This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/W5h40v2bXEhJayS-SrtWJ-dPHXw.roa File: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (raw, json) Hash identifier: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E= Subject key identifier: 5B:98:78:D2:FD:9B:5C:48:49:6B:24:BE:4A:BB:56:27:E7:4F:1D:7C Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Certificate serial: 019B7D5BFA635D2D3A4DCDDD0879AF3E0363 Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/W5h40v2bXEhJayS-SrtWJ-dPHXw.roa Signing time: Fri 02 Jan 2026 06:18:58 +0000 ROA not before: Fri 02 Jan 2026 06:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211169 IP address blocks: 2001:678:f68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fa:63:5d:2d:3a:4d:cd:dd:08:79:af:3e:03:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b9878d2fd9b5c48496b24be4abb5627e74f1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:00:6c:ce:cb:e7:34:1e:57:bb:6e:7b:a5: 1a:c4:3c:8b:79:1c:e6:52:42:47:75:68:3d:31:45: ff:08:06:59:5b:d4:6d:44:0a:04:5e:27:35:96:69: b2:8f:52:0f:06:77:72:b2:c2:35:5c:f8:58:1f:91: f8:1a:23:7e:fd:3a:3d:79:12:e7:18:d3:72:a7:f9: c5:b8:88:36:9f:c0:cd:95:4b:d2:dd:a1:8e:f0:e1: 79:68:78:27:e8:05:1d:e0:5b:49:7e:81:05:9e:53: 0d:2b:87:44:41:18:78:82:0f:ec:67:63:94:de:51: 7d:a0:ca:e6:05:9e:94:59:80:42:72:75:2c:78:f2: 54:15:39:e0:06:0c:ee:52:77:04:a9:71:f9:11:44: 27:57:87:f9:bf:8c:0a:7b:dc:1a:3a:6e:d3:69:d4: 52:81:9b:37:5b:62:54:4c:d7:f3:a8:f5:da:c2:34: be:2b:a4:ed:8b:9e:03:d8:99:7e:4c:80:67:18:b1: 62:13:4e:9e:5a:96:05:3b:18:3b:fb:b1:3a:2c:ea: 58:55:47:51:70:e0:18:7e:57:2f:0d:0c:1b:33:6e: aa:c2:ee:a9:5e:b9:8c:59:35:10:0a:c5:c0:33:51: fb:1f:66:f9:a1:1e:00:0d:69:7e:05:61:e5:5f:34: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:78:D2:FD:9B:5C:48:49:6B:24:BE:4A:BB:56:27:E7:4F:1D:7C X509v3 Authority Key Identifier: keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/W5h40v2bXEhJayS-SrtWJ-dPHXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f68::/48 Signature Algorithm: sha256WithRSAEncryption 00:ab:a7:42:96:57:04:a6:a0:ab:ac:2b:93:ed:75:e5:48:2d: 05:d3:54:a8:af:17:df:4b:1d:9a:00:39:3e:15:2a:8c:b8:da: e2:69:4f:81:87:2b:c0:cf:73:4d:e4:25:9a:2b:42:eb:87:ea: 6a:38:61:c7:4e:8b:df:ed:ed:8b:da:b5:72:73:c7:90:01:d4: 1c:9f:b4:f2:4d:cd:3a:f9:20:2d:57:d8:af:3b:cc:c3:92:4d: e4:6b:7a:7f:0d:2b:b5:4f:ad:58:e6:39:b1:24:fe:18:f4:f0: 54:00:51:f5:de:a1:a8:91:b4:02:9d:d2:bb:31:5c:77:88:8f: fb:98:b9:02:f6:a2:41:78:08:d3:5d:27:2a:68:03:8b:a9:91: 06:3f:a4:24:e4:94:c1:0d:72:15:6e:27:2f:ed:23:22:8c:42: e8:b8:89:62:6d:70:8b:56:cc:88:7f:fe:d2:3a:07:48:fd:59: 9a:e8:6f:96:65:dd:bb:08:73:7e:6e:5e:ee:cd:d3:7b:7e:ea: 98:52:b5:87:15:56:43:24:15:3b:83:4b:92:18:9b:3d:44:2e: 11:7e:45:22:7c:30:7b:9d:c0:33:f1:02:11:ab:89:28:12:95: 13:c9:00:37:ba:9d:dc:0e:ff:28:25:3f:64:6b:61:56:0a:3a: 9c:9c:61:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W/pjXS06Tc3dCHmvPgNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTEyZWQ2M2E0ODRjMDNkNGMzYzI3MWNiMmVmZjA1NTNl MTIzNzAwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjk4NzhkMmZkOWI1YzQ4NDk2YjI0YmU0YWJiNTYyN2U3NGYxZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqIAbM7L5zQeV7tue6UaxDyLeRzm UkJHdWg9MUX/CAZZW9RtRAoEXic1lmmyj1IPBndyssI1XPhYH5H4GiN+/To9eRLn GNNyp/nFuIg2n8DNlUvS3aGO8OF5aHgn6AUd4FtJfoEFnlMNK4dEQRh4gg/sZ2OU 3lF9oMrmBZ6UWYBCcnUsePJUFTngBgzuUncEqXH5EUQnV4f5v4wKe9waOm7TadRS gZs3W2JUTNfzqPXawjS+K6Tti54D2Jl+TIBnGLFiE06eWpYFOxg7+7E6LOpYVUdR cOAYflcvDQwbM26qwu6pXrmMWTUQCsXAM1H7H2b5oR4ADWl+BWHlXzSutwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFuYeNL9m1xISWskvkq7VifnTx18MB8GA1UdIwQY MBaAFNqhLtY6SEwD1MPCccsu/wVT4SNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTIt OTFhMDAzNGE5ODllLzEvVzVoNDB2MmJYRWhKYXlTLVNydFdKLWRQSFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTItOTFhMDAzNGE5ODll LzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA9o MA0GCSqGSIb3DQEBCwUAA4IBAQAAq6dCllcEpqCrrCuT7XXlSC0F01SorxffSx2a ADk+FSqMuNriaU+BhyvAz3NN5CWaK0Lrh+pqOGHHTovf7e2L2rVyc8eQAdQcn7Ty Tc06+SAtV9ivO8zDkk3ka3p/DSu1T61Y5jmxJP4Y9PBUAFH13qGokbQCndK7MVx3 iI/7mLkC9qJBeAjTXScqaAOLqZEGP6Qk5JTBDXIVbicv7SMijELouIlibXCLVsyI f/7SOgdI/Vma6G+WZd27CHN+bl7uzdN7fuqYUrWHFVZDJBU7g0uSGJs9RC4RfkUi fDB7ncAz8QIRq4koEpUTyQA3up3cDv8oJT9ka2FWCjqcnGG8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:33 2026 by rpki-client