This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa File: 5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa (raw, json) Hash identifier: EEAEVHUAhDuMxhb53Mdri68EpJGkXtEYX2cNgsYZpzc= Subject key identifier: E7:3C:B6:52:5A:FB:F5:D6:ED:4D:A1:37:39:9B:3F:EA:AA:F7:52:A1 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CB649C5CA96186454CD18305D0DE Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198057 IP address blocks: 2a01:e281:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:64:9c:5c:a9:61:86:45:4c:d1:83:05:d0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73cb6525afbf5d6ed4da137399b3feaaaf752a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:bc:97:a9:69:4f:3f:f7:35:00:c4:06:56: 9d:f2:23:37:bd:a6:c1:65:71:b8:67:69:50:61:4c: 7b:82:48:6d:c0:03:bc:19:e7:54:af:91:c0:75:c9: ea:74:f0:2f:d2:5e:79:b7:62:7a:6c:da:cd:09:1b: 53:51:d1:c0:50:e7:dd:1b:bd:17:29:e6:78:4b:fc: 6f:a2:0b:89:dd:94:35:22:c5:c7:28:b0:c7:a7:19: 99:0e:98:5d:c2:e8:78:4c:e6:0a:f1:86:0d:ed:a2: fa:36:97:46:41:96:3b:18:17:6c:b1:59:23:c2:16: a0:4b:e1:db:ea:67:a0:ad:fd:60:05:44:fa:5f:8d: f7:f2:2d:8e:16:f5:90:13:0b:9c:fa:ad:cc:ea:58: 8d:88:58:be:88:a3:f2:0b:59:23:80:6f:ef:cc:68: 31:c7:67:2f:78:a7:e2:f6:41:3e:72:9a:74:a2:f4: 0e:96:c9:a5:9c:41:6b:5c:08:2e:87:df:f4:d3:9c: f9:dd:f2:28:38:c1:95:c2:b0:14:cf:a7:6f:4e:e5: 04:7e:df:54:85:15:b3:86:fc:cc:0d:7c:a6:ab:4a: 35:2d:f0:6d:77:8e:7a:6a:b5:20:7b:90:19:c9:68: 04:b0:cf:ff:9a:b5:16:12:17:89:3d:72:06:8a:50: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:B6:52:5A:FB:F5:D6:ED:4D:A1:37:39:9B:3F:EA:AA:F7:52:A1 X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:ab00::/40 Signature Algorithm: sha256WithRSAEncryption 11:67:99:29:01:1f:8c:fe:8f:2e:07:f5:ed:79:46:f9:b2:ed: f7:d2:68:36:c7:76:f0:7e:f5:d2:cc:c9:87:82:d1:6b:df:6c: 21:0f:75:f3:85:61:6a:50:c6:98:68:f9:13:86:45:db:a9:30: a9:0d:10:a0:a8:c9:da:01:28:c7:ed:c8:58:0b:73:79:e5:b8: 71:d3:1d:f3:e1:97:38:c3:e2:09:05:a0:a6:48:b7:bd:e5:be: 1d:18:67:2c:ef:9e:db:71:f5:8d:97:88:92:7c:83:77:7f:35: a4:70:d3:2d:47:1e:09:ff:41:f5:ac:3c:90:61:1a:2b:0a:0f: 00:67:88:69:4c:a6:5d:37:60:a4:c4:57:74:cf:ed:a9:40:9a: 12:44:38:67:88:71:ef:b3:45:45:93:b2:0e:6d:5a:7c:fe:32: 0b:8f:8b:e7:56:e2:c0:cd:a1:a0:4f:c3:ed:18:14:6e:74:1d: 55:9b:ce:6e:1e:7d:44:c4:d4:98:5b:63:9b:22:09:56:e8:a7: e0:c8:65:de:dc:cf:2f:ff:6a:47:5d:9d:03:45:a1:db:bc:16: 00:45:7d:0f:9d:ce:4e:bd:57:0b:3c:18:68:20:8f:a8:b5:d1: dc:26:9a:9a:17:b8:dc:31:a6:72:16:23:97:31:88:ce:28:26: a5:9a:4d:b5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pstknFypYYZFTNGDBdDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNjYjY1MjVhZmJmNWQ2ZWQ0ZGExMzczOTliM2ZlYWFhZjc1MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuay8l6lpTz/3NQDEBlad8iM3vabB ZXG4Z2lQYUx7gkhtwAO8GedUr5HAdcnqdPAv0l55t2J6bNrNCRtTUdHAUOfdG70X KeZ4S/xvoguJ3ZQ1IsXHKLDHpxmZDphdwuh4TOYK8YYN7aL6NpdGQZY7GBdssVkj whagS+Hb6megrf1gBUT6X4338i2OFvWQEwuc+q3M6liNiFi+iKPyC1kjgG/vzGgx x2cveKfi9kE+cpp0ovQOlsmlnEFrXAguh9/005z53fIoOMGVwrAUz6dvTuUEft9U hRWzhvzMDXymq0o1LfBtd456arUge5AZyWgEsM//mrUWEheJPXIGilCgAQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOc8tlJa+/XW7U2hNzmbP+qq91KhMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvNXp5MlVscjc5ZGJ0VGFFM09ac182cXIzVXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigasw DQYJKoZIhvcNAQELBQADggEBABFnmSkBH4z+jy4H9e15Rvmy7ffSaDbHdvB+9dLM yYeC0WvfbCEPdfOFYWpQxpho+ROGRdupMKkNEKCoydoBKMftyFgLc3nluHHTHfPh lzjD4gkFoKZIt73lvh0YZyzvnttx9Y2XiJJ8g3d/NaRw0y1HHgn/QfWsPJBhGisK DwBniGlMpl03YKTEV3TP7alAmhJEOGeIce+zRUWTsg5tWnz+MguPi+dW4sDNoaBP w+0YFG50HVWbzm4efUTE1JhbY5siCVbop+DIZd7czy//akddnQNFodu8FgBFfQ+d zk69Vws8GGggj6i10dwmmpoXuNwxpnIWI5cxiM4oJqWaTbU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:06 2026 by rpki-client