This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa File: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (raw, json) Hash identifier: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk= Subject key identifier: 4F:9C:D4:1A:04:5A:97:D2:4A:3C:F0:90:E4:82:E1:2F:09:50:94:73 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019B7B3678E8906181AB75238D8BF4257596 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a14:2500::/29 maxlen: 29 2a14:2700::/29 maxlen: 29 2a14:2b00::/29 maxlen: 29 2a14:2d00::/29 maxlen: 29 2a14:2f00::/29 maxlen: 29 2a14:3300::/29 maxlen: 29 2a14:3500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:78:e8:90:61:81:ab:75:23:8d:8b:f4:25:75:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f9cd41a045a97d24a3cf090e482e12f09509473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1c:e5:7c:39:02:f2:be:0e:a9:92:b4:6e:b5: 16:8e:53:d5:57:87:e5:86:45:5e:e4:10:c4:76:b9: f7:78:be:9e:d1:4f:e2:b1:47:44:97:d7:9c:a3:94: d2:1f:2a:29:13:00:4b:5c:eb:f8:88:06:69:c0:0a: ac:63:ea:39:f8:17:dc:84:af:20:d4:32:53:7d:aa: 6e:52:46:98:07:ed:9c:7f:38:7b:a0:de:3e:86:e0: d3:1a:e5:24:c5:76:86:72:90:ac:dc:07:db:8d:04: ec:a0:6d:9e:4e:e8:2a:9f:92:47:62:d4:3d:0f:bd: e4:7c:fc:b6:0d:94:a5:97:4e:98:f7:98:0d:d6:4b: a7:ea:cf:f4:28:9b:9c:72:c0:6b:14:05:00:06:d7: b0:9c:91:a3:66:8c:a5:73:60:af:79:2a:a9:ee:3d: a7:4c:d8:0b:b1:d1:6e:bb:3d:09:cd:31:6c:36:90: b5:86:9e:5a:27:63:d3:4a:24:61:05:9c:11:cd:e0: 95:d4:ec:14:a3:7c:95:9c:66:83:4f:82:c9:58:6f: 76:e7:ed:51:8e:35:c8:f5:85:e6:0f:5e:5d:a1:59: 93:eb:fe:f2:04:12:f9:02:5c:be:0a:c7:d0:5d:93: 26:82:cd:ba:43:e9:b4:04:ef:85:c7:29:49:ac:2a: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9C:D4:1A:04:5A:97:D2:4A:3C:F0:90:E4:82:E1:2F:09:50:94:73 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:2500::/29 2a14:2700::/29 2a14:2b00::/29 2a14:2d00::/29 2a14:2f00::/29 2a14:3300::/29 2a14:3500::/29 Signature Algorithm: sha256WithRSAEncryption bc:a0:1d:06:5a:3d:56:da:76:1a:d9:06:88:8e:75:03:5a:63: 7b:d2:2d:9f:52:ca:8c:b5:f1:a3:6d:11:56:95:41:1f:89:41: 0f:cd:16:bf:3c:3d:ea:2d:44:6f:38:9f:a9:63:b7:99:cd:3c: 48:37:84:ef:39:5c:ca:0d:63:7d:7d:27:28:f3:77:2d:c5:7a: 5c:24:96:a0:bf:6f:65:23:74:30:b9:e3:91:f8:b6:f0:5d:99: 3a:ed:74:d1:39:22:d3:04:bc:89:be:5b:40:e2:f6:d5:7a:9f: 38:c8:0a:62:f6:96:99:3a:b5:6e:c1:89:ea:96:18:26:56:76: a7:9f:70:d3:c3:f7:74:d7:e3:34:fb:a7:db:7f:eb:4e:94:cf: 1b:0d:7d:07:1f:0d:2d:15:5a:fb:f8:7c:67:8a:fd:f5:47:21: 72:b3:91:e7:82:9e:54:2c:35:a2:43:13:46:06:3b:c5:98:7d: 0f:4d:07:68:48:2d:36:c3:eb:3b:bb:9f:d9:b6:10:e9:66:39: 22:b8:33:77:00:cd:66:bd:e4:1a:86:4f:cf:ba:35:81:20:ea: f8:3a:03:39:eb:c1:0f:e1:fc:10:9e:38:fb:65:8a:e7:8a:bb: 60:78:25:b7:2a:fb:18:7e:72:5c:05:ef:13:ec:b8:cf:12:bb: 96:51:c7:72 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt7NnjokGGBq3UjjYv0JXWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjljZDQxYTA0NWE5N2QyNGEzY2YwOTBlNDgyZTEyZjA5NTA5NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RzlfDkC8r4OqZK0brUWjlPVV4fl hkVe5BDEdrn3eL6e0U/isUdEl9eco5TSHyopEwBLXOv4iAZpwAqsY+o5+BfchK8g 1DJTfapuUkaYB+2cfzh7oN4+huDTGuUkxXaGcpCs3AfbjQTsoG2eTugqn5JHYtQ9 D73kfPy2DZSll06Y95gN1kun6s/0KJuccsBrFAUABtewnJGjZoylc2CveSqp7j2n TNgLsdFuuz0JzTFsNpC1hp5aJ2PTSiRhBZwRzeCV1OwUo3yVnGaDT4LJWG925+1R jjXI9YXmD15doVmT6/7yBBL5Aly+CsfQXZMmgs26Q+m0BO+FxylJrCpBWwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFE+c1BoEWpfSSjzwkOSC4S8JUJRzMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvVDV6VUdnUmFsOUpLUFBDUTVJTGhMd2xRbEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKhQlAAMF AyoUJwADBQMqFCsAAwUDKhQtAAMFAyoULwADBQMqFDMAAwUDKhQ1ADANBgkqhkiG 9w0BAQsFAAOCAQEAvKAdBlo9Vtp2GtkGiI51A1pje9Itn1LKjLXxo20RVpVBH4lB D80Wvzw96i1EbzifqWO3mc08SDeE7zlcyg1jfX0nKPN3LcV6XCSWoL9vZSN0MLnj kfi28F2ZOu100Tki0wS8ib5bQOL21XqfOMgKYvaWmTq1bsGJ6pYYJlZ2p59w08P3 dNfjNPun23/rTpTPGw19Bx8NLRVa+/h8Z4r99UchcrOR54KeVCw1okMTRgY7xZh9 D00HaEgtNsPrO7uf2bYQ6WY5IrgzdwDNZr3kGoZPz7o1gSDq+DoDOevBD+H8EJ44 +2WK54q7YHgltyr7GH5yXAXvE+y4zxK7llHHcg== -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:12 2026 by rpki-client