This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/l5fPc2ALFT3-2kjVAUZl4teC5ik.roa File: l5fPc2ALFT3-2kjVAUZl4teC5ik.roa (raw, json) Hash identifier: swDDsVuAlL7327UoIB9iLG7+MJxMzOEHFaA+feCNcbE= Subject key identifier: 97:97:CF:73:60:0B:15:3D:FE:DA:48:D5:01:46:65:E2:D7:82:E6:29 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB8344C61CA884DF8437D4F82C6C1 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/l5fPc2ALFT3-2kjVAUZl4teC5ik.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211968 IP address blocks: 2a0e:aa07:e01a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b8:34:4c:61:ca:88:4d:f8:43:7d:4f:82:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9797cf73600b153dfeda48d5014665e2d782e629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:4d:86:7e:66:53:a6:89:4d:80:87:ce:9d: 8b:27:30:de:c0:f5:19:fc:1d:45:25:f3:97:9b:3f: e4:af:ff:91:82:fd:eb:84:5c:a1:83:1b:d1:d4:4a: bf:f2:c3:09:9c:a1:d8:95:49:7b:18:a6:11:38:7a: b2:f3:09:bb:52:40:85:9e:81:d5:56:24:07:fb:b2: 51:4c:25:a7:02:58:ae:a8:79:b7:3a:e4:be:cb:ff: 53:e4:f0:84:44:45:81:d0:6d:5c:a7:4c:2f:34:89: 90:e0:07:1c:b9:9b:54:20:b7:03:9f:cd:23:40:46: 93:c4:34:3a:47:fe:ca:49:b6:2a:f9:40:c8:59:6c: 77:49:98:0b:c0:29:b3:c5:82:cf:19:a4:0f:02:bf: 10:f9:63:d4:6d:00:2f:65:f0:31:95:20:95:fd:7b: a2:da:d9:b9:7c:5c:01:8b:72:bc:33:ab:f9:57:38: 90:a7:78:38:f7:9f:d2:9d:1c:88:9c:22:d5:22:cf: 66:4b:f8:34:7d:e1:fc:4a:f2:b7:07:a5:f6:61:7a: 40:02:6b:b6:36:db:d4:75:2c:4e:9e:a7:e6:61:3b: 41:c3:62:cf:9e:c7:c6:91:f7:9c:f1:6b:b5:3b:5e: 87:b7:11:bc:00:9d:9d:cb:43:b6:77:fe:b4:13:5a: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:97:CF:73:60:0B:15:3D:FE:DA:48:D5:01:46:65:E2:D7:82:E6:29 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/l5fPc2ALFT3-2kjVAUZl4teC5ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e01a::/48 Signature Algorithm: sha256WithRSAEncryption 89:2e:1a:cc:2a:76:e8:65:90:54:3f:45:6a:01:2f:ef:55:b3: 40:f0:03:6e:85:3f:92:79:21:80:eb:e5:dd:6d:60:f1:55:df: 40:12:d1:e6:9b:c5:1a:a1:71:59:c4:d2:26:9c:7c:c5:c5:e1: db:e9:82:37:37:9c:50:33:ad:cd:af:5e:5f:f9:fd:7d:92:31: 4b:74:c3:8b:f7:7a:67:35:a5:f3:5e:31:3b:2d:04:00:30:e7: 55:84:53:dd:64:cb:b6:7b:89:5f:ac:0f:50:b6:5e:30:bd:e8: 44:a0:3b:38:c0:a2:01:c9:6c:3c:b6:9e:04:e5:4f:2b:8b:ec: 63:55:9e:5a:0a:fc:9f:d8:9a:e6:51:17:eb:75:f0:63:b0:63: db:32:22:12:7c:9c:82:62:86:22:83:89:92:13:41:9b:91:5d: 57:fe:50:05:3f:e7:8d:d5:53:72:ae:ba:13:ab:43:c5:29:52: 12:bb:72:b7:fb:13:08:1a:a6:5c:df:db:b0:a6:2f:a4:f9:f1: eb:78:4d:b3:cc:ec:15:a2:ed:09:59:0c:24:ae:f7:74:9f:bb: ca:27:5d:ac:99:6c:3c:12:4e:bf:91:a8:52:8f:b9:bc:9e:c0: d6:08:1f:f1:99:0e:c6:fb:b5:99:03:03:98:f6:44:69:f0:ad: 4d:19:23:5f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frg0TGHKiE34Q31PgsbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzk3Y2Y3MzYwMGIxNTNkZmVkYTQ4ZDUwMTQ2NjVlMmQ3ODJlNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbBNhn5mU6aJTYCHzp2LJzDewPUZ /B1FJfOXmz/kr/+Rgv3rhFyhgxvR1Eq/8sMJnKHYlUl7GKYROHqy8wm7UkCFnoHV ViQH+7JRTCWnAliuqHm3OuS+y/9T5PCEREWB0G1cp0wvNImQ4AccuZtUILcDn80j QEaTxDQ6R/7KSbYq+UDIWWx3SZgLwCmzxYLPGaQPAr8Q+WPUbQAvZfAxlSCV/Xui 2tm5fFwBi3K8M6v5VziQp3g495/SnRyInCLVIs9mS/g0feH8SvK3B6X2YXpAAmu2 NtvUdSxOnqfmYTtBw2LPnsfGkfec8Wu1O16HtxG8AJ2dy0O2d/60E1qk+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJeXz3NgCxU9/tpI1QFGZeLXguYpMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvbDVmUGMyQUxGVDMtMmtqVkFVWmw0dGVDNWlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Aa MA0GCSqGSIb3DQEBCwUAA4IBAQCJLhrMKnboZZBUP0VqAS/vVbNA8ANuhT+SeSGA 6+XdbWDxVd9AEtHmm8UaoXFZxNImnHzFxeHb6YI3N5xQM63Nr15f+f19kjFLdMOL 93pnNaXzXjE7LQQAMOdVhFPdZMu2e4lfrA9Qtl4wvehEoDs4wKIByWw8tp4E5U8r i+xjVZ5aCvyf2JrmURfrdfBjsGPbMiISfJyCYoYig4mSE0GbkV1X/lAFP+eN1VNy rroTq0PFKVISu3K3+xMIGqZc39uwpi+k+fHreE2zzOwVou0JWQwkrvd0n7vKJ12s mWw8Ek6/kahSj7m8nsDWCB/xmQ7G+7WZAwOY9kRp8K1NGSNf -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client