This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5pNWViUJ4r8dotUehrzo2hsOy0I.roa File: 5pNWViUJ4r8dotUehrzo2hsOy0I.roa (raw, json) Hash identifier: R7Zl1SxBJbAPOSqB8uK2/uSd+xvrioZxLzJvr++2mvU= Subject key identifier: E6:93:56:56:25:09:E2:BF:1D:A2:D5:1E:86:BC:E8:DA:1B:0E:CB:42 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA762F8B97F3D4387A2F1B94DE5B099 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5pNWViUJ4r8dotUehrzo2hsOy0I.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212024 IP address blocks: 2a06:e881:7700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:62:f8:b9:7f:3d:43:87:a2:f1:b9:4d:e5:b0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e69356562509e2bf1da2d51e86bce8da1b0ecb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:8e:2c:9c:78:7e:f0:b0:45:3b:d7:7d:e8: 0b:71:9d:69:2e:a4:06:8f:ce:cf:16:0e:91:be:0e: ef:09:a4:bd:02:c8:55:6a:bc:fc:be:40:a0:17:34: 9e:c2:2c:52:07:4e:7f:38:6b:fd:9f:d2:2f:2e:b2: 7e:b3:74:ce:2c:1e:9d:83:aa:01:91:66:b0:b4:46: 07:b9:4c:63:9c:3b:e3:b4:ef:14:b7:56:f5:b2:63: e6:f1:70:34:01:a5:25:ef:bd:ce:15:16:70:8f:13: 7b:6f:b6:f0:f4:5b:6f:06:94:82:72:2a:cd:aa:f0: 82:dc:88:3a:74:04:49:7d:b4:cc:7b:44:05:3a:6a: 6e:d6:c0:23:4a:b2:ec:3c:fc:cd:21:28:7c:ea:99: da:90:3a:09:cd:b7:60:49:ee:99:17:60:50:96:8b: 11:5e:91:e6:57:0c:e6:54:f2:40:67:e9:61:b7:4f: 54:94:66:34:94:13:d3:a9:6b:b7:5e:d6:a5:3d:88: 21:c2:ec:25:66:f7:79:6c:b0:f4:99:05:b6:ce:30: c8:5f:70:ca:7d:ec:3d:63:a7:e1:ec:50:36:20:70: ee:aa:e4:03:74:83:dd:94:d8:ce:c8:40:78:56:14: b3:31:c9:e7:53:42:cd:d0:d1:d2:f1:b8:65:d8:81: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:56:56:25:09:E2:BF:1D:A2:D5:1E:86:BC:E8:DA:1B:0E:CB:42 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5pNWViUJ4r8dotUehrzo2hsOy0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:7700::/40 Signature Algorithm: sha256WithRSAEncryption 90:34:ce:8e:df:75:1e:3d:aa:4e:86:0e:67:38:f6:b3:e8:0a: dd:e4:78:cb:78:c6:df:1e:ef:53:d6:04:4b:5f:7c:51:c4:c4: 69:25:33:75:f7:41:5e:4a:90:17:3c:06:30:da:63:7d:12:ff: 55:2d:80:40:55:0b:57:2c:0a:c1:f6:97:8c:c4:a6:ef:5e:e1: 8a:89:8a:38:5f:d7:00:74:26:12:d2:38:ce:77:85:bc:74:f5: 6d:77:8b:55:c2:0d:00:23:ae:2a:a7:a2:a8:22:87:42:77:76: 22:c2:b9:74:97:b9:88:6e:27:33:8f:12:eb:17:a4:b5:9d:8a: 00:92:6c:72:80:35:9f:73:47:11:c0:04:32:7b:d3:87:0c:18: b6:b0:21:b7:8a:b6:bc:35:2b:0d:f5:7a:33:b0:6d:70:77:f1: 50:3a:66:a6:32:0c:d9:cc:12:00:b2:d2:fa:ae:a3:79:05:7c: d0:6d:2d:1a:ce:54:49:3e:76:7c:73:ad:55:a3:26:c8:09:34: 7c:d6:bb:3f:64:3d:1c:a6:f0:2e:cf:6c:a6:29:8a:63:97:ac: de:0c:88:c0:f3:43:22:c6:29:50:84:67:75:e5:a2:97:73:d0: bb:25:fc:a2:b0:3e:69:1e:21:71:1d:b8:fd:97:87:4a:52:51: a9:9a:b4:3a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p2L4uX89Q4ei8blN5bCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjkzNTY1NjI1MDllMmJmMWRhMmQ1MWU4NmJjZThkYTFiMGVjYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMyOLJx4fvCwRTvXfegLcZ1pLqQG j87PFg6Rvg7vCaS9AshVarz8vkCgFzSewixSB05/OGv9n9IvLrJ+s3TOLB6dg6oB kWawtEYHuUxjnDvjtO8Ut1b1smPm8XA0AaUl773OFRZwjxN7b7bw9FtvBpSCcirN qvCC3Ig6dARJfbTMe0QFOmpu1sAjSrLsPPzNISh86pnakDoJzbdgSe6ZF2BQlosR XpHmVwzmVPJAZ+lht09UlGY0lBPTqWu3XtalPYghwuwlZvd5bLD0mQW2zjDIX3DK few9Y6fh7FA2IHDuquQDdIPdlNjOyEB4VhSzMcnnU0LN0NHS8bhl2IFoKwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOaTVlYlCeK/HaLVHoa86NobDstCMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvNXBOV1ZpVUo0cjhkb3RVZWhyem8yaHNPeTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogXcw DQYJKoZIhvcNAQELBQADggEBAJA0zo7fdR49qk6GDmc49rPoCt3keMt4xt8e71PW BEtffFHExGklM3X3QV5KkBc8BjDaY30S/1UtgEBVC1csCsH2l4zEpu9e4YqJijhf 1wB0JhLSOM53hbx09W13i1XCDQAjriqnoqgih0J3diLCuXSXuYhuJzOPEusXpLWd igCSbHKANZ9zRxHABDJ704cMGLawIbeKtrw1Kw31ejOwbXB38VA6ZqYyDNnMEgCy 0vquo3kFfNBtLRrOVEk+dnxzrVWjJsgJNHzWuz9kPRym8C7PbKYpimOXrN4MiMDz QyLGKVCEZ3Xlopdz0Lsl/KKwPmkeIXEduP2Xh0pSUamatDo= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client