This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa File: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (raw, json) Hash identifier: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ= Subject key identifier: 23:FE:65:C7:33:16:C6:4E:40:A2:99:74:85:74:23:FD:62:A0:13:20 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DE8A7AEA587A0C628DF617B90107 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44331 IP address blocks: 2a14:6781:f100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:8a:7a:ea:58:7a:0c:62:8d:f6:17:b9:01:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23fe65c73316c64e40a29974857423fd62a01320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:b6:68:04:47:e9:a1:28:10:69:61:8f:37: 9a:0d:5f:44:d7:86:c5:37:24:86:49:5f:99:87:8b: d4:ff:a4:da:50:85:a0:a7:9e:d1:29:63:e9:b3:5c: 2c:c2:cc:72:31:67:9a:90:01:e9:89:91:59:a1:4f: cd:35:3b:0b:4b:aa:9c:5e:51:e5:3f:ed:0c:96:da: 7e:33:fb:1b:cf:7a:e3:00:35:04:44:19:44:2f:42: 51:39:a5:1f:99:85:3f:19:13:ce:50:ab:c9:8f:ea: 74:3e:cf:59:61:d5:05:8f:02:2e:74:59:75:fa:32: d5:fc:3f:a7:1f:78:66:1e:5a:5a:61:8e:ec:a9:57: d7:3e:62:2f:8e:68:bf:15:a0:a3:9d:8d:b3:0d:35: 4c:cf:b1:47:58:fa:50:16:30:d4:36:b2:b6:47:87: f6:c6:1b:0e:87:62:69:72:43:18:a1:7c:5d:f9:24: 7a:7d:35:00:a2:d5:1b:28:17:26:b7:3f:0e:29:d0: 81:80:d6:e0:1f:5e:e5:4c:39:29:8c:13:8d:93:3d: 02:11:81:47:6e:71:de:15:12:4f:e1:97:7d:24:47: b3:ec:e2:42:32:2e:ad:c7:5e:f9:d6:0f:f1:de:c7: 23:b3:0e:94:04:6f:6b:fe:ce:b6:0a:60:71:03:93: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FE:65:C7:33:16:C6:4E:40:A2:99:74:85:74:23:FD:62:A0:13:20 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6781:f100::/44 Signature Algorithm: sha256WithRSAEncryption 94:25:84:f7:14:8e:b0:d5:51:2e:83:01:c6:54:5c:42:90:a1: 7d:7b:23:78:89:f2:9f:6f:e0:20:a7:6a:3d:46:e1:c6:7b:22: d6:5f:f0:f1:34:17:a2:e8:f7:09:28:cd:a3:74:e2:f8:21:57: 6c:cc:37:f7:00:6e:a3:ec:93:2c:b2:e6:b9:23:d4:a6:0c:27: cf:8b:4d:7e:12:be:57:a6:00:15:5e:8e:d7:61:07:49:35:fe: 30:79:0e:78:8a:2d:b5:4c:aa:83:23:c5:fd:7c:52:a4:64:66: bd:11:8f:a2:53:b2:a6:2c:96:ca:6c:2d:79:f9:3f:5b:2e:57: bf:37:b1:58:cf:13:ba:56:a3:d2:64:aa:be:5c:83:30:b3:6b: 5a:d0:5e:53:60:71:87:a6:7a:6d:8f:01:0f:76:2c:6a:94:6b: 86:bb:2c:d4:92:79:a7:2b:95:13:29:e6:b0:64:64:ad:8f:08: 0b:e5:91:d8:8d:1b:c3:d4:55:6e:71:ab:d5:04:04:2f:4c:43: 64:be:1d:fe:e8:70:55:36:1f:db:d1:45:60:06:96:b0:62:e2: c4:4f:30:b8:be:6a:7f:77:8a:f4:c4:5c:4a:ee:b9:43:ec:c7: 2b:cb:00:39:a0:9d:c1:df:e3:bb:38:79:51:4e:30:6a:24:01: 0a:3d:59:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N96KeupYegxijfYXuQEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2ZlNjVjNzMzMTZjNjRlNDBhMjk5NzQ4NTc0MjNmZDYyYTAxMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+2aARH6aEoEGlhjzeaDV9E14bF NySGSV+Zh4vU/6TaUIWgp57RKWPps1wswsxyMWeakAHpiZFZoU/NNTsLS6qcXlHl P+0Mltp+M/sbz3rjADUERBlEL0JROaUfmYU/GRPOUKvJj+p0Ps9ZYdUFjwIudFl1 +jLV/D+nH3hmHlpaYY7sqVfXPmIvjmi/FaCjnY2zDTVMz7FHWPpQFjDUNrK2R4f2 xhsOh2JpckMYoXxd+SR6fTUAotUbKBcmtz8OKdCBgNbgH17lTDkpjBONkz0CEYFH bnHeFRJP4Zd9JEez7OJCMi6tx1751g/x3scjsw6UBG9r/s62CmBxA5OUVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCP+ZcczFsZOQKKZdIV0I/1ioBMgMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvSV81bHh6TVd4azVBb3BsMGhYUWpfV0tnRXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRngfEA MA0GCSqGSIb3DQEBCwUAA4IBAQCUJYT3FI6w1VEugwHGVFxCkKF9eyN4ifKfb+Ag p2o9RuHGeyLWX/DxNBei6PcJKM2jdOL4IVdszDf3AG6j7JMssua5I9SmDCfPi01+ Er5XpgAVXo7XYQdJNf4weQ54ii21TKqDI8X9fFKkZGa9EY+iU7KmLJbKbC15+T9b Lle/N7FYzxO6VqPSZKq+XIMws2ta0F5TYHGHpnptjwEPdixqlGuGuyzUknmnK5UT KeawZGStjwgL5ZHYjRvD1FVucavVBAQvTENkvh3+6HBVNh/b0UVgBpawYuLETzC4 vmp/d4r0xFxK7rlD7McrywA5oJ3B3+O7OHlRTjBqJAEKPVnq -----END CERTIFICATE-----Generated at Wed Jan 21 08:20:26 2026 by rpki-client