This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/5m2yB9NEeUbzh_RrMBbFTl87vZI.roa File: 5m2yB9NEeUbzh_RrMBbFTl87vZI.roa (raw, json) Hash identifier: +gJzTRd7yfkb9lyTBCKq01A8haFjWWwRmaKWjp0RAm0= Subject key identifier: E6:6D:B2:07:D3:44:79:46:F3:87:F4:6B:30:16:C5:4E:5F:3B:BD:92 Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Certificate serial: 019B7E37C343E6CD3E180D9A187B94322BC7 Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/5m2yB9NEeUbzh_RrMBbFTl87vZI.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212950 IP address blocks: 2a0e:a500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c3:43:e6:cd:3e:18:0d:9a:18:7b:94:32:2b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e66db207d3447946f387f46b3016c54e5f3bbd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:0d:1c:aa:ae:31:db:92:8d:41:c8:6d:42: ae:4e:b5:89:3a:f0:73:a8:a7:b2:f3:ed:9a:d6:c0: 3f:63:bc:c4:ce:c3:2b:e5:a6:b1:d1:1a:05:17:f8: 26:9e:24:7c:cd:fa:27:e0:95:1d:79:db:93:9f:a6: 22:bb:e2:5c:2d:cd:48:7d:b1:cc:64:b3:cf:b8:36: d8:60:bc:27:ea:0e:6d:73:cc:bc:aa:df:85:bf:a7: f6:79:05:8a:b3:1f:94:4b:82:35:fb:11:85:1b:89: 23:6f:03:28:11:38:0b:9d:9b:ec:cb:a9:04:e5:37: c4:44:b1:9e:aa:d6:1e:5a:47:2c:65:5e:ec:76:d2: 4c:00:d1:ff:f4:70:1f:15:5c:b3:b4:38:58:43:f1: 56:a8:94:1f:81:3f:da:b3:99:c3:21:44:73:69:5f: b9:d8:bb:1d:63:f4:70:38:0f:76:8d:10:26:8a:92: d4:03:bc:36:82:fd:4c:48:7c:ed:0e:a6:e4:34:a0: 07:93:b4:d0:3d:86:de:1b:74:fb:55:b4:09:57:ca: f3:c9:23:12:0c:87:f6:dc:21:c7:9b:df:2d:57:95: 66:d1:27:f9:05:12:d8:cd:14:18:2d:12:ae:3c:85: be:ee:b5:a3:66:8c:e2:30:1b:a7:73:5f:a4:e0:70: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:B2:07:D3:44:79:46:F3:87:F4:6B:30:16:C5:4E:5F:3B:BD:92 X509v3 Authority Key Identifier: keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/5m2yB9NEeUbzh_RrMBbFTl87vZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:a500::/32 Signature Algorithm: sha256WithRSAEncryption 22:eb:5f:8c:57:3e:e7:12:91:61:51:3a:1e:09:ef:d2:e5:dd: 9f:5b:fa:b9:04:2b:db:36:7b:d0:27:39:67:23:a1:75:54:2c: f7:58:2b:79:03:c5:88:db:d0:b6:65:75:bd:a1:7d:6a:1e:02: 7f:ad:e0:18:d1:77:3d:38:81:8d:46:71:1b:22:d3:1d:98:ef: b7:7e:7b:97:ad:16:9b:93:d7:c6:77:f0:1f:fc:a0:0e:6f:47: 48:47:65:67:90:26:e2:1e:b9:69:8b:da:76:83:af:bd:c2:0e: 24:77:7c:d8:c3:07:81:a3:7c:8b:35:88:4d:70:c1:3f:41:55: 71:5a:b5:b0:da:7f:0b:0e:4f:74:e5:cd:3a:f5:72:32:46:4d: 85:8a:6d:16:ec:f2:19:44:73:43:07:8c:c4:58:db:ca:21:f8: 0d:c6:c8:f1:87:e9:71:8b:ce:c7:be:b3:6f:3b:6a:89:2d:c0: e9:47:db:53:ba:5f:e7:68:40:c2:d8:e5:33:ae:ac:ba:1b:db: c2:00:c6:d9:77:82:15:77:c7:16:00:ad:7a:6d:e5:8a:66:d0: 01:80:06:23:df:2f:d8:00:49:75:5c:77:73:71:e3:c2:9e:3b: 00:a2:69:79:f4:08:23:8a:ad:11:64:19:0b:7e:06:1e:cc:26: 2b:48:79:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+N8ND5s0+GA2aGHuUMivHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy ZGNhNjUwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjZkYjIwN2QzNDQ3OTQ2ZjM4N2Y0NmIzMDE2YzU0ZTVmM2JiZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXMNHKquMduSjUHIbUKuTrWJOvBz qKey8+2a1sA/Y7zEzsMr5aax0RoFF/gmniR8zfon4JUdeduTn6Yiu+JcLc1IfbHM ZLPPuDbYYLwn6g5tc8y8qt+Fv6f2eQWKsx+US4I1+xGFG4kjbwMoETgLnZvsy6kE 5TfERLGeqtYeWkcsZV7sdtJMANH/9HAfFVyztDhYQ/FWqJQfgT/as5nDIURzaV+5 2LsdY/RwOA92jRAmipLUA7w2gv1MSHztDqbkNKAHk7TQPYbeG3T7VbQJV8rzySMS DIf23CHHm98tV5Vm0Sf5BRLYzRQYLRKuPIW+7rWjZoziMBunc1+k4HBFBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOZtsgfTRHlG84f0azAWxU5fO72SMB8GA1UdIwQY MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt MDE4NGU4MWFlYWQ5LzEvNW0yeUI5TkVlVWJ6aF9Sck1CYkZUbDg3dlpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5 LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg6lADAN BgkqhkiG9w0BAQsFAAOCAQEAIutfjFc+5xKRYVE6Hgnv0uXdn1v6uQQr2zZ70Cc5 ZyOhdVQs91greQPFiNvQtmV1vaF9ah4Cf63gGNF3PTiBjUZxGyLTHZjvt357l60W m5PXxnfwH/ygDm9HSEdlZ5Am4h65aYvadoOvvcIOJHd82MMHgaN8izWITXDBP0FV cVq1sNp/Cw5PdOXNOvVyMkZNhYptFuzyGURzQweMxFjbyiH4DcbI8YfpcYvOx76z bztqiS3A6UfbU7pf52hAwtjlM66suhvbwgDG2XeCFXfHFgCtem3limbQAYAGI98v 2ABJdVx3c3Hjwp47AKJpefQII4qtEWQZC34GHswmK0h5rw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:51 2026 by rpki-client