This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/5FHJTMovIyafBSIoWEyalm3rI5M.roa File: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (raw, json) Hash identifier: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c= Subject key identifier: E4:51:C9:4C:CA:2F:23:26:9F:05:22:28:58:4C:9A:96:6D:EB:23:93 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C81E7F11DE82A94F6FD988A10F59A Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/5FHJTMovIyafBSIoWEyalm3rI5M.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212164 IP address blocks: 2a13:b487:1300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:81:e7:f1:1d:e8:2a:94:f6:fd:98:8a:10:f5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e451c94cca2f23269f052228584c9a966deb2393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:56:fe:84:69:2b:91:87:1c:1f:37:15:0e: 65:39:d0:af:80:bd:5e:3b:7e:5b:dd:ca:e1:bc:61: c4:6b:a8:c8:f6:ec:3b:b4:77:dc:7d:f5:2f:75:c9: 23:14:fa:8a:27:7d:9e:fb:a1:98:f8:e7:23:f3:0c: 37:cf:12:5b:b1:de:be:fc:dc:6f:83:26:15:98:3b: 63:e8:87:76:9f:b8:a0:7c:13:b7:aa:2c:5e:bb:42: c5:23:8b:b8:60:b7:59:f1:5e:a9:12:a0:e7:8f:da: 94:ee:e6:90:44:b1:68:50:bb:84:8c:dd:ca:d0:65: aa:4c:fb:da:5a:67:5e:2b:43:4a:f3:ac:bb:e7:d0: bc:59:82:40:e6:01:4b:ab:3a:e1:ce:49:86:db:3f: 0c:a6:cb:f4:88:3d:26:55:11:5b:b1:34:89:40:41: 85:20:44:97:62:f0:80:64:4a:0d:ff:8e:5a:c5:6e: ef:cd:f3:85:a1:2a:d4:6d:83:bb:41:3d:8e:06:fd: a0:5c:77:5a:b5:23:5f:0f:98:fd:c8:64:73:f4:bb: 16:f0:b8:08:a7:c3:dd:7c:ca:4b:2e:c1:a0:4c:e7: 89:1e:b2:b7:83:98:e8:3c:e2:3e:0b:25:37:94:f5: 0d:a8:3a:66:53:76:9a:fb:3a:a9:6b:2f:fd:83:31: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:51:C9:4C:CA:2F:23:26:9F:05:22:28:58:4C:9A:96:6D:EB:23:93 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/5FHJTMovIyafBSIoWEyalm3rI5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:1300::/40 Signature Algorithm: sha256WithRSAEncryption d1:fd:f9:30:2a:de:27:11:e1:86:e4:7a:29:36:55:b8:ce:59: 97:3c:8e:7b:ac:d7:5b:90:8c:00:ae:86:e0:1c:a8:6e:57:26: 04:e9:2a:06:51:74:02:0d:54:f7:3c:3e:0b:bb:c1:de:a4:e2: be:8c:94:b7:1f:2d:96:1c:be:6b:e6:67:f2:ed:2a:7c:d5:5a: 73:2e:b1:9f:f6:3a:51:c1:00:9b:70:66:1e:3b:11:88:50:1d: af:41:07:81:cc:7a:ba:f0:6b:94:6b:ea:9d:51:70:a1:5d:9f: 44:08:60:09:43:60:8e:82:12:0f:3b:b3:77:2a:4f:9c:df:64: 8d:71:dd:7a:d0:27:cc:d5:13:31:7c:45:f5:f0:c8:f9:6a:30: 87:f3:63:0a:e1:4d:b3:c4:80:da:96:dd:5c:d2:25:53:e0:f3: fd:62:fd:99:25:98:16:a7:4f:a4:9c:42:77:8f:4f:c5:14:55: e7:de:1e:b0:ba:25:fb:cc:93:93:68:cc:20:6d:11:23:2a:28: 3b:1b:d2:be:45:59:fb:13:04:d1:29:cc:81:6a:be:a4:cd:d1: ca:3f:1e:72:68:2f:aa:86:da:a6:b0:cf:6a:e8:fa:db:37:3e: 1b:15:4c:45:08:14:ca:68:ec:c7:10:d8:c7:8f:35:54:dc:a6: ee:1b:28:cf -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XIHn8R3oKpT2/ZiKEPWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDUxYzk0Y2NhMmYyMzI2OWYwNTIyMjg1ODRjOWE5NjZkZWIyMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO5W/oRpK5GHHB83FQ5lOdCvgL1e O35b3crhvGHEa6jI9uw7tHfcffUvdckjFPqKJ32e+6GY+Ocj8ww3zxJbsd6+/Nxv gyYVmDtj6Id2n7igfBO3qixeu0LFI4u4YLdZ8V6pEqDnj9qU7uaQRLFoULuEjN3K 0GWqTPvaWmdeK0NK86y759C8WYJA5gFLqzrhzkmG2z8Mpsv0iD0mVRFbsTSJQEGF IESXYvCAZEoN/45axW7vzfOFoSrUbYO7QT2OBv2gXHdatSNfD5j9yGRz9LsW8LgI p8PdfMpLLsGgTOeJHrK3g5joPOI+CyU3lPUNqDpmU3aa+zqpay/9gzEwmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFORRyUzKLyMmnwUiKFhMmpZt6yOTMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvNUZISlRNb3ZJeWFmQlNJb1dFeWFsbTNySTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxMw DQYJKoZIhvcNAQELBQADggEBANH9+TAq3icR4Ybkeik2VbjOWZc8jnus11uQjACu huAcqG5XJgTpKgZRdAINVPc8Pgu7wd6k4r6MlLcfLZYcvmvmZ/LtKnzVWnMusZ/2 OlHBAJtwZh47EYhQHa9BB4HMerrwa5Rr6p1RcKFdn0QIYAlDYI6CEg87s3cqT5zf ZI1x3XrQJ8zVEzF8RfXwyPlqMIfzYwrhTbPEgNqW3VzSJVPg8/1i/ZklmBanT6Sc QnePT8UUVefeHrC6JfvMk5NozCBtESMqKDsb0r5FWfsTBNEpzIFqvqTN0co/HnJo L6qG2qawz2ro+ts3PhsVTEUIFMpo7McQ2MePNVTcpu4bKM8= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:08 2026 by rpki-client