This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5BQIHdhxpxiAcbQVx9zVrVl1k5I.roa File: 5BQIHdhxpxiAcbQVx9zVrVl1k5I.roa (raw, json) Hash identifier: JmH1YKQNJS4yWJosa3FJcnibGLeA0atsstZVUiYAeYE= Subject key identifier: E4:14:08:1D:D8:71:A7:18:80:71:B4:15:C7:DC:D5:AD:59:75:93:92 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA710096FED1F0E106F593627FE94B2 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5BQIHdhxpxiAcbQVx9zVrVl1k5I.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215258 IP address blocks: 2a0c:9a40:8540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:10:09:6f:ed:1f:0e:10:6f:59:36:27:fe:94:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e414081dd871a7188071b415c7dcd5ad59759392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:d9:10:dc:63:30:b3:45:4b:52:b5:61:99: 85:0f:2c:e7:c7:1f:c4:65:9e:71:2f:b3:00:df:33: cc:56:d9:26:43:e5:f2:6d:3e:58:7f:ba:6c:f4:22: d1:c8:50:be:e7:40:b4:af:bf:c4:a0:dd:c4:bb:44: 5d:65:50:d1:6a:53:36:36:27:21:6e:f9:90:7f:08: 7e:c6:11:5a:75:fb:f1:9f:39:25:42:ac:11:bd:7e: 45:d0:7e:04:16:2d:32:6b:7b:74:a8:6b:c8:85:36: 06:6c:db:d8:a3:62:cb:0e:9b:83:10:40:c0:e8:aa: 85:15:a1:1e:6d:87:a8:67:5c:f1:6e:3b:33:b2:1d: d9:91:09:b2:3f:d3:18:c8:ed:cf:89:86:6c:9b:8b: e7:1b:69:d2:47:41:3d:1d:ab:ae:81:20:a2:a8:fc: 29:ba:95:8b:b7:23:df:57:96:c3:f4:9f:89:e3:b9: 54:94:bf:88:e0:06:c1:ef:1a:9b:74:b3:75:a8:90: 98:2a:65:b0:00:b4:08:d1:f6:65:a7:27:44:70:1e: 15:fc:aa:c7:33:da:62:b3:24:43:c3:98:a5:e3:09: 80:b9:8c:32:47:01:95:b2:3b:1f:bf:6d:6c:37:5b: 02:f1:e7:71:11:b7:82:8e:4a:96:de:52:ec:b0:9e: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:14:08:1D:D8:71:A7:18:80:71:B4:15:C7:DC:D5:AD:59:75:93:92 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5BQIHdhxpxiAcbQVx9zVrVl1k5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8540::/48 Signature Algorithm: sha256WithRSAEncryption 27:76:32:cb:7e:9a:9e:8c:f1:e4:55:98:66:cf:b8:73:17:59: a9:43:3f:35:59:51:42:b8:25:35:9f:30:c7:0b:c0:d5:63:01: 4a:63:f0:7b:24:44:6b:bb:bf:07:76:98:7d:ca:95:c9:98:41: cd:df:d5:15:a6:d9:97:38:f1:f5:a3:46:d1:2f:4d:01:76:1e: e7:71:be:06:8b:c5:ee:89:c2:af:91:5f:73:a5:7f:2f:d4:96: 2d:94:14:3a:fd:1a:5c:c8:c1:a3:53:50:a0:16:3a:ce:c2:c3: 47:0d:78:a2:e7:44:11:ed:7a:8b:87:1a:69:08:86:26:4c:4a: 2a:66:ed:65:39:99:60:ce:8e:ac:84:0a:6a:31:db:45:e3:29: 1a:21:95:bd:cf:26:08:ee:bc:fc:5b:96:a0:00:7c:54:49:56: 0f:5f:3b:b8:80:fa:50:3e:81:ec:a9:9d:3e:45:58:84:ce:df: 44:bf:ca:8c:78:fe:1a:a3:62:0b:bc:2c:5c:e0:fc:b6:6d:4a: 95:06:97:df:f4:ee:6b:f7:39:b4:12:38:c9:c8:9f:bb:85:23: a7:78:c1:6f:8f:ff:0a:dd:c4:24:19:0d:40:a8:aa:14:3c:d8: ce:98:6f:ff:69:49:e8:1f:51:ef:b0:c5:d9:66:16:08:40:46: 43:67:4e:39 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxAJb+0fDhBvWTYn/pSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDE0MDgxZGQ4NzFhNzE4ODA3MWI0MTVjN2RjZDVhZDU5NzU5MzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHfZENxjMLNFS1K1YZmFDyznxx/E ZZ5xL7MA3zPMVtkmQ+XybT5Yf7ps9CLRyFC+50C0r7/EoN3Eu0RdZVDRalM2Nich bvmQfwh+xhFadfvxnzklQqwRvX5F0H4EFi0ya3t0qGvIhTYGbNvYo2LLDpuDEEDA 6KqFFaEebYeoZ1zxbjszsh3ZkQmyP9MYyO3PiYZsm4vnG2nSR0E9HauugSCiqPwp upWLtyPfV5bD9J+J47lUlL+I4AbB7xqbdLN1qJCYKmWwALQI0fZlpydEcB4V/KrH M9pisyRDw5il4wmAuYwyRwGVsjsfv21sN1sC8edxEbeCjkqW3lLssJ6lUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOQUCB3YcacYgHG0Fcfc1a1ZdZOSMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNUJRSUhkaHhweGlBY2JRVng5elZyVmwxazVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIVA MA0GCSqGSIb3DQEBCwUAA4IBAQAndjLLfpqejPHkVZhmz7hzF1mpQz81WVFCuCU1 nzDHC8DVYwFKY/B7JERru78Hdph9ypXJmEHN39UVptmXOPH1o0bRL00Bdh7ncb4G i8XuicKvkV9zpX8v1JYtlBQ6/RpcyMGjU1CgFjrOwsNHDXii50QR7XqLhxppCIYm TEoqZu1lOZlgzo6shApqMdtF4ykaIZW9zyYI7rz8W5agAHxUSVYPXzu4gPpQPoHs qZ0+RViEzt9Ev8qMeP4ao2ILvCxc4Py2bUqVBpff9O5r9zm0EjjJyJ+7hSOneMFv j/8K3cQkGQ1AqKoUPNjOmG//aUnoH1HvsMXZZhYIQEZDZ045 -----END CERTIFICATE-----Generated at Sun Jan 18 12:08:44 2026 by rpki-client