This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/myleLf1fsMQEEVnfJUJb4pVTSBw.roa File: myleLf1fsMQEEVnfJUJb4pVTSBw.roa (raw, json) Hash identifier: VGwR9NC4S70xB/QiD1nHld4LxBm7JzS0iHeGl9Ny2W4= Subject key identifier: 9B:29:5E:2D:FD:5F:B0:C4:04:11:59:DF:25:42:5B:E2:95:53:48:1C Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019B7F83580E57B617F2B860EA00D577FC83 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/myleLf1fsMQEEVnfJUJb4pVTSBw.roa Signing time: Fri 02 Jan 2026 16:21:12 +0000 ROA not before: Fri 02 Jan 2026 16:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209823 IP address blocks: 5.144.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:58:0e:57:b6:17:f2:b8:60:ea:00:d5:77:fc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b295e2dfd5fb0c4041159df25425be29553481c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:70:ec:5a:ef:86:e4:0f:15:a5:44:12:58: 9e:b3:6e:0d:99:79:66:e0:f8:f5:c6:30:5b:33:d3: 29:82:56:27:e7:ef:a5:04:aa:ca:52:1f:f0:98:0f: ab:ac:38:4b:db:c9:d8:4f:47:31:5d:48:0a:d4:0e: cc:63:38:26:e3:3a:9b:bb:15:85:35:c9:2d:83:70: 78:9b:80:1d:38:84:2e:bf:b9:ae:90:dc:c4:4b:a7: 31:d2:bb:78:ea:5b:e9:f8:64:a2:cc:f9:30:37:65: 25:3d:a4:59:8f:17:4a:18:31:4d:73:d1:1d:96:0f: c0:bb:18:66:39:20:03:55:4c:98:bc:21:fc:a5:86: 93:11:56:e3:38:75:30:66:5d:d5:87:a9:73:29:0e: 7b:49:9e:3a:15:dd:e4:36:3e:4d:d6:1c:08:31:f6: 5f:7e:85:ee:70:f0:f7:7b:62:2e:17:0f:81:65:f1: 84:61:b1:3c:4c:c0:8f:47:ce:e1:35:13:c5:97:eb: 3b:f7:a0:d4:d0:84:73:48:13:80:ac:40:34:c5:f0: 08:ec:3e:0d:a7:90:6b:4d:13:6f:31:f5:98:6c:a9: 22:1e:ab:11:72:ec:a7:52:e2:73:d6:d6:5a:9f:92: 1b:62:54:cc:1a:f4:ca:85:83:6d:51:d4:ca:52:9d: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:29:5E:2D:FD:5F:B0:C4:04:11:59:DF:25:42:5B:E2:95:53:48:1C X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/myleLf1fsMQEEVnfJUJb4pVTSBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.32.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:60:22:43:7d:cd:64:48:d2:89:1e:a6:9a:b3:d6:8c:d3:d5: 0b:0a:2c:98:1d:3c:01:9a:d5:f6:de:4e:a6:e3:66:f2:f4:17: 3c:0a:e5:9a:fe:a6:c5:ce:f0:48:9c:79:de:a0:75:44:dd:e0: c2:df:2c:24:6e:9f:64:9f:9e:76:31:5f:2b:3f:c4:01:54:31: b3:b7:09:6d:82:65:6d:7a:75:f8:5c:34:53:bb:fa:d3:f1:2d: 23:36:a8:ec:08:76:f6:34:a3:dd:70:ff:f9:ba:c8:f4:61:56: b3:29:f2:2d:ad:99:1c:11:33:8d:b7:f3:0c:19:ff:2b:16:1b: 87:ef:c2:9d:03:1e:f1:d8:a7:cf:06:f3:c6:bc:1a:6a:5f:f5: 43:10:d1:d4:8d:dc:ed:9b:3b:84:e1:41:c7:a5:61:02:8f:9f: 62:9a:0b:bc:77:aa:f3:97:9e:20:9a:4f:2a:fb:5a:09:5c:a9: 07:30:a5:3e:9c:40:07:3b:64:c8:0d:43:1d:0f:8c:ca:81:31: fa:0c:ad:d1:c3:ea:80:7c:5d:8f:29:bd:3e:a1:34:23:9b:cb: 26:fa:48:01:22:98:43:1f:74:44:f3:38:1c:49:f4:f5:d0:de: 3a:e4:e8:e3:af:20:89:0f:71:60:34:14:22:0d:f4:cb:85:95: 5b:02:81:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g1gOV7YX8rhg6gDVd/yDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjI5NWUyZGZkNWZiMGM0MDQxMTU5ZGYyNTQyNWJlMjk1NTM0ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6xw7FrvhuQPFaVEElies24NmXlm 4Pj1xjBbM9MpglYn5++lBKrKUh/wmA+rrDhL28nYT0cxXUgK1A7MYzgm4zqbuxWF Ncktg3B4m4AdOIQuv7mukNzES6cx0rt46lvp+GSizPkwN2UlPaRZjxdKGDFNc9Ed lg/AuxhmOSADVUyYvCH8pYaTEVbjOHUwZl3Vh6lzKQ57SZ46Fd3kNj5N1hwIMfZf foXucPD3e2IuFw+BZfGEYbE8TMCPR87hNRPFl+s796DU0IRzSBOArEA0xfAI7D4N p5BrTRNvMfWYbKkiHqsRcuynUuJz1tZan5IbYlTMGvTKhYNtUdTKUp0m/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJspXi39X7DEBBFZ3yVCW+KVU0gcMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvbXlsZUxmMWZzTVFFRVZuZkpVSmI0cFZUU0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZAgMA0G CSqGSIb3DQEBCwUAA4IBAQAeYCJDfc1kSNKJHqaas9aM09ULCiyYHTwBmtX23k6m 42by9Bc8CuWa/qbFzvBInHneoHVE3eDC3ywkbp9kn552MV8rP8QBVDGztwltgmVt enX4XDRTu/rT8S0jNqjsCHb2NKPdcP/5usj0YVazKfItrZkcETONt/MMGf8rFhuH 78KdAx7x2KfPBvPGvBpqX/VDENHUjdztmzuE4UHHpWECj59imgu8d6rzl54gmk8q +1oJXKkHMKU+nEAHO2TIDUMdD4zKgTH6DK3Rw+qAfF2PKb0+oTQjm8sm+kgBIphD H3RE8zgcSfT10N465OjjryCJD3FgNBQiDfTLhZVbAoH3 -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:28 2026 by rpki-client