This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5Ldbgo_3jDyuXW7wK9YRMMxuURg.roa File: 5Ldbgo_3jDyuXW7wK9YRMMxuURg.roa (raw, json) Hash identifier: ieZqO9dXaxk4Mn3FOdO3enFMJP+ZIj606rFfgXOBGrM= Subject key identifier: E4:B7:5B:82:8F:F7:8C:3C:AE:5D:6E:F0:2B:D6:11:30:CC:6E:51:18 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAF56FDE9D4D7DBE921CE221DC076 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5Ldbgo_3jDyuXW7wK9YRMMxuURg.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208698 IP address blocks: 2a0e:aa07:f0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:af:56:fd:e9:d4:d7:db:e9:21:ce:22:1d:c0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4b75b828ff78c3cae5d6ef02bd61130cc6e5118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:81:a4:cc:84:4f:df:d0:6f:7c:44:71:5f: fc:c3:a4:cf:39:97:30:98:08:31:a5:29:8f:9f:c4: 8d:fd:18:68:f9:7a:0a:32:2e:87:67:f6:a2:be:dc: e6:60:4e:bd:cb:f2:1c:19:10:20:ba:d4:60:d2:13: a7:85:d4:48:cd:40:f5:43:c4:c9:f6:b7:ae:11:30: fe:26:06:b3:69:cf:47:91:76:9a:c9:cd:2f:63:3a: 68:e0:5f:8c:f4:23:5c:ef:ad:26:e4:f0:ba:38:25: eb:b2:de:80:46:ff:0c:d4:9b:4f:5a:62:94:73:29: d6:63:98:85:09:b7:62:26:20:ca:81:f2:7c:45:21: 2c:a5:cd:bf:0f:0a:c8:4a:78:c8:3f:bc:9f:05:c8: 8c:ec:a5:41:1e:2b:7b:fa:69:f9:3a:80:78:9d:71: 85:ab:f8:d9:87:8d:c7:46:a0:5c:21:a1:e5:eb:84: e0:c1:98:cb:cc:ba:25:be:20:66:4c:01:a5:0b:94: 5b:1f:c5:e5:56:b2:3f:a6:63:53:e6:49:0d:60:40: c3:c0:19:0e:b5:11:6d:b2:a4:b3:3e:13:ef:ac:81: b5:4c:6e:25:92:6a:d1:a4:63:e6:8e:c5:fa:45:02: 4e:b1:07:75:a7:90:41:ce:7c:87:29:06:d9:fe:58: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B7:5B:82:8F:F7:8C:3C:AE:5D:6E:F0:2B:D6:11:30:CC:6E:51:18 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5Ldbgo_3jDyuXW7wK9YRMMxuURg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:f0d0::/44 Signature Algorithm: sha256WithRSAEncryption 69:60:8c:3f:9c:c6:7d:74:58:e4:50:d1:d2:02:1b:d3:f7:a3: 2a:43:f3:1d:20:a0:2a:05:1f:42:f9:e8:fd:00:db:1c:4b:18: e1:42:74:74:be:4a:93:65:f0:0c:e2:b6:da:fd:bd:22:f3:c5: cd:5a:3c:0d:f3:91:92:01:1c:d7:eb:01:d0:59:1c:57:47:11: 99:ca:d0:79:42:19:66:07:cf:e9:35:10:38:79:70:42:66:55: 5b:70:d8:af:9c:9e:2e:f7:a5:c8:10:a6:4c:7c:49:28:0a:34: 0d:ce:18:3b:44:e3:63:d9:ee:e3:37:88:7b:9a:bd:df:52:9a: 86:f6:58:c3:62:ec:87:8b:bc:5e:98:13:f2:65:51:53:b7:35: a7:30:cf:ac:bc:a5:33:ab:10:d9:85:e0:6f:27:d1:44:c8:92: 62:d2:6b:ca:7e:47:c2:8f:04:c7:93:a5:82:e2:74:6a:a0:a4: e8:fa:be:9a:77:0a:03:08:ec:4c:13:7d:c3:7b:32:52:48:71: 92:53:8e:5e:fe:66:07:c7:c2:d5:3a:14:2d:80:d7:46:fb:4e: 3f:ce:a7:c3:ca:0a:2f:15:0c:c6:fe:26:60:ac:67:77:c1:7d: b4:79:e1:8c:f1:2c:8f:47:d0:58:bb:74:c6:4b:3e:55:93:7a: 68:ea:6e:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fq9W/enU19vpIc4iHcB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGI3NWI4MjhmZjc4YzNjYWU1ZDZlZjAyYmQ2MTEzMGNjNmU1MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPCBpMyET9/Qb3xEcV/8w6TPOZcw mAgxpSmPn8SN/Rho+XoKMi6HZ/aivtzmYE69y/IcGRAgutRg0hOnhdRIzUD1Q8TJ 9reuETD+Jgazac9HkXaayc0vYzpo4F+M9CNc760m5PC6OCXrst6ARv8M1JtPWmKU cynWY5iFCbdiJiDKgfJ8RSEspc2/DwrISnjIP7yfBciM7KVBHit7+mn5OoB4nXGF q/jZh43HRqBcIaHl64TgwZjLzLolviBmTAGlC5RbH8XlVrI/pmNT5kkNYEDDwBkO tRFtsqSzPhPvrIG1TG4lkmrRpGPmjsX6RQJOsQd1p5BBznyHKQbZ/ljdOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOS3W4KP94w8rl1u8CvWETDMblEYMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvNUxkYmdvXzNqRHl1WFc3d0s5WVJNTXh1VVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB/DQ MA0GCSqGSIb3DQEBCwUAA4IBAQBpYIw/nMZ9dFjkUNHSAhvT96MqQ/MdIKAqBR9C +ej9ANscSxjhQnR0vkqTZfAM4rba/b0i88XNWjwN85GSARzX6wHQWRxXRxGZytB5 QhlmB8/pNRA4eXBCZlVbcNivnJ4u96XIEKZMfEkoCjQNzhg7RONj2e7jN4h7mr3f UpqG9ljDYuyHi7xemBPyZVFTtzWnMM+svKUzqxDZheBvJ9FEyJJi0mvKfkfCjwTH k6WC4nRqoKTo+r6adwoDCOxME33DezJSSHGSU45e/mYHx8LVOhQtgNdG+04/zqfD ygovFQzG/iZgrGd3wX20eeGM8SyPR9BYu3TGSz5Vk3po6m6G -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:58 2026 by rpki-client