This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/5Vi1KDg5hZyzoaBI77sNLh4qRf8.roa File: 5Vi1KDg5hZyzoaBI77sNLh4qRf8.roa (raw, json) Hash identifier: /5vW/n+ymrmcyaI56/lGSU6fFwFpxrqqlswOQDyntMo= Subject key identifier: E5:58:B5:28:38:39:85:9C:B3:A1:A0:48:EF:BB:0D:2E:1E:2A:45:FF Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019B775917D6BC8641D59ACB6E86117E9995 Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/5Vi1KDg5hZyzoaBI77sNLh4qRf8.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 2a03:efc0:5800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:17:d6:bc:86:41:d5:9a:cb:6e:86:11:7e:99:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e558b5283839859cb3a1a048efbb0d2e1e2a45ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:c1:ec:f4:c6:c4:af:cf:e7:ef:9f:5c:f5: 27:33:81:3a:c5:03:c9:a0:64:f5:7a:5b:d6:d4:af: 20:d6:6c:93:ed:de:e2:ca:96:b1:ee:f0:06:a7:5a: cb:7c:cb:30:f2:07:82:e1:e9:ff:70:73:e0:5f:09: 93:d4:e4:bb:f1:73:4c:52:ba:e7:6b:f0:26:33:dc: c3:d8:4e:79:b0:f8:29:09:f1:b5:1c:c5:08:b6:27: bd:5c:e5:28:49:a2:b8:e6:dc:04:a3:a5:c7:df:f6: cd:04:ef:39:6b:eb:b1:e1:d7:43:cb:ce:20:33:2f: 12:f6:f9:42:cc:28:95:0c:d0:2b:3e:6a:48:39:22: 24:85:77:af:62:46:ce:50:a4:3b:99:13:4f:3c:ff: 59:47:21:c4:86:00:2e:6e:d1:46:8b:5d:95:6a:fa: 71:b3:d3:04:8c:9b:f6:e7:77:eb:b8:e6:58:c1:19: db:28:4a:32:c6:2b:44:cb:49:de:1e:e0:a1:46:98: e8:17:c0:37:51:13:db:65:b5:7e:ee:8c:26:1b:bd: 12:91:c0:b3:7e:26:45:b7:60:83:15:e3:67:2a:0e: 58:4a:fe:89:db:97:74:3c:24:f1:07:56:fe:f5:dc: e5:dc:3c:00:e9:0d:72:c3:e3:35:da:3e:ed:47:45: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:B5:28:38:39:85:9C:B3:A1:A0:48:EF:BB:0D:2E:1E:2A:45:FF X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/5Vi1KDg5hZyzoaBI77sNLh4qRf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:efc0:5800::/40 Signature Algorithm: sha256WithRSAEncryption cc:37:3f:28:93:dd:7b:a7:d1:a3:94:f8:de:74:90:6e:57:f5: 2f:7c:d7:92:79:db:9f:0a:82:af:6e:2c:84:4d:cb:e2:0d:0b: c7:08:6e:b0:60:1b:ef:8c:9d:22:91:50:d6:7a:8e:ba:b7:3e: 7f:bd:dc:76:d1:cd:db:21:9e:2e:ab:b7:e2:c8:64:66:33:1a: d0:60:25:38:36:63:c7:0e:ec:28:0c:8d:c6:3e:b8:d8:5a:7c: 2b:92:87:f3:aa:f1:38:cb:81:e0:0d:5e:41:b0:4f:5b:54:bc: 9e:b3:5f:7c:83:5d:49:53:7d:2d:4f:a7:eb:2f:13:c8:cf:00: 65:40:b0:da:ff:00:4b:ec:b3:2e:8e:16:fe:ea:79:3d:c4:30: de:d8:90:e7:5b:c8:88:3d:a2:24:be:74:4b:a1:19:ea:68:39: 04:c8:02:13:97:f2:1d:93:aa:15:e9:86:a8:fb:63:22:0f:39: bc:44:f6:8e:5d:77:98:e5:ae:c4:9a:ec:6c:4d:6e:94:12:f0: 6f:0d:4d:76:3f:e5:c8:17:99:d6:2c:c6:c0:74:38:53:6c:6e: 45:b3:dd:01:3b:49:b3:bc:b7:66:13:4e:91:3d:4b:2a:25:97: 3f:52:99:d9:23:55:b9:31:e8:8c:80:90:e5:ed:54:f2:ad:bc: d6:45:fb:54 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WRfWvIZB1ZrLboYRfpmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTU4YjUyODM4Mzk4NTljYjNhMWEwNDhlZmJiMGQyZTFlMmE0NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUzB7PTGxK/P5++fXPUnM4E6xQPJ oGT1elvW1K8g1myT7d7iypax7vAGp1rLfMsw8geC4en/cHPgXwmT1OS78XNMUrrn a/AmM9zD2E55sPgpCfG1HMUItie9XOUoSaK45twEo6XH3/bNBO85a+ux4ddDy84g My8S9vlCzCiVDNArPmpIOSIkhXevYkbOUKQ7mRNPPP9ZRyHEhgAubtFGi12Vavpx s9MEjJv253fruOZYwRnbKEoyxitEy0neHuChRpjoF8A3URPbZbV+7owmG70SkcCz fiZFt2CDFeNnKg5YSv6J25d0PCTxB1b+9dzl3DwA6Q1yw+M12j7tR0Xg+wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOVYtSg4OYWcs6GgSO+7DS4eKkX/MB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvNVZpMUtEZzVoWnl6b2FCSTc3c05MaDRxUmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgPvwFgw DQYJKoZIhvcNAQELBQADggEBAMw3PyiT3Xun0aOU+N50kG5X9S9815J5258Kgq9u LIRNy+INC8cIbrBgG++MnSKRUNZ6jrq3Pn+93HbRzdshni6rt+LIZGYzGtBgJTg2 Y8cO7CgMjcY+uNhafCuSh/Oq8TjLgeANXkGwT1tUvJ6zX3yDXUlTfS1Pp+svE8jP AGVAsNr/AEvssy6OFv7qeT3EMN7YkOdbyIg9oiS+dEuhGepoOQTIAhOX8h2TqhXp hqj7YyIPObxE9o5dd5jlrsSa7GxNbpQS8G8NTXY/5cgXmdYsxsB0OFNsbkWz3QE7 SbO8t2YTTpE9Syollz9SmdkjVbkx6IyAkOXtVPKtvNZF+1Q= -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:33 2026 by rpki-client