This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/X5485C7ZqsWTqkySl5Kn8ckUA60.roa File: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (raw, json) Hash identifier: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls= Subject key identifier: 5F:9E:3C:E4:2E:D9:AA:C5:93:AA:4C:92:97:92:A7:F1:C9:14:03:AD Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Certificate serial: 019B791040AE64271961C1CCEFFB0530BD88 Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/X5485C7ZqsWTqkySl5Kn8ckUA60.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207834 IP address blocks: 2a0e:3940:3200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:40:ae:64:27:19:61:c1:cc:ef:fb:05:30:bd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f9e3ce42ed9aac593aa4c929792a7f1c91403ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:ea:06:01:85:04:70:f0:1f:64:8d:bd:ac: fc:bf:1b:01:ef:1b:6f:3b:be:95:9c:4f:78:3e:64: 08:02:f6:cb:45:71:bd:4d:9b:83:25:37:42:4a:28: 1d:48:e0:35:2b:7c:0f:bf:c3:52:8f:c5:11:4f:3a: 12:a1:b9:33:a8:6f:dc:dc:d9:25:47:a6:84:9b:43: 0c:1d:0f:4f:0b:bc:37:fa:42:0f:e8:88:a4:04:e6: 06:61:9c:7e:32:82:08:dc:0f:3c:60:3e:de:b4:9e: 37:69:12:b3:13:0f:e5:8f:b8:4f:91:2b:ea:22:1e: a8:05:69:27:a4:e6:14:bc:04:86:3d:b9:e9:b8:f0: 31:b4:d2:b3:32:f5:1b:02:9d:97:ed:ff:66:76:1a: e5:d8:fd:07:15:fa:6c:3f:28:97:84:16:4b:c9:f8: dc:d8:0a:1c:85:fd:36:b7:9c:87:87:8a:1f:11:87: fc:52:1f:56:1e:6f:da:20:85:e4:10:bf:5e:3d:89: 51:9c:b9:9c:ea:f0:5c:b4:73:00:99:ec:eb:57:8c: 92:05:e1:63:3c:25:c5:e0:d6:e2:cd:cc:8c:c3:04: 5c:6a:77:49:3a:80:a9:90:82:68:1b:78:a6:72:9b: 7e:e8:71:00:4b:ce:6b:66:5c:84:d5:f9:b7:77:dc: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:3C:E4:2E:D9:AA:C5:93:AA:4C:92:97:92:A7:F1:C9:14:03:AD X509v3 Authority Key Identifier: keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/X5485C7ZqsWTqkySl5Kn8ckUA60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:3940:3200::/44 Signature Algorithm: sha256WithRSAEncryption 4a:c9:37:c4:63:29:ba:78:ae:57:d2:b8:84:77:87:a2:c9:fe: e9:fd:36:94:6a:52:02:05:f4:5a:3f:fb:d4:45:e9:46:c5:66: 0e:91:0d:0b:5b:5f:15:db:d8:18:3c:41:9a:8d:62:d9:72:56: 11:3e:df:05:3a:b2:2e:b8:b3:2b:20:3b:63:26:c3:0b:70:cb: 56:1e:58:ca:e6:57:c1:62:11:b5:eb:0a:1c:37:a7:0e:a6:c0: e3:bf:60:14:a9:88:5e:88:aa:40:78:47:9d:b1:66:8c:8f:37: cc:ba:74:d9:80:5c:89:63:ec:46:bf:dc:b8:3c:75:24:f6:7c: 56:3d:29:23:e7:e7:d0:92:01:72:68:7f:a5:56:8e:0d:10:b3: 9d:c1:d1:e6:18:74:c9:c9:7d:57:f5:87:0c:0b:0a:6b:3c:d7: af:77:24:35:41:9f:49:53:f5:0c:ee:bc:a3:ee:83:8c:d4:13: e1:68:17:68:1e:0e:d5:15:3a:c7:1e:2b:b0:bf:57:21:d8:d6: d0:85:a0:aa:b0:f6:24:98:64:1b:58:74:db:41:1b:fe:cb:47: d8:db:ac:fe:b1:4f:32:be:2d:f2:f2:2e:05:6f:5e:23:8a:05: b2:78:a3:f8:55:37:d6:f7:27:97:37:80:4a:d8:3e:33:75:f9: c7:7e:14:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EECuZCcZYcHM7/sFML2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj ZmJhMzQwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjllM2NlNDJlZDlhYWM1OTNhYTRjOTI5NzkyYTdmMWM5MTQwM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotTqBgGFBHDwH2SNvaz8vxsB7xtv O76VnE94PmQIAvbLRXG9TZuDJTdCSigdSOA1K3wPv8NSj8URTzoSobkzqG/c3Nkl R6aEm0MMHQ9PC7w3+kIP6IikBOYGYZx+MoII3A88YD7etJ43aRKzEw/lj7hPkSvq Ih6oBWknpOYUvASGPbnpuPAxtNKzMvUbAp2X7f9mdhrl2P0HFfpsPyiXhBZLyfjc 2Aochf02t5yHh4ofEYf8Uh9WHm/aIIXkEL9ePYlRnLmc6vBctHMAmezrV4ySBeFj PCXF4NbizcyMwwRcandJOoCpkIJoG3imcpt+6HEAS85rZlyE1fm3d9w1+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF+ePOQu2arFk6pMkpeSp/HJFAOtMB8GA1UdIwQY MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt YzYyMWU4ZGY5NWZmLzEvWDU0ODVDN1pxc1dUcWt5U2w1S244Y2tVQTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg45QDIA MA0GCSqGSIb3DQEBCwUAA4IBAQBKyTfEYym6eK5X0riEd4eiyf7p/TaUalICBfRa P/vURelGxWYOkQ0LW18V29gYPEGajWLZclYRPt8FOrIuuLMrIDtjJsMLcMtWHljK 5lfBYhG16wocN6cOpsDjv2AUqYheiKpAeEedsWaMjzfMunTZgFyJY+xGv9y4PHUk 9nxWPSkj5+fQkgFyaH+lVo4NELOdwdHmGHTJyX1X9YcMCwprPNevdyQ1QZ9JU/UM 7ryj7oOM1BPhaBdoHg7VFTrHHiuwv1ch2NbQhaCqsPYkmGQbWHTbQRv+y0fY26z+ sU8yvi3y8i4Fb14jigWyeKP4VTfW9yeXN4BK2D4zdfnHfhTN -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:44 2026 by rpki-client