This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5VudloJtlfJzeEpchBSLzDh0Wr4.roa File: 5VudloJtlfJzeEpchBSLzDh0Wr4.roa (raw, json) Hash identifier: i5CY7X3XnJaUSWsZJJwKtxdaLE1Z2C9/cpCZ7dZf8z8= Subject key identifier: E5:5B:9D:96:82:6D:95:F2:73:78:4A:5C:84:14:8B:CC:38:74:5A:BE Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D7E6274EBF1452BB05390898FDE7 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5VudloJtlfJzeEpchBSLzDh0Wr4.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199340 IP address blocks: 2a0c:9a40:8c70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d7:e6:27:4e:bf:14:52:bb:05:39:08:98:fd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e55b9d96826d95f273784a5c84148bcc38745abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:53:01:ba:7a:d8:9d:f6:71:94:e7:e4:f3:f4: 1f:3c:96:d1:f4:3a:06:44:49:ed:3c:ad:c2:b3:67: 0b:eb:2d:66:7f:76:a9:8b:54:24:b5:f3:e8:76:fc: d2:60:9f:8c:68:cd:51:29:85:65:5c:9e:8c:73:29: d9:43:8f:7e:ba:e9:0e:ae:fd:ac:4f:cd:65:76:c0: 7d:17:1f:22:8a:31:3c:42:09:44:94:8b:7f:9d:72: f5:bb:1b:30:52:cf:51:26:be:16:6e:24:aa:4e:fb: 78:4e:2d:fd:f3:a5:80:a3:c4:35:8c:74:7d:ca:c2: 4d:e8:f7:f4:2b:64:99:12:f8:5d:6b:74:26:b8:5d: da:92:48:16:04:14:ae:cb:ec:9c:88:67:d3:a4:2e: f9:43:5c:d6:b0:97:1f:b3:57:05:8d:31:d4:13:5b: a5:f0:f3:dc:3a:e0:13:b5:ac:51:49:fa:3a:c4:70: 2f:2b:b4:84:56:e8:f5:4f:68:8c:c8:6f:5c:59:92: 91:12:29:44:5d:eb:f5:03:f8:9f:55:e5:71:c4:f3: bd:92:86:b7:48:fa:87:f9:5b:53:59:87:d0:f1:f9: b8:5b:a1:d7:04:03:4d:94:4b:ac:21:c3:b1:20:7f: 64:d3:cb:03:d2:ab:5d:1d:1a:b3:36:ad:0d:ee:51: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5B:9D:96:82:6D:95:F2:73:78:4A:5C:84:14:8B:CC:38:74:5A:BE X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5VudloJtlfJzeEpchBSLzDh0Wr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c70::/48 Signature Algorithm: sha256WithRSAEncryption 63:57:8d:41:e2:66:43:e4:e3:51:39:f7:a5:b9:28:d4:ad:cd: 96:ff:e6:4a:6b:fa:ca:05:f6:cb:e3:6a:81:b0:a2:f7:56:ba: 17:20:d5:23:7b:67:96:db:56:4f:40:9d:7b:76:0e:c5:25:ed: 28:c3:93:fa:d8:5e:09:25:69:b7:8d:95:d4:13:47:8d:13:70: 73:38:c8:57:63:00:df:44:3b:90:9c:60:8c:11:7b:0b:8d:93: 74:8a:ba:ea:d1:b3:51:ac:b4:eb:59:b2:3b:e7:95:53:21:98: bd:1b:ed:27:f5:1c:fb:6a:39:72:e9:67:68:ae:aa:b4:b3:f8: a8:71:ad:98:fc:f0:ba:0b:62:d1:09:84:c7:7b:90:8c:c8:9b: b1:f2:9e:21:4d:45:58:fb:6a:93:11:fd:af:2b:a5:16:16:bf: 8c:37:7d:0e:57:19:40:04:c3:ee:d4:a1:9e:0e:15:b2:18:4c: d3:9e:d4:69:9b:cb:07:08:e0:ae:9e:5d:71:f2:58:55:74:0e: 5a:b9:94:6c:ce:0d:d7:e2:7f:70:92:a2:90:96:7c:0e:15:e2: 74:ca:28:29:59:a0:08:5b:99:60:6b:84:c4:c0:09:26:38:ec: 65:33:fa:28:ee:7a:74:24:57:fd:e9:1b:49:8a:15:16:1c:71: 2f:65:0d:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptfmJ06/FFK7BTkImP3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTViOWQ5NjgyNmQ5NWYyNzM3ODRhNWM4NDE0OGJjYzM4NzQ1YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFMBunrYnfZxlOfk8/QfPJbR9DoG REntPK3Cs2cL6y1mf3api1QktfPodvzSYJ+MaM1RKYVlXJ6McynZQ49+uukOrv2s T81ldsB9Fx8iijE8QglElIt/nXL1uxswUs9RJr4WbiSqTvt4Ti3986WAo8Q1jHR9 ysJN6Pf0K2SZEvhda3QmuF3akkgWBBSuy+yciGfTpC75Q1zWsJcfs1cFjTHUE1ul 8PPcOuATtaxRSfo6xHAvK7SEVuj1T2iMyG9cWZKREilEXev1A/ifVeVxxPO9koa3 SPqH+VtTWYfQ8fm4W6HXBANNlEusIcOxIH9k08sD0qtdHRqzNq0N7lHqMQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOVbnZaCbZXyc3hKXIQUi8w4dFq+MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNVZ1ZGxvSnRsZkp6ZUVwY2hCU0x6RGgwV3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIxw MA0GCSqGSIb3DQEBCwUAA4IBAQBjV41B4mZD5ONROfeluSjUrc2W/+ZKa/rKBfbL 42qBsKL3VroXINUje2eW21ZPQJ17dg7FJe0ow5P62F4JJWm3jZXUE0eNE3BzOMhX YwDfRDuQnGCMEXsLjZN0irrq0bNRrLTrWbI755VTIZi9G+0n9Rz7ajly6Wdorqq0 s/ioca2Y/PC6C2LRCYTHe5CMyJux8p4hTUVY+2qTEf2vK6UWFr+MN30OVxlABMPu 1KGeDhWyGEzTntRpm8sHCOCunl1x8lhVdA5auZRszg3X4n9wkqKQlnwOFeJ0yigp WaAIW5lga4TEwAkmOOxlM/oo7np0JFf96RtJihUWHHEvZQ2c -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:19 2026 by rpki-client