This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/rMgSyH6KszMsvazsfn6Q-7bJlH8.roa File: rMgSyH6KszMsvazsfn6Q-7bJlH8.roa (raw, json) Hash identifier: nNbAj2fY6nQaw+j9O9S0/OViFKvIiHADgBzP+xHhPwI= Subject key identifier: AC:C8:12:C8:7E:8A:B3:33:2C:BD:AC:EC:7E:7E:90:FB:B6:C9:94:7F Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a Certificate serial: 019B76EB3088944E820B8B3761AF67479505 Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/rMgSyH6KszMsvazsfn6Q-7bJlH8.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209387 IP address blocks: 2a09:5dc3:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:30:88:94:4e:82:0b:8b:37:61:af:67:47:95:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc812c87e8ab3332cbdacec7e7e90fbb6c9947f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:72:27:d4:50:2e:b8:f4:56:69:53:ad:59: 08:f5:f5:d4:1d:02:48:f8:cc:c8:68:dd:49:b6:a2: 3a:79:11:06:86:7f:b0:40:09:a6:d7:85:87:d7:5f: 08:8d:c1:63:0d:85:08:b8:f6:ec:72:08:17:f7:cb: 5b:88:73:42:5d:d4:04:22:0a:cf:17:f1:f2:bf:d1: c7:b1:fd:7a:c7:e1:7c:30:e2:95:a6:85:24:53:61: 34:30:5c:f2:06:ec:78:01:ea:8a:2a:f4:0b:2b:14: d8:52:aa:2f:1c:d4:77:c7:d3:2c:9f:76:ad:ee:67: 48:29:4a:be:7f:0c:82:87:c6:c6:19:51:e4:79:38: 2b:63:2e:e6:c2:65:50:48:96:88:5f:99:4f:82:38: 1e:14:40:d5:f4:a6:c2:d1:30:19:36:be:66:37:7d: 61:72:96:c4:e1:e3:23:31:88:d3:46:cb:f5:fd:8b: 3f:55:e6:fa:80:e0:36:bc:b0:14:88:fb:94:42:59: fc:1b:d0:3d:23:44:4c:2b:2b:34:42:64:74:fc:23: 6c:e2:06:06:65:e7:8c:e3:3d:cf:95:bb:39:b5:fa: be:ba:36:39:46:19:a3:1b:f5:4c:4a:ad:a5:3c:8c: ef:87:0e:6d:91:f9:1d:2d:7e:a8:21:06:29:ed:5a: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C8:12:C8:7E:8A:B3:33:2C:BD:AC:EC:7E:7E:90:FB:B6:C9:94:7F X509v3 Authority Key Identifier: keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/rMgSyH6KszMsvazsfn6Q-7bJlH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:5dc3:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 69:ca:26:89:07:e3:b1:cb:a4:5a:08:d0:4b:46:d0:fc:12:22: 41:55:48:7b:97:33:87:81:f3:2c:b1:bf:fb:3b:e4:e7:85:50: 37:63:fc:c6:5a:93:20:bd:91:c0:e5:19:d9:48:c4:14:c4:d1: d4:a0:30:34:b7:a8:5b:87:c8:53:83:02:7d:85:d9:a1:76:91: a5:bb:cc:e2:6c:a9:f6:95:69:4a:24:81:16:62:6c:93:d6:08: 3b:bb:fd:0a:4f:2a:77:0f:de:4b:02:31:7a:d3:81:4d:95:54: f0:62:9e:60:3f:4f:7f:39:2b:b1:67:d6:b9:15:cf:54:a5:79: 20:fd:c0:99:c9:67:97:34:e3:c7:06:fb:80:72:49:93:b0:b7: e6:34:a9:7c:fb:4f:0e:de:e4:4b:64:57:96:ec:d3:48:c2:38: b6:75:ec:09:a7:ab:48:ec:95:ac:f1:7a:86:64:4d:97:34:b8: 95:75:43:b8:15:45:b6:57:ad:8b:43:1b:3e:51:56:e5:1e:26: 30:92:49:c2:77:5d:e9:32:71:5e:2e:f9:9b:c8:c3:9e:96:dd: 8f:36:32:a6:81:3c:79:f4:cf:da:fa:54:ec:5b:dc:6f:9a:4b: f8:1f:e4:1b:c3:3d:b8:63:0e:46:ff:4b:a1:43:9e:5a:5c:34: 8a:a9:b3:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26zCIlE6CC4s3Ya9nR5UFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYjFjNTcwNTVjMjlkNjY5ZjI4OWE5ZjY4ZjM5MjgyMzk0 MjEzMmEwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2M4MTJjODdlOGFiMzMzMmNiZGFjZWM3ZTdlOTBmYmI2Yzk5NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmRyJ9RQLrj0VmlTrVkI9fXUHQJI +MzIaN1JtqI6eREGhn+wQAmm14WH118IjcFjDYUIuPbscggX98tbiHNCXdQEIgrP F/Hyv9HHsf16x+F8MOKVpoUkU2E0MFzyBux4AeqKKvQLKxTYUqovHNR3x9Msn3at 7mdIKUq+fwyCh8bGGVHkeTgrYy7mwmVQSJaIX5lPgjgeFEDV9KbC0TAZNr5mN31h cpbE4eMjMYjTRsv1/Ys/Veb6gOA2vLAUiPuUQln8G9A9I0RMKys0QmR0/CNs4gYG ZeeM4z3Plbs5tfq+ujY5RhmjG/VMSq2lPIzvhw5tkfkdLX6oIQYp7VotCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKzIEsh+irMzLL2s7H5+kPu2yZR/MB8GA1UdIwQY MBaAFFuxxXBVwp1mnyian2jzkoI5QhMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2Yt NWNlYWUxOWY5NGY5LzEvck1nU3lINktzek1zdmF6c2ZuNlEtN2JKbEg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2YtNWNlYWUxOWY5NGY5 LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgldw/// MA0GCSqGSIb3DQEBCwUAA4IBAQBpyiaJB+Oxy6RaCNBLRtD8EiJBVUh7lzOHgfMs sb/7O+TnhVA3Y/zGWpMgvZHA5RnZSMQUxNHUoDA0t6hbh8hTgwJ9hdmhdpGlu8zi bKn2lWlKJIEWYmyT1gg7u/0KTyp3D95LAjF604FNlVTwYp5gP09/OSuxZ9a5Fc9U pXkg/cCZyWeXNOPHBvuAckmTsLfmNKl8+08O3uRLZFeW7NNIwji2dewJp6tI7JWs 8XqGZE2XNLiVdUO4FUW2V62LQxs+UVblHiYwkknCd13pMnFeLvmbyMOelt2PNjKm gTx59M/a+lTsW9xvmkv4H+Qbwz24Yw5G/0uhQ55aXDSKqbOT -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:22 2026 by rpki-client