This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa File: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (raw, json) Hash identifier: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U= Subject key identifier: E6:71:48:2B:B9:11:B8:DD:C9:A0:1D:5E:10:EE:07:E3:F2:4D:42:4E Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B79ED1AF8318DC6458AABDBFA92952FA6 Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35184 IP address blocks: 46.21.128.0/20 maxlen: 24 87.240.64.0/18 maxlen: 24 2a03:6c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1a:f8:31:8d:c6:45:8a:ab:db:fa:92:95:2f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e671482bb911b8ddc9a01d5e10ee07e3f24d424e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:eb:24:ab:29:c2:a2:4c:71:14:be:00:50:08: 8b:ef:a4:82:15:19:ed:48:42:0a:2f:b7:17:c5:e7: 08:12:1b:4c:d0:9e:c5:1c:73:1f:83:e0:3c:c3:ed: 1b:8c:32:49:9d:22:7a:8f:e1:4c:fc:0f:f7:30:71: bf:d8:8d:88:cb:d1:07:12:dc:6e:52:a0:88:6b:04: 01:a9:60:96:42:48:2e:4c:3c:97:86:14:56:20:82: 40:99:d9:96:b3:ca:29:a9:77:8b:b5:e8:8a:f1:86: 55:27:b1:d9:00:12:dd:fd:6b:de:8c:4a:1a:99:1d: 1e:84:49:5a:f4:6a:3e:f7:cb:68:a9:69:4a:a3:24: d6:46:f5:e6:cb:d2:44:86:45:92:4b:62:9e:14:99: 3a:de:ec:31:d1:54:d0:b7:2b:fc:f6:fe:10:a4:b7: cb:10:ec:4e:1f:61:a6:25:bd:0a:47:04:57:8c:22: 48:60:d9:8f:e2:ab:68:b9:8c:f3:c0:4a:ae:1a:7f: 5d:00:59:d1:59:f2:c2:1b:6e:e9:9f:ee:c5:9b:72: dc:c8:c0:24:1d:f2:d6:49:f5:39:a5:96:73:62:2c: 33:9a:4b:1e:e5:cc:c1:f0:fe:ba:18:f3:63:4c:5e: 9e:f9:91:36:81:5d:9f:d3:fb:fe:52:91:16:26:71: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:71:48:2B:B9:11:B8:DD:C9:A0:1D:5E:10:EE:07:E3:F2:4D:42:4E X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.128.0/20 87.240.64.0/18 IPv6: 2a03:6c00::/32 Signature Algorithm: sha256WithRSAEncryption 43:0f:2a:c0:20:4b:aa:7c:0f:dd:5c:56:40:4c:34:4c:cc:63: 5d:84:a2:b4:f0:c3:ae:3e:be:86:8e:9b:6c:c1:bc:02:51:ba: 32:bf:18:59:03:a8:f6:af:21:5c:1d:47:59:a1:19:36:c0:80: 1b:a5:6f:f9:b7:cc:5c:77:85:29:a8:0f:ab:97:84:84:8a:c7: 9b:13:0b:c0:7b:fa:a6:0f:71:1f:ac:27:cd:ed:29:c6:1f:40: 8a:e7:1d:3c:0b:7f:b0:32:70:60:9b:0a:6f:d2:81:02:6d:66: 8a:4f:8e:cf:98:2c:0d:7f:d4:db:b7:fc:78:4f:1e:82:a3:54: d1:cb:ae:3a:84:5f:75:94:a3:ad:01:63:6f:e2:46:14:db:b8: eb:81:79:e1:af:93:24:14:77:4d:c9:9a:04:04:60:c6:28:63: 76:5e:01:e6:ef:e5:d8:02:d7:63:a0:50:81:df:07:aa:79:bf: 4c:ce:8b:99:26:3b:bd:90:d7:cd:15:2a:67:57:b8:99:58:b4: 65:4e:6f:27:ad:cc:f1:37:c6:cb:d2:9a:85:c7:a3:93:9c:89: bf:2c:06:e9:2a:bf:d6:9f:81:8c:36:0a:fa:84:f3:22:77:30: 22:56:44:60:44:5d:91:9c:b4:4e:de:83:7c:b8:b1:3d:2d:b5: fc:1e:0b:20 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Rr4MY3GRYqr2/qSlS+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjcxNDgyYmI5MTFiOGRkYzlhMDFkNWUxMGVlMDdlM2YyNGQ0MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eskqynCokxxFL4AUAiL76SCFRnt SEIKL7cXxecIEhtM0J7FHHMfg+A8w+0bjDJJnSJ6j+FM/A/3MHG/2I2Iy9EHEtxu UqCIawQBqWCWQkguTDyXhhRWIIJAmdmWs8opqXeLteiK8YZVJ7HZABLd/WvejEoa mR0ehEla9Go+98toqWlKoyTWRvXmy9JEhkWSS2KeFJk63uwx0VTQtyv89v4QpLfL EOxOH2GmJb0KRwRXjCJIYNmP4qtouYzzwEquGn9dAFnRWfLCG27pn+7Fm3LcyMAk HfLWSfU5pZZzYiwzmkse5czB8P66GPNjTF6e+ZE2gV2f0/v+UpEWJnGs0QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOZxSCu5EbjdyaAdXhDuB+PyTUJOMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvNW5GSUs3a1J1TjNKb0IxZUVPNEg0X0pOUWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQELhWAAwQG V/BAMA0EAgACMAcDBQAqA2wAMA0GCSqGSIb3DQEBCwUAA4IBAQBDDyrAIEuqfA/d XFZATDRMzGNdhKK08MOuPr6GjptswbwCUboyvxhZA6j2ryFcHUdZoRk2wIAbpW/5 t8xcd4UpqA+rl4SEisebEwvAe/qmD3EfrCfN7SnGH0CK5x08C3+wMnBgmwpv0oEC bWaKT47PmCwNf9Tbt/x4Tx6Co1TRy646hF91lKOtAWNv4kYU27jrgXnhr5MkFHdN yZoEBGDGKGN2XgHm7+XYAtdjoFCB3weqeb9MzouZJju9kNfNFSpnV7iZWLRlTm8n rczxN8bL0pqFx6OTnIm/LAbpKr/Wn4GMNgr6hPMidzAiVkRgRF2RnLRO3oN8uLE9 LbX8Hgsg -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:49 2026 by rpki-client