This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa File: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (raw, json) Hash identifier: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM= Subject key identifier: E5:5B:ED:D0:06:EF:4B:15:B2:8C:07:7E:00:BB:FA:F5:00:AC:36:C9 Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39 Certificate serial: 019B7F13BD6197BDF66BB2A72C1650545306 Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa Signing time: Fri 02 Jan 2026 14:19:18 +0000 ROA not before: Fri 02 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21170 IP address blocks: 2a09:2b80:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:bd:61:97:bd:f6:6b:b2:a7:2c:16:50:54:53:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a665b90069bd71850602e7400c529793269e39 Validity Not Before: Jan 2 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e55bedd006ef4b15b28c077e00bbfaf500ac36c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:93:2e:7a:bf:84:a3:65:5b:6e:b5:83:33: 7e:3b:ae:57:4d:11:d9:c4:80:5c:d4:70:2f:9e:18: 4b:99:ae:06:40:de:44:41:11:45:62:ee:70:e6:cb: 19:5c:aa:5c:11:ca:7a:79:c4:9b:83:62:82:0e:e3: 4c:d2:e1:f4:4c:7d:eb:6d:6b:19:e5:96:4c:88:25: 0c:4d:5c:1e:c0:df:3e:91:9e:90:ba:85:5e:26:19: 19:4f:28:92:3d:03:e4:4a:9c:51:b6:c4:74:6a:b4: fe:a4:bb:12:3e:52:cb:91:39:68:4b:14:83:c6:1c: 36:cf:a7:4a:ba:16:4b:e1:1e:f9:f7:99:54:ed:43: e8:d8:64:ec:76:99:13:d6:8a:82:37:e4:0b:4c:ba: be:9b:5a:a1:80:63:5a:58:2e:0d:b5:98:1a:42:25: 68:ce:f7:81:68:1c:d7:e4:92:7b:28:38:95:24:45: 5e:11:1a:af:25:51:f3:d3:a0:f2:bb:90:6b:6f:37: 14:ad:e8:8b:f1:b4:6e:b9:5e:04:61:a7:5f:4a:33: 9b:9f:63:be:c5:a1:e6:27:09:2a:2e:25:67:14:25: c3:6c:28:40:3e:01:87:e7:07:9f:18:3c:fe:81:07: e8:db:6a:34:7a:8a:b6:9f:2f:94:be:ff:55:21:39: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5B:ED:D0:06:EF:4B:15:B2:8C:07:7E:00:BB:FA:F5:00:AC:36:C9 X509v3 Authority Key Identifier: keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:2b80:15::/48 Signature Algorithm: sha256WithRSAEncryption 2c:66:6d:97:d1:6c:eb:b3:b6:e0:f7:c1:d9:96:e4:37:ef:25: 71:29:f2:e2:d0:0b:b5:ea:2a:73:54:63:06:c0:a9:c4:4c:91: de:ac:bd:ed:26:eb:71:d1:fd:5e:a1:74:98:f1:c3:26:40:f9: 06:53:76:4e:f6:ee:b0:31:e9:b7:0f:a3:71:0e:bd:46:73:7b: b5:6c:37:09:7c:56:7b:40:53:66:42:07:0b:bb:6b:de:bf:e5: 4d:ce:f7:31:7e:63:bf:fa:7d:fe:c4:2b:e1:a0:91:60:f8:51: fc:71:8a:d0:43:79:fc:e3:de:84:bc:e7:fe:24:bb:ee:33:c6: e7:4b:36:13:c0:47:a6:fc:85:f3:21:92:27:66:d4:c8:6d:9b: b1:f8:e3:60:97:21:c5:85:a0:6a:fb:2f:5c:58:ed:76:b9:f0: ad:99:d0:2a:47:63:f6:36:1b:ef:18:83:2d:56:a8:dd:61:1c: 4f:a6:a1:8c:54:a5:41:ed:fd:fc:e1:5c:ca:00:a3:a0:f8:f9: b5:55:62:ed:fc:05:0b:82:c6:4d:22:a2:38:30:09:83:6a:90: b5:95:d4:82:bf:40:60:5d:8a:eb:d4:84:9b:6a:b1:ca:1b:71: 6f:cc:10:73:50:8f:e1:83:a0:a6:81:e6:1b:95:88:33:23:2f: 78:25:05:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/E71hl732a7KnLBZQVFMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy NjllMzkwHhcNMjYwMTAyMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTViZWRkMDA2ZWY0YjE1YjI4YzA3N2UwMGJiZmFmNTAwYWMzNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWWTLnq/hKNlW261gzN+O65XTRHZ xIBc1HAvnhhLma4GQN5EQRFFYu5w5ssZXKpcEcp6ecSbg2KCDuNM0uH0TH3rbWsZ 5ZZMiCUMTVwewN8+kZ6QuoVeJhkZTyiSPQPkSpxRtsR0arT+pLsSPlLLkTloSxSD xhw2z6dKuhZL4R7595lU7UPo2GTsdpkT1oqCN+QLTLq+m1qhgGNaWC4NtZgaQiVo zveBaBzX5JJ7KDiVJEVeERqvJVHz06Dyu5BrbzcUreiL8bRuuV4EYadfSjObn2O+ xaHmJwkqLiVnFCXDbChAPgGH5wefGDz+gQfo22o0eoq2ny+Uvv9VITmOqwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOVb7dAG70sVsowHfgC7+vUArDbJMB8GA1UdIwQY MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct Yzk0NTdlYzgxMTUxLzEvNVZ2dDBBYnZTeFd5akFkLUFMdjY5UUNzTnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkrgAAV MA0GCSqGSIb3DQEBCwUAA4IBAQAsZm2X0Wzrs7bg98HZluQ37yVxKfLi0Au16ipz VGMGwKnETJHerL3tJutx0f1eoXSY8cMmQPkGU3ZO9u6wMem3D6NxDr1Gc3u1bDcJ fFZ7QFNmQgcLu2vev+VNzvcxfmO/+n3+xCvhoJFg+FH8cYrQQ3n8496EvOf+JLvu M8bnSzYTwEem/IXzIZInZtTIbZux+ONglyHFhaBq+y9cWO12ufCtmdAqR2P2Nhvv GIMtVqjdYRxPpqGMVKVB7f384VzKAKOg+Pm1VWLt/AULgsZNIqI4MAmDapC1ldSC v0BgXYrr1ISbarHKG3FvzBBzUI/hg6CmgeYblYgzIy94JQV9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:24 2026 by rpki-client