This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa File: 5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa (raw, json) Hash identifier: 242jMsYVWeBLhjugJFcXOkAL1qz3e8MYr9rwKIXdUO0= Subject key identifier: E6:FB:07:AF:A5:E5:DA:D4:54:89:EC:55:97:3D:C5:3A:7F:9A:78:7A Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Certificate serial: 019B7C8088AB42D2F2B5C2DAC8E2FB3E2426 Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216233 IP address blocks: 2001:67c:d3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:88:ab:42:d2:f2:b5:c2:da:c8:e2:fb:3e:24:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6fb07afa5e5dad45489ec55973dc53a7f9a787a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:9f:7d:0a:ac:b5:6a:fe:0a:46:61:38:11: 7c:36:ec:73:31:22:ab:04:de:c5:31:aa:d9:1e:1d: 51:8b:43:03:0d:c8:9d:ee:86:b0:a5:ec:97:c7:fc: b4:bb:67:e7:6c:a6:e9:5a:57:9f:5b:70:c4:71:0d: 07:7e:43:ac:76:0e:45:7d:96:3b:4d:c9:07:44:ae: ea:5f:77:1f:65:86:e0:00:65:24:47:4a:9c:d0:12: df:91:0b:91:b0:12:ea:62:07:22:0b:0f:a3:14:4d: 51:f8:5f:c4:1b:e1:f0:ea:75:14:57:38:eb:da:9a: a0:0e:4a:2d:d6:23:4e:34:da:60:18:02:56:f3:64: 36:55:5f:49:af:98:d5:33:36:c3:6a:ba:9e:a4:25: 19:aa:74:51:0e:d1:f0:e5:ba:3d:f9:a6:0b:34:60: 07:2c:bd:b8:5f:a8:66:da:36:7d:4b:98:21:09:57: 86:e6:e3:e5:02:0b:bb:c4:b7:11:2c:e0:2f:97:36: 2a:db:8b:c2:ed:40:f5:66:2c:e5:b7:c9:a2:e2:26: 5b:af:87:74:7b:f8:30:17:71:46:db:df:24:32:25: 58:af:98:ea:0f:ea:d5:1b:51:34:3d:fc:85:29:8a: e0:cb:39:ba:ec:f8:b3:0e:64:54:de:79:b2:d8:6e: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FB:07:AF:A5:E5:DA:D4:54:89:EC:55:97:3D:C5:3A:7F:9A:78:7A X509v3 Authority Key Identifier: keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d3c::/48 Signature Algorithm: sha256WithRSAEncryption 95:a6:bb:d8:ed:c4:15:b0:b3:ca:d6:6d:84:5a:ad:39:57:c2: 2e:05:1a:97:80:d0:a5:fb:eb:ca:04:75:ef:c9:7a:a8:bf:35: 3b:b1:d3:39:f1:58:5b:b5:72:63:ea:3f:a8:fc:5f:19:e7:bb: 3d:b3:b1:c3:bc:15:73:6e:87:e3:1f:06:0f:f1:dd:96:c5:93: 79:00:a3:c4:d7:3d:77:ff:68:bd:4f:00:dc:98:96:0b:1c:78: 0a:dc:20:c7:0c:5a:ad:4f:1a:2b:4d:03:e3:a1:e5:f8:ec:e1: a8:32:d8:af:45:6f:c8:40:30:00:a0:ca:72:2b:93:09:98:fa: 36:7a:c5:49:25:84:01:bc:8e:29:d2:49:0e:02:c4:b6:e6:d9: 56:27:e1:1c:58:c8:aa:6c:73:f7:4e:83:21:48:f6:42:b0:0b: 8a:71:3a:94:3c:ec:ed:a6:14:4f:89:04:2d:18:9e:e9:de:49: da:f5:e3:43:45:3f:a3:2f:5e:48:3e:1f:a2:fe:fd:28:d3:ed: d4:f7:51:83:b3:f9:a0:92:68:e4:c0:0a:8f:64:f7:fd:7d:7a: dd:93:d9:d3:6f:82:ca:32:8c:0b:ed:76:8f:15:9e:e8:80:79: 9c:00:3a:2b:50:46:0e:92:bd:d9:88:f6:77:5e:14:02:43:45: e4:67:cc:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gIirQtLytcLayOL7PiQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz Yzc1NTYwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmZiMDdhZmE1ZTVkYWQ0NTQ4OWVjNTU5NzNkYzUzYTdmOWE3ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr2ffQqstWr+CkZhOBF8NuxzMSKr BN7FMarZHh1Ri0MDDcid7oawpeyXx/y0u2fnbKbpWlefW3DEcQ0HfkOsdg5FfZY7 TckHRK7qX3cfZYbgAGUkR0qc0BLfkQuRsBLqYgciCw+jFE1R+F/EG+Hw6nUUVzjr 2pqgDkot1iNONNpgGAJW82Q2VV9Jr5jVMzbDarqepCUZqnRRDtHw5bo9+aYLNGAH LL24X6hm2jZ9S5ghCVeG5uPlAgu7xLcRLOAvlzYq24vC7UD1Zizlt8mi4iZbr4d0 e/gwF3FG298kMiVYr5jqD+rVG1E0PfyFKYrgyzm67PizDmRU3nmy2G5ZcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOb7B6+l5drUVInsVZc9xTp/mnh6MB8GA1UdIwQY MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt NWRiNjNiYWI5NDYwLzEvNXZzSHI2WGwydFJVaWV4Vmx6M0ZPbi1hZUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA08 MA0GCSqGSIb3DQEBCwUAA4IBAQCVprvY7cQVsLPK1m2EWq05V8IuBRqXgNCl++vK BHXvyXqovzU7sdM58VhbtXJj6j+o/F8Z57s9s7HDvBVzbofjHwYP8d2WxZN5AKPE 1z13/2i9TwDcmJYLHHgK3CDHDFqtTxorTQPjoeX47OGoMtivRW/IQDAAoMpyK5MJ mPo2esVJJYQBvI4p0kkOAsS25tlWJ+EcWMiqbHP3ToMhSPZCsAuKcTqUPOztphRP iQQtGJ7p3kna9eNDRT+jL15IPh+i/v0o0+3U91GDs/mgkmjkwAqPZPf9fXrdk9nT b4LKMowL7XaPFZ7ogHmcADorUEYOkr3ZiPZ3XhQCQ0XkZ8y8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:00 2026 by rpki-client