This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/5t5_5MqWJNollBMPqdFua97XfMM.roa File: 5t5_5MqWJNollBMPqdFua97XfMM.roa (raw, json) Hash identifier: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y= Subject key identifier: E6:DE:7F:E4:CA:96:24:DA:25:94:13:0F:A9:D1:6E:6B:DE:D7:7C:C3 Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb Certificate serial: 019B7A5B845FC2CC678FA850339D1EFE14C7 Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/5t5_5MqWJNollBMPqdFua97XfMM.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211833 IP address blocks: 2a12:f340::/48 maxlen: 48 2a12:f340:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:84:5f:c2:cc:67:8f:a8:50:33:9d:1e:fe:14:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6de7fe4ca9624da2594130fa9d16e6bded77cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:76:ca:70:ce:f6:31:a3:26:30:51:ff:2b: ae:9e:00:40:fd:da:5e:b7:ff:ae:b1:e1:28:0b:5e: 8a:2f:a1:d2:35:af:d8:a4:21:f4:b1:ec:f4:7b:fd: 61:3f:fe:ba:27:5e:40:65:8c:54:6a:de:32:8f:71: 1d:93:9e:fa:ed:8f:20:94:12:84:c7:97:50:ab:f4: d2:ef:18:cc:34:86:4b:2f:e1:f8:85:7e:b6:a8:c1: e7:44:a7:81:bf:b7:14:d2:6d:8c:b1:c6:26:37:4a: 5c:aa:81:4c:e0:22:36:ed:7a:ef:65:df:8a:62:d4: 82:c6:e9:f4:0a:f7:65:06:04:24:eb:d5:77:b8:3e: 31:db:40:dc:be:6d:42:3f:b1:5a:0c:bb:2e:29:79: be:27:44:e2:a6:43:5d:3d:09:ef:42:05:fc:75:06: bc:f5:3d:51:6e:08:d6:af:1a:bf:de:a0:09:70:e6: a8:94:62:a3:66:1c:87:76:99:e8:23:93:fc:10:44: 4d:c7:20:df:4d:f5:47:ef:d1:16:67:bd:46:17:d7: df:43:4c:41:bd:64:b1:e1:b2:5e:dc:5f:cf:98:3e: 11:86:ab:21:b7:4e:4f:a2:2b:dd:ee:70:b8:7a:7e: ca:e5:7f:fc:70:47:8f:d0:c4:52:7b:fb:0a:66:8a: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DE:7F:E4:CA:96:24:DA:25:94:13:0F:A9:D1:6E:6B:DE:D7:7C:C3 X509v3 Authority Key Identifier: keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/5t5_5MqWJNollBMPqdFua97XfMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f340::/47 Signature Algorithm: sha256WithRSAEncryption 19:98:65:cc:84:12:d4:68:bc:b2:f2:55:5b:c6:bd:4e:d5:4c: 11:ca:cd:51:f9:cd:86:3d:85:e5:fc:c9:6f:2d:35:c3:71:00: 9b:a0:00:5a:7c:fa:75:52:f7:d8:e7:85:34:55:35:69:34:91: 93:fc:35:ae:30:b1:21:07:dc:48:9d:8e:17:9f:c2:ed:2d:bf: 01:25:5c:20:b5:cc:1f:5d:1b:9a:70:53:df:79:4b:6a:cf:ce: 65:0b:22:55:1a:f6:4c:c1:c0:fe:66:77:75:f5:6c:80:68:ae: cc:70:21:fe:88:58:33:7d:7e:a1:17:c7:9b:63:1d:6b:54:29: 41:4a:12:25:17:d8:08:e3:fc:ed:e2:b4:db:51:1c:0b:e1:50: 5b:af:8c:fd:8d:de:b8:52:e1:46:a7:aa:43:6d:2c:a8:45:9b: 7f:d4:01:fe:eb:84:ac:5d:7a:f6:5b:19:8f:0b:7f:25:37:e3: cb:32:2f:e1:37:b5:61:d9:e8:63:7c:af:e0:3e:f4:83:ff:d8: aa:31:e1:cd:45:60:68:22:1c:9f:d9:35:44:80:66:17:b6:36: 36:a2:b5:eb:e5:a5:8f:c8:31:c1:e2:a3:35:29:0f:e9:e9:81: 58:9e:da:dd:b1:91:01:04:3c:6f:b9:ff:df:bf:71:45:25:70: 89:df:38:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W4Rfwsxnj6hQM50e/hTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4 MWYzY2IwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmRlN2ZlNGNhOTYyNGRhMjU5NDEzMGZhOWQxNmU2YmRlZDc3Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNx2ynDO9jGjJjBR/yuungBA/dpe t/+useEoC16KL6HSNa/YpCH0sez0e/1hP/66J15AZYxUat4yj3Edk5767Y8glBKE x5dQq/TS7xjMNIZLL+H4hX62qMHnRKeBv7cU0m2MscYmN0pcqoFM4CI27XrvZd+K YtSCxun0CvdlBgQk69V3uD4x20Dcvm1CP7FaDLsuKXm+J0TipkNdPQnvQgX8dQa8 9T1RbgjWrxq/3qAJcOaolGKjZhyHdpnoI5P8EERNxyDfTfVH79EWZ71GF9ffQ0xB vWSx4bJe3F/PmD4Rhqsht05Poivd7nC4en7K5X/8cEeP0MRSe/sKZorCXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFObef+TKliTaJZQTD6nRbmve13zDMB8GA1UdIwQY MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt YzlkYjk4MWEyYTJmLzEvNXQ1XzVNcVdKTm9sbEJNUHFkRnVhOTdYZk1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhLzQAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAZmGXMhBLUaLyy8lVbxr1O1UwRys1R+c2GPYXl /MlvLTXDcQCboABafPp1UvfY54U0VTVpNJGT/DWuMLEhB9xInY4Xn8LtLb8BJVwg tcwfXRuacFPfeUtqz85lCyJVGvZMwcD+Znd19WyAaK7McCH+iFgzfX6hF8ebYx1r VClBShIlF9gI4/zt4rTbURwL4VBbr4z9jd64UuFGp6pDbSyoRZt/1AH+64SsXXr2 WxmPC38lN+PLMi/hN7Vh2ehjfK/gPvSD/9iqMeHNRWBoIhyf2TVEgGYXtjY2orXr 5aWPyDHB4qM1KQ/p6YFYntrdsZEBBDxvuf/fv3FFJXCJ3zgt -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:47 2026 by rpki-client