This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/g5P1CePj7Ig3Woj5axzABAMb-Fs.roa File: g5P1CePj7Ig3Woj5axzABAMb-Fs.roa (raw, json) Hash identifier: /SHldXpCq9rbN+oRz89QqyP1fUqetjOkr2DsYsUd4t8= Subject key identifier: 83:93:F5:09:E3:E3:EC:88:37:5A:88:F9:6B:1C:C0:04:03:1B:F8:5B Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55EC47E8BF247872F5B2E5D6A93EE Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/g5P1CePj7Ig3Woj5axzABAMb-Fs.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211693 IP address blocks: 2a10:4646:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5e:c4:7e:8b:f2:47:87:2f:5b:2e:5d:6a:93:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8393f509e3e3ec88375a88f96b1cc004031bf85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:a7:20:e5:eb:6d:30:58:c2:1c:5a:e8:79: a1:49:55:a6:32:8c:94:f0:4f:49:8b:a4:ef:77:af: 98:41:62:a1:de:02:fb:87:a4:53:37:39:d1:75:73: 47:dc:b8:31:94:8b:1e:7b:61:77:3b:ed:ed:bb:18: d8:f1:e4:57:dd:2e:14:60:c9:fa:3e:18:e7:1f:c3: 1a:cc:c2:87:9d:b3:c4:f7:fc:d5:60:5c:af:e3:3e: 6a:a4:e7:05:0e:a1:6c:2e:97:15:bd:df:a1:29:68: d8:ab:88:07:c5:59:df:f7:67:b3:75:ea:db:64:e7: 51:4e:76:65:d0:1d:04:32:05:3b:bf:ab:96:f4:1c: d4:aa:33:95:92:92:c9:48:e3:30:92:f8:cc:dd:04: 70:5e:2a:0d:e1:98:64:66:47:af:42:f5:d7:19:b3: 11:e7:e1:cc:0e:87:ff:08:e4:e6:a6:9c:b0:42:93: 21:44:c7:6c:bf:90:f8:b9:90:33:75:e2:56:1e:6b: 11:a0:ef:a4:f1:c6:aa:29:4b:df:93:8e:e7:84:60: f9:fd:1c:1d:66:56:1e:da:68:3f:c5:e4:5b:9f:0a: a8:b4:91:9b:64:13:4a:f6:34:42:df:64:1f:99:3b: a5:05:58:25:1d:36:b4:fb:d2:81:41:5b:68:94:41: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:93:F5:09:E3:E3:EC:88:37:5A:88:F9:6B:1C:C0:04:03:1B:F8:5B X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/g5P1CePj7Ig3Woj5axzABAMb-Fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:b::/48 Signature Algorithm: sha256WithRSAEncryption 96:09:87:66:b8:68:81:22:cc:97:55:36:d5:c4:d2:69:73:21: cd:44:2d:0d:f1:0b:d1:75:04:ab:05:0e:cd:5e:aa:a8:08:93: a8:6f:89:f5:68:1c:93:f0:6d:cd:f9:68:3f:95:e6:4e:b2:7b: 39:a0:ea:26:c4:46:de:2a:79:96:dd:5a:cb:ce:f9:24:25:cd: 12:63:71:09:6e:1c:a8:6a:eb:46:2e:5e:da:ca:48:23:d5:de: 6e:55:c4:28:86:5b:60:87:f6:42:bd:8c:49:ed:97:ef:ff:b8: c6:ec:7f:72:77:e3:72:69:0f:55:0d:d6:c0:11:0f:7b:b7:9a: 23:f2:e5:fe:78:69:37:ec:39:84:c3:60:6a:7b:13:43:1a:3d: 0b:7b:ad:bd:ea:fa:28:29:66:89:9c:f7:36:09:17:33:b7:60: 18:be:18:5e:49:bf:ef:72:b8:92:91:0e:fe:c5:b4:53:21:c8: fd:d0:1a:ae:d2:13:ab:6d:9c:2d:1b:88:f3:81:56:db:fd:81: 8a:5b:2d:96:ea:55:3e:6a:ef:25:73:87:18:86:4e:34:17:fc: 5f:3c:4f:ac:20:e9:b8:c5:80:37:98:d0:38:c6:11:54:bf:ac: 29:23:5a:b0:b0:54:6a:3d:6d:26:00:b6:c2:24:4a:34:f9:70: 60:21:62:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pV7EfovyR4cvWy5dapPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzkzZjUwOWUzZTNlYzg4Mzc1YTg4Zjk2YjFjYzAwNDAzMWJmODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7inIOXrbTBYwhxa6HmhSVWmMoyU 8E9Ji6Tvd6+YQWKh3gL7h6RTNznRdXNH3LgxlIsee2F3O+3tuxjY8eRX3S4UYMn6 PhjnH8MazMKHnbPE9/zVYFyv4z5qpOcFDqFsLpcVvd+hKWjYq4gHxVnf92ezderb ZOdRTnZl0B0EMgU7v6uW9BzUqjOVkpLJSOMwkvjM3QRwXioN4ZhkZkevQvXXGbMR 5+HMDof/COTmppywQpMhRMdsv5D4uZAzdeJWHmsRoO+k8caqKUvfk47nhGD5/Rwd ZlYe2mg/xeRbnwqotJGbZBNK9jRC32QfmTulBVglHTa0+9KBQVtolEEynQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIOT9Qnj4+yIN1qI+WscwAQDG/hbMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvZzVQMUNlUGo3SWczV29qNWF4ekFCQU1iLUZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgAL MA0GCSqGSIb3DQEBCwUAA4IBAQCWCYdmuGiBIsyXVTbVxNJpcyHNRC0N8QvRdQSr BQ7NXqqoCJOob4n1aByT8G3N+Wg/leZOsns5oOomxEbeKnmW3VrLzvkkJc0SY3EJ bhyoautGLl7aykgj1d5uVcQohltgh/ZCvYxJ7Zfv/7jG7H9yd+NyaQ9VDdbAEQ97 t5oj8uX+eGk37DmEw2BqexNDGj0Le6296vooKWaJnPc2CRczt2AYvhheSb/vcriS kQ7+xbRTIcj90Bqu0hOrbZwtG4jzgVbb/YGKWy2W6lU+au8lc4cYhk40F/xfPE+s IOm4xYA3mNA4xhFUv6wpI1qwsFRqPW0mALbCJEo0+XBgIWIp -----END CERTIFICATE-----Generated at Sun Jan 18 10:01:48 2026 by rpki-client