This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N5eRhzaeXlaEdJCyahfeMReXjV8.roa File: N5eRhzaeXlaEdJCyahfeMReXjV8.roa (raw, json) Hash identifier: TCjuzElfdgti9pHcNAyHXYbNtKEYQgsENoGt75fBiA4= Subject key identifier: 37:97:91:87:36:9E:5E:56:84:74:90:B2:6A:17:DE:31:17:97:8D:5F Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA761B67011377A27CCD407A0B81492 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N5eRhzaeXlaEdJCyahfeMReXjV8.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213016 IP address blocks: 2a0d:6f80:2a44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:61:b6:70:11:37:7a:27:cc:d4:07:a0:b8:14:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37979187369e5e56847490b26a17de3117978d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:4a:e8:2a:51:fc:9d:70:31:05:a5:63:ac: 4e:ff:5a:43:f9:90:bc:42:45:d8:b0:9d:ac:e3:40: a5:c4:e4:c1:b1:7f:a0:72:29:8f:b3:62:0c:e2:33: 74:0f:ed:d3:c9:9a:2f:93:6d:95:5b:f2:f6:e5:47: 20:92:d5:06:c9:b1:5d:f6:5b:53:7b:33:8d:87:d8: e1:0c:ef:54:f6:7c:58:09:b7:e2:41:6d:f6:63:07: 94:99:c2:f3:52:89:b8:53:e4:a0:8a:af:18:2a:c5: 99:71:b1:d2:c1:6b:f2:0d:e5:a1:ff:ec:99:95:68: 9f:a2:1a:2b:20:e1:99:b2:f1:93:f4:ac:4d:4e:1c: 62:aa:d2:c8:0f:a2:8a:a2:d3:ed:08:8f:2b:74:76: 57:77:93:c1:aa:54:f7:48:b7:69:b8:e7:50:0a:26: 39:2c:18:6f:11:3d:f7:a5:2a:d6:70:69:75:4b:ab: c8:2b:e1:27:79:7e:98:a2:93:cc:d8:b8:3e:5c:db: 23:df:6e:da:c7:67:1c:e1:da:76:fd:35:a3:62:21: 4f:03:0b:cf:20:72:87:70:8a:ff:ce:d7:b9:7d:e8: a4:72:1e:3e:11:92:0a:13:30:e4:fb:30:f2:31:bd: 52:6b:6b:7f:7f:f9:bf:c9:4a:96:09:d2:4a:ac:4b: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:97:91:87:36:9E:5E:56:84:74:90:B2:6A:17:DE:31:17:97:8D:5F X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N5eRhzaeXlaEdJCyahfeMReXjV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:2a44::/48 Signature Algorithm: sha256WithRSAEncryption 1b:eb:5c:eb:9f:4b:4a:64:51:3b:c0:dd:22:63:5f:a8:62:8f: 9d:dd:c4:de:bc:09:d5:69:c6:e7:11:47:6e:d1:03:be:8e:59: ee:ac:f3:96:42:01:b0:87:52:bc:f4:91:b7:62:86:15:aa:55: 2c:50:fc:f9:9a:72:f9:3b:ac:7f:b8:41:15:33:c6:14:c5:52: 30:5a:d8:c3:d6:47:fe:d2:1d:b0:a5:70:ca:0c:58:72:04:f8: c8:09:4e:03:c1:d0:b2:f3:76:ad:fb:8b:4d:95:79:f4:87:8d: 6e:0e:a3:59:27:3c:08:55:27:b8:70:14:e4:ad:00:dd:32:ad: c3:29:1a:8b:cf:58:c7:46:31:44:f6:dd:63:10:73:65:fb:98: 30:a6:44:0c:60:bf:23:b0:70:62:da:33:69:9d:5f:67:e4:b5: 90:3e:c5:bd:ad:49:a5:f3:df:0b:d7:04:09:ff:b4:c0:01:50: 12:3b:d5:12:f0:b8:9f:ea:07:e2:9f:18:ad:32:2e:c3:91:e0: f6:b5:06:46:07:82:40:a8:1e:eb:94:67:97:87:c7:58:fd:8e: 27:34:a3:d1:8e:6c:77:52:4a:81:84:7c:84:1f:94:d0:d4:49: e3:9e:cf:45:ee:ec:56:bc:87:e7:90:98:34:b4:e8:36:4b:fa: 51:b6:59:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2G2cBE3eifM1AeguBSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk3OTE4NzM2OWU1ZTU2ODQ3NDkwYjI2YTE3ZGUzMTE3OTc4ZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWFK6CpR/J1wMQWlY6xO/1pD+ZC8 QkXYsJ2s40ClxOTBsX+gcimPs2IM4jN0D+3TyZovk22VW/L25UcgktUGybFd9ltT ezONh9jhDO9U9nxYCbfiQW32YweUmcLzUom4U+Sgiq8YKsWZcbHSwWvyDeWh/+yZ lWifohorIOGZsvGT9KxNThxiqtLID6KKotPtCI8rdHZXd5PBqlT3SLdpuOdQCiY5 LBhvET33pSrWcGl1S6vIK+EneX6YopPM2Lg+XNsj327ax2cc4dp2/TWjYiFPAwvP IHKHcIr/zte5feikch4+EZIKEzDk+zDyMb1Sa2t/f/m/yUqWCdJKrEuv3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDeXkYc2nl5WhHSQsmoX3jEXl41fMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvTjVlUmh6YWVYbGFFZEpDeWFoZmVNUmVYalY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgCpE MA0GCSqGSIb3DQEBCwUAA4IBAQAb61zrn0tKZFE7wN0iY1+oYo+d3cTevAnVacbn EUdu0QO+jlnurPOWQgGwh1K89JG3YoYVqlUsUPz5mnL5O6x/uEEVM8YUxVIwWtjD 1kf+0h2wpXDKDFhyBPjICU4DwdCy83at+4tNlXn0h41uDqNZJzwIVSe4cBTkrQDd Mq3DKRqLz1jHRjFE9t1jEHNl+5gwpkQMYL8jsHBi2jNpnV9n5LWQPsW9rUml898L 1wQJ/7TAAVASO9US8Lif6gfinxitMi7DkeD2tQZGB4JAqB7rlGeXh8dY/Y4nNKPR jmx3UkqBhHyEH5TQ1Enjns9F7uxWvIfnkJg0tOg2S/pRtlmS -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:53 2026 by rpki-client