This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/5JXq104FYzVfyXXDzJAAFJW2oSU.roa File: 5JXq104FYzVfyXXDzJAAFJW2oSU.roa (raw, json) Hash identifier: QBSTq0ftAdHw8K8kTH1q6gST/SRrdjkonrYKEiBUX1g= Subject key identifier: E4:95:EA:D7:4E:05:63:35:5F:C9:75:C3:CC:90:00:14:95:B6:A1:25 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019BDCE4352D5949E0FF3D7D5B14849660C2 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/5JXq104FYzVfyXXDzJAAFJW2oSU.roa Signing time: Tue 20 Jan 2026 19:31:41 +0000 ROA not before: Tue 20 Jan 2026 19:31:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 2a01:ecc0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:e4:35:2d:59:49:e0:ff:3d:7d:5b:14:84:96:60:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 20 19:31:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e495ead74e0563355fc975c3cc90001495b6a125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:69:5a:c3:00:51:58:25:75:16:72:45:c9: b2:7a:aa:77:c3:ed:06:6b:06:a2:fb:ac:f2:63:a8: f0:be:5f:39:5e:a3:1b:96:8b:d5:3a:65:16:5f:61: 17:d1:41:16:4d:08:28:6d:0d:c3:ad:dd:fd:31:f4: 3e:2d:39:df:fe:3c:4c:51:0d:a7:40:89:45:85:9a: a9:12:18:ef:87:65:11:6c:67:92:42:ab:ee:d1:ad: d6:be:9f:31:d1:db:2c:ef:71:51:84:d5:2b:77:f9: 2b:09:89:20:60:29:45:fd:4d:ae:fe:ab:00:ef:09: a2:b4:b9:2a:13:02:1f:56:78:49:51:1c:81:f2:ad: fd:80:83:3f:30:cb:9f:93:da:98:30:9f:25:d2:f2: 1b:e0:43:31:ad:0d:07:7b:2d:28:ad:6d:11:18:1a: 42:ca:50:ff:39:98:a4:40:a1:2e:96:a6:84:c1:d5: 10:85:75:1f:43:9e:f2:f4:6d:a5:e8:41:cd:e0:c3: 2b:9a:d2:f2:ef:a7:74:4c:57:c1:a0:75:4d:d9:93: 93:d5:9d:c7:52:83:fa:5a:b9:ba:9f:47:37:2d:4e: 75:f4:70:72:72:e7:b2:cd:5f:bb:31:5f:56:47:60: fb:62:0f:36:7a:2b:d7:ef:61:16:d0:a6:52:85:f9: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:95:EA:D7:4E:05:63:35:5F:C9:75:C3:CC:90:00:14:95:B6:A1:25 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/5JXq104FYzVfyXXDzJAAFJW2oSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 7e:9f:9e:79:ba:7e:3e:43:6a:d3:83:b2:01:0b:72:48:0d:03: 58:8e:43:3c:0a:9c:dd:06:25:00:3c:bb:e9:c9:9e:f1:ba:06: 20:99:11:29:73:a7:07:97:d1:44:56:ec:43:f4:14:9f:2c:25: 03:1f:a5:38:63:8f:56:61:35:14:48:78:54:66:e2:3c:a9:02: b5:a4:d8:5e:45:8c:f6:f2:c2:d8:6b:a6:2a:89:5b:21:43:2c: 34:bf:e0:73:4c:26:6a:2a:6a:44:20:39:cd:df:89:cc:47:51: 99:8f:68:ed:10:69:94:de:b0:4c:d8:af:b7:db:51:ce:3d:f5: fb:f6:0c:51:a7:f3:6d:2b:e8:cc:33:8e:84:e3:8b:36:07:38: 2b:2e:e8:4d:61:f0:97:de:39:4d:2e:43:bd:ca:7c:ee:86:8e: c3:68:92:ad:29:93:9b:c4:a1:38:75:dc:73:93:e1:0c:c7:5c: 76:e0:da:c8:f9:4b:34:8f:86:ed:c8:36:cd:3d:39:20:c1:70: 4d:b6:af:7e:8a:a6:0d:49:d4:0e:37:13:cf:3b:42:0d:95:fb: f2:f2:cd:c9:66:10:53:68:5c:57:dd:2d:45:5d:6d:90:54:5f: 73:29:b9:7a:32:a3:13:6b:37:18:c9:55:25:55:35:9f:77:d6: 8f:a6:de:55 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvc5DUtWUng/z19WxSElmDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTIwMTkzMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDk1ZWFkNzRlMDU2MzM1NWZjOTc1YzNjYzkwMDAxNDk1YjZhMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfVpWsMAUVgldRZyRcmyeqp3w+0G awai+6zyY6jwvl85XqMblovVOmUWX2EX0UEWTQgobQ3Drd39MfQ+LTnf/jxMUQ2n QIlFhZqpEhjvh2URbGeSQqvu0a3Wvp8x0dss73FRhNUrd/krCYkgYClF/U2u/qsA 7wmitLkqEwIfVnhJURyB8q39gIM/MMufk9qYMJ8l0vIb4EMxrQ0Hey0orW0RGBpC ylD/OZikQKEulqaEwdUQhXUfQ57y9G2l6EHN4MMrmtLy76d0TFfBoHVN2ZOT1Z3H UoP6Wrm6n0c3LU519HBycueyzV+7MV9WR2D7Yg82eivX72EW0KZShfkLewIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOSV6tdOBWM1X8l1w8yQABSVtqElMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvNUpYcTEwNEZZelZmeVhYRHpKQUFGSlcyb1NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHswEAw DQYJKoZIhvcNAQELBQADggEBAH6fnnm6fj5DatODsgELckgNA1iOQzwKnN0GJQA8 u+nJnvG6BiCZESlzpweX0URW7EP0FJ8sJQMfpThjj1ZhNRRIeFRm4jypArWk2F5F jPbywthrpiqJWyFDLDS/4HNMJmoqakQgOc3ficxHUZmPaO0QaZTesEzYr7fbUc49 9fv2DFGn820r6MwzjoTjizYHOCsu6E1h8JfeOU0uQ73KfO6GjsNokq0pk5vEoTh1 3HOT4QzHXHbg2sj5SzSPhu3INs09OSDBcE22r36Kpg1J1A43E887Qg2V+/Lyzclm EFNoXFfdLUVdbZBUX3MpuXoyoxNrNxjJVSVVNZ931o+m3lU= -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:41 2026 by rpki-client