:4d:e1:58:86:d9:35:08:16:03:b8:fd:15:3e:50:e9: 40:c8:14:04:13:6c:05:35:44:d1:ee:b8:9e:7f:f8:fd:c8:a2: a1:60:77:6c:d0:81:89:e0:57:f5:dc:e2:2a:cb:e9:4f:cb:4a: b5:14:37:28:d0:19:a4:26:0c:d0:78:47:3f:81:84:42:40:aa: f3:4f:9d:ce:77:48:54:44:63:1a:d1:73:87:03:cf:ea:a6:c9: 1b:fa:ec:11:49:05:05:95:16:6d:ae:30:a7:c4:2e:db:9c:77: 33:46:64:0f:e0:5a:d8:97:84:8b:4f:d8:b1:d2:fe:13:d5:ee: 42:6f:93:ef:73:b9:51:df:7f:6c:ee:86:29:c5:e2:d3:8c:76: b2:8c:bd:a7:d0:73:ed:d2:d4:8e:50:20:6e:5c:7d:f8:0c:b8: e8:8d:64:da:a2:70:88:e5:42:aa:30:91:eb:fe:cf:ab:4c:38: 7e:d7:cd:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gH4De+KSyZiOGt5LQ405MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTVlNjJjOGFiNjZiMzEwZmY2YjAxZGVjMGQ3MTY2ODY4MDRlZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5u67o0ceniY1yPFLA5yMZB0nx4k TdMRHkKTHbRM7snE/4yxz8aPgCOIcET6e+VZSvJNzlpurOTmd1IrJxqDYorZSCkJ B/WuykhUZImdKJY2kCnLTqq6eP3JZYClSSRddK514RWZJpGevNi9jYQNDiA8v93R TOmgUUpuUHjF+90hJ8zEr454J/vUPBcnGEruwonnJiBGA66Tnz9GUtWObgjNWhR7 vIRWjNDac8V1KWPskjA3PF7vWatzIRQ3rxHXhyLAxpvi7Cz/eLMV+hBtw0PVVeNy 52Z44KRxCZs5rv6Y/NYlGbtjfpwqt/d4+KhoW9iF+qWf2RYU03y6sjQ9pQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJVeYsirZrMQ/2sB3sDXFmhoBO0eMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvbFY1aXlLdG1zeERfYXdIZXdOY1dhR2dFN1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbUU9AwQA wh9JMA0GCSqGSIb3DQEBCwUAA4IBAQCJgcNfdZHTlis9FnUhKYGd2DK/PbKCC6OJ ZKP5f0TPHut3VuFcoPt6yFD+rBOaPSnXroc2DRXlQd+Jgri4Ekkxu0bu7xBbCd1n 7uxN4ViG2TUIFgO4/RU+UOlAyBQEE2wFNUTR7rief/j9yKKhYHds0IGJ4Ff13OIq y+lPy0q1FDco0BmkJgzQeEc/gYRCQKrzT53Od0hURGMa0XOHA8/qpskb+uwRSQUF lRZtrjCnxC7bnHczRmQP4FrYl4SLT9ix0v4T1e5Cb5Pvc7lR339s7oYpxeLTjHay jL2n0HPt0tSOUCBuXH34DLjojWTaonCI5UKqMJHr/s+rTDh+183d -----END CERTIFICATE-----Generated at Fri Jan 9 12:03:10 2026 by rpki-client