This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5oJe3NgYCHZzI_8duCSrlh7Oels.roa File: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (raw, json) Hash identifier: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o= Subject key identifier: E6:82:5E:DC:D8:18:08:76:73:23:FF:1D:B8:24:AB:96:1E:CE:7A:5B Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A378603F6FF0A71E2B1375B5970EF2 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5oJe3NgYCHZzI_8duCSrlh7Oels.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62874 IP address blocks: 2a03:f87:caaa::/48 maxlen: 48 2a03:f87:caab::/48 maxlen: 48 2a03:f87:caac::/48 maxlen: 48 2a03:f87:caad::/48 maxlen: 48 2a03:f87:daa1::/48 maxlen: 48 2a03:f87:daa2::/48 maxlen: 48 2a03:f87:daa3::/48 maxlen: 48 2a03:f87:daa4::/48 maxlen: 48 2a03:f87:daaa::/48 maxlen: 48 2a03:f87:daab::/48 maxlen: 48 2a03:f87:daac::/48 maxlen: 48 2a03:f87:daad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:78:60:3f:6f:f0:a7:1e:2b:13:75:b5:97:0e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6825edcd81808767323ff1db824ab961ece7a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:2c:70:5c:5c:19:af:fd:cf:a1:78:0d:ab: e4:87:0a:a0:2e:42:39:d3:01:c0:d9:ba:d4:ba:b3: 70:0e:f7:c2:f8:f5:53:ab:a0:02:0f:2e:9d:4a:49: 43:92:47:2c:c8:71:6a:77:ef:a0:5b:ab:ef:52:a2: 2d:7f:22:90:44:71:87:11:e8:0f:a9:12:05:4e:bf: 5e:95:86:44:91:22:d7:45:91:37:87:f2:e9:0b:31: 24:f9:a5:49:a8:4c:28:86:d0:78:f4:46:bc:0c:6c: 66:40:ad:d4:46:8e:36:e8:55:82:ea:b1:4f:ce:60: 74:e2:24:0b:2d:0a:56:81:0f:59:c3:16:14:73:91: ee:29:12:85:ac:69:00:79:b2:de:63:e3:2c:cb:88: d2:a1:1d:1b:64:a8:16:57:38:d3:13:15:34:1a:2f: ee:c7:43:0f:25:bd:94:cf:87:ac:ac:25:5e:b5:86: c3:e1:7b:13:92:f6:b2:7e:ea:ca:2e:f3:fd:b8:b4: 08:9d:58:16:25:c1:91:5d:2f:5a:59:a5:9f:42:2c: 0e:53:63:79:90:a4:e2:b9:4c:51:11:69:e3:b1:9b: e9:f0:ac:f4:f3:99:b0:48:0e:cf:2e:fa:43:d4:db: 45:54:a6:c2:6a:b1:1a:2b:73:79:8b:25:26:93:f7: 65:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:82:5E:DC:D8:18:08:76:73:23:FF:1D:B8:24:AB:96:1E:CE:7A:5B X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5oJe3NgYCHZzI_8duCSrlh7Oels.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f87:caaa::-2a03:f87:caad:ffff:ffff:ffff:ffff:ffff 2a03:f87:daa1::-2a03:f87:daa4:ffff:ffff:ffff:ffff:ffff 2a03:f87:daaa::-2a03:f87:daad:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a3:1e:a3:44:51:e5:c7:ad:f5:75:4f:ee:69:65:ad:b9:f3:67: 3f:b9:c3:6c:79:c9:a5:5a:dc:66:a4:be:ca:96:bd:ff:04:5c: 3e:99:21:ba:d0:6d:5b:00:e0:90:88:c0:db:45:14:36:8c:18: 78:dc:15:e6:d4:3a:ef:dc:2a:7f:29:b2:5d:cc:62:8c:82:1a: 45:b1:df:fa:11:7d:7b:49:e7:d2:14:61:14:2f:a0:fb:f5:c5: df:7b:f9:22:21:33:bf:9c:0e:bc:0e:88:30:3b:cf:cf:c8:f1: 9e:13:69:55:7e:34:cb:e7:6a:f6:65:a2:96:32:95:ca:dc:af: a1:e6:f9:f6:ce:87:12:3d:6e:f1:b3:45:cf:b1:8a:52:e4:23: f3:92:71:aa:f8:3f:78:8a:f6:97:3b:89:38:72:12:70:ac:f2: a5:59:07:14:42:ab:e6:fa:6f:50:f2:98:86:ef:45:7a:52:a4: fd:e0:51:fc:1f:0b:68:58:ae:0c:75:8d:f0:d1:81:b4:3e:22: e0:1a:c6:d5:96:e4:6a:49:d2:fe:eb:c7:7e:d7:2c:c8:3a:9e: 11:ad:29:71:5e:bd:a9:34:38:fc:9b:98:58:83:64:fe:d0:43: 8b:29:29:00:91:fa:77:bf:83:2a:5b:80:a3:b6:66:9c:e1:e6: 20:4f:c9:ee -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt4o3hgP2/wpx4rE3W1lw7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjgyNWVkY2Q4MTgwODc2NzMyM2ZmMWRiODI0YWI5NjFlY2U3YTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOUscFxcGa/9z6F4DavkhwqgLkI5 0wHA2brUurNwDvfC+PVTq6ACDy6dSklDkkcsyHFqd++gW6vvUqItfyKQRHGHEegP qRIFTr9elYZEkSLXRZE3h/LpCzEk+aVJqEwohtB49Ea8DGxmQK3URo426FWC6rFP zmB04iQLLQpWgQ9ZwxYUc5HuKRKFrGkAebLeY+Msy4jSoR0bZKgWVzjTExU0Gi/u x0MPJb2Uz4esrCVetYbD4XsTkvayfurKLvP9uLQInVgWJcGRXS9aWaWfQiwOU2N5 kKTiuUxREWnjsZvp8Kz085mwSA7PLvpD1NtFVKbCarEaK3N5iyUmk/dlYwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFOaCXtzYGAh2cyP/Hbgkq5YeznpbMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvNW9KZTNOZ1lDSFp6SV84ZHVDU3JsaDdPZWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAAjA8MBIDBwEqAw+H yqoDBwEqAw+HyqwwEgMHACoDD4faoQMHACoDD4fapDASAwcBKgMPh9qqAwcBKgMP h9qsMA0GCSqGSIb3DQEBCwUAA4IBAQCjHqNEUeXHrfV1T+5pZa2582c/ucNsecml WtxmpL7Klr3/BFw+mSG60G1bAOCQiMDbRRQ2jBh43BXm1Drv3Cp/KbJdzGKMghpF sd/6EX17SefSFGEUL6D79cXfe/kiITO/nA68DogwO8/PyPGeE2lVfjTL52r2ZaKW MpXK3K+h5vn2zocSPW7xs0XPsYpS5CPzknGq+D94ivaXO4k4chJwrPKlWQcUQqvm +m9Q8piG70V6UqT94FH8HwtoWK4MdY3w0YG0PiLgGsbVluRqSdL+68d+1yzIOp4R rSlxXr2pNDj8m5hYg2T+0EOLKSkAkfp3v4MqW4Cjtmac4eYgT8nu -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:47 2026 by rpki-client