This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/5AGKlldahfI2UQwePdR7aOZv59k.roa File: 5AGKlldahfI2UQwePdR7aOZv59k.roa (raw, json) Hash identifier: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ= Subject key identifier: E4:01:8A:96:57:5A:85:F2:36:51:0C:1E:3D:D4:7B:68:E6:6F:E7:D9 Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004 Certificate serial: 019B7A5AA9EB4CFCFAD41FD016F7BF287230 Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/5AGKlldahfI2UQwePdR7aOZv59k.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211523 IP address blocks: 2001:678:f28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a9:eb:4c:fc:fa:d4:1f:d0:16:f7:bf:28:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4018a96575a85f236510c1e3dd47b68e66fe7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:6e:a0:fd:59:30:24:c3:36:55:b6:58:9c: 0c:49:36:b0:3d:01:f2:f8:e6:f8:29:78:b4:80:9d: e9:a0:ac:6c:7f:25:9a:8e:9b:69:a2:56:9a:10:1b: bd:c9:c0:36:87:88:c6:d3:e3:e4:f8:f1:6f:a6:f4: 46:2f:5d:c4:c5:e0:57:05:ac:44:56:5c:57:a9:9b: 82:a9:57:9b:b8:c7:9e:80:8e:c1:b3:f3:99:38:83: 5f:d0:7b:99:38:11:cc:13:58:94:d5:cb:0c:c2:5f: 17:e3:78:de:21:b3:72:7c:83:31:8b:86:4f:bd:47: 0c:fe:8b:91:73:91:a3:0c:4f:23:ed:db:34:f7:e6: 19:7c:3e:d5:5d:ca:fd:c1:7c:0e:a9:f2:e4:2e:21: 8c:53:9a:25:a4:a3:32:46:71:77:1f:ff:5a:b0:51: f1:9e:c8:86:20:3b:a8:34:e8:bd:97:ce:f1:51:f9: 3c:2b:0b:ab:04:45:59:d8:f9:0e:50:2f:c5:82:99: 09:26:7e:cc:c8:c7:fc:4f:d4:bd:fc:c2:ec:b2:4a: 9b:de:33:88:06:0d:d9:aa:cb:53:94:e8:17:27:77: df:43:10:0e:ba:e5:87:95:fc:e2:d1:78:d3:f0:90: a6:16:9e:07:66:f5:67:e6:eb:55:3f:72:d8:ec:b7: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:8A:96:57:5A:85:F2:36:51:0C:1E:3D:D4:7B:68:E6:6F:E7:D9 X509v3 Authority Key Identifier: keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/5AGKlldahfI2UQwePdR7aOZv59k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f28::/48 Signature Algorithm: sha256WithRSAEncryption 74:1b:af:28:9a:f2:3f:a8:96:75:c0:b4:65:cc:4d:3b:d8:e6: 88:36:81:8d:37:6d:e5:8b:5f:dc:ac:53:7b:e4:bd:38:0c:ec: 3d:49:cd:50:e3:1d:60:18:56:ad:96:53:82:ac:4c:cd:86:c2: 8d:27:a0:41:34:89:cc:aa:54:12:a7:1b:7b:18:7f:bc:54:d6: 1e:ee:ac:af:76:41:89:e4:f7:1c:39:dc:57:11:5a:c9:02:21: 5c:d6:83:bf:2d:66:3d:18:3e:b0:a9:6b:93:5d:e7:6e:40:92: 22:07:d1:8b:2c:ca:48:d2:cf:48:dc:af:6b:63:19:e2:68:23: 98:6d:1f:28:08:93:cd:f7:72:6a:35:21:46:72:28:49:1f:27: 43:4c:5b:b8:8a:eb:41:97:11:8f:59:41:e1:60:16:8a:77:2e: 6d:c2:27:1b:ac:af:41:89:9b:a1:74:bb:67:6a:3d:b1:f1:87: dc:93:bc:58:79:94:48:b3:e2:7a:7a:a0:71:92:8f:7f:4e:24: 05:af:a7:57:2d:34:dd:31:ab:71:8d:41:b5:d7:10:88:2c:e4: 61:f8:fa:5e:84:99:75:09:de:2b:45:c3:a5:d3:34:87:f8:43: d8:f9:e5:2f:f8:2d:1a:fc:0a:0e:81:bc:52:08:59:72:54:76: df:09:38:1a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WqnrTPz61B/QFve/KHIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOGM2OWRhOTRjODVlZGQ0OGQ5YzFmZDhlMzMyYWUzYmVl NjYwMDQwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDAxOGE5NjU3NWE4NWYyMzY1MTBjMWUzZGQ0N2I2OGU2NmZlN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNNuoP1ZMCTDNlW2WJwMSTawPQHy +Ob4KXi0gJ3poKxsfyWajptpolaaEBu9ycA2h4jG0+Pk+PFvpvRGL13ExeBXBaxE VlxXqZuCqVebuMeegI7Bs/OZOINf0HuZOBHME1iU1csMwl8X43jeIbNyfIMxi4ZP vUcM/ouRc5GjDE8j7ds09+YZfD7VXcr9wXwOqfLkLiGMU5olpKMyRnF3H/9asFHx nsiGIDuoNOi9l87xUfk8KwurBEVZ2PkOUC/FgpkJJn7MyMf8T9S9/MLsskqb3jOI Bg3ZqstTlOgXJ3ffQxAOuuWHlfzi0XjT8JCmFp4HZvVn5utVP3LY7LdIdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOQBipZXWoXyNlEMHj3Ue2jmb+fZMB8GA1UdIwQY MBaAFPKMadqUyF7dSNnB/Y4zKuO+5mAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEt YTkwMmIwMDk2Yjk5LzEvNUFHS2xsZGFoZkkyVVF3ZVBkUjdhT1p2NTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEtYTkwMmIwMDk2Yjk5 LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA8o MA0GCSqGSIb3DQEBCwUAA4IBAQB0G68omvI/qJZ1wLRlzE072OaINoGNN23li1/c rFN75L04DOw9Sc1Q4x1gGFatllOCrEzNhsKNJ6BBNInMqlQSpxt7GH+8VNYe7qyv dkGJ5PccOdxXEVrJAiFc1oO/LWY9GD6wqWuTXeduQJIiB9GLLMpI0s9I3K9rYxni aCOYbR8oCJPN93JqNSFGcihJHydDTFu4iutBlxGPWUHhYBaKdy5twicbrK9BiZuh dLtnaj2x8Yfck7xYeZRIs+J6eqBxko9/TiQFr6dXLTTdMatxjUG11xCILORh+Ppe hJl1Cd4rRcOl0zSH+EPY+eUv+C0a/AoOgbxSCFlyVHbfCTga -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:52 2026 by rpki-client