This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/5obQTKQQdziyHt3lp7e0Ce026vk.roa File: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (raw, json) Hash identifier: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k= Subject key identifier: E6:86:D0:4C:A4:10:77:38:B2:1E:DD:E5:A7:B7:B4:09:ED:36:EA:F9 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 019B78A2A8DBBA613D98286B9DB2EA71AAF8 Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/5obQTKQQdziyHt3lp7e0Ce026vk.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138330 IP address blocks: 2a12:a307:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a8:db:ba:61:3d:98:28:6b:9d:b2:ea:71:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e686d04ca4107738b21edde5a7b7b409ed36eaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:d9:4b:c0:09:c6:49:ec:02:7a:d0:db:4b: 39:4b:4e:54:f1:4d:b6:39:3c:6f:a7:c3:ba:9e:ca: 89:c8:3f:d2:a2:61:aa:b6:2c:ef:4e:42:79:06:d8: 7e:6d:4d:a6:56:5e:31:0f:f5:be:66:54:e2:19:2f: e2:10:f6:fc:74:3c:bc:1c:13:f3:54:5b:85:5e:5f: 73:a6:12:13:46:46:0b:18:96:bd:d1:22:70:34:5e: 7b:bf:99:3b:9b:cc:fc:55:90:58:28:cc:eb:83:d1: 4a:31:a0:3e:49:dd:e1:09:81:a3:9f:39:3a:ca:e8: e5:fd:96:54:d7:b8:15:89:76:c9:cb:7c:b1:4b:aa: cb:98:4d:27:6c:2b:ef:98:bf:aa:fd:c8:0b:cf:74: fe:61:2f:38:6e:cd:50:40:7d:04:55:95:be:5b:e7: fe:3b:d0:51:c3:de:d6:2a:72:b6:60:02:db:d9:60: 35:fd:54:97:5d:12:09:8b:dc:d5:3e:ef:8a:28:e8: 4b:46:3a:30:b8:81:61:75:18:79:d7:fa:2a:7e:d7: 5b:a5:da:30:2f:4f:28:15:da:5c:4e:b6:85:3f:e5: e2:ba:8b:1e:00:38:a7:65:1b:11:37:3b:0a:ef:47: 3d:f4:3e:85:74:a3:09:41:d5:a5:a3:8b:2f:22:f0: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:86:D0:4C:A4:10:77:38:B2:1E:DD:E5:A7:B7:B4:09:ED:36:EA:F9 X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/5obQTKQQdziyHt3lp7e0Ce026vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:a307:1::/48 Signature Algorithm: sha256WithRSAEncryption 4b:da:a3:37:e8:4b:f1:ca:1e:48:4a:13:19:fe:bb:62:36:ff: be:7e:51:4d:31:40:13:07:da:df:7b:86:03:9b:bd:3c:fb:1b: 5a:b5:f5:01:39:81:81:11:f3:e0:4c:9a:c7:9a:b5:0a:90:37: 41:c1:5d:72:00:81:de:f4:40:c1:82:97:5b:d5:41:53:6d:08: 13:e9:6f:a6:42:13:8a:f2:6d:9f:9f:73:c6:64:6c:a1:0a:ae: 71:16:14:6e:90:c2:8c:02:09:70:f6:d7:c5:05:a4:ad:d4:61: 23:93:b6:1d:e4:76:15:c3:d4:c0:f1:1e:ec:d3:86:67:e2:64: bc:51:62:0a:b5:20:f6:e1:7c:af:aa:2c:9f:dd:5b:37:81:25: 08:59:29:41:dc:9d:c6:e8:a1:d0:c0:e6:0d:49:d2:5d:df:7f: d6:4a:ad:2f:8d:dc:81:84:39:ce:a4:66:b9:f2:d1:e9:16:b4: 94:6a:49:aa:28:7b:a2:a9:bb:10:b6:20:ad:2e:a9:2d:ea:43: 73:98:bd:81:6b:99:5d:36:9e:02:47:89:5f:b1:98:4e:51:28: 29:3f:0c:33:64:29:20:4f:c6:d6:57:a9:18:e6:2e:f0:ee:7a: d9:ab:23:66:a7:82:f9:45:ff:d5:52:9f:29:fe:00:28:70:64: 5b:20:63:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oqjbumE9mChrnbLqcar4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjg2ZDA0Y2E0MTA3NzM4YjIxZWRkZTVhN2I3YjQwOWVkMzZlYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq/ZS8AJxknsAnrQ20s5S05U8U22 OTxvp8O6nsqJyD/SomGqtizvTkJ5Bth+bU2mVl4xD/W+ZlTiGS/iEPb8dDy8HBPz VFuFXl9zphITRkYLGJa90SJwNF57v5k7m8z8VZBYKMzrg9FKMaA+Sd3hCYGjnzk6 yujl/ZZU17gViXbJy3yxS6rLmE0nbCvvmL+q/cgLz3T+YS84bs1QQH0EVZW+W+f+ O9BRw97WKnK2YALb2WA1/VSXXRIJi9zVPu+KKOhLRjowuIFhdRh51/oqftdbpdow L08oFdpcTraFP+XiuoseADinZRsRNzsK70c99D6FdKMJQdWlo4svIvCvHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOaG0EykEHc4sh7d5ae3tAntNur5MB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvNW9iUVRLUVFkeml5SHQzbHA3ZTBDZTAyNnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKjBwAB MA0GCSqGSIb3DQEBCwUAA4IBAQBL2qM36Evxyh5IShMZ/rtiNv++flFNMUATB9rf e4YDm708+xtatfUBOYGBEfPgTJrHmrUKkDdBwV1yAIHe9EDBgpdb1UFTbQgT6W+m QhOK8m2fn3PGZGyhCq5xFhRukMKMAglw9tfFBaSt1GEjk7Yd5HYVw9TA8R7s04Zn 4mS8UWIKtSD24Xyvqiyf3Vs3gSUIWSlB3J3G6KHQwOYNSdJd33/WSq0vjdyBhDnO pGa58tHpFrSUakmqKHuiqbsQtiCtLqkt6kNzmL2Ba5ldNp4CR4lfsZhOUSgpPwwz ZCkgT8bWV6kY5i7w7nrZqyNmp4L5Rf/VUp8p/gAocGRbIGNI -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:44 2026 by rpki-client