This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/5OGPGzofiEFa09GnFOAn5hhvk48.roa File: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (raw, json) Hash identifier: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI= Subject key identifier: E4:E1:8F:1B:3A:1F:88:41:5A:D3:D1:A7:14:E0:27:E6:18:6F:93:8F Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019B76EACA27615C6DDA6C5B70D2F7F4B989 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/5OGPGzofiEFa09GnFOAn5hhvk48.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139242 IP address blocks: 2a06:98c0:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ca:27:61:5c:6d:da:6c:5b:70:d2:f7:f4:b9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4e18f1b3a1f88415ad3d1a714e027e6186f938f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:a0:75:ef:64:cf:f3:26:fe:f4:39:52:8f: 8c:b0:db:a9:80:05:8a:9e:36:3b:0c:7a:60:62:0b: 58:cd:88:7e:e5:41:a8:31:3f:3b:66:18:db:30:f8: c6:9d:95:b3:36:77:1c:43:b5:f1:23:49:96:8a:c3: 13:31:7e:de:86:27:2d:f5:28:24:eb:71:a2:f5:77: de:9d:ee:c5:3a:c7:20:4e:64:72:f5:5c:d2:26:1b: 7c:fa:27:59:0f:7a:6d:a1:f8:9b:38:35:70:23:bf: 9f:33:73:0f:c0:48:a9:d5:fd:ce:ee:e7:ce:a2:61: 32:fc:da:52:41:ff:b6:05:4a:68:f3:b2:11:78:5d: b3:9f:e6:82:2c:7d:58:01:57:9e:53:1b:c8:fa:23: c0:37:95:f4:bc:00:96:2c:c1:3c:00:3c:76:40:f2: f9:b3:bb:4f:b8:2e:05:e2:b1:a3:b2:50:33:a8:92: a8:17:d6:07:5c:64:5c:da:0f:5a:7c:74:29:a5:b7: 39:3d:55:ff:1b:a2:33:94:be:c9:c1:7f:c1:58:f2: 35:cc:a6:08:b7:a6:f4:de:72:0b:fc:e4:3c:62:1c: c3:3a:f7:1a:09:10:28:77:e0:d7:9b:ae:e1:c6:bf: 8f:2e:b2:c6:fc:c3:1c:6e:d8:2d:55:81:0b:51:3d: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:8F:1B:3A:1F:88:41:5A:D3:D1:A7:14:E0:27:E6:18:6F:93:8F X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/5OGPGzofiEFa09GnFOAn5hhvk48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:98c0:1001::/48 Signature Algorithm: sha256WithRSAEncryption 63:70:49:3a:bf:46:5d:70:10:d6:9b:54:cb:43:e5:a4:85:41: f3:01:67:01:e0:c8:68:8c:69:06:b3:84:4b:8c:b5:f2:b6:f0: 5b:28:48:88:d7:61:ea:4f:fc:33:bd:65:b9:05:ce:06:1f:18: 08:1b:ec:64:41:86:ff:07:65:92:5c:8e:44:53:17:e6:38:59: 5a:af:2d:74:ea:9d:dc:80:b4:34:89:b3:68:7a:db:5d:8c:97: e7:7f:94:d0:68:3a:c8:11:1b:03:7e:19:dd:29:e9:6d:66:39: 0e:a1:6d:bf:b0:9d:76:e4:bb:08:72:f6:0b:f5:25:28:55:b7: 3e:3d:7d:bb:e3:4a:af:dd:c3:03:48:ef:48:98:67:cf:e0:9d: 11:cd:b0:33:26:5b:be:63:4b:13:0b:4d:65:22:dc:80:63:bd: b4:5f:ef:4b:04:f7:7c:bf:52:ca:52:0d:9f:88:10:69:cb:83: 8a:cf:fc:78:92:c4:21:50:1f:6b:a0:04:10:d7:0c:55:29:25: 32:13:f9:11:aa:b0:a3:5e:da:4e:68:10:03:85:51:ab:7e:93: dd:ff:46:6f:53:fe:6c:8d:5a:06:f8:9e:d9:be:46:fc:8a:c9: d8:42:96:98:80:12:08:a3:3f:f3:b2:9b:3f:18:fd:bf:bb:59: d4:81:cd:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26sonYVxt2mxbcNL39LmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGUxOGYxYjNhMWY4ODQxNWFkM2QxYTcxNGUwMjdlNjE4NmY5MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNOgde9kz/Mm/vQ5Uo+MsNupgAWK njY7DHpgYgtYzYh+5UGoMT87ZhjbMPjGnZWzNnccQ7XxI0mWisMTMX7ehict9Sgk 63Gi9Xfene7FOscgTmRy9VzSJht8+idZD3ptofibODVwI7+fM3MPwEip1f3O7ufO omEy/NpSQf+2BUpo87IReF2zn+aCLH1YAVeeUxvI+iPAN5X0vACWLME8ADx2QPL5 s7tPuC4F4rGjslAzqJKoF9YHXGRc2g9afHQppbc5PVX/G6IzlL7JwX/BWPI1zKYI t6b03nIL/OQ8YhzDOvcaCRAod+DXm67hxr+PLrLG/MMcbtgtVYELUT3qTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOThjxs6H4hBWtPRpxTgJ+YYb5OPMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvNU9HUEd6b2ZpRUZhMDlHbkZPQW41aGh2azQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYwBAB MA0GCSqGSIb3DQEBCwUAA4IBAQBjcEk6v0ZdcBDWm1TLQ+WkhUHzAWcB4MhojGkG s4RLjLXytvBbKEiI12HqT/wzvWW5Bc4GHxgIG+xkQYb/B2WSXI5EUxfmOFlary10 6p3cgLQ0ibNoettdjJfnf5TQaDrIERsDfhndKeltZjkOoW2/sJ125LsIcvYL9SUo Vbc+PX2740qv3cMDSO9ImGfP4J0RzbAzJlu+Y0sTC01lItyAY720X+9LBPd8v1LK Ug2fiBBpy4OKz/x4ksQhUB9roAQQ1wxVKSUyE/kRqrCjXtpOaBADhVGrfpPd/0Zv U/5sjVoG+J7Zvkb8isnYQpaYgBIIoz/zsps/GP2/u1nUgc3S -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:23 2026 by rpki-client