This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/h5hIPsJLhskffy-sowI0XWx6XlE.roa File: h5hIPsJLhskffy-sowI0XWx6XlE.roa (raw, json) Hash identifier: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8= Subject key identifier: 87:98:48:3E:C2:4B:86:C9:1F:7F:2F:AC:A3:02:34:5D:6C:7A:5E:51 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019B76EAE2E000812013C8A04BB5CE80A5DF Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/h5hIPsJLhskffy-sowI0XWx6XlE.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40811 IP address blocks: 2a0c:6600:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e2:e0:00:81:20:13:c8:a0:4b:b5:ce:80:a5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8798483ec24b86c91f7f2faca302345d6c7a5e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:17:aa:97:77:c5:85:04:41:9d:4c:66:2a: de:1e:12:d6:b7:f6:a5:79:59:b3:62:91:04:49:04: c2:e4:97:ca:84:a1:8d:0a:9e:39:71:e7:14:9d:a7: 72:da:b4:98:f9:22:19:5a:de:79:bf:11:74:1f:aa: 07:77:71:16:56:87:b9:a0:f9:09:f1:47:9f:a2:31: 10:50:a7:b3:e7:28:34:f7:2e:d1:b8:94:bc:03:4b: 7a:ee:f6:74:ff:2f:38:1a:77:6e:85:f3:fb:d8:ce: 5b:e3:2a:c6:c5:f9:dd:6a:df:fc:d1:6f:20:2c:a1: fc:68:69:5d:38:a9:2a:fc:dc:21:e8:b4:2c:71:bc: fa:03:5d:55:3e:79:84:ee:50:12:d3:66:40:b2:88: a4:97:55:f9:ed:93:6d:2a:09:33:e3:b2:3b:4e:91: 66:5d:b2:b3:c0:67:9a:f4:ad:23:44:1d:8c:fa:8e: af:29:87:7c:b3:c5:f9:9b:94:97:f2:c8:a6:27:12: 4e:fe:81:a5:47:24:82:a3:1c:7b:e6:a8:be:3b:e2: 36:58:e1:2a:19:89:bb:c3:da:8a:11:0b:20:85:0d: 33:27:cc:a4:36:f1:94:41:4c:49:db:42:6b:f3:16: f9:d3:b8:94:7a:e1:fb:ae:00:9e:a7:aa:6f:74:93: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:98:48:3E:C2:4B:86:C9:1F:7F:2F:AC:A3:02:34:5D:6C:7A:5E:51 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/h5hIPsJLhskffy-sowI0XWx6XlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:6600:5000::/48 Signature Algorithm: sha256WithRSAEncryption 41:eb:b9:92:be:23:30:8b:ed:89:6e:34:3c:85:9a:08:da:48: d1:37:31:0f:0d:3a:91:e3:01:44:66:67:7b:f3:5a:09:e0:07: 78:2e:22:99:c1:d4:e1:60:ce:ea:07:62:0b:6e:78:12:8f:73: a3:18:6c:96:ae:e9:22:90:6a:1f:a9:17:f2:06:a9:6d:e7:dd: 8b:eb:32:5c:12:30:dc:5d:de:93:8d:18:9f:75:b5:77:4a:55: d5:06:ba:3b:79:21:25:62:80:f8:7c:6b:6f:b9:0b:fe:95:8d: 17:59:ee:db:20:8e:f2:79:90:14:88:39:32:ae:19:ee:bf:7c: 9e:09:63:c2:be:c2:fb:f2:d8:8e:31:16:7a:75:2f:ea:f1:de: 1e:cc:90:c7:77:a3:77:25:b1:42:2d:49:9e:d8:20:73:96:c7: 25:45:be:ba:bf:45:d0:15:5e:9e:b8:b6:5c:92:dc:51:70:69: 14:19:03:73:8e:a0:a2:b0:0d:ce:b5:b7:7a:fc:27:43:2c:c6: b3:df:45:e3:44:05:47:e4:69:b4:ff:b0:5e:8d:f0:36:2d:ce: 5f:fa:e1:bf:35:96:67:67:73:fa:3d:6f:70:53:61:0c:19:74: 18:1d:7b:c3:cb:dd:69:43:34:e3:72:38:82:fd:a4:14:4f:be: 26:cb:7e:3f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26uLgAIEgE8igS7XOgKXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk4NDgzZWMyNGI4NmM5MWY3ZjJmYWNhMzAyMzQ1ZDZjN2E1ZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+UXqpd3xYUEQZ1MZireHhLWt/al eVmzYpEESQTC5JfKhKGNCp45cecUnady2rSY+SIZWt55vxF0H6oHd3EWVoe5oPkJ 8UefojEQUKez5yg09y7RuJS8A0t67vZ0/y84GnduhfP72M5b4yrGxfndat/80W8g LKH8aGldOKkq/Nwh6LQscbz6A11VPnmE7lAS02ZAsoikl1X57ZNtKgkz47I7TpFm XbKzwGea9K0jRB2M+o6vKYd8s8X5m5SX8simJxJO/oGlRySCoxx75qi+O+I2WOEq GYm7w9qKEQsghQ0zJ8ykNvGUQUxJ20Jr8xb507iUeuH7rgCep6pvdJP86wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIeYSD7CS4bJH38vrKMCNF1sel5RMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEvaDVoSVBzSkxoc2tmZnktc293STBYV3g2WGxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxmAFAA MA0GCSqGSIb3DQEBCwUAA4IBAQBB67mSviMwi+2JbjQ8hZoI2kjRNzEPDTqR4wFE Zmd781oJ4Ad4LiKZwdThYM7qB2ILbngSj3OjGGyWrukikGofqRfyBqlt592L6zJc EjDcXd6TjRifdbV3SlXVBro7eSElYoD4fGtvuQv+lY0XWe7bII7yeZAUiDkyrhnu v3yeCWPCvsL78tiOMRZ6dS/q8d4ezJDHd6N3JbFCLUme2CBzlsclRb66v0XQFV6e uLZcktxRcGkUGQNzjqCisA3Otbd6/CdDLMaz30XjRAVH5Gm0/7BejfA2Lc5f+uG/ NZZnZ3P6PW9wU2EMGXQYHXvDy91pQzTjcjiC/aQUT74my34/ -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:39 2026 by rpki-client