This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/a5rLSoc8xep_3EFrBqKONw5BV9g.roa File: a5rLSoc8xep_3EFrBqKONw5BV9g.roa (raw, json) Hash identifier: wgRuAEEqRo/PsbK5uE/DgJQuGCNr2HxH/clUxs7bOKg= Subject key identifier: 6B:9A:CB:4A:87:3C:C5:EA:7F:DC:41:6B:06:A2:8E:37:0E:41:57:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C724FFFD03ED5ACC5DA444B1ACDE3B Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/a5rLSoc8xep_3EFrBqKONw5BV9g.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a10:2ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:24:ff:fd:03:ed:5a:cc:5d:a4:44:b1:ac:de:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b9acb4a873cc5ea7fdc416b06a28e370e4157d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:77:f3:24:14:32:41:e3:ad:60:0d:56:52: 0f:46:b5:ad:3a:89:ed:8d:ca:5f:03:77:20:f3:8d: da:a8:7c:19:a3:73:a1:8d:a4:92:63:e7:af:6c:92: 59:bf:84:d7:2e:6d:49:ab:79:9b:51:98:b4:77:1c: 83:14:09:94:76:2f:6c:fa:d1:7b:1a:19:5a:59:45: f5:bd:33:83:ad:6d:09:94:61:5e:26:87:26:aa:3d: fe:bd:8f:6c:37:ac:69:38:6d:a9:bf:a8:3f:32:3e: 6f:2c:76:64:28:4c:30:d1:99:44:5b:f7:0e:a7:0f: e5:84:f3:98:9e:a0:7b:cd:2d:9b:33:ef:97:0e:77: f6:a4:e1:32:b9:3c:bd:92:f7:02:94:17:80:92:e9: 73:0b:fe:09:ab:fe:85:ac:56:3e:8f:48:18:82:d2: 34:fa:d8:dc:1d:73:60:1c:42:13:20:30:4a:91:c1: c4:1a:aa:15:73:e1:81:00:a5:7c:34:ab:a5:04:46: 66:fd:9e:60:b4:d5:8d:59:a9:a7:bc:b8:89:68:9d: 4b:64:df:22:07:8a:64:fa:ee:26:90:eb:1c:5d:28: f6:0d:8d:f9:7b:0b:ed:66:d3:c9:0a:4e:f6:e8:0c: 8e:37:b0:8f:98:0c:61:81:a3:20:4c:1e:e8:c0:bb: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:CB:4A:87:3C:C5:EA:7F:DC:41:6B:06:A2:8E:37:0E:41:57:D8 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/a5rLSoc8xep_3EFrBqKONw5BV9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2ec0::/29 Signature Algorithm: sha256WithRSAEncryption 7c:88:ee:88:63:88:07:e1:5d:51:9d:c3:79:a8:65:02:25:2d: 2e:b1:2e:37:6c:3e:be:3a:2a:7c:bc:8f:7f:0a:ef:a6:57:4d: c8:83:94:c8:f5:0e:ef:dc:62:61:c1:df:23:f9:a6:0e:25:ef: 03:46:8c:70:73:62:6f:65:28:3b:f9:aa:2a:16:36:5a:f3:1d: 26:30:55:8a:09:a8:7a:66:1b:b7:c7:92:93:32:b3:9b:2b:20: 8d:2b:f0:d0:12:78:39:4b:63:75:b0:62:43:a2:f2:72:00:82: f2:4b:b4:c6:0f:a1:a6:4c:ee:6d:cb:fa:6f:1c:c6:2a:d6:11: 33:c7:9a:47:32:7e:a0:3c:fa:77:e9:fd:61:5a:7e:34:54:12: 7e:c0:d6:c3:69:c2:a7:fd:2f:11:cc:f1:9f:2f:02:a0:bb:a1: c5:b3:4d:c1:19:b0:f6:28:89:df:3f:b1:5f:5d:f1:fc:91:7a: 22:fe:d8:01:56:62:3d:d1:91:99:a9:9e:74:1b:a7:35:c2:57: a6:2b:73:0a:f8:89:59:58:f7:0c:1a:ed:0b:77:ad:4d:e1:61: f4:0f:00:83:02:5b:d5:28:a9:bd:ce:83:71:8e:38:90:a6:83: c3:5a:11:57:bc:e2:ac:84:36:63:20:33:c7:5b:ce:4f:33:d6: 23:74:ed:8e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xyT//QPtWsxdpESxrN47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjlhY2I0YTg3M2NjNWVhN2ZkYzQxNmIwNmEyOGUzNzBlNDE1N2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvt38yQUMkHjrWANVlIPRrWtOont jcpfA3cg843aqHwZo3OhjaSSY+evbJJZv4TXLm1Jq3mbUZi0dxyDFAmUdi9s+tF7 GhlaWUX1vTODrW0JlGFeJocmqj3+vY9sN6xpOG2pv6g/Mj5vLHZkKEww0ZlEW/cO pw/lhPOYnqB7zS2bM++XDnf2pOEyuTy9kvcClBeAkulzC/4Jq/6FrFY+j0gYgtI0 +tjcHXNgHEITIDBKkcHEGqoVc+GBAKV8NKulBEZm/Z5gtNWNWamnvLiJaJ1LZN8i B4pk+u4mkOscXSj2DY35ewvtZtPJCk726AyON7CPmAxhgaMgTB7owLtoFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGuay0qHPMXqf9xBawaijjcOQVfYMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvYTVyTFNvYzh4ZXBfM0VGckJxS09OdzVCVjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhAuwDAN BgkqhkiG9w0BAQsFAAOCAQEAfIjuiGOIB+FdUZ3DeahlAiUtLrEuN2w+vjoqfLyP fwrvpldNyIOUyPUO79xiYcHfI/mmDiXvA0aMcHNib2UoO/mqKhY2WvMdJjBVigmo emYbt8eSkzKzmysgjSvw0BJ4OUtjdbBiQ6LycgCC8ku0xg+hpkzubcv6bxzGKtYR M8eaRzJ+oDz6d+n9YVp+NFQSfsDWw2nCp/0vEczxny8CoLuhxbNNwRmw9iiJ3z+x X13x/JF6Iv7YAVZiPdGRmamedBunNcJXpitzCviJWVj3DBrtC3etTeFh9A8AgwJb 1Sipvc6DcY44kKaDw1oRV7zirIQ2YyAzx1vOTzPWI3Ttjg== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client