This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/5x6UPD5taDgKQlJm7HkMlrw0h5w.roa File: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (raw, json) Hash identifier: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk= Subject key identifier: E7:1E:94:3C:3E:6D:68:38:0A:42:52:66:EC:79:0C:96:BC:34:87:9C Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278 Certificate serial: 019B7DCAF634F501A1336A0133B667038C62 Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/5x6UPD5taDgKQlJm7HkMlrw0h5w.roa Signing time: Fri 02 Jan 2026 08:20:11 +0000 ROA not before: Fri 02 Jan 2026 08:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214345 IP address blocks: 212.6.49.0/24 maxlen: 24 2001:3a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f6:34:f5:01:a1:33:6a:01:33:b6:67:03:8c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f38049be801a136e387abc14498e486044d96278 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e71e943c3e6d68380a425266ec790c96bc34879c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:d7:fe:e4:eb:77:a1:6e:8d:0a:57:b1:3d: 97:2e:4e:3d:33:99:7f:b8:3d:e6:bd:b6:05:9d:dd: 6f:da:1d:23:3b:14:bf:3c:b8:ca:13:d8:86:2b:ea: c7:e8:99:d3:04:35:f4:23:6a:5a:3c:7c:8f:64:fb: 1d:19:a5:73:98:36:52:ef:c8:14:5d:18:2e:57:64: b0:d6:d7:2e:4c:38:48:ea:e9:2c:36:44:ac:02:39: cf:34:22:bb:e6:d0:3c:a9:df:74:43:45:99:95:54: f8:0c:2c:c5:7f:34:83:01:2f:e7:2e:6d:cb:b0:7c: 23:a3:85:07:24:2b:70:13:28:08:0b:e7:04:97:96: 0c:02:3e:0a:65:57:b4:e7:32:54:2b:2c:0c:81:c5: b8:05:60:83:2e:ed:0e:9b:f5:da:83:f4:1d:4b:90: 89:96:9a:fe:9d:b1:e4:a0:78:50:e1:33:dc:a3:d2: 4d:9f:14:7c:8e:f2:3e:3f:76:74:0a:e8:81:e7:3c: 7d:e1:c8:96:6e:e1:dc:5a:75:b5:a1:a8:0e:e1:34: 3f:c5:33:5e:c9:98:65:25:44:aa:5d:51:a0:3c:fc: bc:27:60:93:ed:da:6a:6d:c9:9c:ec:c1:61:2e:3e: 68:f9:ea:6d:cb:6d:15:0e:01:63:a3:e6:17:fe:0e: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1E:94:3C:3E:6D:68:38:0A:42:52:66:EC:79:0C:96:BC:34:87:9C X509v3 Authority Key Identifier: keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/5x6UPD5taDgKQlJm7HkMlrw0h5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.49.0/24 IPv6: 2001:3a80::/29 Signature Algorithm: sha256WithRSAEncryption 16:28:de:78:dc:fe:18:b1:09:64:d3:6e:9f:6e:b7:4e:a9:08: ce:44:2c:44:7e:c0:a1:3d:1b:fc:71:69:dc:25:b3:a3:23:77: e4:ed:03:f1:e7:13:e6:d7:5d:30:7c:54:74:63:f6:de:44:ce: bf:4f:77:78:84:48:3b:9e:78:2f:d3:30:6a:62:39:fc:fa:41: 60:d5:7b:a3:16:22:35:de:87:fc:a8:2c:41:a0:f2:c0:e6:b8: e5:5b:52:de:7e:ec:36:57:dd:77:af:64:85:dd:ec:0b:55:8c: 4a:a5:bf:9b:c1:06:0d:23:60:be:64:fc:3a:84:1c:0e:97:29: ac:ad:d6:fe:a0:13:51:a4:4f:3e:38:2a:79:d7:f9:30:54:b5: fd:f3:4c:5f:1f:78:c0:4c:fe:26:71:d7:5f:88:b3:75:e7:3b: 80:22:a7:59:b7:6a:a4:d2:76:e8:58:99:e9:17:7e:9e:aa:5b: 2b:c1:86:3d:57:d7:da:81:00:3b:98:29:df:bf:d8:17:e4:fd: 6a:23:73:dc:b0:5f:d1:2b:79:05:8b:9e:e5:93:7e:d9:5b:dd: eb:c6:df:3e:39:05:d0:80:0a:89:0b:06:00:96:b9:27:ff:27: df:d9:6a:ea:97:30:7f:ba:dc:67:e2:02:d6:4c:f6:94:b0:e0: 01:49:fb:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yvY09QGhM2oBM7ZnA4xiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk OTYyNzgwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzFlOTQzYzNlNmQ2ODM4MGE0MjUyNjZlYzc5MGM5NmJjMzQ4NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVzX/uTrd6FujQpXsT2XLk49M5l/ uD3mvbYFnd1v2h0jOxS/PLjKE9iGK+rH6JnTBDX0I2paPHyPZPsdGaVzmDZS78gU XRguV2Sw1tcuTDhI6uksNkSsAjnPNCK75tA8qd90Q0WZlVT4DCzFfzSDAS/nLm3L sHwjo4UHJCtwEygIC+cEl5YMAj4KZVe05zJUKywMgcW4BWCDLu0Om/Xag/QdS5CJ lpr+nbHkoHhQ4TPco9JNnxR8jvI+P3Z0CuiB5zx94ciWbuHcWnW1oagO4TQ/xTNe yZhlJUSqXVGgPPy8J2CT7dpqbcmc7MFhLj5o+epty20VDgFjo+YX/g6/wQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOcelDw+bWg4CkJSZux5DJa8NIecMB8GA1UdIwQY MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt MjhmNGRhZDM3OGZjLzEvNXg2VVBENXRhRGdLUWxKbTdIa01scncwaDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1AYxMA0E AgACMAcDBQMgATqAMA0GCSqGSIb3DQEBCwUAA4IBAQAWKN543P4YsQlk026fbrdO qQjORCxEfsChPRv8cWncJbOjI3fk7QPx5xPm110wfFR0Y/beRM6/T3d4hEg7nngv 0zBqYjn8+kFg1XujFiI13of8qCxBoPLA5rjlW1Lefuw2V913r2SF3ewLVYxKpb+b wQYNI2C+ZPw6hBwOlymsrdb+oBNRpE8+OCp51/kwVLX980xfH3jATP4mcddfiLN1 5zuAIqdZt2qk0nboWJnpF36eqlsrwYY9V9fagQA7mCnfv9gX5P1qI3PcsF/RK3kF i57lk37ZW93rxt8+OQXQgAqJCwYAlrkn/yff2WrqlzB/utxn4gLWTPaUsOABSfsm -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:03 2026 by rpki-client