This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/5-fSRldHA_TyCo0Af_n4H7VHHoo.roa File: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (raw, json) Hash identifier: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw= Subject key identifier: E7:E7:D2:46:57:47:03:F4:F2:0A:8D:00:7F:F9:F8:1F:B5:47:1E:8A Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce Certificate serial: 019B78A37D62F4D2CD788128F39DEC32D83B Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/5-fSRldHA_TyCo0Af_n4H7VHHoo.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57025 IP address blocks: 2a13:db00::/30 maxlen: 30 2a13:db01:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:62:f4:d2:cd:78:81:28:f3:9d:ec:32:d8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7e7d246574703f4f20a8d007ff9f81fb5471e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:49:c3:c1:95:56:e0:00:e4:22:c7:9e:46:66: d4:32:bb:3c:2f:76:a5:4a:fa:b2:48:05:71:7e:1e: 04:68:3f:61:97:50:b0:6e:a2:89:3f:31:88:62:2d: 88:3a:d7:da:de:d0:0d:aa:94:49:02:45:e9:df:2e: 08:b6:8e:70:f5:fc:77:a5:5b:1f:22:5f:96:d5:f9: d0:1c:8e:ba:81:6d:01:f3:47:83:ce:06:41:93:00: 69:f9:de:b8:05:cc:48:dd:4f:0e:66:72:f4:da:3c: 21:61:3b:88:86:28:c1:56:ca:ba:d9:c6:af:19:1e: 3f:68:38:9f:fb:f4:b2:33:13:cd:b9:f9:ea:15:2c: bb:1f:c8:b5:8c:c7:98:ca:83:40:46:87:31:0c:e7: 6c:72:f3:3e:b4:fd:a6:3f:af:84:72:97:2b:a2:07: dc:32:1d:23:9b:e9:d6:56:94:0b:73:84:f7:27:5f: 94:17:90:43:7e:ea:d5:87:32:bb:e4:a4:2d:70:51: b4:7b:e6:f3:cf:68:b5:31:53:fe:a3:fb:5d:a2:37: 39:0c:e8:2f:b6:e9:57:e4:78:35:bb:eb:f0:1b:ff: 7f:62:43:70:95:f7:bb:fa:4c:34:09:6d:49:63:f3: b8:aa:78:82:e2:b2:7e:6f:69:ba:b0:3c:61:d2:f5: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E7:D2:46:57:47:03:F4:F2:0A:8D:00:7F:F9:F8:1F:B5:47:1E:8A X509v3 Authority Key Identifier: keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/5-fSRldHA_TyCo0Af_n4H7VHHoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:db00::/30 Signature Algorithm: sha256WithRSAEncryption ad:84:41:16:a2:e7:b6:30:b4:c3:47:4c:28:cd:17:e3:23:00: 54:62:10:8f:ee:28:06:de:bc:e4:41:14:40:20:09:6a:ef:47: ca:5a:ed:d3:b0:95:8c:50:de:e6:aa:ba:e0:7c:b6:69:6c:8d: 91:ce:69:99:08:80:71:27:27:10:ea:3f:5a:86:f8:80:23:76: 04:f5:66:5f:02:18:d8:78:bb:c7:18:e1:e7:c8:1f:66:bc:70: 7b:cf:00:25:17:4e:92:a6:3f:65:60:d7:5c:d9:32:00:5d:06: 32:66:e9:56:e7:06:da:40:c8:7a:dd:85:b5:85:ce:18:27:25: 0f:f3:c1:17:0f:da:6c:cc:3b:5a:2d:f9:e9:fd:98:00:4e:72: 7c:d4:1e:94:cd:d0:62:bd:de:81:85:d4:ce:c1:11:5a:2a:4f: f3:1f:ad:2c:2e:59:9f:eb:c6:c3:53:7b:3c:14:dd:ab:0f:a0: 6f:6f:f7:29:49:68:f2:e5:61:80:81:41:0d:bc:a4:73:84:9a: 6a:52:21:2e:43:3a:b5:cc:3b:2d:70:cd:80:c3:6f:6f:30:ff: e2:e5:03:b7:37:90:e3:7f:49:a2:79:84:43:4a:3a:52:59:06: 6a:0a:67:b4:58:18:cc:43:67:e9:f0:ae:6e:3b:a0:f4:06:e4: 21:bc:fb:e5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o31i9NLNeIEo853sMtg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjM3MTI4MWRmZTE5MDcyZDEzMzlkZDA0ODJiMmFhZmFk NTQyY2UwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2U3ZDI0NjU3NDcwM2Y0ZjIwYThkMDA3ZmY5ZjgxZmI1NDcxZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7knDwZVW4ADkIseeRmbUMrs8L3al SvqySAVxfh4EaD9hl1CwbqKJPzGIYi2IOtfa3tANqpRJAkXp3y4Ito5w9fx3pVsf Il+W1fnQHI66gW0B80eDzgZBkwBp+d64BcxI3U8OZnL02jwhYTuIhijBVsq62cav GR4/aDif+/SyMxPNufnqFSy7H8i1jMeYyoNARocxDOdscvM+tP2mP6+Ecpcrogfc Mh0jm+nWVpQLc4T3J1+UF5BDfurVhzK75KQtcFG0e+bzz2i1MVP+o/tdojc5DOgv tulX5Hg1u+vwG/9/YkNwlfe7+kw0CW1JY/O4qniC4rJ+b2m6sDxh0vUaXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOfn0kZXRwP08gqNAH/5+B+1Rx6KMB8GA1UdIwQY MBaAFKQjcSgd/hkHLRM53QSCsqr61ULOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNDNhMDUtNjAzZi00NjA3LWJjNjgt OTkwNjBlMjQ1OGVjLzEvNS1mU1JsZEhBX1R5Q28wQWZfbjRIN1ZISG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hNDNhMDUtNjAzZi00NjA3LWJjNjgtOTkwNjBlMjQ1OGVj LzEvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhPbADAN BgkqhkiG9w0BAQsFAAOCAQEArYRBFqLntjC0w0dMKM0X4yMAVGIQj+4oBt685EEU QCAJau9Hylrt07CVjFDe5qq64Hy2aWyNkc5pmQiAcScnEOo/Wob4gCN2BPVmXwIY 2Hi7xxjh58gfZrxwe88AJRdOkqY/ZWDXXNkyAF0GMmbpVucG2kDIet2FtYXOGCcl D/PBFw/abMw7Wi356f2YAE5yfNQelM3QYr3egYXUzsERWipP8x+tLC5Zn+vGw1N7 PBTdqw+gb2/3KUlo8uVhgIFBDbykc4SaalIhLkM6tcw7LXDNgMNvbzD/4uUDtzeQ 439JonmEQ0o6UlkGagpntFgYzENn6fCubjug9AbkIbz75Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:19 2026 by rpki-client