This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/B5MgyjNRD03FWnj_3gSqIo7RbDQ.roa File: B5MgyjNRD03FWnj_3gSqIo7RbDQ.roa (raw, json) Hash identifier: 2XUCmJsZX49x+0/QDCsg4NgkqWj0gTX+eRsw6155dKM= Subject key identifier: 07:93:20:CA:33:51:0F:4D:C5:5A:78:FF:DE:04:AA:22:8E:D1:6C:34 Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Certificate serial: 019B7F83D5CB531254963D51CB22C278FF2D Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/B5MgyjNRD03FWnj_3gSqIo7RbDQ.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209589 IP address blocks: 2a07:9cc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d5:cb:53:12:54:96:3d:51:cb:22:c2:78:ff:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=079320ca33510f4dc55a78ffde04aa228ed16c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:4e:c8:88:9f:f6:28:35:4e:2d:bd:25:1b: 4f:d0:5e:fd:06:6e:ae:71:86:d6:42:da:0d:9f:5e: dc:12:af:5b:9f:e3:f9:ea:38:62:64:4f:77:64:52: 06:2e:4a:08:82:20:78:3c:04:5d:61:6b:e0:0d:71: 30:4c:42:18:32:3f:db:3a:ad:9a:cc:c8:a0:5c:64: a9:41:7d:94:5a:a1:59:7e:34:a4:ff:82:f9:43:6b: 20:f6:8a:f2:ca:43:e8:10:5a:18:62:a5:c7:1f:cd: dc:e4:e7:d7:f4:5d:0b:80:4a:d2:2b:aa:0b:bb:d5: ab:15:a1:5e:ef:73:65:5c:6c:1a:96:4f:23:83:ec: ce:0e:c1:1d:f3:27:1a:a9:8f:a5:e3:6a:4e:e6:82: 24:92:2a:f3:1e:97:de:ca:e0:18:db:0d:47:b5:86: 6e:9b:99:1e:2c:b4:d2:c2:93:b8:8a:06:73:ec:d9: 2a:86:51:20:e8:39:4b:d3:ba:92:16:86:53:90:d7: 78:1a:60:c0:cb:9d:74:91:72:95:f4:51:b6:7d:a6: d7:64:47:21:a5:c6:c7:d7:b1:c1:0d:9f:89:3a:a9: 72:b7:21:85:8e:41:88:6e:e2:bf:51:ff:60:a7:ed: ce:1c:ed:8c:df:9f:2b:44:a0:b7:10:34:06:f9:4f: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:20:CA:33:51:0F:4D:C5:5A:78:FF:DE:04:AA:22:8E:D1:6C:34 X509v3 Authority Key Identifier: keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/B5MgyjNRD03FWnj_3gSqIo7RbDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:9cc5::/32 Signature Algorithm: sha256WithRSAEncryption 2c:a8:c8:eb:6f:81:4a:6a:ae:08:6e:8e:96:f9:cb:74:cd:27: 48:a5:df:01:52:aa:8b:5f:62:90:d8:f8:bc:09:78:b5:cd:b9: 43:d4:41:ea:18:3d:1e:95:99:3a:4a:39:41:f4:93:82:96:96: 7e:7c:d6:1a:e2:e3:c4:1e:32:b4:a3:2d:0b:f6:e4:f6:bd:75: df:b7:37:48:9b:28:ad:3f:49:de:30:e3:56:48:ed:8b:6f:fc: 20:e1:ee:7f:3f:89:65:90:68:fd:3d:0a:af:f0:a5:81:a4:d2: 75:e7:d5:e2:17:4c:92:88:5a:68:b8:eb:63:94:c6:63:66:1f: 30:38:90:56:40:9c:21:be:6f:21:2d:dc:c6:16:ea:e5:27:c6: fa:57:e8:8a:a0:77:42:ac:f5:6b:39:a5:f0:69:12:dc:12:e0: 2d:b4:45:f5:ec:56:c3:3b:2a:fa:01:0d:87:d2:2a:36:3a:73: ac:8b:35:51:52:0f:fb:53:c0:fe:fd:c9:08:07:f7:71:07:07: 4e:80:13:91:cd:6f:1f:83:84:44:a8:77:88:c1:4d:e3:18:25: 87:2d:ea:0c:7a:fc:b4:c1:52:54:e8:e2:21:60:2d:da:02:8a: be:e0:bb:33:97:e0:e6:1e:cb:96:79:1d:a7:1d:0f:45:f2:0e: 5d:7e:0b:47 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g9XLUxJUlj1RyyLCeP8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjM3M2Y1ZGY5OWQ4MjFkY2I1N2M3ZmI5MjAyZmI0Njg2 ZTVkNjEwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzkzMjBjYTMzNTEwZjRkYzU1YTc4ZmZkZTA0YWEyMjhlZDE2YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFOyIif9ig1Ti29JRtP0F79Bm6u cYbWQtoNn17cEq9bn+P56jhiZE93ZFIGLkoIgiB4PARdYWvgDXEwTEIYMj/bOq2a zMigXGSpQX2UWqFZfjSk/4L5Q2sg9oryykPoEFoYYqXHH83c5OfX9F0LgErSK6oL u9WrFaFe73NlXGwalk8jg+zODsEd8ycaqY+l42pO5oIkkirzHpfeyuAY2w1HtYZu m5keLLTSwpO4igZz7NkqhlEg6DlL07qSFoZTkNd4GmDAy510kXKV9FG2fabXZEch pcbH17HBDZ+JOqlytyGFjkGIbuK/Uf9gp+3OHO2M358rRKC3EDQG+U/1EwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAeTIMozUQ9NxVp4/94EqiKO0Ww0MB8GA1UdIwQY MBaAFF1jc/Xfmdgh3LV8f7kgL7Robl1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAt YWQyMTUyODVjODY0LzEvQjVNZ3lqTlJEMDNGV25qXzNnU3FJbzdSYkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAtYWQyMTUyODVjODY0 LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgecxTAN BgkqhkiG9w0BAQsFAAOCAQEALKjI62+BSmquCG6OlvnLdM0nSKXfAVKqi19ikNj4 vAl4tc25Q9RB6hg9HpWZOko5QfSTgpaWfnzWGuLjxB4ytKMtC/bk9r1137c3SJso rT9J3jDjVkjti2/8IOHufz+JZZBo/T0Kr/ClgaTSdefV4hdMkohaaLjrY5TGY2Yf MDiQVkCcIb5vIS3cxhbq5SfG+lfoiqB3Qqz1azml8GkS3BLgLbRF9exWwzsq+gEN h9IqNjpzrIs1UVIP+1PA/v3JCAf3cQcHToATkc1vH4OERKh3iMFN4xglhy3qDHr8 tMFSVOjiIWAt2gKKvuC7M5fg5h7Llnkdpx0PRfIOXX4LRw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:59 2026 by rpki-client