This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa File: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (raw, json) Hash identifier: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4= Subject key identifier: E4:42:E6:04:93:E9:60:0E:ED:56:72:EC:7E:F2:7B:58:55:BE:FE:78 Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2 Certificate serial: 019B7C1348DDA872FB5AA65EE2D6EB84DC40 Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213539 IP address blocks: 2a14:cb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:48:dd:a8:72:fb:5a:a6:5e:e2:d6:eb:84:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e442e60493e9600eed5672ec7ef27b5855befe78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:8f:17:f2:47:d7:dd:cb:fe:5a:7b:ba:cb: fe:24:63:8e:1f:a1:3a:91:08:5b:bf:c3:0b:16:b8: 4e:5b:fd:a0:5b:1a:9d:35:00:92:22:78:7f:76:79: 26:e6:68:1d:66:9d:62:ab:36:9c:11:31:d3:1f:cd: ae:76:13:e9:a1:94:27:35:02:19:8e:ac:c8:db:90: 89:a1:af:9e:6d:30:8a:b4:06:c6:2a:af:ad:ea:44: 3a:1d:5e:25:f7:29:bd:ae:2c:7d:ad:7a:94:f1:3d: 36:01:50:a0:88:7a:61:0c:46:98:f7:02:b3:1a:92: 10:e6:0b:87:35:f9:15:46:8b:76:52:5a:53:ae:fc: 06:d3:b3:c5:ba:f0:1f:57:ba:f7:ff:1f:53:28:e5: 0c:98:b2:1e:2d:43:b9:62:02:c8:dd:50:ac:58:61: c4:d5:3f:f3:72:d8:47:26:83:fa:c5:7c:38:33:ec: 30:58:b5:27:91:6c:7c:dc:ff:cd:8e:b2:f8:6d:d1: bc:4f:9b:17:28:fc:22:dd:40:ba:5e:6e:c3:ff:10: 24:d2:9e:51:1b:c1:a2:c2:8a:3a:f6:3a:5b:c3:0a: 30:fc:46:84:d2:cf:dc:32:6e:05:85:fa:a7:72:05: 01:e3:2b:5c:87:fa:53:0d:ec:31:a9:20:37:da:cc: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:E6:04:93:E9:60:0E:ED:56:72:EC:7E:F2:7B:58:55:BE:FE:78 X509v3 Authority Key Identifier: keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:cb00::/29 Signature Algorithm: sha256WithRSAEncryption c0:dd:f9:33:bb:34:38:7a:a3:61:84:f4:50:bb:d9:87:aa:a9: 53:f8:bb:50:62:7b:85:17:8d:64:40:a8:ad:51:fc:7b:81:33: ff:bf:ff:8b:66:23:ac:2f:55:36:54:39:99:ca:74:91:7e:b4: e4:ae:e9:59:50:e0:64:66:2c:fb:96:94:6c:8d:8b:30:76:06: 1f:82:80:f4:3b:da:f6:ae:5b:e6:22:e3:d1:2b:ec:b0:a0:69: 46:d6:bf:f5:2b:60:20:aa:f2:75:6c:25:23:7e:62:29:65:c5: cc:e0:83:e3:46:a1:57:10:d3:ee:91:79:49:4d:84:fe:0a:13: 10:21:6c:16:02:e5:03:71:27:89:00:9b:17:0c:ac:62:a6:53: 20:71:51:22:f6:b8:bd:52:9f:4d:01:f5:46:a9:79:db:57:08: 71:dc:b5:22:26:97:31:e2:df:de:ec:c1:1e:d1:be:46:88:c8: eb:d2:e8:98:fd:3f:a6:d8:9b:8a:c1:bc:b2:db:0d:f0:24:5a: f5:5d:66:a6:18:37:2f:7f:b6:95:d8:57:be:a7:a2:62:41:90: d0:69:ba:67:7e:6b:ed:8d:4b:d1:fd:ac:47:fa:d2:de:20:d0: 43:f0:40:f7:cb:2e:31:7f:1c:a0:b4:ac:57:c1:00:7a:34:11: e0:5f:64:46 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8E0jdqHL7WqZe4tbrhNxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTUwYTRlY2Y0NTgxMGNmNmY2OWM5N2MzYzY4NWNmYzI0 OTc2YzIwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDQyZTYwNDkzZTk2MDBlZWQ1NjcyZWM3ZWYyN2I1ODU1YmVmZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KPF/JH193L/lp7usv+JGOOH6E6 kQhbv8MLFrhOW/2gWxqdNQCSInh/dnkm5mgdZp1iqzacETHTH82udhPpoZQnNQIZ jqzI25CJoa+ebTCKtAbGKq+t6kQ6HV4l9ym9rix9rXqU8T02AVCgiHphDEaY9wKz GpIQ5guHNfkVRot2UlpTrvwG07PFuvAfV7r3/x9TKOUMmLIeLUO5YgLI3VCsWGHE 1T/zcthHJoP6xXw4M+wwWLUnkWx83P/NjrL4bdG8T5sXKPwi3UC6Xm7D/xAk0p5R G8Giwoo69jpbwwow/EaE0s/cMm4FhfqncgUB4ytch/pTDewxqSA32syXJwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFORC5gST6WAO7VZy7H7ye1hVvv54MB8GA1UdIwQY MBaAFK6lCk7PRYEM9vacl8PGhc/CSXbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYt YzcyYTljNmZiOGYyLzEvNUVMbUJKUHBZQTd0Vm5Mc2Z2SjdXRlctX25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYtYzcyYTljNmZiOGYy LzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTLADAN BgkqhkiG9w0BAQsFAAOCAQEAwN35M7s0OHqjYYT0ULvZh6qpU/i7UGJ7hReNZECo rVH8e4Ez/7//i2YjrC9VNlQ5mcp0kX605K7pWVDgZGYs+5aUbI2LMHYGH4KA9Dva 9q5b5iLj0SvssKBpRta/9StgIKrydWwlI35iKWXFzOCD40ahVxDT7pF5SU2E/goT ECFsFgLlA3EniQCbFwysYqZTIHFRIva4vVKfTQH1Rql521cIcdy1IiaXMeLf3uzB HtG+RojI69LomP0/ptibisG8stsN8CRa9V1mphg3L3+2ldhXvqeiYkGQ0Gm6Z35r 7Y1L0f2sR/rS3iDQQ/BA98suMX8coLSsV8EAejQR4F9kRg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:17 2026 by rpki-client