This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/5xcULEXJhAck2X3qSP8xz7T9G-o.roa File: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (raw, json) Hash identifier: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE= Subject key identifier: E7:17:14:2C:45:C9:84:07:24:D9:7D:EA:48:FF:31:CF:B4:FD:1B:EA Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405 Certificate serial: 019B7BA5286667D09568CC818DB6695493F7 Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/5xcULEXJhAck2X3qSP8xz7T9G-o.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 2a13:9600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:28:66:67:d0:95:68:cc:81:8d:b6:69:54:93:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e717142c45c9840724d97dea48ff31cfb4fd1bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:c8:09:51:21:6f:bf:1f:ea:de:2a:b6:75: a5:7e:7c:7c:cf:98:89:02:e4:48:84:ec:a6:a1:b1: cb:87:c1:d6:a5:71:ae:d9:7c:04:05:60:5e:6f:e7: 09:85:b1:85:f7:16:ad:4e:7a:f1:bd:5b:0f:6c:fd: 52:50:e8:bf:e1:b2:9e:65:5b:b8:cd:89:dc:be:85: f8:39:02:d0:55:ee:24:95:32:cf:ef:57:28:d5:d1: d9:ed:b3:a3:04:c1:f4:07:9d:f5:b3:e6:58:68:fc: 80:11:e1:f9:87:fd:20:f9:1e:ad:0a:32:b2:0f:03: 56:46:8a:40:c6:2c:49:80:bf:8f:f4:a9:9b:86:16: b7:4c:a4:43:11:be:27:d8:50:7c:e8:82:42:fe:7f: b5:a5:43:7b:62:7d:e6:eb:a1:64:ba:1a:b1:3c:94: 39:a3:5b:d0:51:f4:08:d0:08:f0:a2:b3:32:b7:e0: 99:66:8b:22:cd:ba:8d:ef:2e:6f:64:f1:30:7a:fe: bc:88:62:87:ee:fa:d7:fe:e1:72:41:ff:da:63:9c: 90:57:98:5a:cd:ff:66:b1:c3:f4:2d:62:76:15:11: ea:3d:0e:2a:8c:31:d3:8b:f1:fb:a4:18:72:df:44: fc:15:8b:43:c0:5a:86:8d:15:28:08:30:bc:58:91: 5d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:17:14:2C:45:C9:84:07:24:D9:7D:EA:48:FF:31:CF:B4:FD:1B:EA X509v3 Authority Key Identifier: keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/5xcULEXJhAck2X3qSP8xz7T9G-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9600::/29 Signature Algorithm: sha256WithRSAEncryption a9:5a:34:6c:63:a2:76:a3:36:e7:12:27:a6:64:65:0e:6b:1e: b6:1f:e1:cc:32:03:99:8a:5a:8e:29:8e:88:4b:7d:39:ee:c3: ee:f7:73:0f:11:c0:60:cf:16:51:92:c5:69:2a:71:f6:d1:91: 6b:c4:dc:55:77:38:af:ef:90:81:d0:5b:1a:b7:c9:dc:e1:b0: 04:96:08:49:24:8f:27:7d:00:50:3b:f0:06:66:14:91:d0:b1: c6:5b:8b:d4:d4:be:ea:0e:50:97:83:ed:37:e0:ac:3e:f4:88: e2:dd:18:cf:35:e0:b8:5f:16:05:3e:e4:5d:e1:64:b8:9f:5c: f9:fb:f9:b9:ef:e0:e8:a9:6c:e0:2a:9e:44:32:c4:84:6a:49: 4e:82:c8:ef:bf:51:c2:9d:f1:85:dd:6b:54:4a:f9:f8:b4:57: 94:7c:18:47:e2:9e:0e:09:b2:ec:15:46:94:43:a9:92:a3:7d: f1:5a:3c:4a:6c:b2:d9:5c:65:6a:a2:dc:82:8a:8c:cd:e3:11: fe:9e:1e:9a:84:8e:68:67:84:30:40:43:0c:e8:5e:01:f8:a8: c1:15:0d:c0:89:71:01:33:e2:69:44:06:7f:a2:6c:f5:d1:45: c0:6e:01:b3:9c:b9:bd:0e:0c:98:8d:d4:d9:b6:da:f6:a4:a5: 83:72:2d:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pShmZ9CVaMyBjbZpVJP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0 NjM0MDUwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzE3MTQyYzQ1Yzk4NDA3MjRkOTdkZWE0OGZmMzFjZmI0ZmQxYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jjICVEhb78f6t4qtnWlfnx8z5iJ AuRIhOymobHLh8HWpXGu2XwEBWBeb+cJhbGF9xatTnrxvVsPbP1SUOi/4bKeZVu4 zYncvoX4OQLQVe4klTLP71co1dHZ7bOjBMH0B531s+ZYaPyAEeH5h/0g+R6tCjKy DwNWRopAxixJgL+P9Kmbhha3TKRDEb4n2FB86IJC/n+1pUN7Yn3m66FkuhqxPJQ5 o1vQUfQI0AjworMyt+CZZosizbqN7y5vZPEwev68iGKH7vrX/uFyQf/aY5yQV5ha zf9mscP0LWJ2FRHqPQ4qjDHTi/H7pBhy30T8FYtDwFqGjRUoCDC8WJFdiQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOcXFCxFyYQHJNl96kj/Mc+0/RvqMB8GA1UdIwQY MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt ZjlkOWMwM2Q0YjRjLzEvNXhjVUxFWEpoQWNrMlgzcVNQOHh6N1Q5Ry1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOWADAN BgkqhkiG9w0BAQsFAAOCAQEAqVo0bGOidqM25xInpmRlDmseth/hzDIDmYpajimO iEt9Oe7D7vdzDxHAYM8WUZLFaSpx9tGRa8TcVXc4r++QgdBbGrfJ3OGwBJYISSSP J30AUDvwBmYUkdCxxluL1NS+6g5Ql4PtN+CsPvSI4t0YzzXguF8WBT7kXeFkuJ9c +fv5ue/g6Kls4CqeRDLEhGpJToLI779Rwp3xhd1rVEr5+LRXlHwYR+KeDgmy7BVG lEOpkqN98Vo8Smyy2VxlaqLcgoqMzeMR/p4emoSOaGeEMEBDDOheAfiowRUNwIlx ATPiaUQGf6Js9dFFwG4Bs5y5vQ4MmI3U2bba9qSlg3ItPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:13 2026 by rpki-client