This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/5-EJwRqi1XA3u9gFAcZ9njZ3ubQ.roa File: 5-EJwRqi1XA3u9gFAcZ9njZ3ubQ.roa (raw, json) Hash identifier: hFNKGoVbXoj2tJMUg9incrRV/V229/edfKbWOK21tzs= Subject key identifier: E7:E1:09:C1:1A:A2:D5:70:37:BB:D8:05:01:C6:7D:9E:36:77:B9:B4 Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07 Certificate serial: 019BB42221094BA997C28815D71C42124B8F Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/5-EJwRqi1XA3u9gFAcZ9njZ3ubQ.roa Signing time: Mon 12 Jan 2026 21:34:54 +0000 ROA not before: Mon 12 Jan 2026 21:34:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209768 IP address blocks: 2001:67c:26c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:22:21:09:4b:a9:97:c2:88:15:d7:1c:42:12:4b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07 Validity Not Before: Jan 12 21:34:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7e109c11aa2d57037bbd80501c67d9e3677b9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:d8:d4:a5:c2:cf:50:71:1d:10:17:d7:b8: 47:40:4f:06:17:be:44:62:1a:4a:31:28:fc:d0:de: 15:76:a4:92:4f:9a:47:62:e6:dd:bf:18:4e:e2:43: 86:8a:ff:6d:db:03:bf:b5:82:6f:67:ec:d0:f6:78: 24:e0:9c:a0:b6:28:ef:a9:61:9c:9f:20:3d:27:84: ab:80:84:14:e8:a7:b9:b8:d2:31:22:1f:f6:a8:91: f0:cd:88:eb:bb:8d:ff:a8:30:d6:cf:b8:a2:06:14: 31:4b:e5:75:8e:ed:35:23:dd:bc:dd:e0:bc:eb:91: 1b:6a:b9:42:f8:39:c8:7e:f9:d9:76:8e:99:4f:06: 08:08:46:19:fa:c7:ea:bd:10:1c:ec:b5:9f:2e:ac: 75:37:53:9b:af:71:84:51:ca:fe:68:db:cd:1b:5f: 3a:60:b3:ad:a4:0d:36:89:ff:9f:c4:a9:d5:1b:3f: a8:77:b1:d6:c5:7a:a2:0d:d6:d8:79:59:2d:78:7e: e2:7a:d2:30:a2:8a:18:41:3b:bf:80:53:d7:ef:44: c1:2b:3f:05:b4:54:6c:a2:8d:0a:5f:85:b5:4a:91: 03:9f:4b:e2:fb:3d:88:f7:a5:bf:40:ab:06:6a:24: 31:1e:2f:7c:93:fa:9c:8a:8e:cb:35:0b:eb:ac:10: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:09:C1:1A:A2:D5:70:37:BB:D8:05:01:C6:7D:9E:36:77:B9:B4 X509v3 Authority Key Identifier: keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/5-EJwRqi1XA3u9gFAcZ9njZ3ubQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:26c0::/48 Signature Algorithm: sha256WithRSAEncryption bc:d9:0f:4d:52:4b:18:3a:f8:63:69:5e:3d:a0:be:58:b8:2a: e2:34:37:79:6b:e8:50:16:1b:19:ee:e7:fe:c1:31:3f:81:5e: b8:83:4a:b3:7f:90:1c:07:92:61:d6:20:0b:d4:4a:55:17:11: d2:1e:20:fe:40:b4:27:a0:a5:d0:0e:c3:d9:09:55:c2:5b:90: 4e:d4:06:78:dd:40:89:89:ee:65:31:b7:1a:15:38:f9:84:ca: 90:9e:fa:3d:7b:86:c3:cd:bc:87:b6:b9:30:c1:49:13:c6:4f: a5:80:d4:37:8a:e2:d5:8e:f7:18:06:1f:d7:09:af:b9:ea:d9: 6c:6a:b5:0d:45:12:2c:db:22:8b:ad:a7:03:6f:76:3d:21:2d: c1:eb:83:70:fe:8a:e6:61:87:e2:dc:b5:fb:cf:cf:dc:62:aa: 09:af:7f:8e:38:71:2d:1e:fe:a1:41:b7:15:32:42:5f:e3:3f: 24:6f:a3:5a:f9:ae:fe:10:da:26:8b:53:41:d5:fd:0f:67:05: c1:65:ff:68:0a:fb:78:ba:6a:db:e0:48:9f:01:eb:7a:ac:bd: de:d6:87:95:0e:f2:d4:93:65:a4:b6:e7:39:2d:b9:63:70:7a: 48:4d:48:48:55:f3:69:cf:89:b7:9b:2a:b6:20:32:d5:3c:cd: 83:b2:26:f6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZu0IiEJS6mXwogV1xxCEkuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi MDljMDcwHhcNMjYwMTEyMjEzNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2UxMDljMTFhYTJkNTcwMzdiYmQ4MDUwMWM2N2Q5ZTM2NzdiOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8vY1KXCz1BxHRAX17hHQE8GF75E YhpKMSj80N4VdqSST5pHYubdvxhO4kOGiv9t2wO/tYJvZ+zQ9ngk4JygtijvqWGc nyA9J4SrgIQU6Ke5uNIxIh/2qJHwzYjru43/qDDWz7iiBhQxS+V1ju01I9283eC8 65EbarlC+DnIfvnZdo6ZTwYICEYZ+sfqvRAc7LWfLqx1N1Obr3GEUcr+aNvNG186 YLOtpA02if+fxKnVGz+od7HWxXqiDdbYeVkteH7ietIwoooYQTu/gFPX70TBKz8F tFRsoo0KX4W1SpEDn0vi+z2I96W/QKsGaiQxHi98k/qcio7LNQvrrBBZjwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOfhCcEaotVwN7vYBQHGfZ42d7m0MB8GA1UdIwQY MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt NzliNDA5YzFiZDM4LzEvNS1FSndScWkxWEEzdTlnRkFjWjlualozdWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4 LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCbA MA0GCSqGSIb3DQEBCwUAA4IBAQC82Q9NUksYOvhjaV49oL5YuCriNDd5a+hQFhsZ 7uf+wTE/gV64g0qzf5AcB5Jh1iAL1EpVFxHSHiD+QLQnoKXQDsPZCVXCW5BO1AZ4 3UCJie5lMbcaFTj5hMqQnvo9e4bDzbyHtrkwwUkTxk+lgNQ3iuLVjvcYBh/XCa+5 6tlsarUNRRIs2yKLracDb3Y9IS3B64Nw/ormYYfi3LX7z8/cYqoJr3+OOHEtHv6h QbcVMkJf4z8kb6Na+a7+ENomi1NB1f0PZwXBZf9oCvt4umrb4EifAet6rL3e1oeV DvLUk2Wktuc5LbljcHpITUhIVfNpz4m3myq2IDLVPM2Dsib2 -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:21 2026 by rpki-client