This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa File: t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa (raw, json) Hash identifier: fCkC5bZnOUjJ4RgM4loxWys//SbXBNG4IrH2ok9kPJQ= Subject key identifier: B7:40:15:B1:F0:3D:52:24:2A:8D:6F:ED:E5:D3:DB:DE:79:82:DA:BB Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a Certificate serial: 019B7FF2224F33A49DAF31505F57A92C4917 Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa Signing time: Fri 02 Jan 2026 18:22:13 +0000 ROA not before: Fri 02 Jan 2026 18:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 2a13:5ac0::/38 maxlen: 38 2a13:5ac0:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:22:4f:33:a4:9d:af:31:50:5f:57:a9:2c:49:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b74015b1f03d52242a8d6fede5d3dbde7982dabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:ba:e1:45:87:8e:a9:e1:ed:90:b3:41:7d: 10:27:ed:7a:0f:eb:eb:52:70:5f:32:62:bd:d8:2d: 01:82:87:f3:38:91:a5:6c:07:d1:96:b9:80:27:31: 6a:46:a7:0a:cc:4d:7d:30:1c:88:32:07:64:6c:1a: fb:85:b8:d7:fa:24:3d:81:0b:9b:83:ff:27:07:07: 78:d8:14:4a:62:3e:a6:94:0f:6e:e8:c6:e6:1d:a9: d3:e6:be:4e:4e:94:86:e1:5e:11:88:b5:e5:9e:81: 45:b5:a5:40:66:fd:40:48:86:97:d8:cf:9d:ff:f2: eb:b8:ad:9f:13:80:9e:a9:b7:9d:4c:f2:58:56:83: 75:63:46:6d:18:90:4a:52:ba:82:ff:3b:27:fa:59: eb:3e:18:52:50:8f:e5:30:64:8f:92:53:1d:66:e7: e5:2b:6e:11:6d:b6:10:22:a4:89:3d:86:7d:49:c3: 1b:6e:af:3c:43:5e:8c:44:2f:a8:b7:3d:4d:19:58: 2d:fe:d8:8e:3e:48:54:49:98:42:6c:46:65:da:33: 67:6d:42:5d:c8:eb:ef:72:b7:a2:ea:8b:34:cd:4c: 1e:ce:ab:44:6f:1b:9d:a9:24:00:14:bb:bf:a3:2c: ff:0b:fc:b4:35:20:7f:e0:02:c1:df:26:3f:4d:12: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:15:B1:F0:3D:52:24:2A:8D:6F:ED:E5:D3:DB:DE:79:82:DA:BB X509v3 Authority Key Identifier: keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5ac0::/37 Signature Algorithm: sha256WithRSAEncryption 1e:9a:37:b0:28:68:66:58:06:e5:d3:f9:43:00:ca:d0:ea:0e: 2e:6e:08:26:6d:f0:bd:49:27:81:0a:53:d3:64:fd:74:06:24: de:ff:c3:3a:c0:b7:a1:00:b2:23:ba:89:37:fb:94:1e:ea:c2: 04:c6:f7:36:c1:f8:62:14:24:0d:bb:c2:8a:09:23:96:d7:e2: 88:89:69:24:c9:bc:00:96:68:b0:5f:8e:55:24:cc:8d:aa:9c: 8f:c9:db:b2:cb:e9:9b:bb:46:13:eb:dc:d7:56:e4:eb:26:99: 3c:85:6d:b6:e3:57:af:91:d1:87:01:a2:d4:57:a2:1d:ba:65: 3c:4c:73:66:ec:6a:44:a5:61:cc:a4:31:21:ac:68:fd:f6:54: 01:22:54:14:3d:ee:a9:57:61:10:8e:93:65:f7:0c:10:ef:19: 69:6e:2f:16:62:aa:d2:66:a0:a3:08:8f:00:70:6b:56:62:47: fc:96:94:a2:7c:a8:d2:91:de:90:2f:d3:85:f8:73:df:b5:37: d3:21:43:50:33:cb:12:ee:fd:be:8c:28:b3:61:a5:a9:fa:57: c2:86:13:e2:7c:53:f9:2e:fc:f6:c7:2e:c4:9d:c4:e2:91:30: 60:f4:2b:c1:0f:fe:0f:29:f2:cc:33:23:0e:f6:76:8c:05:25: c6:5c:ee:92 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/8iJPM6SdrzFQX1epLEkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzhmOTE4MmI3ZGE0NDAwMzU5MWVlYWUyNTYwZjg0NTFi MzM5M2EwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQwMTViMWYwM2Q1MjI0MmE4ZDZmZWRlNWQzZGJkZTc5ODJkYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0S64UWHjqnh7ZCzQX0QJ+16D+vr UnBfMmK92C0BgofzOJGlbAfRlrmAJzFqRqcKzE19MByIMgdkbBr7hbjX+iQ9gQub g/8nBwd42BRKYj6mlA9u6MbmHanT5r5OTpSG4V4RiLXlnoFFtaVAZv1ASIaX2M+d //LruK2fE4CeqbedTPJYVoN1Y0ZtGJBKUrqC/zsn+lnrPhhSUI/lMGSPklMdZufl K24RbbYQIqSJPYZ9ScMbbq88Q16MRC+otz1NGVgt/tiOPkhUSZhCbEZl2jNnbUJd yOvvcrei6os0zUwezqtEbxudqSQAFLu/oyz/C/y0NSB/4ALB3yY/TRKzcwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLdAFbHwPVIkKo1v7eXT2955gtq7MB8GA1UdIwQY MBaAFOk4+RgrfaRAA1ke6uJWD4RRszk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmIt NGRmNzI4YzU4ZDE3LzEvdDBBVnNmQTlVaVFxaldfdDVkUGIzbm1DMnJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmItNGRmNzI4YzU4ZDE3 LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKhNawAAw DQYJKoZIhvcNAQELBQADggEBAB6aN7AoaGZYBuXT+UMAytDqDi5uCCZt8L1JJ4EK U9Nk/XQGJN7/wzrAt6EAsiO6iTf7lB7qwgTG9zbB+GIUJA27wooJI5bX4oiJaSTJ vACWaLBfjlUkzI2qnI/J27LL6Zu7RhPr3NdW5OsmmTyFbbbjV6+R0YcBotRXoh26 ZTxMc2bsakSlYcykMSGsaP32VAEiVBQ97qlXYRCOk2X3DBDvGWluLxZiqtJmoKMI jwBwa1ZiR/yWlKJ8qNKR3pAv04X4c9+1N9MhQ1AzyxLu/b6MKLNhpan6V8KGE+J8 U/ku/PbHLsSdxOKRMGD0K8EP/g8p8swzIw72dowFJcZc7pI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:15 2026 by rpki-client