This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5L5YO6O362HNIylk8JgyA5EYFPk.roa File: 5L5YO6O362HNIylk8JgyA5EYFPk.roa (raw, json) Hash identifier: IZuegZrgDlTtynSC78Vomk2yVDu9mi2qhjUEemSFZl4= Subject key identifier: E4:BE:58:3B:A3:B7:EB:61:CD:23:29:64:F0:98:32:03:91:18:14:F9 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F5496F88BE858225B04541EDC7D9 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5L5YO6O362HNIylk8JgyA5EYFPk.roa Signing time: Fri 02 Jan 2026 14:19:32 +0000 ROA not before: Fri 02 Jan 2026 14:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50512 IP address blocks: 2a02:2698:400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f5:49:6f:88:be:85:82:25:b0:45:41:ed:c7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4be583ba3b7eb61cd232964f0983203911814f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:57:e8:f8:8d:5c:59:c2:e8:43:fb:b2:7d:d5: 8b:c8:46:7a:c6:f5:71:e7:d7:ad:e3:48:68:cd:47: 85:46:59:a5:98:73:95:2a:25:08:5d:ca:7a:1c:2c: 76:e0:98:25:15:85:48:f5:5f:60:70:de:c5:47:b9: 95:95:f9:aa:38:48:2d:ba:6a:ff:e7:e5:55:58:3a: 2a:76:0d:a4:cf:f3:f3:2e:4e:f7:08:bd:51:11:eb: 0a:4e:8c:fe:56:f4:7e:20:f0:dc:a2:42:ac:ee:ee: 63:73:a1:a2:d1:e8:4b:c7:a5:ad:b6:db:5a:13:b4: 32:19:6f:b2:22:45:20:7e:78:9a:f2:a2:48:70:9c: a2:a2:0f:a8:2d:2c:2e:1d:89:5f:0e:09:18:f6:2b: 47:60:f2:13:15:c1:24:29:d8:75:a2:ba:90:67:1f: e9:dd:48:5a:a7:ff:c5:ee:9f:bb:39:49:8f:02:ce: c8:23:15:32:17:6e:01:17:c5:a4:6f:cd:b0:7e:05: 87:63:13:93:5e:87:73:b1:d2:16:cf:fb:93:fc:44: 23:20:46:25:c1:26:16:81:cb:12:02:b5:c6:26:74: 7b:58:c2:97:46:19:dd:ab:d1:79:f4:de:83:26:a6: ff:be:d3:d6:ad:a9:01:3c:0b:c8:0b:6c:32:b0:92: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BE:58:3B:A3:B7:EB:61:CD:23:29:64:F0:98:32:03:91:18:14:F9 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5L5YO6O362HNIylk8JgyA5EYFPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:400::/38 Signature Algorithm: sha256WithRSAEncryption b0:e2:ac:04:36:1d:72:5f:77:3a:95:53:a1:ca:12:72:c4:2a: af:8f:71:bf:e5:c6:a9:b3:5e:bb:6f:92:ff:3a:a2:cb:fd:53: 77:0f:4c:a6:87:e7:30:2c:76:34:bd:27:46:1a:1c:b3:e8:fd: ad:53:8f:f7:b7:22:7d:63:ba:f6:ae:23:a9:ad:45:96:f3:15: ba:83:ef:90:a4:1c:96:66:64:c3:b6:1c:39:aa:3d:fb:e6:05: 72:f6:34:15:d6:83:5e:1c:1d:3c:b4:e3:3b:61:73:01:df:0c: eb:55:59:22:24:11:2b:47:04:51:78:33:94:ce:ef:ae:d3:82: e7:73:de:65:c4:11:e4:fb:ea:5e:d6:14:10:ed:6e:6e:75:13: e5:22:54:6c:f0:f9:cd:6d:83:8b:f9:4b:f4:e2:1c:3c:29:2e: 44:93:78:0c:92:43:d5:94:e0:6b:3c:ad:cc:01:45:86:c2:06: 90:04:c5:a0:0f:0a:ee:6b:27:1f:3d:ed:ce:d9:97:c9:18:53: 8b:4b:fd:0a:8b:20:d8:98:f7:6a:a0:d8:4d:ce:35:23:fb:80: c3:91:e0:7e:3a:44:94:dc:a2:da:46:26:dc:8b:9b:59:f5:28: 96:27:92:5b:90:d2:19:59:b8:24:6c:88:61:ff:b1:4a:28:58: 30:13:c2:d5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/VJb4i+hYIlsEVB7cfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJlNTgzYmEzYjdlYjYxY2QyMzI5NjRmMDk4MzIwMzkxMTgxNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61fo+I1cWcLoQ/uyfdWLyEZ6xvVx 59et40hozUeFRlmlmHOVKiUIXcp6HCx24JglFYVI9V9gcN7FR7mVlfmqOEgtumr/ 5+VVWDoqdg2kz/PzLk73CL1REesKToz+VvR+IPDcokKs7u5jc6Gi0ehLx6Wtttta E7QyGW+yIkUgfnia8qJIcJyiog+oLSwuHYlfDgkY9itHYPITFcEkKdh1orqQZx/p 3Uhap//F7p+7OUmPAs7IIxUyF24BF8Wkb82wfgWHYxOTXodzsdIWz/uT/EQjIEYl wSYWgcsSArXGJnR7WMKXRhndq9F59N6DJqb/vtPWrakBPAvIC2wysJIXiwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOS+WDujt+thzSMpZPCYMgORGBT5MB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvNUw1WU82TzM2MkhOSXlsazhKZ3lBNUVZRlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmAQw DQYJKoZIhvcNAQELBQADggEBALDirAQ2HXJfdzqVU6HKEnLEKq+Pcb/lxqmzXrtv kv86osv9U3cPTKaH5zAsdjS9J0YaHLPo/a1Tj/e3In1juvauI6mtRZbzFbqD75Ck HJZmZMO2HDmqPfvmBXL2NBXWg14cHTy04zthcwHfDOtVWSIkEStHBFF4M5TO767T gudz3mXEEeT76l7WFBDtbm51E+UiVGzw+c1tg4v5S/TiHDwpLkSTeAySQ9WU4Gs8 rcwBRYbCBpAExaAPCu5rJx897c7Zl8kYU4tL/QqLINiY92qg2E3ONSP7gMOR4H46 RJTcotpGJtyLm1n1KJYnkluQ0hlZuCRsiGH/sUooWDATwtU= -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:03 2026 by rpki-client