This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5dKCKNLYUuBRIXRJBHBo-YkeM3c.roa File: 5dKCKNLYUuBRIXRJBHBo-YkeM3c.roa (raw, json) Hash identifier: stxco/znnbM3TX8P3BnkW56MGUuRn33YzJri2eovbQ8= Subject key identifier: E5:D2:82:28:D2:D8:52:E0:51:21:74:49:04:70:68:F9:89:1E:33:77 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802447B6D284F1AA552EAE8E856319 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5dKCKNLYUuBRIXRJBHBo-YkeM3c.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201335 IP address blocks: 2a0f:7803:ffa0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:24:47:b6:d2:84:f1:aa:55:2e:ae:8e:85:63:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5d28228d2d852e051217449047068f9891e3377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:ea:1d:1d:af:5d:69:96:25:9e:a4:86:a0: 2c:a6:7e:71:ee:7f:9e:f8:3b:b5:62:b1:2f:33:a4: 6b:36:21:dd:b7:5b:f1:8e:27:bc:cd:4b:51:d8:30: 23:dc:d1:02:42:e6:8a:76:16:66:bc:2f:b5:d3:94: d6:95:a7:c0:ce:8c:83:03:8c:ce:75:f0:53:cd:66: ba:b9:4c:8d:68:50:a7:a8:a0:67:44:a7:a5:28:b4: fe:ec:f3:5f:d1:78:4b:a3:71:be:0a:70:9d:ce:36: 23:7b:6a:0b:e4:e5:9f:80:02:3e:3f:5a:69:df:f1: 16:97:e5:97:e1:9b:b5:57:eb:20:b7:0b:56:69:d6: 87:6c:2e:69:4c:65:81:9c:3d:09:d3:a6:1b:d9:bb: a8:57:2e:46:fd:65:dc:ef:59:c2:1b:ae:73:f3:91: 46:ab:36:73:47:cf:8e:07:66:ea:94:b9:08:83:87: fb:0d:8e:98:81:b4:84:ff:e7:7c:09:8a:54:ad:af: 23:71:2a:8b:9e:72:a5:d4:13:fd:d6:38:28:7f:ac: 23:d6:c6:fc:63:30:58:d5:16:93:c3:2f:ef:56:ff: 48:f2:42:46:7c:1c:18:e9:e8:04:64:7f:2a:58:e2: c3:7f:1c:10:0e:cc:4d:c3:34:2d:f2:e7:43:b3:37: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D2:82:28:D2:D8:52:E0:51:21:74:49:04:70:68:F9:89:1E:33:77 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5dKCKNLYUuBRIXRJBHBo-YkeM3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:ffa0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:b2:bb:9b:0e:38:27:4d:3a:3d:c8:1b:49:f0:70:70:60:22: c6:03:21:63:36:95:dd:02:e9:8d:30:99:3b:d2:78:ed:5f:64: 56:63:0b:45:2e:be:0c:2e:2c:c5:b5:96:a9:69:42:e0:7c:88: ef:93:f3:17:9d:f3:dd:aa:64:29:23:03:79:8f:6c:1f:ab:ee: 97:93:ee:2a:f7:3b:85:5d:7a:8b:0e:98:13:72:12:c3:ba:d2: ab:25:b1:1a:14:77:9d:d9:57:be:68:23:f7:d8:ae:9e:cd:36: dd:42:f9:ff:34:62:84:7c:95:4e:36:32:29:29:05:83:fb:d0: 62:04:55:6c:a8:e4:2c:55:45:c0:a7:1f:96:44:1f:4f:50:6b: 82:ed:9c:05:73:01:cf:c8:fb:38:e5:c0:dd:bf:de:31:94:8a: d3:10:0c:94:8a:35:ff:03:11:5f:48:51:70:91:a2:10:7a:a2: ef:ee:51:e0:7a:7b:96:1c:da:fe:7e:76:59:fb:75:e5:3e:ba: e1:47:f0:73:ee:cd:17:8a:9d:86:98:35:49:c6:16:7a:90:a2: dd:89:ed:b5:3e:69:11:e1:e3:cf:ff:14:80:1b:a6:77:7c:5e: dd:80:42:70:27:14:e2:1b:24:dd:71:0f:5b:35:9e:61:15:9f: f6:8f:43:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCRHttKE8apVLq6OhWMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWQyODIyOGQyZDg1MmUwNTEyMTc0NDkwNDcwNjhmOTg5MWUzMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnLqHR2vXWmWJZ6khqAspn5x7n+e +Du1YrEvM6RrNiHdt1vxjie8zUtR2DAj3NECQuaKdhZmvC+105TWlafAzoyDA4zO dfBTzWa6uUyNaFCnqKBnRKelKLT+7PNf0XhLo3G+CnCdzjYje2oL5OWfgAI+P1pp 3/EWl+WX4Zu1V+sgtwtWadaHbC5pTGWBnD0J06Yb2buoVy5G/WXc71nCG65z85FG qzZzR8+OB2bqlLkIg4f7DY6YgbSE/+d8CYpUra8jcSqLnnKl1BP91jgof6wj1sb8 YzBY1RaTwy/vVv9I8kJGfBwY6egEZH8qWOLDfxwQDsxNwzQt8udDszeiKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOXSgijS2FLgUSF0SQRwaPmJHjN3MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvNWRLQ0tOTFlVdUJSSVhSSkJIQm8tWWtlTTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg94A/+g MA0GCSqGSIb3DQEBCwUAA4IBAQBrsrubDjgnTTo9yBtJ8HBwYCLGAyFjNpXdAumN MJk70njtX2RWYwtFLr4MLizFtZapaULgfIjvk/MXnfPdqmQpIwN5j2wfq+6Xk+4q 9zuFXXqLDpgTchLDutKrJbEaFHed2Ve+aCP32K6ezTbdQvn/NGKEfJVONjIpKQWD +9BiBFVsqOQsVUXApx+WRB9PUGuC7ZwFcwHPyPs45cDdv94xlIrTEAyUijX/AxFf SFFwkaIQeqLv7lHgenuWHNr+fnZZ+3XlPrrhR/Bz7s0Xip2GmDVJxhZ6kKLdie21 PmkR4ePP/xSAG6Z3fF7dgEJwJxTiGyTdcQ9bNZ5hFZ/2j0N9 -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:07 2026 by rpki-client