This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa File: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (raw, json) Hash identifier: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0= Subject key identifier: E6:12:E4:E0:2C:C0:EF:8C:95:9C:9F:11:D8:BC:FD:9A:57:EA:CD:D2 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F79979BD47F948D4EEB36A5E4C86C Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa Signing time: Fri 02 Jan 2026 02:18:07 +0000 ROA not before: Fri 02 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 2a07:6080::/32 maxlen: 32 2a07:6081::/32 maxlen: 32 2a07:6082::/32 maxlen: 32 2a07:6083::/32 maxlen: 32 2a07:6084::/32 maxlen: 32 2a07:6085::/32 maxlen: 32 2a07:6086::/32 maxlen: 32 2a07:6087::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:79:97:9b:d4:7f:94:8d:4e:eb:36:a5:e4:c8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e612e4e02cc0ef8c959c9f11d8bcfd9a57eacdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:0f:e1:d1:59:ac:5a:67:2b:04:f5:2b:c5: 7f:48:e5:5a:c5:d8:a8:7f:8b:30:df:4c:f2:64:37: 58:58:2e:7f:42:e7:22:6e:29:1e:a7:fc:91:8e:15: f2:98:7a:22:b7:8f:fd:34:72:64:33:f2:70:39:d4: c0:25:82:8d:02:54:89:42:a1:83:25:cb:d4:c3:37: 7a:10:5b:81:78:67:bd:53:95:ca:69:f8:2e:15:d4: 66:a6:ff:31:65:1d:64:ef:c5:05:c6:48:16:8d:3f: 5b:42:7d:08:1f:6d:37:69:2e:ae:34:7d:6a:c7:53: 0f:f9:42:da:e4:8b:0f:cf:32:46:36:2d:00:e7:c5: 33:cd:22:76:46:c2:4a:c2:40:9e:6f:3b:76:14:16: 21:03:c4:02:4a:5e:62:69:61:70:ef:df:db:cc:9c: 1c:85:e7:f2:5e:c2:75:93:36:ce:76:41:a8:98:d8: ec:8f:fe:a4:04:66:97:26:e7:bf:57:7a:2a:b3:f2: 4b:b3:1f:ef:8c:ed:5c:4d:de:3f:93:50:af:d6:4b: 55:9c:85:00:99:65:e0:f0:24:39:21:3b:a5:4f:83: c6:e4:b6:dd:fe:27:d4:60:e7:a5:1e:93:c7:42:cc: 3b:4f:2c:da:37:fe:19:f1:d9:8e:26:c8:60:87:a7: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:12:E4:E0:2C:C0:EF:8C:95:9C:9F:11:D8:BC:FD:9A:57:EA:CD:D2 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:6080::/29 Signature Algorithm: sha256WithRSAEncryption 6c:4f:68:11:25:18:56:03:fc:c3:d0:1f:0b:8c:57:65:98:b6: f5:8f:08:6f:16:49:bb:f4:f7:b9:73:bc:ea:23:d9:2d:41:2e: 3b:27:50:8b:f0:64:96:6b:e7:9f:14:f5:2d:30:7a:ac:26:af: d8:90:df:f2:fa:5b:fd:59:25:3e:77:9b:58:e9:ae:30:65:30: fc:02:24:8c:1d:e7:a9:5b:a7:4a:6e:dd:4b:ca:bf:f6:ff:e4: 1a:cb:19:ab:4b:06:ee:b1:4c:fb:c6:77:02:b0:52:ec:b8:98: 0d:50:60:df:e9:0c:1c:cd:5c:a2:f7:d6:a7:83:9a:96:2d:72: d4:26:31:37:01:64:a5:99:79:38:c6:60:07:51:8c:c5:e3:9c: 98:96:a0:f1:81:01:9b:18:c8:0b:b6:d9:e6:10:0b:7f:1a:dd: 32:d8:22:74:e4:75:b6:e1:0d:a2:62:f4:9c:cd:89:77:bb:fb: 11:8b:3c:de:dc:04:59:5e:c0:2f:0c:b4:01:5e:74:0c:a7:92: fd:4c:cd:16:53:16:20:a1:73:51:d6:c8:8a:19:3d:0d:63:fd: 28:f6:39:f1:a8:c9:1c:67:c8:a9:2d:cb:c4:be:71:3e:c7:bd: 0f:ad:8b:0f:1f:4e:ea:16:59:71:8a:b6:bc:4e:64:c6:53:23: 83:87:88:de -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f3mXm9R/lI1O6zal5MhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjEyZTRlMDJjYzBlZjhjOTU5YzlmMTFkOGJjZmQ5YTU3ZWFjZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLUP4dFZrFpnKwT1K8V/SOVaxdio f4sw30zyZDdYWC5/Qucibikep/yRjhXymHoit4/9NHJkM/JwOdTAJYKNAlSJQqGD JcvUwzd6EFuBeGe9U5XKafguFdRmpv8xZR1k78UFxkgWjT9bQn0IH203aS6uNH1q x1MP+ULa5IsPzzJGNi0A58UzzSJ2RsJKwkCebzt2FBYhA8QCSl5iaWFw79/bzJwc hefyXsJ1kzbOdkGomNjsj/6kBGaXJue/V3oqs/JLsx/vjO1cTd4/k1Cv1ktVnIUA mWXg8CQ5ITulT4PG5Lbd/ifUYOelHpPHQsw7TyzaN/4Z8dmOJshgh6ds3wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOYS5OAswO+MlZyfEdi8/ZpX6s3SMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvNWhMazRDekE3NHlWbko4UjJMejltbGZxemRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgdggDAN BgkqhkiG9w0BAQsFAAOCAQEAbE9oESUYVgP8w9AfC4xXZZi29Y8IbxZJu/T3uXO8 6iPZLUEuOydQi/BklmvnnxT1LTB6rCav2JDf8vpb/VklPnebWOmuMGUw/AIkjB3n qVunSm7dS8q/9v/kGssZq0sG7rFM+8Z3ArBS7LiYDVBg3+kMHM1covfWp4Oali1y 1CYxNwFkpZl5OMZgB1GMxeOcmJag8YEBmxjIC7bZ5hALfxrdMtgidOR1tuENomL0 nM2Jd7v7EYs83twEWV7ALwy0AV50DKeS/UzNFlMWIKFzUdbIihk9DWP9KPY58ajJ HGfIqS3LxL5xPse9D62LDx9O6hZZcYq2vE5kxlMjg4eI3g== -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:10 2026 by rpki-client