This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/5ejH3yejqFEyn6aqh86TLRcJtvk.roa File: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (raw, json) Hash identifier: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc= Subject key identifier: E5:E8:C7:DF:27:A3:A8:51:32:9F:A6:AA:87:CE:93:2D:17:09:B6:F9 Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Certificate serial: 019B7D5BCA08BC144FC990919686D65A25EA Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/5ejH3yejqFEyn6aqh86TLRcJtvk.roa Signing time: Fri 02 Jan 2026 06:18:46 +0000 ROA not before: Fri 02 Jan 2026 06:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214262 IP address blocks: 2001:67c:f08::/48 maxlen: 48 2001:67c:f0c::/48 maxlen: 48 2001:67c:f10::/48 maxlen: 48 2001:67c:2c28::/48 maxlen: 48 2001:67c:2fc8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ca:08:bc:14:4f:c9:90:91:96:86:d6:5a:25:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Validity Not Before: Jan 2 06:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5e8c7df27a3a851329fa6aa87ce932d1709b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:19:fe:83:4b:c4:73:2e:99:f9:20:97:cf: 13:49:7f:0e:5e:51:ec:88:ef:eb:6a:88:77:2d:35: 19:84:5d:d0:a7:ca:b9:c4:a0:6a:2d:c8:7f:8a:8b: 5f:44:c4:74:7a:cc:0f:64:b6:67:e4:a6:0a:26:2b: 96:b4:d9:cd:fb:30:01:fc:62:e3:15:2d:51:95:d0: 17:8c:c6:71:04:5c:78:6a:d7:19:38:44:3a:4f:ed: 09:c3:17:6f:5c:0a:06:0f:54:7a:76:c3:2c:21:86: c9:df:95:68:a5:53:ab:1b:e2:79:e9:99:67:16:ba: 5b:91:f8:b2:cc:82:d6:c4:25:b8:2c:ef:95:38:fb: 91:aa:9a:e8:9d:42:22:20:12:05:b5:23:c1:34:a1: 5d:5d:36:2d:ae:ff:52:44:6d:bd:68:c9:64:fb:9e: 6a:46:6c:d4:7a:cd:f2:94:b1:d8:0b:af:27:d0:88: 2a:3f:12:fc:7d:45:e3:35:95:eb:c3:50:f6:7b:97: 79:ea:4c:b0:7a:e5:bf:d1:f6:8f:47:6c:fb:01:9e: fa:ed:be:80:c2:16:d7:9a:a4:3c:ec:f7:17:a0:c7: f0:34:af:76:f4:bf:4b:48:84:8a:bd:8d:42:d3:5b: ac:40:e2:6a:47:31:d0:3b:5b:85:5c:3c:65:f7:4d: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:C7:DF:27:A3:A8:51:32:9F:A6:AA:87:CE:93:2D:17:09:B6:F9 X509v3 Authority Key Identifier: keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/5ejH3yejqFEyn6aqh86TLRcJtvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f08::/48 2001:67c:f0c::/48 2001:67c:f10::/48 2001:67c:2c28::/48 2001:67c:2fc8::/48 Signature Algorithm: sha256WithRSAEncryption 5e:36:41:63:71:7d:35:68:0c:23:f4:7a:f9:77:78:1d:1c:20: 55:9c:f6:b1:ed:db:78:a7:7a:1b:d5:06:32:a1:e2:c3:45:7a: 21:0a:26:b1:75:d3:75:4e:47:51:fd:ea:d4:79:13:b3:cd:76: 2b:a5:f9:4d:d6:01:3e:a3:49:84:90:5b:ae:ba:52:b3:2a:be: 53:97:a0:53:2a:f6:37:20:50:ea:fe:88:e6:af:52:24:c9:d2: 5b:37:c1:92:4b:54:be:0b:6a:ba:14:c6:67:a3:6b:9a:b8:c5: e3:f8:7f:e7:83:44:f1:dd:bf:0c:42:05:e9:4b:aa:41:ab:c6: a2:f2:d4:c0:71:2c:bc:f4:70:1f:24:69:b9:26:40:2f:6e:51: da:c2:fb:23:92:50:bd:0d:ae:eb:34:e8:74:97:95:93:27:81: 1f:93:93:c6:4e:ab:5e:e0:0e:3d:c8:4f:22:d0:e6:6b:7d:7d: bc:73:34:98:9f:e9:90:de:84:96:5b:f7:fd:ce:88:f0:d0:a8: b4:80:73:55:f1:cb:da:9e:03:94:ab:5f:b7:44:ef:58:8c:5a: 57:69:db:da:ee:27:ad:4f:a5:29:8f:de:b3:12:07:ba:be:c1: db:44:fe:46:52:e6:0e:58:2a:57:81:98:ed:01:13:72:81:80: 9f:f1:98:47 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9W8oIvBRPyZCRlobWWiXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj MDIyMzkwHhcNMjYwMTAyMDYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWU4YzdkZjI3YTNhODUxMzI5ZmE2YWE4N2NlOTMyZDE3MDliNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgAZ/oNLxHMumfkgl88TSX8OXlHs iO/raoh3LTUZhF3Qp8q5xKBqLch/iotfRMR0eswPZLZn5KYKJiuWtNnN+zAB/GLj FS1RldAXjMZxBFx4atcZOEQ6T+0JwxdvXAoGD1R6dsMsIYbJ35VopVOrG+J56Zln FrpbkfiyzILWxCW4LO+VOPuRqpronUIiIBIFtSPBNKFdXTYtrv9SRG29aMlk+55q RmzUes3ylLHYC68n0IgqPxL8fUXjNZXrw1D2e5d56kyweuW/0faPR2z7AZ767b6A whbXmqQ87PcXoMfwNK929L9LSISKvY1C01usQOJqRzHQO1uFXDxl901iIwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOXox98no6hRMp+mqofOky0XCbb5MB8GA1UdIwQY MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt YWRmZTdlNzNkZmVlLzEvNWVqSDN5ZWpxRkV5bjZhcWg4NlRMUmNKdHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAEGfA8I AwcAIAEGfA8MAwcAIAEGfA8QAwcAIAEGfCwoAwcAIAEGfC/IMA0GCSqGSIb3DQEB CwUAA4IBAQBeNkFjcX01aAwj9Hr5d3gdHCBVnPax7dt4p3ob1QYyoeLDRXohCiax ddN1TkdR/erUeROzzXYrpflN1gE+o0mEkFuuulKzKr5Tl6BTKvY3IFDq/ojmr1Ik ydJbN8GSS1S+C2q6FMZno2uauMXj+H/ng0Tx3b8MQgXpS6pBq8ai8tTAcSy89HAf JGm5JkAvblHawvsjklC9Da7rNOh0l5WTJ4Efk5PGTqte4A49yE8i0OZrfX28czSY n+mQ3oSWW/f9zojw0Ki0gHNV8cvangOUq1+3RO9YjFpXadva7ietT6Upj96zEge6 vsHbRP5GUuYOWCpXgZjtARNygYCf8ZhH -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:38 2026 by rpki-client