This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa File: 5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa (raw, json) Hash identifier: WDVA9Lawkmj9ZCv4AbTYoBdoLfCfWXIwbeGfqru0gP8= Subject key identifier: E6:5C:34:67:C7:CD:DF:21:4A:D6:90:7D:39:9C:97:1D:02:D6:E7:79 Certificate issuer: /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Certificate serial: 019B7B3633B0B551D3827AAB8E15861F0A31 Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204048 IP address blocks: 2a0b:a8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:33:b0:b5:51:d3:82:7a:ab:8e:15:86:1f:0a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e65c3467c7cddf214ad6907d399c971d02d6e779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:1e:03:e7:d5:de:fe:4f:3e:b7:8a:99:c7: 34:e8:ad:9e:97:ee:74:fb:b7:49:35:58:f3:70:1e: 9f:82:68:da:9c:c5:58:b8:1e:06:58:f6:bd:55:93: 66:8d:97:cc:b5:06:5a:fb:ba:22:a9:1c:59:0b:81: 37:d8:73:71:38:4c:93:30:2a:9b:c2:7f:1d:05:89: 81:ae:57:e6:e1:09:69:45:9b:c1:87:27:11:dc:0e: 0a:91:0a:29:03:92:de:1c:78:a4:9e:46:1c:a1:a9: 77:7a:4e:ed:52:38:8d:61:51:65:55:86:0d:1b:2d: 19:63:82:ec:c5:97:8f:53:ac:22:e0:59:b0:a5:f6: 85:c8:32:e2:4c:47:60:ab:d9:30:0c:cc:af:31:b1: 55:87:31:8f:f4:5d:06:a0:e9:9c:2c:67:c1:4b:48: 9f:84:8c:57:c0:2b:a1:19:86:09:02:c8:37:32:d7: 73:b8:77:93:6c:00:30:13:9c:46:ea:0f:fa:41:7d: f1:3e:bc:e4:a6:aa:e8:47:df:23:45:8c:d9:65:34: d0:e4:84:98:86:7e:89:c7:9c:80:9b:cd:54:90:fe: 97:f7:be:3a:90:7f:ae:3c:0e:34:56:9f:fb:fc:98: ef:19:85:8e:2e:1c:ea:c9:04:a8:d9:66:4b:f1:db: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5C:34:67:C7:CD:DF:21:4A:D6:90:7D:39:9C:97:1D:02:D6:E7:79 X509v3 Authority Key Identifier: keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:a8c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 36:00:5f:9a:69:6d:e4:0e:bd:c8:fb:59:f2:48:53:6a:88:f9: 2a:32:92:3a:52:d1:1c:aa:78:21:8b:35:7d:a9:d6:6c:02:20: 69:f2:d5:6e:69:ff:c5:c8:2b:78:93:df:d5:4e:a7:7b:59:02: 87:fe:7e:c6:79:99:a5:fb:84:9b:6a:af:4d:49:fc:c8:77:91: f7:d1:2a:8a:70:1e:64:cc:05:6b:bf:9b:fc:1a:b8:7c:e1:15: 6f:93:9a:7b:59:ba:f5:1d:f1:00:e0:55:bd:47:06:90:c2:fa: cc:fb:df:e9:d4:e5:ad:d8:b0:29:29:80:40:66:ca:d9:29:0c: 14:6a:56:8a:79:b1:25:17:00:05:c3:4d:74:e2:b4:56:b4:ed: de:6c:c2:15:c5:e5:8e:d5:04:5b:e0:e0:cc:40:3d:b7:31:cd: a4:c4:22:0f:d8:6f:6c:11:0f:47:6b:72:f4:70:af:6e:8d:48: 89:68:4a:fe:f1:5b:37:1a:e7:4e:16:32:e4:c7:c0:35:95:78: ac:f0:2e:ac:b0:4e:3e:b2:af:6d:89:27:d8:99:40:45:a3:a8: f6:13:61:61:9a:d2:0d:72:42:e5:48:ba:c6:e4:56:9f:ba:0f: 12:d5:4a:28:34:a5:10:47:d5:18:e8:30:c9:3f:e0:1e:2c:eb: c7:4d:4f:ab -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7NjOwtVHTgnqrjhWGHwoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTJiNjA1YzU4ZTA3NDZhYWRjNWJmMGQ3Y2JjMzZjOTMw N2Y3NGQwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjVjMzQ2N2M3Y2RkZjIxNGFkNjkwN2QzOTljOTcxZDAyZDZlNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq0eA+fV3v5PPreKmcc06K2el+50 +7dJNVjzcB6fgmjanMVYuB4GWPa9VZNmjZfMtQZa+7oiqRxZC4E32HNxOEyTMCqb wn8dBYmBrlfm4QlpRZvBhycR3A4KkQopA5LeHHiknkYcoal3ek7tUjiNYVFlVYYN Gy0ZY4LsxZePU6wi4FmwpfaFyDLiTEdgq9kwDMyvMbFVhzGP9F0GoOmcLGfBS0if hIxXwCuhGYYJAsg3MtdzuHeTbAAwE5xG6g/6QX3xPrzkpqroR98jRYzZZTTQ5ISY hn6Jx5yAm81UkP6X9746kH+uPA40Vp/7/JjvGYWOLhzqyQSo2WZL8dsAOwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFOZcNGfHzd8hStaQfTmclx0C1ud5MB8GA1UdIwQY MBaAFPiitgXFjgdGqtxb8NfLw2yTB/dNMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LSzJCY1dPQjBhcTNGdncxOHZEYkpNSDkwMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIw LTUyNDAyNWUxMzIwMi8xLzVsdzBaOGZOM3lGSzFwQjlPWnlYSFFMVzUzay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIwLTUyNDAyNWUxMzIw Mi8xLzEtS0syQmNXT0IwYXEzRnZ3MTh2RGJKTUg5MDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC6jA AAEwDQYJKoZIhvcNAQELBQADggEBADYAX5ppbeQOvcj7WfJIU2qI+SoykjpS0Ryq eCGLNX2p1mwCIGny1W5p/8XIK3iT39VOp3tZAof+fsZ5maX7hJtqr01J/Mh3kffR KopwHmTMBWu/m/wauHzhFW+TmntZuvUd8QDgVb1HBpDC+sz73+nU5a3YsCkpgEBm ytkpDBRqVop5sSUXAAXDTXTitFa07d5swhXF5Y7VBFvg4MxAPbcxzaTEIg/Yb2wR D0drcvRwr26NSIloSv7xWzca504WMuTHwDWVeKzwLqywTj6yr22JJ9iZQEWjqPYT YWGa0g1yQuVIusbkVp+6DxLVSig0pRBH1RjoMMk/4B4s68dNT6s= -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:46 2026 by rpki-client