This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/5gvppHvivcscRmJkd_-Ax4ZpaIk.roa File: 5gvppHvivcscRmJkd_-Ax4ZpaIk.roa (raw, json) Hash identifier: Fv7SxnZFuKOYMVmrqeZiX9L2/02B+Ff1eXNebanWC4I= Subject key identifier: E6:0B:E9:A4:7B:E2:BD:CB:1C:46:62:64:77:FF:80:C7:86:69:68:89 Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6 Certificate serial: 019B7AC7E01E8C22EF43527CCD48364BA6FE Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/5gvppHvivcscRmJkd_-Ax4ZpaIk.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199275 IP address blocks: 2a00:6420::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e0:1e:8c:22:ef:43:52:7c:cd:48:36:4b:a6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6 Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e60be9a47be2bdcb1c46626477ff80c786696889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:29:d2:21:2c:cc:77:b1:7f:38:c9:fc:4b:79: 3d:02:80:60:9d:40:5d:da:05:64:e7:e1:c3:27:52: 4b:30:d7:11:dd:60:eb:a0:ee:52:9a:9b:1b:eb:8b: a8:e0:aa:e8:46:ba:69:d5:f2:10:5c:34:52:26:42: 9c:2c:92:e3:e4:0b:bd:e9:d1:fa:23:0d:67:c3:6a: ce:fd:7d:85:01:4b:6c:f9:de:98:f0:a5:2c:1c:35: 55:8d:ea:48:4f:e4:cd:12:32:52:e1:1a:03:18:c0: be:d3:e3:0c:5a:83:ef:2c:38:f3:75:4f:90:53:1c: 0b:91:cf:3d:b0:5b:d1:dc:b5:11:ea:92:de:5b:b5: 12:c9:86:91:3e:a5:56:2f:d0:8c:e8:f1:7a:f1:cf: f6:9a:34:6c:d2:7a:1b:33:04:84:d4:37:e0:42:b0: 63:68:c4:c0:c8:8e:e3:1b:4b:69:92:fe:59:28:d9: 5f:c1:2d:fd:f3:90:d8:55:50:0d:f2:89:da:e6:25: 30:21:14:75:f4:6f:db:2b:e2:56:00:66:0b:bc:a9: a2:58:40:1d:01:fd:2a:cd:9a:82:d4:a1:fb:71:a0: 54:7a:47:ed:e1:fc:51:45:96:88:fe:61:ce:10:ce: e5:0b:91:3d:23:de:b6:af:a8:f7:5e:dc:9f:21:ea: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:E9:A4:7B:E2:BD:CB:1C:46:62:64:77:FF:80:C7:86:69:68:89 X509v3 Authority Key Identifier: keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/5gvppHvivcscRmJkd_-Ax4ZpaIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:6420::/32 Signature Algorithm: sha256WithRSAEncryption 93:3f:e0:cc:87:1f:53:04:7e:69:6e:44:ca:34:d0:54:ea:4f: e8:67:c4:14:81:04:cd:7d:0d:cf:b0:58:c6:24:e4:57:05:93: d6:54:2f:96:b6:ea:0e:73:38:3f:50:48:b8:87:e6:39:c3:3a: 8d:75:e7:65:d5:6a:a7:f0:f6:1b:6e:c6:b2:d4:08:d3:5a:6d: eb:3d:6f:c0:11:5c:95:9d:f0:1e:ce:c2:9d:75:cf:56:82:4d: 7f:f5:07:a7:26:3d:c1:db:99:89:84:8a:8e:60:25:4f:20:0f: 68:c9:4d:0b:b2:4b:02:90:10:a3:3a:35:4f:51:d1:8e:f7:30: 85:37:40:ff:b2:12:17:3d:e3:42:08:aa:ea:d0:9c:47:ba:7d: f4:f2:db:b1:b8:eb:5e:cb:b6:04:52:dc:c7:f7:8f:c0:05:1d: 4d:83:8f:38:0f:d9:94:ef:b3:7d:e5:46:62:93:f8:71:24:5f: c9:84:28:a4:86:08:ac:f6:92:54:7a:67:a2:ca:8d:86:9a:b3: 42:ac:55:75:4c:ce:e9:7c:ff:62:2a:da:13:ac:ec:b6:7c:4b: 11:eb:ea:0a:60:44:1c:6d:ec:df:b6:c0:f4:18:36:05:5c:c9: 42:74:82:a8:96:0a:48:c7:7e:74:9b:f1:b6:36:ce:c2:ef:d1: 95:d1:66:ff -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x+AejCLvQ1J8zUg2S6b+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDJkMDc3NDg1YTE1ZThhMjU0YTQ5ZWRkOTk0ZDRmYzJh OTA4YTYwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjBiZTlhNDdiZTJiZGNiMWM0NjYyNjQ3N2ZmODBjNzg2Njk2ODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ynSISzMd7F/OMn8S3k9AoBgnUBd 2gVk5+HDJ1JLMNcR3WDroO5Smpsb64uo4KroRrpp1fIQXDRSJkKcLJLj5Au96dH6 Iw1nw2rO/X2FAUts+d6Y8KUsHDVVjepIT+TNEjJS4RoDGMC+0+MMWoPvLDjzdU+Q UxwLkc89sFvR3LUR6pLeW7USyYaRPqVWL9CM6PF68c/2mjRs0nobMwSE1DfgQrBj aMTAyI7jG0tpkv5ZKNlfwS3985DYVVAN8ona5iUwIRR19G/bK+JWAGYLvKmiWEAd Af0qzZqC1KH7caBUekft4fxRRZaI/mHOEM7lC5E9I962r6j3XtyfIep9EQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOYL6aR74r3LHEZiZHf/gMeGaWiJMB8GA1UdIwQY MBaAFM0C0HdIWhXoolSknt2ZTU/CqQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEt MzdlODBkYWI5MzAyLzEvNWd2cHBIdml2Y3NjUm1Ka2RfLUF4NFpwYUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEtMzdlODBkYWI5MzAy LzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgBkIDAN BgkqhkiG9w0BAQsFAAOCAQEAkz/gzIcfUwR+aW5EyjTQVOpP6GfEFIEEzX0Nz7BY xiTkVwWT1lQvlrbqDnM4P1BIuIfmOcM6jXXnZdVqp/D2G27GstQI01pt6z1vwBFc lZ3wHs7CnXXPVoJNf/UHpyY9wduZiYSKjmAlTyAPaMlNC7JLApAQozo1T1HRjvcw hTdA/7ISFz3jQgiq6tCcR7p99PLbsbjrXsu2BFLcx/ePwAUdTYOPOA/ZlO+zfeVG YpP4cSRfyYQopIYIrPaSVHpnosqNhpqzQqxVdUzO6Xz/YiraE6zstnxLEevqCmBE HG3s37bA9Bg2BVzJQnSCqJYKSMd+dJvxtjbOwu/RldFm/w== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:28 2026 by rpki-client