This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5EPDe5LyH1mhZENkO-UQgxb9biE.roa File: 5EPDe5LyH1mhZENkO-UQgxb9biE.roa (raw, json) Hash identifier: v1aTnQDo9DvpHafnfKpTkJmbne5HW/BOl0SpnNuxrYc= Subject key identifier: E4:43:C3:7B:92:F2:1F:59:A1:64:43:64:3B:E5:10:83:16:FD:6E:21 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F76BE5578FCD8C5AE98381118FC1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5EPDe5LyH1mhZENkO-UQgxb9biE.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209652 IP address blocks: 2a0c:9a40:85a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f7:6b:e5:57:8f:cd:8c:5a:e9:83:81:11:8f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e443c37b92f21f59a16443643be5108316fd6e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:ef:71:da:be:25:d4:5f:46:89:3b:84:9a: 72:fc:9f:b4:ea:82:9c:2a:cb:dd:e9:74:69:57:e6: d5:12:f9:82:85:49:d9:ef:57:61:59:31:4a:43:3b: f8:96:a3:5f:5d:29:73:57:3f:ec:3c:e3:98:39:3f: 7e:14:12:be:e4:14:59:22:55:dc:d6:72:ee:cb:c5: 3d:ed:93:33:ad:63:c6:4f:c8:71:21:95:b1:04:93: dc:60:04:41:67:55:89:1c:28:4e:ec:1b:c5:13:f5: 2b:31:5e:1d:d8:31:84:f6:5d:af:41:2e:80:94:bc: e1:f6:71:f6:fe:34:34:f8:31:6b:47:3e:92:8c:a3: d5:a3:72:13:1b:02:5e:fe:cf:fe:bb:b7:90:c3:69: 77:40:40:05:b1:96:73:3d:2f:41:24:25:da:7f:86: 28:25:27:6c:76:b6:95:49:3c:25:bd:8e:83:17:2c: 66:91:72:f7:c4:56:7c:94:32:a4:ee:07:19:55:b7: ba:6d:a4:2b:23:1b:f1:4a:d6:f7:cc:50:4a:5e:90: fb:42:22:1f:bf:07:f4:96:0d:54:17:bf:31:3d:50: 2e:08:ee:80:12:f2:d9:25:08:41:a0:19:c4:a4:95: 9c:06:c0:2e:15:a2:96:70:e7:bb:8b:3e:ca:c5:de: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:C3:7B:92:F2:1F:59:A1:64:43:64:3B:E5:10:83:16:FD:6E:21 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5EPDe5LyH1mhZENkO-UQgxb9biE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:85a0::/48 Signature Algorithm: sha256WithRSAEncryption bd:03:b0:e2:82:f2:53:17:c8:06:2a:28:2f:2a:b6:a4:56:2c: 7a:92:57:df:1d:5f:f0:c5:5e:52:c9:0f:5b:da:fa:45:af:d4: 89:7e:7d:ba:38:0c:9b:ba:f7:48:27:98:5b:5d:3f:51:2b:32: 7e:f2:e3:e1:f8:93:5b:13:3e:92:af:61:b4:27:c1:a7:71:07: 50:b8:c2:d0:60:d4:b8:84:b6:92:c6:44:d1:05:59:f9:35:53: 7f:10:06:b0:6b:93:e2:83:83:41:a4:96:8e:9f:6c:0a:9b:8d: e9:cd:45:d5:49:89:6e:95:1e:fd:b7:20:5d:d1:12:9a:1d:61: 7c:ec:3f:1a:c2:3d:65:d0:9c:ba:81:a7:46:82:72:88:be:53: 4c:81:3c:21:29:9a:bf:3d:65:a9:3f:ba:14:ad:6d:d7:4a:78: da:3a:0c:c2:8e:92:49:dd:2f:a6:37:7e:2e:5a:d2:df:1a:2b: 2e:fd:0e:67:92:0f:22:3a:fc:69:be:bd:51:bb:73:a5:de:74: 0a:56:65:62:5e:0e:23:61:89:91:1a:eb:b3:a0:1e:ee:73:c0: 1d:72:ae:f7:f7:38:70:e7:f2:91:dc:99:33:65:5f:d8:29:9d: d9:5a:cd:8a:d2:70:21:47:42:50:ff:8c:5f:f8:a1:91:d1:cf: 1e:99:1b:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvdr5VePzYxa6YOBEY/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDQzYzM3YjkyZjIxZjU5YTE2NDQzNjQzYmU1MTA4MzE2ZmQ2ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb/vcdq+JdRfRok7hJpy/J+06oKc Ksvd6XRpV+bVEvmChUnZ71dhWTFKQzv4lqNfXSlzVz/sPOOYOT9+FBK+5BRZIlXc 1nLuy8U97ZMzrWPGT8hxIZWxBJPcYARBZ1WJHChO7BvFE/UrMV4d2DGE9l2vQS6A lLzh9nH2/jQ0+DFrRz6SjKPVo3ITGwJe/s/+u7eQw2l3QEAFsZZzPS9BJCXaf4Yo JSdsdraVSTwlvY6DFyxmkXL3xFZ8lDKk7gcZVbe6baQrIxvxStb3zFBKXpD7QiIf vwf0lg1UF78xPVAuCO6AEvLZJQhBoBnEpJWcBsAuFaKWcOe7iz7Kxd7HHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFORDw3uS8h9ZoWRDZDvlEIMW/W4hMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNUVQRGU1THlIMW1oWkVOa08tVVFneGI5YmlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIWg MA0GCSqGSIb3DQEBCwUAA4IBAQC9A7DigvJTF8gGKigvKrakVix6klffHV/wxV5S yQ9b2vpFr9SJfn26OAybuvdIJ5hbXT9RKzJ+8uPh+JNbEz6Sr2G0J8GncQdQuMLQ YNS4hLaSxkTRBVn5NVN/EAawa5Pig4NBpJaOn2wKm43pzUXVSYlulR79tyBd0RKa HWF87D8awj1l0Jy6gadGgnKIvlNMgTwhKZq/PWWpP7oUrW3XSnjaOgzCjpJJ3S+m N34uWtLfGisu/Q5nkg8iOvxpvr1Ru3Ol3nQKVmViXg4jYYmRGuuzoB7uc8Adcq73 9zhw5/KR3JkzZV/YKZ3ZWs2K0nAhR0JQ/4xf+KGR0c8emRuw -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:41 2026 by rpki-client