This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5_uhH0uJ6n5nCMMK4lfzzm-DKlI.roa File: 5_uhH0uJ6n5nCMMK4lfzzm-DKlI.roa (raw, json) Hash identifier: 4FsfWeOEOVV3jvS79HoxxV+c1s2mF8W/hyr7ddZKkZM= Subject key identifier: E7:FB:A1:1F:4B:89:EA:7E:67:08:C3:0A:E2:57:F3:CE:6F:83:2A:52 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FE71C99EDEF1E62AAB90142DF956 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5_uhH0uJ6n5nCMMK4lfzzm-DKlI.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212733 IP address blocks: 2a0c:9a40:8660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fe:71:c9:9e:de:f1:e6:2a:ab:90:14:2d:f9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7fba11f4b89ea7e6708c30ae257f3ce6f832a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:9c:17:0c:0b:96:36:74:df:ce:09:38:75: 57:75:63:42:0a:c7:8a:12:e4:b9:a6:48:41:08:99: 49:b8:8c:04:93:1d:28:f3:32:76:9c:ab:d1:72:03: 23:e7:2a:bc:be:c5:cc:ae:a0:80:c4:b3:dc:a7:80: 70:dc:dd:2d:d4:19:fb:86:d8:f4:f9:c5:58:1f:8b: 52:7b:59:82:6d:0e:6d:ed:ea:13:7c:86:3d:5b:b4: b1:db:6f:df:5b:46:4f:f9:71:bc:5a:8b:8e:72:5e: 3c:ef:c2:8d:0a:20:25:d9:24:92:e7:0c:fb:c9:df: d1:3e:2d:1b:cb:06:54:df:24:32:c7:48:82:d4:4e: e1:30:69:0c:e0:dc:c4:0e:a7:32:86:de:da:96:8f: 73:f0:17:af:b3:fb:c5:89:66:57:68:38:66:ae:d4: 0e:00:8e:a6:ba:ba:fb:67:ed:d5:a0:c2:9a:cd:ac: d2:4b:ff:51:24:0c:0b:35:65:8c:ee:57:8a:c2:4c: 02:7a:d8:5b:a2:9b:cf:06:c9:d0:5b:bc:7d:1b:2e: 62:b0:72:2d:37:a7:44:ef:42:6f:13:d4:68:6a:e4: d2:92:57:c9:42:c9:66:18:ff:b5:db:2a:4f:a9:8c: a5:5f:9b:1b:6d:8c:5e:9c:17:08:0e:31:db:b0:41: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:A1:1F:4B:89:EA:7E:67:08:C3:0A:E2:57:F3:CE:6F:83:2A:52 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5_uhH0uJ6n5nCMMK4lfzzm-DKlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8660::/44 Signature Algorithm: sha256WithRSAEncryption a6:d7:cf:34:24:7f:27:4c:45:02:c5:c3:c9:22:48:ed:24:25: cb:4d:5f:38:6a:0e:1e:78:84:cf:49:c8:96:85:e7:17:72:e9: 00:5f:35:ac:ab:79:8a:46:26:be:af:dd:fe:97:ba:82:67:a2: 49:29:7d:1c:d5:36:22:22:1c:fc:ce:2a:73:03:91:3d:a3:43: a3:07:18:ce:4b:29:e4:a7:26:57:9d:0e:92:77:0a:2f:65:fc: 1b:73:d8:4f:02:7c:2f:46:59:1f:e5:53:7f:08:ba:6a:3f:59: b4:c7:52:74:6c:0f:04:99:d0:44:46:14:63:08:65:84:57:5d: fa:2f:6a:56:cb:42:17:6e:56:92:52:b1:52:e2:0c:bb:91:a4: f6:03:cd:74:0d:1a:e8:5c:08:9d:0f:25:39:bc:46:c6:d6:64: f6:2f:b8:6e:75:3c:28:82:09:7c:6e:86:25:02:5d:ea:b4:75: f2:02:58:12:2c:49:8f:4b:6b:e5:ff:17:80:54:ed:d0:70:ec: 81:db:bf:50:af:d7:d6:9c:bf:70:a0:de:e7:63:0a:bf:b6:34: 88:98:4f:a1:69:ef:d9:4c:3b:95:0e:3d:85:52:dc:1b:0b:16: 5f:c7:b4:05:14:19:8d:b2:ff:ce:41:01:86:95:cf:d3:10:b6: 68:90:30:c8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pv5xyZ7e8eYqq5AULflWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2ZiYTExZjRiODllYTdlNjcwOGMzMGFlMjU3ZjNjZTZmODMyYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2+cFwwLljZ0384JOHVXdWNCCseK EuS5pkhBCJlJuIwEkx0o8zJ2nKvRcgMj5yq8vsXMrqCAxLPcp4Bw3N0t1Bn7htj0 +cVYH4tSe1mCbQ5t7eoTfIY9W7Sx22/fW0ZP+XG8WouOcl4878KNCiAl2SSS5wz7 yd/RPi0bywZU3yQyx0iC1E7hMGkM4NzEDqcyht7alo9z8Bevs/vFiWZXaDhmrtQO AI6murr7Z+3VoMKazazSS/9RJAwLNWWM7leKwkwCethbopvPBsnQW7x9Gy5isHIt N6dE70JvE9RoauTSklfJQslmGP+12ypPqYylX5sbbYxenBcIDjHbsEGN4QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOf7oR9Liep+ZwjDCuJX885vgypSMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNV91aEgwdUo2bjVuQ01NSzRsZnp6bS1ES2xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIZg MA0GCSqGSIb3DQEBCwUAA4IBAQCm1880JH8nTEUCxcPJIkjtJCXLTV84ag4eeITP SciWhecXcukAXzWsq3mKRia+r93+l7qCZ6JJKX0c1TYiIhz8zipzA5E9o0OjBxjO SynkpyZXnQ6SdwovZfwbc9hPAnwvRlkf5VN/CLpqP1m0x1J0bA8EmdBERhRjCGWE V136L2pWy0IXblaSUrFS4gy7kaT2A810DRroXAidDyU5vEbG1mT2L7hudTwoggl8 boYlAl3qtHXyAlgSLEmPS2vl/xeAVO3QcOyB279Qr9fWnL9woN7nYwq/tjSImE+h ae/ZTDuVDj2FUtwbCxZfx7QFFBmNsv/OQQGGlc/TELZokDDI -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:16 2026 by rpki-client