This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/5O82bj0RVPYC9fHeytygnYo76U8.roa File: 5O82bj0RVPYC9fHeytygnYo76U8.roa (raw, json) Hash identifier: P+7qJZ65HnaqEFW0awG0yJ2/55GEb9yw1uv5c7sRaVA= Subject key identifier: E4:EF:36:6E:3D:11:54:F6:02:F5:F1:DE:CA:DC:A0:9D:8A:3B:E9:4F Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Certificate serial: 019B7F142E5C75EE6D1FC2984DF33F8EBA35 Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/5O82bj0RVPYC9fHeytygnYo76U8.roa Signing time: Fri 02 Jan 2026 14:19:47 +0000 ROA not before: Fri 02 Jan 2026 14:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213844 IP address blocks: 2a02:54a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:2e:5c:75:ee:6d:1f:c2:98:4d:f3:3f:8e:ba:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Validity Not Before: Jan 2 14:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ef366e3d1154f602f5f1decadca09d8a3be94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:96:b9:17:d5:1b:19:9c:04:1e:67:c8:3e: a9:c5:23:6f:71:7a:34:87:0d:fe:b6:5f:d2:21:32: 83:0b:78:66:e2:d9:a5:e6:a3:2b:f6:2f:f2:3e:bd: dc:33:9c:72:cb:70:de:f4:a1:70:bc:1c:47:b9:0b: 52:10:e7:59:4b:c9:cc:72:b0:4b:19:1a:09:e9:f1: 2a:d0:f2:45:eb:8f:9d:bc:83:15:2c:ff:c3:c8:84: 00:1b:f3:27:db:43:01:e0:78:20:86:cf:73:25:a8: 0f:f7:43:83:53:d9:1d:f8:0a:a0:13:10:94:9d:f7: 11:cb:8f:5f:6f:b9:3c:a9:d6:40:b2:fe:02:3b:9e: 4a:d1:9d:e6:63:37:25:2f:01:41:11:22:a8:41:9f: 9a:0c:40:f4:4d:3d:73:cd:ed:d9:ce:8f:7c:8c:eb: a7:bb:f2:72:0f:09:74:6c:67:f9:93:4a:c8:20:43: cf:d6:bb:ca:2f:37:6f:c4:24:09:75:f0:8c:66:1b: 7a:e3:df:a9:2e:56:38:ae:c4:51:f9:0e:98:33:43: e2:e1:cf:51:53:25:e0:cc:9d:ab:c4:8d:bf:4e:3d: a3:4e:c1:4a:38:90:7c:53:16:37:e5:b4:7b:da:ac: ab:cd:21:c4:52:7d:89:61:57:a0:dd:59:c8:45:f1: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EF:36:6E:3D:11:54:F6:02:F5:F1:DE:CA:DC:A0:9D:8A:3B:E9:4F X509v3 Authority Key Identifier: keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/5O82bj0RVPYC9fHeytygnYo76U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:54a0::/48 Signature Algorithm: sha256WithRSAEncryption 93:6b:07:6d:48:59:19:00:e4:10:50:7a:6a:af:34:c7:92:21: 23:37:c3:bf:2c:6e:2e:23:ef:fd:c1:b2:49:7e:76:9e:d8:26: 08:bc:a2:24:b7:ec:f8:38:ef:d6:35:d6:ae:52:4d:48:89:28: 40:f1:dc:b0:e4:72:26:10:e7:42:f0:a1:b1:83:51:30:6f:83: 43:d7:ce:c6:ff:6e:3c:e0:04:03:ca:da:aa:62:9e:1b:05:ca: 00:96:79:4e:66:24:44:99:a5:a6:3f:cc:1e:a3:d5:2f:8f:68: af:16:4a:e7:cd:bb:9b:7a:ed:a1:b5:05:6d:25:b0:bd:84:b4: 79:b8:c6:a4:dd:15:ab:45:53:2a:4a:7c:85:f7:53:5a:40:41: 52:ce:3b:11:6a:d0:d5:bd:ec:b8:00:bb:59:e0:1c:a9:bf:17: b7:95:aa:7e:70:d3:34:23:07:7e:ed:12:3b:fc:33:c4:d2:fd: 34:18:b5:02:52:5b:66:a0:b4:ce:73:90:75:97:57:98:c3:f7: b5:c7:ed:c6:f1:5b:6a:0b:0b:a6:c0:07:ed:e8:86:ce:d1:81: 27:21:d0:7f:f3:8d:1e:93:49:43:55:a6:5e:5c:25:be:26:ac: 8c:1d:28:3c:14:3d:23:8a:1c:00:da:41:c5:7f:41:ed:ad:42: e8:53:47:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FC5cde5tH8KYTfM/jro1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx OGEwYzkwHhcNMjYwMTAyMTQxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGVmMzY2ZTNkMTE1NGY2MDJmNWYxZGVjYWRjYTA5ZDhhM2JlOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv26WuRfVGxmcBB5nyD6pxSNvcXo0 hw3+tl/SITKDC3hm4tml5qMr9i/yPr3cM5xyy3De9KFwvBxHuQtSEOdZS8nMcrBL GRoJ6fEq0PJF64+dvIMVLP/DyIQAG/Mn20MB4Hgghs9zJagP90ODU9kd+AqgExCU nfcRy49fb7k8qdZAsv4CO55K0Z3mYzclLwFBESKoQZ+aDED0TT1zze3Zzo98jOun u/JyDwl0bGf5k0rIIEPP1rvKLzdvxCQJdfCMZht649+pLlY4rsRR+Q6YM0Pi4c9R UyXgzJ2rxI2/Tj2jTsFKOJB8UxY35bR72qyrzSHEUn2JYVeg3VnIRfHXVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOTvNm49EVT2AvXx3srcoJ2KO+lPMB8GA1UdIwQY MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt NWRlMzJiNjZkYjBhLzEvNU84MmJqMFJWUFlDOWZIZXl0eWduWW83NlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJUoAAA MA0GCSqGSIb3DQEBCwUAA4IBAQCTawdtSFkZAOQQUHpqrzTHkiEjN8O/LG4uI+/9 wbJJfnae2CYIvKIkt+z4OO/WNdauUk1IiShA8dyw5HImEOdC8KGxg1Ewb4ND187G /2484AQDytqqYp4bBcoAlnlOZiREmaWmP8weo9Uvj2ivFkrnzbubeu2htQVtJbC9 hLR5uMak3RWrRVMqSnyF91NaQEFSzjsRatDVvey4ALtZ4Bypvxe3lap+cNM0Iwd+ 7RI7/DPE0v00GLUCUltmoLTOc5B1l1eYw/e1x+3G8VtqCwumwAft6IbO0YEnIdB/ 840ek0lDVaZeXCW+JqyMHSg8FD0jihwA2kHFf0HtrULoU0d3 -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:31 2026 by rpki-client