This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/f5qMZr_PTO9jDwiSeRoEGgfnm24.roa File: f5qMZr_PTO9jDwiSeRoEGgfnm24.roa (raw, json) Hash identifier: RNJP/Z0283N5dfahugv23oFqcULDKZfgB+e6c/H0xAE= Subject key identifier: 7F:9A:8C:66:BF:CF:4C:EF:63:0F:08:92:79:1A:04:1A:07:E7:9B:6E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D72E5CD4F0CFA9FDD6A454F379E02 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/f5qMZr_PTO9jDwiSeRoEGgfnm24.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214994 IP address blocks: 2a0e:97c0:260::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:72:e5:cd:4f:0c:fa:9f:dd:6a:45:4f:37:9e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f9a8c66bfcf4cef630f0892791a041a07e79b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:ba:39:3d:49:97:c1:a4:41:98:a7:39:66: 2c:7d:db:a4:2e:b6:29:f1:38:5b:f4:59:16:ed:a1: 9f:65:00:f9:69:98:d3:4c:a5:50:a1:d6:1d:ba:f8: 6c:e0:53:4a:56:7f:b3:8e:dc:ba:5c:27:69:af:66: 7f:b4:4b:ea:2f:d8:83:fc:23:e1:f7:fe:87:35:40: 2d:5b:4b:b1:dc:e8:e2:c9:64:84:a0:14:aa:a6:29: 86:35:74:3b:f5:e7:1d:28:b9:d1:35:1c:70:36:3f: e8:10:ea:84:81:ce:1d:d1:cc:ac:34:11:cd:fd:b8: 94:18:9b:16:02:5a:86:be:d9:49:d3:13:89:24:c3: f8:ae:22:74:68:ef:7c:f3:79:04:b7:22:b3:97:ed: 4b:e8:c7:6b:e8:45:20:fd:b2:fb:31:d5:0e:1f:73: ab:4e:30:bb:21:a9:bd:d9:a0:e3:0c:cf:76:8f:e4: 9a:38:65:9e:b2:ab:14:97:c2:b5:c3:58:92:38:0b: 92:05:10:bb:e2:33:fb:99:56:b5:e9:98:4b:5d:4d: 2b:a5:58:db:43:e8:c3:96:a6:0d:4d:95:3c:68:d5: 25:28:24:f4:d3:52:2a:88:b4:6f:e1:c0:44:9a:68: d7:b6:b4:24:1a:5f:fc:75:0e:3a:40:7b:ce:52:9b: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9A:8C:66:BF:CF:4C:EF:63:0F:08:92:79:1A:04:1A:07:E7:9B:6E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/f5qMZr_PTO9jDwiSeRoEGgfnm24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:260::/44 Signature Algorithm: sha256WithRSAEncryption 24:a1:3a:ee:7d:06:9d:fb:94:36:2b:ab:de:da:81:3d:ea:04: 7d:21:f9:c5:1a:ea:eb:60:c9:99:c0:c1:ee:d8:50:54:4a:9a: 0f:7e:a1:8d:95:9b:71:5a:da:af:46:a9:11:7b:e4:53:7f:a8: 81:9e:d1:09:d5:6e:45:10:09:b7:7a:5b:45:8c:08:54:ef:60: 5a:26:e0:9c:b7:9c:77:bf:01:61:05:7f:8e:13:d0:85:f4:f5: 85:17:11:a7:af:7c:72:c2:9b:02:97:91:1e:c9:72:f9:38:49: fb:9a:0c:56:5f:8c:91:63:46:a5:6e:aa:b0:c2:23:60:cc:f0: 1b:a7:53:04:43:67:3b:d8:95:fa:03:16:00:ef:1c:26:56:3e: db:4b:22:f9:de:7b:ca:56:bf:0e:42:b9:6b:b8:bf:84:85:52: e9:95:70:7b:3c:39:51:60:08:3b:00:55:32:28:02:49:90:3d: a3:40:41:a9:2d:3a:ff:80:48:1d:d4:b0:33:87:69:92:e4:ca: 85:09:a3:7a:cd:93:17:2f:26:ad:6d:06:04:29:9b:03:6f:e6: fd:8a:46:fc:93:0b:0b:12:06:53:fb:45:3f:e7:15:12:f1:bb: 6f:93:a9:f0:0e:c3:11:ae:14:1f:c3:45:96:01:19:aa:83:30: 62:f6:01:6f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXLlzU8M+p/dakVPN54CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjlhOGM2NmJmY2Y0Y2VmNjMwZjA4OTI3OTFhMDQxYTA3ZTc5YjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZa6OT1Jl8GkQZinOWYsfdukLrYp 8Thb9FkW7aGfZQD5aZjTTKVQodYduvhs4FNKVn+zjty6XCdpr2Z/tEvqL9iD/CPh 9/6HNUAtW0ux3OjiyWSEoBSqpimGNXQ79ecdKLnRNRxwNj/oEOqEgc4d0cysNBHN /biUGJsWAlqGvtlJ0xOJJMP4riJ0aO9883kEtyKzl+1L6Mdr6EUg/bL7MdUOH3Or TjC7Iam92aDjDM92j+SaOGWesqsUl8K1w1iSOAuSBRC74jP7mVa16ZhLXU0rpVjb Q+jDlqYNTZU8aNUlKCT001IqiLRv4cBEmmjXtrQkGl/8dQ46QHvOUpvr9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH+ajGa/z0zvYw8IknkaBBoH55tuMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZjVxTVpyX1BUTzlqRHdpU2VSb0VHZ2ZubTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAJg MA0GCSqGSIb3DQEBCwUAA4IBAQAkoTrufQad+5Q2K6ve2oE96gR9IfnFGurrYMmZ wMHu2FBUSpoPfqGNlZtxWtqvRqkRe+RTf6iBntEJ1W5FEAm3eltFjAhU72BaJuCc t5x3vwFhBX+OE9CF9PWFFxGnr3xywpsCl5EeyXL5OEn7mgxWX4yRY0albqqwwiNg zPAbp1MEQ2c72JX6AxYA7xwmVj7bSyL53nvKVr8OQrlruL+EhVLplXB7PDlRYAg7 AFUyKAJJkD2jQEGpLTr/gEgd1LAzh2mS5MqFCaN6zZMXLyatbQYEKZsDb+b9ikb8 kwsLEgZT+0U/5xUS8btvk6nwDsMRrhQfw0WWARmqgzBi9gFv -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:03 2026 by rpki-client