This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5Pt7NhGuUD5LEH_1paa1AV8PXOc.roa File: 5Pt7NhGuUD5LEH_1paa1AV8PXOc.roa (raw, json) Hash identifier: Yuz1WphW1IInEZTDH/FNqEV12UAvZYAS4zZ/WlxMWhs= Subject key identifier: E4:FB:7B:36:11:AE:50:3E:4B:10:7F:F5:A5:A6:B5:01:5F:0F:5C:E7 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CB5BF560A5619ABE33BA11D5D616 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5Pt7NhGuUD5LEH_1paa1AV8PXOc.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50917 IP address blocks: 2a0c:9a40:8520::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:5b:f5:60:a5:61:9a:be:33:ba:11:d5:d6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4fb7b3611ae503e4b107ff5a5a6b5015f0f5ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:33:81:aa:b0:4e:ba:ed:95:c6:7e:49:2c: 50:e7:f6:46:40:10:ff:5a:4a:e3:bf:f6:22:20:a6: e2:0e:fb:f1:60:a9:0f:77:46:e5:47:09:da:21:ad: 2c:77:af:61:ac:9d:8e:96:99:91:a6:0b:fe:49:ea: f8:0b:37:6c:e6:a2:68:4b:3b:0c:cd:53:9b:49:4c: 0a:52:75:8e:1c:79:aa:25:2e:19:15:2b:be:be:23: 1c:ee:3b:60:4a:2a:81:2e:d3:ae:94:f5:42:46:a7: ca:7e:e2:43:7a:d3:c5:79:dd:c8:fa:1e:07:72:c8: d8:12:a2:6a:06:e8:bd:b5:dd:00:3c:df:01:01:46: fb:02:ee:b0:2a:9e:b6:a1:ae:50:8a:53:f3:de:ae: 85:1f:3e:38:53:1f:b9:a6:80:e7:0b:e4:b0:bb:c9: f0:85:2c:7f:3b:d8:5a:ce:21:c3:e9:61:15:b2:22: 4c:1b:83:96:c6:66:99:98:7a:8e:ed:db:7d:ac:f3: 59:c2:aa:03:68:3e:fc:32:7b:68:52:75:7f:27:06: cc:ec:44:c5:f9:c4:53:fe:cb:13:58:17:7b:50:2b: eb:67:c2:f3:40:a5:d3:41:23:8f:68:21:ee:6b:95: 39:ec:13:95:e2:52:70:26:63:f0:3f:6f:29:81:e1: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FB:7B:36:11:AE:50:3E:4B:10:7F:F5:A5:A6:B5:01:5F:0F:5C:E7 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5Pt7NhGuUD5LEH_1paa1AV8PXOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8520::/48 Signature Algorithm: sha256WithRSAEncryption 44:50:6e:1c:4e:af:76:bb:bb:36:1f:2e:bd:61:8d:68:87:ef: f5:45:79:9d:98:30:8e:4f:99:02:cd:5d:48:fc:16:cf:75:f0: 81:51:bd:e9:86:6f:fc:03:52:c3:7f:b3:e9:80:7d:78:e2:64: 0d:72:2f:5d:97:32:63:98:49:7b:d5:93:3b:81:0f:f7:6c:6e: 6c:e9:2e:00:8f:19:be:f6:2f:5b:ec:de:e9:d9:cf:91:e3:00: e0:48:e4:b6:96:3a:02:30:d3:cd:57:5b:46:dc:41:a6:a3:53: d1:cc:48:ad:4d:83:db:33:92:35:02:44:e2:18:30:d0:bc:f0: 49:8e:45:5b:c7:c8:a5:03:05:14:77:1d:19:ca:51:a8:60:ce: a6:be:0a:d5:55:98:27:b7:01:d9:a0:f7:a7:ad:21:53:ec:40: 8a:55:82:1e:bf:21:97:e6:d4:f8:f8:c7:30:f8:64:52:a1:a5: 09:b7:9b:2c:47:64:f6:09:e6:d5:10:ef:a7:e0:51:84:ed:01: 55:f0:b6:cb:ae:31:3a:90:e3:38:88:e9:41:da:df:5f:5e:69: 13:fd:f4:cb:20:c6:57:bd:53:ee:51:a9:35:c6:7b:1e:05:8a: b5:41:91:84:25:0d:cc:8a:ac:66:d7:a4:01:e6:c1:3a:87:7d: 92:f0:de:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pstb9WClYZq+M7oR1dYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGZiN2IzNjExYWU1MDNlNGIxMDdmZjVhNWE2YjUwMTVmMGY1Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AszgaqwTrrtlcZ+SSxQ5/ZGQBD/ Wkrjv/YiIKbiDvvxYKkPd0blRwnaIa0sd69hrJ2OlpmRpgv+Ser4Czds5qJoSzsM zVObSUwKUnWOHHmqJS4ZFSu+viMc7jtgSiqBLtOulPVCRqfKfuJDetPFed3I+h4H csjYEqJqBui9td0APN8BAUb7Au6wKp62oa5QilPz3q6FHz44Ux+5poDnC+Swu8nw hSx/O9haziHD6WEVsiJMG4OWxmaZmHqO7dt9rPNZwqoDaD78MntoUnV/JwbM7ETF +cRT/ssTWBd7UCvrZ8LzQKXTQSOPaCHua5U57BOV4lJwJmPwP28pgeEl7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOT7ezYRrlA+SxB/9aWmtQFfD1znMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNVB0N05oR3VVRDVMRUhfMXBhYTFBVjhQWE9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIUg MA0GCSqGSIb3DQEBCwUAA4IBAQBEUG4cTq92u7s2Hy69YY1oh+/1RXmdmDCOT5kC zV1I/BbPdfCBUb3phm/8A1LDf7PpgH144mQNci9dlzJjmEl71ZM7gQ/3bG5s6S4A jxm+9i9b7N7p2c+R4wDgSOS2ljoCMNPNV1tG3EGmo1PRzEitTYPbM5I1AkTiGDDQ vPBJjkVbx8ilAwUUdx0ZylGoYM6mvgrVVZgntwHZoPenrSFT7ECKVYIevyGX5tT4 +Mcw+GRSoaUJt5ssR2T2CebVEO+n4FGE7QFV8LbLrjE6kOM4iOlB2t9fXmkT/fTL IMZXvVPuUak1xnseBYq1QZGEJQ3Miqxm16QB5sE6h32S8N7S -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:17 2026 by rpki-client