This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/T5t2lrc6vZSWtfpj81F8OW76GS0.roa File: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (raw, json) Hash identifier: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ= Subject key identifier: 4F:9B:76:96:B7:3A:BD:94:96:B5:FA:63:F3:51:7C:39:6E:FA:19:2D Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92 Certificate serial: 019B7F83C1F189B9EC18F67476297B6C53D9 Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/T5t2lrc6vZSWtfpj81F8OW76GS0.roa Signing time: Fri 02 Jan 2026 16:21:39 +0000 ROA not before: Fri 02 Jan 2026 16:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a03:1e80:303:200::/56 maxlen: 56 2a03:1e84:1900::/56 maxlen: 56 2a03:1e84:1900:200::/56 maxlen: 56 2a03:1e84:9260::/48 maxlen: 48 2a03:1e84:9261::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c1:f1:89:b9:ec:18:f6:74:76:29:7b:6c:53:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f9b7696b73abd9496b5fa63f3517c396efa192d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:cf:89:bd:d7:76:46:6c:45:44:9c:94:4e: 16:c4:f4:1e:8d:e6:3d:a4:8d:01:1b:50:5c:d2:5f: d5:62:78:79:3c:12:ba:29:8e:73:b9:43:4d:d7:47: 7f:f2:fd:4d:da:20:d5:1c:23:84:0f:5f:04:e0:20: a8:11:84:62:27:52:97:97:82:1c:bc:15:16:76:d7: 73:9a:03:1f:3e:70:66:a4:92:7f:e5:91:84:33:be: 17:30:38:d4:6a:ec:99:bb:24:f8:de:b0:3f:0d:f5: d6:aa:15:76:c7:5f:6d:c6:ec:29:8c:74:fd:3a:d0: 0e:36:7a:cb:47:6e:01:03:07:67:2f:8b:01:27:5a: 96:b7:d1:07:f8:78:2a:6c:05:a6:ee:08:14:23:c1: 7d:5f:72:57:79:31:ea:a4:55:94:f8:c7:29:fc:26: 81:12:4f:25:d1:55:53:fd:74:10:b3:53:f1:71:6c: be:2f:a5:d4:f5:1d:c1:06:64:ac:5a:e1:ce:d5:8f: 82:44:f6:38:42:11:62:38:6d:73:0c:1d:0c:56:ba: 50:b8:17:78:c2:08:27:30:39:4c:66:35:0a:1c:a8: 7e:1c:a5:6f:ab:67:fa:0b:ef:1b:42:fb:02:66:19: 1b:6f:a7:5f:d8:20:ec:5f:74:6e:c5:33:db:cb:c9: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9B:76:96:B7:3A:BD:94:96:B5:FA:63:F3:51:7C:39:6E:FA:19:2D X509v3 Authority Key Identifier: keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/T5t2lrc6vZSWtfpj81F8OW76GS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:1e80:303:200::/56 2a03:1e84:1900::/56 2a03:1e84:1900:200::/56 2a03:1e84:9260::/47 Signature Algorithm: sha256WithRSAEncryption 84:0e:c1:0f:6c:a2:6b:45:bf:b3:a5:d2:7b:6c:62:3c:7b:a4: c2:60:bc:e1:97:90:26:e4:c1:34:25:11:c7:68:fe:87:07:73: df:6a:0f:18:26:db:08:db:a0:14:a8:65:91:23:04:2b:03:fe: d2:c8:52:9f:cf:47:64:8e:b8:7e:ca:58:8d:68:d2:4e:20:a8: 87:61:46:86:28:a4:49:00:d8:ba:9f:49:0c:11:41:1f:65:4e: 2a:2d:72:dc:ea:2d:1c:6a:8f:69:cc:23:fe:83:e2:91:b7:ed: 47:e1:48:c3:64:47:7e:52:92:00:a2:cd:b9:f1:8d:8e:bf:b6: 38:75:b1:d5:2b:27:94:47:76:84:00:73:df:4a:8a:33:c2:a4: 7e:2e:5d:65:e3:eb:c5:d6:cf:e4:7a:f9:8a:9d:9f:58:bf:e4: a2:dc:97:94:ce:db:cd:48:2a:fb:21:e9:57:71:24:69:2c:83: 6f:8d:1a:53:31:1e:03:41:ee:99:91:0e:3e:38:36:de:af:a1: 7d:f3:c8:35:46:41:14:70:ce:b0:a7:75:98:9b:4e:73:11:72: 6c:fe:77:2b:16:ac:0d:f1:32:2f:bc:58:74:98:d8:ea:51:10: ec:7e:85:ad:53:d9:39:37:05:cc:f4:bd:df:03:35:4f:a2:d7: 4f:4e:6d:02 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/g8HxibnsGPZ0dil7bFPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5 MmFjOTIwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjliNzY5NmI3M2FiZDk0OTZiNWZhNjNmMzUxN2MzOTZlZmExOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4XPib3XdkZsRUSclE4WxPQejeY9 pI0BG1Bc0l/VYnh5PBK6KY5zuUNN10d/8v1N2iDVHCOED18E4CCoEYRiJ1KXl4Ic vBUWdtdzmgMfPnBmpJJ/5ZGEM74XMDjUauyZuyT43rA/DfXWqhV2x19txuwpjHT9 OtAONnrLR24BAwdnL4sBJ1qWt9EH+HgqbAWm7ggUI8F9X3JXeTHqpFWU+Mcp/CaB Ek8l0VVT/XQQs1PxcWy+L6XU9R3BBmSsWuHO1Y+CRPY4QhFiOG1zDB0MVrpQuBd4 wggnMDlMZjUKHKh+HKVvq2f6C+8bQvsCZhkbb6df2CDsX3RuxTPby8mM4QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFE+bdpa3Or2UlrX6Y/NRfDlu+hktMB8GA1UdIwQY MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt NTdlOTBjNTZhMGUyLzEvVDV0MmxyYzZ2WlNXdGZwajgxRjhPVzc2R1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAAjAnAwgAKgMegAMD AgMIACoDHoQZAAADCAAqAx6EGQACAwcBKgMehJJgMA0GCSqGSIb3DQEBCwUAA4IB AQCEDsEPbKJrRb+zpdJ7bGI8e6TCYLzhl5Am5ME0JRHHaP6HB3Pfag8YJtsI26AU qGWRIwQrA/7SyFKfz0dkjrh+yliNaNJOIKiHYUaGKKRJANi6n0kMEUEfZU4qLXLc 6i0cao9pzCP+g+KRt+1H4UjDZEd+UpIAos258Y2Ov7Y4dbHVKyeUR3aEAHPfSooz wqR+Ll1l4+vF1s/kevmKnZ9Yv+Si3JeUztvNSCr7IelXcSRpLINvjRpTMR4DQe6Z kQ4+ODber6F988g1RkEUcM6wp3WYm05zEXJs/ncrFqwN8TIvvFh0mNjqURDsfoWt U9k5NwXM9L3fAzVPotdPTm0C -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:24 2026 by rpki-client