This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa File: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (raw, json) Hash identifier: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk= Subject key identifier: E7:2C:7E:2E:11:E1:E6:E2:28:9A:BA:7F:E1:45:B2:24:7D:01:AE:34 Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887 Certificate serial: 019B7CEE3A8E0D2B176C46C412B80CDF939D Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5503 IP address blocks: 46.60.128.0/17 maxlen: 24 185.224.12.0/22 maxlen: 24 2a03:c500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3a:8e:0d:2b:17:6c:46:c4:12:b8:0c:df:93:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e72c7e2e11e1e6e2289aba7fe145b2247d01ae34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:a6:57:5c:87:58:0f:05:70:ff:a7:38:c2: 32:70:c0:48:b0:0e:d6:69:41:e6:6d:5a:ec:fc:d6: a1:17:96:8f:64:e7:37:2e:26:86:e1:44:f7:78:4d: bc:12:46:05:3f:fe:fb:61:a6:4d:71:d5:36:9f:15: 1e:e3:ae:0f:3a:26:0b:01:54:57:bc:35:99:cf:e6: 3a:65:9d:3d:c6:4c:b9:c3:69:de:a5:c1:39:36:2b: 76:00:c3:38:38:91:43:d3:55:9c:df:df:ad:9c:07: d8:f0:47:c6:0c:f0:c3:3a:c0:76:78:57:00:d6:1d: 86:b0:f4:60:4a:c9:e0:71:72:55:d4:07:59:e9:6c: ba:da:c5:bf:9e:bb:a5:68:35:9c:38:62:85:c8:e6: 78:a1:4c:a4:d5:42:b4:92:4d:5b:9a:7f:3d:11:6b: 60:ba:d7:2a:e7:b7:be:50:cd:34:63:e0:72:cc:71: c3:a9:e8:7a:9c:aa:cf:2f:4a:1f:ae:9b:8b:31:c6: 07:a8:ee:a9:53:5c:de:3f:39:e2:76:85:7d:71:7f: 05:d2:d9:1b:aa:2b:a5:a7:8e:03:0a:2c:d9:bc:8a: b2:45:3d:14:81:85:fd:86:5f:aa:6e:76:fe:2d:b9: 72:16:32:57:71:30:df:cf:4c:fe:9e:b7:3c:11:c1: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2C:7E:2E:11:E1:E6:E2:28:9A:BA:7F:E1:45:B2:24:7D:01:AE:34 X509v3 Authority Key Identifier: keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.60.128.0/17 185.224.12.0/22 IPv6: 2a03:c500::/32 Signature Algorithm: sha256WithRSAEncryption 9a:55:53:a7:e8:cb:0d:fe:a6:c4:09:24:d8:9d:3d:75:09:be: 89:65:05:c9:56:38:1e:08:c8:f8:07:7f:29:e7:d2:21:41:93: d9:2f:c7:fb:16:83:1d:90:b7:14:11:79:91:e7:7c:17:0d:d6: d4:66:a4:b8:8c:1f:ee:b3:a4:5d:d6:f5:0c:bb:9a:2b:8b:6f: 41:c8:29:cf:cd:48:4b:55:4b:9f:d5:74:3e:81:cc:1a:dc:b2: dc:eb:85:55:e5:a0:00:f4:06:59:c5:43:ec:20:36:61:7e:32: d0:2f:4b:1f:a8:15:86:66:f1:29:6b:26:a8:19:57:b9:d5:8a: d2:cd:5c:76:de:25:d2:85:83:6e:27:01:9d:d1:4f:72:78:95: 40:65:5d:1b:54:02:dc:69:80:b6:a2:74:d9:c3:2b:54:94:09: 16:52:e1:b1:49:ec:ee:3c:cc:69:e6:bb:a7:9d:76:1a:1e:b7: 1d:8b:3a:13:e5:ca:c8:a8:59:8b:d3:76:d1:bf:78:eb:f5:9f: ce:07:9c:6d:c7:02:2f:f8:c0:b3:30:b1:36:04:55:54:12:06: c2:8e:3e:45:74:10:ed:f3:c4:36:45:dc:f2:d2:27:94:62:30: 4f:99:70:16:bc:bf:9b:72:0b:81:41:44:f6:8b:6f:c1:72:da: 84:5f:c3:7d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87jqODSsXbEbEErgM35OdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl ZDE4ODcwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzJjN2UyZTExZTFlNmUyMjg5YWJhN2ZlMTQ1YjIyNDdkMDFhZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0OmV1yHWA8FcP+nOMIycMBIsA7W aUHmbVrs/NahF5aPZOc3LiaG4UT3eE28EkYFP/77YaZNcdU2nxUe464POiYLAVRX vDWZz+Y6ZZ09xky5w2nepcE5Nit2AMM4OJFD01Wc39+tnAfY8EfGDPDDOsB2eFcA 1h2GsPRgSsngcXJV1AdZ6Wy62sW/nrulaDWcOGKFyOZ4oUyk1UK0kk1bmn89EWtg utcq57e+UM00Y+ByzHHDqeh6nKrPL0ofrpuLMcYHqO6pU1zePznidoV9cX8F0tkb qiulp44DCizZvIqyRT0UgYX9hl+qbnb+LblyFjJXcTDfz0z+nrc8EcGl4QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOcsfi4R4ebiKJq6f+FFsiR9Aa40MB8GA1UdIwQY MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt MGQxZDE3NGM0MzUxLzEvNXl4LUxoSGg1dUlvbXJwXzRVV3lKSDBCcmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHLjyAAwQC ueAMMA0EAgACMAcDBQAqA8UAMA0GCSqGSIb3DQEBCwUAA4IBAQCaVVOn6MsN/qbE CSTYnT11Cb6JZQXJVjgeCMj4B38p59IhQZPZL8f7FoMdkLcUEXmR53wXDdbUZqS4 jB/us6Rd1vUMu5ori29ByCnPzUhLVUuf1XQ+gcwa3LLc64VV5aAA9AZZxUPsIDZh fjLQL0sfqBWGZvEpayaoGVe51YrSzVx23iXShYNuJwGd0U9yeJVAZV0bVALcaYC2 onTZwytUlAkWUuGxSezuPMxp5runnXYaHrcdizoT5crIqFmL03bRv3jr9Z/OB5xt xwIv+MCzMLE2BFVUEgbCjj5FdBDt88Q2Rdzy0ieUYjBPmXAWvL+bcguBQUT2i2/B ctqEX8N9 -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:56 2026 by rpki-client