This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/2_5Pizr_dey_wsN1BXCTRJH3EG0.roa File: 2_5Pizr_dey_wsN1BXCTRJH3EG0.roa (raw, json) Hash identifier: j9IlFbOau5bJeR6L12OLqIg9qpTzlR19TGig6zEhDF4= Subject key identifier: DB:FE:4F:8B:3A:FF:75:EC:BF:C2:C3:75:05:70:93:44:91:F7:10:6D Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CE79ECC6BB2D46B35BEAD36283D8 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/2_5Pizr_dey_wsN1BXCTRJH3EG0.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213880 IP address blocks: 2a01:e281:b200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ce:79:ec:c6:bb:2d:46:b3:5b:ea:d3:62:83:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbfe4f8b3aff75ecbfc2c3750570934491f7106d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:af:4f:a0:bf:18:ab:d7:c2:54:bb:6e:f1: 12:a8:ab:92:4d:f4:10:7d:97:b7:cb:ab:82:72:d4: 5b:07:e1:91:86:dc:1b:7e:f5:4c:16:30:45:3c:b3: 1b:ec:f9:10:59:71:6e:fe:6d:d8:25:3b:71:34:03: 5e:08:9a:37:8d:26:da:51:78:6f:d2:f0:96:6b:ff: d3:01:6d:cf:53:d7:81:34:6e:9a:5f:c4:54:c5:75: 1a:7c:51:0a:ee:1c:2e:5e:71:56:18:97:71:b7:d9: 84:0b:9c:91:30:ef:43:cc:c7:f2:94:16:e6:f5:e1: 9b:d7:28:a2:c3:ab:ba:45:6f:13:a6:cd:ae:4d:27: 14:55:3c:32:36:53:88:ca:07:c2:49:99:c2:db:02: 51:e0:6b:1f:d0:d2:25:15:0d:3f:0f:db:25:f7:0c: f4:e3:0d:c8:72:dc:24:31:b3:e0:36:90:b5:90:78: 85:65:8b:c3:55:f0:d5:19:34:00:c6:a9:0f:b6:06: 3c:5a:96:e6:89:fa:cc:4c:2f:7c:ab:b8:f4:8c:99: 51:58:35:a7:ed:9b:52:1d:5b:08:72:3e:04:de:0d: fb:b5:5e:4c:c5:85:a8:c9:69:a6:38:f1:1a:cc:12: 94:03:3b:24:03:32:7c:93:72:6b:8f:eb:a8:bc:e5: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FE:4F:8B:3A:FF:75:EC:BF:C2:C3:75:05:70:93:44:91:F7:10:6D X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/2_5Pizr_dey_wsN1BXCTRJH3EG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:b200::/40 Signature Algorithm: sha256WithRSAEncryption 34:81:58:1f:01:10:87:d5:37:1d:c3:ce:bd:21:3c:5d:aa:04: a7:96:7e:bc:ab:6a:eb:e6:95:33:20:18:0b:7c:07:0f:81:c4: 10:14:0e:82:69:ad:6e:1e:18:fd:2a:71:ec:9f:8e:7f:3b:da: 98:d8:e5:1e:bb:90:f9:c2:10:09:3e:93:df:97:fd:12:ac:b3: ab:d5:67:1c:19:7c:83:c8:65:73:84:9e:51:1b:5d:c7:1f:fa: eb:38:77:2d:8c:23:b1:62:24:bc:0b:eb:0c:49:86:5f:b8:a9: 32:b5:8b:b7:6d:ee:58:b4:a3:63:e1:73:29:bf:00:d9:c0:5e: 8f:0a:1b:03:53:a6:c8:34:08:8a:87:f8:49:a4:8a:46:98:82: c9:d0:77:c0:60:d2:51:1a:08:9d:3e:e3:9b:e7:83:8b:fd:41: 30:0f:d3:b4:80:6c:0b:a2:74:94:e8:bd:4b:b0:71:e5:1e:f8: 23:00:0b:a3:e3:dd:21:a9:a1:f3:ff:77:cd:c7:c3:cf:e6:be: c4:d7:e9:1f:ce:cc:40:7c:6a:a4:14:b4:2a:d2:fa:a1:73:4a: 43:83:4f:35:2e:a1:cd:b9:be:b8:99:62:02:77:21:b0:2d:9a: c6:43:a4:29:f9:c4:ca:28:e6:0b:59:3e:e7:df:6e:3d:40:56: 65:f5:78:3c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ps557Ma7LUazW+rTYoPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmZlNGY4YjNhZmY3NWVjYmZjMmMzNzUwNTcwOTM0NDkxZjcxMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAWvT6C/GKvXwlS7bvESqKuSTfQQ fZe3y6uCctRbB+GRhtwbfvVMFjBFPLMb7PkQWXFu/m3YJTtxNANeCJo3jSbaUXhv 0vCWa//TAW3PU9eBNG6aX8RUxXUafFEK7hwuXnFWGJdxt9mEC5yRMO9DzMfylBbm 9eGb1yiiw6u6RW8Tps2uTScUVTwyNlOIygfCSZnC2wJR4Gsf0NIlFQ0/D9sl9wz0 4w3IctwkMbPgNpC1kHiFZYvDVfDVGTQAxqkPtgY8WpbmifrMTC98q7j0jJlRWDWn 7ZtSHVsIcj4E3g37tV5MxYWoyWmmOPEazBKUAzskAzJ8k3Jrj+uovOWKJQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNv+T4s6/3Xsv8LDdQVwk0SR9xBtMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvMl81UGl6cl9kZXlfd3NOMUJYQ1RSSkgzRUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigbIw DQYJKoZIhvcNAQELBQADggEBADSBWB8BEIfVNx3Dzr0hPF2qBKeWfryrauvmlTMg GAt8Bw+BxBAUDoJprW4eGP0qceyfjn872pjY5R67kPnCEAk+k9+X/RKss6vVZxwZ fIPIZXOEnlEbXccf+us4dy2MI7FiJLwL6wxJhl+4qTK1i7dt7li0o2Phcym/ANnA Xo8KGwNTpsg0CIqH+EmkikaYgsnQd8Bg0lEaCJ0+45vng4v9QTAP07SAbAuidJTo vUuwceUe+CMAC6Pj3SGpofP/d83Hw8/mvsTX6R/OzEB8aqQUtCrS+qFzSkODTzUu oc25vriZYgJ3IbAtmsZDpCn5xMoo5gtZPuffbj1AVmX1eDw= -----END CERTIFICATE-----Generated at Mon Jan 26 14:16:43 2026 by rpki-client